Detections
Analytics

GEN006230 - Samba must be configured to use encrypted passwords.

Information

Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.

Solution

Edit the '/etc/samba/smb.conf' file and change the 'encrypt passwords' setting to 'yes'.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-22500, Rule-ID|SV-37894r2_rule, STIG-ID|GEN006230, Vuln-ID|V-22500

Plugin: Unix

Control ID: 2f0d8e3f22e0e1e72f4e9758609bd7d4323a94f9d44b49310d05d8b195ace9da