Detections
Analytics
GEN006230 - Samba must be configured to use encrypted passwords.
Information
Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.Solution
Edit the smb.conf file and change the encrypt passwords setting to yes.# vi /usr/lib/smb.conf
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-22500, Rule-ID|SV-39241r1_rule, STIG-ID|GEN006230, Vuln-ID|V-22500
Plugin: Unix
Control ID: 54e126374587dfe928ab974405623def4b2ee755465bafbe00c5367f4875cc78