Samba must be configured to use encrypted passwords.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22500	GEN006230	SV-46281r1_rule		Medium

Description
Samba must be configured to protect authenticators. If Samba passwords are not encrypted for storage, plain-text user passwords may be read by those with access to the Samba password file.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-37120r3_chk )
If the "samba-common" package is not installed, this is not applicable. Check the encryption setting of Samba. # grep -i 'encrypt passwords' /etc/samba/smb.conf If the setting is not present, or not set to 'yes', this is a finding.

Fix Text (F-32388r1_fix)
Edit the "/etc/samba/smb.conf" file and change the "encrypt passwords" setting to "yes".