V-22499

CAT II (Medium)

Samba must be configured to use an authentication mechanism other than share.

Rule ID

SV-46140r1_rule

STIG

Version

V1R12

CCIs

Samba share authentication does not provide for individual user identification and must not be used.

Check the security mode of the Samba configuration.
# grep -i security /etc/samba/smb.conf 
If the security mode is "share", this is a finding.

Edit the "/etc/samba/smb.conf" file and change the "security" setting to "user" or another valid setting other than "share".