UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Samba must be configured to use an authentication mechanism other than "share."


Overview

Finding ID Version Rule ID IA Controls Severity
V-22499 GEN006225 SV-37891r1_rule ECSC-1 Medium
Description
Samba share authentication does not provide for individual user identification and must not be used.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2015-03-12

Details

Check Text ( C-37117r1_chk )
Check the security mode of the Samba configuration.
# grep -i security /etc/samba/smb.conf
If the security mode is "share", this is a finding.
Fix Text (F-32385r1_fix)
Edit the "/etc/samba/smb.conf" file and change the "security" setting to "user" or another valid setting other than "share".