The system must enforce the entire password during authentication.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22302 | GEN000585 | SV-38769r1_rule | IAIA-1 IAIA-2 | Medium |
| Description |
|---|
| Some common password hashing schemes only process the first eight characters of a user's password, which reduces the effective strength of the password. |
| STIG | Date |
|---|---|
| AIX 6.1 Security Technical Implementation Guide | 2013-09-23 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-33345r1_fix) |
|---|
| Configure the system to enforce the correctness of the entire password during authentication. Configure the system to use sha password hashing. #chsec -f /etc/security/login.cfg -s usw -a pwd_algorithm=ssha256 |