Retour
-
Titre
Linux account to run under but required to be FIPS compliant -
Description
When configuring Spotlight connection the O/S part requires O/S user and if the private/public key is not an option for it to monitor a Linux server, then what are the options to have it FIPS compliant to meet that requirement ? -
Résolution
WORKAROUND
Look at the sshd_config file and change the MACs line to include the old sha1 MAC.
Here is the line that makes the difference:
Non-working sshd_config:
MACs hmac-sha2-256,hmac-sha2-512Working sshd_config:
MACs hmac-sha2-256,hmac-sha2-512,hmac-sha1
The enhancement will put the feature request by adding support for the SSH client in the software to connect to a server using MACs of type sha2 only. this is only temporary fix.STATUS
Enhancement request number (SOO--2604 SoU) has been submitted to Development for consideration in a future release of Spotlight on Oracle and Spotlight on Unix.
-
Identifiant du défaut
SOO-2604