Configuring SSH - disallow host based authentication

YüksekDüzey 1Manuel incelemeibm-i

Açıklama

The recommendation is to edit the /QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd_config file to ensure that host- based authentication is disallowed. Using host-based authentication, any user on a trusted host can log into another host on which this feature is enabled. Since this feature depends only on system authentication and not on user authentication, it must be disabled.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

DSPF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd_config' On the Control field, type HostbasedAuthentication and press F16 (shift F4) Control: HostbasedAuthentication___________________________________ The display should yield the following output: HostbasedAuthentication no

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

EDTF '/QOpenSys/QIBM/UserData/SC1/OpenSSH/etc/sshd_config' file to ensure that host based authentication is disallowed: Replace: #HostbasedAuthentication no With: HostbasedAuthentication no Re-cycle the sshd daemon to pick up the configuration changes:

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: ibm-issh
Referans: CIS IBM i V7R5M0 Benchmark v2.1.0 - 5.4.3 Configuring SSH - disallow host based authentication