STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must map the authenticated identity to the user or group account for PKI-based authentication.

DISA Rule

SV-270736r1066697_rule

Vulnerability Number

V-270736

Group Title

SRG-OS-000068-GPOS-00036

Rule Version

UBTU-24-400370

Severity

CAT I

CCI(s)

• CCI-000187 - For public key-based authentication, map the authenticated identity to the account of the individual or group.

Weight

10

Fix Recommendation

Configure sssd to map authenticated certificates to the appropriate user group by adding the following line to the "/etc/sssd/sssd.conf" file:

ldap_user_certificate=userCertificate;binary

Check Contents

Verify that authenticated certificates are mapped to the appropriate user group in the "/etc/sssd/sssd.conf" file with the following command:

$ grep -i ldap_user_certificate /etc/sssd/sssd.conf
ldap_user_certificate=userCertificate;binary

Vulnerability Number

V-270736

Documentable

False

Rule Version

UBTU-24-400370

Severity Override Guidance

Verify that authenticated certificates are mapped to the appropriate user group in the "/etc/sssd/sssd.conf" file with the following command:

$ grep -i ldap_user_certificate /etc/sssd/sssd.conf
ldap_user_certificate=userCertificate;binary

Check Content Reference

M

Target Key

5673