I'm using Ubuntu 12.04 LTS to serve a web application to a local Windows network. A recent pen test highlighted that it was possible to enumerate local user accounts on the Samba service. I have been asked to disable this. This isn't something I've encountered before and I can't find the relevant documentation. The only lines in my smb.conf
relating to enumeration are commented out. I include them below for reference anyway.
winbind enum groups = yes
winbind enum users = yes
How do I disable anonymous account enumeration? Is doing so likely to have undesirable side effects?