Details
XenServer can integrate with Active Directory and grant AD groups access to XenServer roles. This integration may not be available or desired, for example when integrating with OpenStack. When external authentication is disabled only a single account, root, is supported.
Solution
Run the following command:
xe pool-disable-external-auth
This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Unix.