← Back to Nutanix AOS 5.20.x OS Security Technical Implementation Guide

V-254221

CAT II (Medium)

Nutanix AOS must prohibit the use of cached authenticators.

Rule ID

SV-254221r958828_rule

STIG

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-002007

Discussion

If cached authentication information is out-of-date, the validity of the authentication information may be questionable.

Check Content

Confirm Nutanix AOS is not configured to allow cached credentials via the System Security Session Daemon (SSSD).

$ service sssd status

If the sssd service is installed or active, this is a finding.

Fix Text

If the SSSD service is installed, the Controller VM must be reinstalled.