TMAegisBeta
更多 db2 规则

IBM Db2

TMA-DB2-5.2

Specify a Secure Authentication Type (AUTHENTICATION)

高级别 1人工审核db2

说明

The AUTHENTICATION database manager configuration parameter specifies how and where authentication takes place for incoming connections to the database as well as local authorization of commands run outside a connection or attachment, such as tools run from the command line. This parameter can be overridden by the SRVCON_AUTH parameter for incoming connections. This parameter can take on any ...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => get database manager configuration 3. Locate the AUTHENTICATION value in the output: Database manager authentication (AUTHENTICATION) = SERVER

修复方式

修复方法: 操作指南或基础设施补丁

1. Attach to the Db2 instance. db2 => attach to <db2instance> 2. Run the following command: db2 => update database manager configuration parameter using authentication <authentication type> 3. Restart the Db2 instance. db2 => db2stop db2 => db2start Refer to the 'encryption of data in motion' section for more information about using SSL for client-server communication.

属性

操作系统
任意
标签
db2databasemanual
参考
CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.2 Specify a Secure Authentication Type (AUTHENTICATION)