UCF STIG Viewer Logo

Samba must be configured to use encrypted passwords.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227935 GEN006230 SV-227935r603266_rule Medium
Description
Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-30097r490225_chk )
Check the encryption setting of the Samba configuration.

Procedure:
# grep -i 'encrypt passwords' /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf
If the setting is not present, or not set to yes, this is a finding.
Fix Text (F-30085r490226_fix)
Edit the smb.conf file and change the encrypt passwords setting to yes.