A failover group signature is not configured on all Sun Ray servers in the failover group.

Part of Failover group signature not configured

Associated with IA controls: ECSC-1

SV-17144r1_rule A failover group signature is not configured on all Sun Ray servers in the failover group.

Vulnerability discussion

Without the use of a failover group signature, an unauthorized Sun Ray server may become a member of the group, thereby receiving replication traffic. Servers in a group authenticate one another using a common group signature. The group signature is a key used to sign messages sent between servers in a group, and it must be configured to be identical on each server.

Check content

On the Sun Ray server, perform the following: # find /etc/opt/SUNWut/ -name gmSignature If no results are returned, this is a finding.

Fix text

Configure a failover group signature to ensure only authorized servers are members of the group.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.