DB2AUTH Registry Variable

中级别 1人工审核db2

说明

The DB2AUTH registry variable is used to control various authentication related behaviors in Db2. The following settings are recommended for this registry variable: 1. Use DISABLE_CHGPASS which disables the ability to change a user's password from the client. 2. Use JCC_ENFORCE_SECMEC which enforces that the Db2 server does not accept a clear text password security mechanism when using ...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that the DB2AUTH registry variable is set to the appropriate values by running the following command: db2set -all

修复方式

修复方法: 操作指南或基础设施补丁

Run the following command to set the DB2AUTH registry variable to the appropriate values: db2set DB2AUTH=<comma separated values>

属性

操作系统: 任意
标签: db2databasemanual
参考: CIS IBM Db2 12.1 Benchmark v1.0.0 - 5.9 DB2AUTH Registry Variable