Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Background

Info

Instead of creating a new properties file for unique assessments, individual user properties may be specified using the -D option together with a property=value pair. This allows an assessment to only override specific user properties when only a small number differ from the defaults.

Problem

We have seen an issue when using the Miscellaneous Option of -D to assess postgresql databases. The command line assessment will fail with this error;

Warning

-- [obj:26334500] sql57_object: No description provided................. Exception in thread "main" org.postgresql.util.PSQLException: The server requires password-based authentication, but no password was specified.

Solution

In this specific example, the property=value must be enclosed in quotes so that the full jdbc command is passed to CIS-CAT. For example;

-D "xccdf_org.cisecurity_value_jdbc.url=jdbc:postgresql://127.0.0.1:5432/ciscatdb?user=ciscat&password=ciscat"

Filter by label (Content by label)
showLabelsfalse
max5
spacescom.atlassian.confluence.content.render.xhtml.model.resource.identifiers.SpaceResourceIdentifier@270024
showSpacefalse
sortmodified
typepage
reversetrue
labelskb-troubleshooting-article
cqllabel = "kb-troubleshooting-article" and type = "page" and space = "STPS"
Page Properties
hiddentrue

Related issues