Disable Kerberos by removing host keytab
An XCCDF Rule
Description
Kerberos is not an approved key distribution method for
Common Criteria. To prevent using Kerberos by system daemons,
remove the Kerberos keytab files, especially
/etc/krb5.keytab.
Rationale
The key derivation function (KDF) in Kerberos is not FIPS compatible.
- ID
- xccdf_org.ssgproject.content_rule_kerberos_disable_no_keytab
- Severity
- Medium
- References
- Updated