Samba must be configured to use an authentication mechanism other than share.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22499	GEN006225	SV-26830r2_rule	ECSC-1	Medium

Description
Samba share authentication does not provide for individual user identification and must not be used.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-27812r3_chk )
Check the security mode of the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations. Procedure: # grep -i security /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf If the security mode is share, this is a finding.

Check Text ( C-27812r3_chk )

Check the security mode of the Samba configuration. Default locations for this file include /etc, /etc/sfw, /etc/samba, and /etc/sfw/samba. If the system has Samba installed in non-standard locations, also check the smb.conf in those locations.

Procedure:

# grep -i security /etc/smb.conf /etc/sfw/smb.conf /etc/samba/smb.conf /etc/sfw/samba/smb.conf

If the security mode is share, this is a finding.

Fix Text (F-24073r3_fix)
Edit the smb.conf file and change the security setting to user or another valid setting other than share.