UCF STIG Viewer Logo

The system must be integrated into a directory services infrastructure.


Overview

Finding ID Version Rule ID IA Controls Severity
V-67671 AOSX-11-002060 SV-82161r1_rule Medium
Description
Distinct user account databases on each separate system cause problems with username and password policy enforcement. Most approved directory services infrastructure solutions allow centralized management of users and passwords.
STIG Date
Apple OS X 10.11 Security Technical Implementation Guide 2018-01-04

Details

Check Text ( C-68237r1_chk )
To determine if the system is integrated to a directory server, ask the SA or ISSO or run the following command:

/usr/bin/sudo dscl localhost -list . | /usr/bin/grep -vE '(Contact | Search | Local)'

If nothing is returned, or if the system is not integrated into a directory service infrastructure, this is a finding.
Fix Text (F-73785r1_fix)
Integrate the system into an existing directory services infrastructure.