The application server must uniquely identify and authenticate users (or processes acting on behalf of users).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-35299	SRG-APP-000148-AS-000101	SV-46586r1_rule		High

Description
To assure accountability and prevent unauthorized access, AS users must be uniquely identified and authenticated. The application server must uniquely identify and authenticate application server users or processes acting on behalf of users. This is typically accomplished via the use of a user store which is either local (OS based) or centralized (LDAP) in nature.

STIG	Date
Application Server Security Requirements Guide	2013-01-08

Details

Check Text ( C-43668r1_chk )
Review AS documentation and configuration settings to determine if the AS requires the use of individual accounts to identify and authenticate AS users and user processes. If the AS does not meet this requirement, this is a finding.

Fix Text (F-39845r1_fix)
Create and configure the appropriate accounts and align them in their respective roles as identified in the product documentation.