UCF STIG Viewer Logo

Samba must be configured to use an authentication mechanism other than "share."


Overview

Finding ID Version Rule ID IA Controls Severity
V-22499 GEN006225 SV-37891r1_rule ECSC-1 Medium
Description
Samba share authentication does not provide for individual user identification and must not be used.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2017-03-01

Details

Check Text ( C-37117r1_chk )
Check the security mode of the Samba configuration.
# grep -i security /etc/samba/smb.conf
If the security mode is "share", this is a finding.
Fix Text (F-32385r1_fix)
Edit the "/etc/samba/smb.conf" file and change the "security" setting to "user" or another valid setting other than "share".