Title

A failover group signature is not configured on all Sun Ray servers in the failover group. (Cat II impact)

Discussion

Without the use of a failover group signature, an unauthorized Sun Ray server may become a member of the group, thereby receiving replication traffic. Servers in a group authenticate one another using a common group signature. The group signature is a key used to sign messages sent between servers in a group, and it must be configured to be identical on each server.

Check Content

On the Sun Ray server, perform the following: # find /etc/opt/SUNWut/ -name gmSignature If no results are returned, this is a finding.

Fix Text

Configure a failover group signature to ensure only authorized servers are members of the group.

Additional Identifiers

Rule ID:

Vulnerability ID: V-16155

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.