Samba must be configured to use encrypted passwords.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22500	GEN006230	SV-39241r1_rule	IAIA-1 IAIA-2	Medium

Description
Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.

STIG	Date
Draft AIX Security Technical Implementation Guide	2011-08-17

Details

Check Text ( C-38215r1_chk )
Check the encryption setting the Samba configuration. #find / -name smb.conf # grep -i 'encrypt passwords' < smb.conf file > If the setting is not present, or not set to 'yes', this is a finding.

Fix Text (F-33491r1_fix)
Edit the smb.conf file and change the "encrypt passwords" setting to yes. # vi < smb.conf file>