Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The JBoss server must be configured to use individual accounts and not generic or shared accounts.
Description
Discussion Text
To assure individual accountability and prevent unauthorized access, application server users (and any processes acting on behalf of application server users) must be individually identified and authenticated.
A group authenticator is a generic account used by multiple individuals. Use of a group authenticator alone does not uniquely identify individual users.
Application servers must ensure that individual users are authenticated prior to authenticating via role or group authentication. This is to ensure that there is non-repudiation for actions taken.
A group authenticator is a generic account used by multiple individuals. Use of a group authenticator alone does not uniquely identify individual users.
Application servers must ensure that individual users are authenticated prior to authenticating via role or group authentication. This is to ensure that there is non-repudiation for actions taken.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.