Removing Server Based Trust Relationships

The goal of this project was to develop, implement and deploy solutions as well as supporting processes and standards to remediate and mitigate the risks that are inherent to utilizing UNIX server based trust relationships in a enterprise networked environment within 30 days. Server based trust relationships can be defined to grant different levels of authenticated or unauthenticated access. Trust between hosts can be established at the user level or globally at the server level. Corrective action is required to remediate and or mitigate the risks created by the currently established trust based relationships and the lack of controls to prevent their establishment. In addition to the corrective actions, alternative approaches and solutions that have a greater emphasis on security and access accountability will be introduced and implemented.