The Oracle Linux operating system must be integrated into a directory service infrastructure.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-99631	OL07-00-010219	SV-108735r1_rule		Low

Description
Enterprise environments make account management challenging and complex. A manual process for account management functions adds the risk of a potential oversight or other errors. A comprehensive account management process that includes automation helps to ensure accounts designated as requiring attention are addressed consistently and promptly. Examples include, but are not limited to, using automation to take action on multiple accounts designated as inactive, suspended, or terminated. This requirement applies to all account types, including individual/user, shared, group, system, guest/anonymous, emergency, developer/manufacturer/vendor, temporary, and service. Automated mechanisms may be composed of differing technologies that, when placed together, contain an overall automated mechanism supporting an organization's automated account management requirements.

Description

Enterprise environments make account management challenging and complex. A manual process for account management functions adds the risk of a potential oversight or other errors. A comprehensive account management process that includes automation helps to ensure accounts designated as requiring attention are addressed consistently and promptly. Examples include, but are not limited to, using automation to take action on multiple accounts designated as inactive, suspended, or terminated. This requirement applies to all account types, including individual/user, shared, group, system, guest/anonymous, emergency, developer/manufacturer/vendor, temporary, and service. Automated mechanisms may be composed of differing technologies that, when placed together, contain an overall automated mechanism supporting an organization's automated account management requirements.

STIG	Date
Oracle Linux 7 Security Technical Implementation Guide	2020-05-29

Details

Check Text ( C-98481r1_chk )
Verify that the operating system has been integrated into a directory service infrastructure. With the assistance of the system administrator, validate that the operating system is using a directory services infrastructure for account management operations. If the operating system is not connected to a directory services infrastructure, this is a finding.

Fix Text (F-105315r1_fix)
Connect the operating system to a directory service infrastructure.