Configure SSSD to Expire Offline Credentials
An XCCDF Rule
Description
SSSD should be configured to expire offline credentials after 1 day.
To configure SSSD to expire offline credentials, set
offline_credentials_expiration to 1 under the [pam]
section in /etc/sssd/sssd.conf. For example:
[pam] offline_credentials_expiration = 1
Rationale
If cached authentication information is out-of-date, the validity of the authentication information may be questionable.
- ID
- xccdf_org.ssgproject.content_rule_sssd_offline_cred_expiration
- Severity
- Medium
- References
- Updated