On Tuesday, July 23, 2013 02:24:22 PM Maura Dailey wrote:
That's about where I was going with it just now, actually
(although I
was unsuccessfully trying something more complicated with the
password_test and password_object OVAL pieces), but do we have to solve
network user ids as well? Or do you think it is sufficient in this check
to just check local accounts?
I don't think this benchmark addressed network based user accounts. I'm not
even sure there is proper support in OVAL for that. If it did, it would
require a specific pam setup, or NIS+, or sssd. Because of the variations in
how to do it, I don't think there is a clear cut best way to do it. So, I'd
only concentrate on local users and leave network users out for now.
-Steve