8fe505e628
This patch provides tasks and docs to implement the following STIGs: - RHEL-07-010400 - RHEL-07-010401 - RHEL-07-010402 The tasks will not run if the sssd configuration file is not present. Implements: blueprint security-rhel7-stig Change-Id: Iddf850b8ccd72871beba4644b765e33e6d3c968b
15 lines
382 B
ReStructuredText
15 lines
382 B
ReStructuredText
---
|
|
id: RHEL-07-010400
|
|
status: implemented
|
|
tag: auth
|
|
---
|
|
|
|
The ``memcache_timeout`` setting is set to ``86400`` (86400 seconds = 1 day)
|
|
within the ``[nss]`` section of ``/etc/sssd/sssd.conf``. Deployers can choose a
|
|
different timeout for cached nss authenticators by setting the following
|
|
Ansible variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_nss_cached_authenticator_timeout: 86400
|