STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must prevent SSH from permitting Generic Security Service Application Program Interface (GSSAPI) authentication.

DISA Rule

SV-279578r1192443_rule

Vulnerability Number

V-279578

Group Title

SRG-OS-000364-GPOS-00151

Rule Version

NXAC-OS-000124

Severity

CAT II

CCI(s)

• CCI-001813 - Enforce access restrictions using organization-defined mechanisms.

Weight

10

Fix Recommendation

Configure SSH to not permit GSSAPI authentication using the following command.

$ sudo salt-call state.sls security/CVM/sshdCVM
$ sudo systemctl restart sshd

Check Contents

Verify Nutanix OS enforces access restrictions.

Check that the SSH daemon does not permit GSSAPI authentication using the following command.

$ sudo grep -i gssapiauth /etc/ssh/sshd_config
GSSAPIAuthentication no

If the "GSSAPIAuthentication" keyword is missing, is set to "yes" and is not documented with the information system security officer (ISSO), or the returned line is commented out, this is a finding.

Vulnerability Number

V-279578

Documentable

False

Rule Version

NXAC-OS-000124

Severity Override Guidance

Verify Nutanix OS enforces access restrictions.

Check that the SSH daemon does not permit GSSAPI authentication using the following command.

$ sudo grep -i gssapiauth /etc/ssh/sshd_config
GSSAPIAuthentication no

If the "GSSAPIAuthentication" keyword is missing, is set to "yes" and is not documented with the information system security officer (ISSO), or the returned line is commented out, this is a finding.

Check Content Reference

M

Target Key

5730