EPAS-00-004700 - The DBMS must map the PKI-authenticated identity to an associated user account.

Information

The DOD standard for authentication is DOD-approved PKI certificates. Once a PKI certificate has been validated, it must be mapped to a DBMS user account for the authenticated identity to be meaningful to the DBMS and useful for authorization decisions.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure PostgreSQL to map authenticated identities directly to PostgreSQL user accounts.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_EPAS_V2R1_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(2)(c), CAT|II, CCI|CCI-000187, Rule-ID|SV-259251r961044_rule, STIG-ID|EPAS-00-004700, Vuln-ID|V-259251

Plugin: Unix

Control ID: 0c876499c3441ccee3db79383df35919f421da920bd620b7a8329f0a2228449b