sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-06 13:18:07 +03:00
Code
9dfd533960
samba-mirror/docs/smbdotconf/security/lanmanauth.xml

34 lines
1.5 KiB
XML
Raw Normal View History

Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
<samba:parameter name="lanman auth"
context="G"
type="boolean"
advanced="1" developer="1"
Update DTD location (This used to be commit 889dfcc532bd3357314313fe8f70a022a174eef4)
2005-03-13 01:41:20 +03:00
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
<description>
<para>This parameter determines whether or not <citerefentry><refentrytitle>smbd</refentrytitle>
Clarify that turning off lanman authentiation applies to password changes as well. Andrew Bartlett (This used to be commit 09c4ae5d0b97f94a514fc587412fca2f8d0246a3)
2004-12-23 05:18:53 +03:00
<manvolnum>8</manvolnum></citerefentry> will attempt to
authenticate users or permit password changes
Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
using the LANMAN password hash. If disabled, only clients which support NT
Clarify that turning off lanman authentiation applies to password changes as well. Andrew Bartlett (This used to be commit 09c4ae5d0b97f94a514fc587412fca2f8d0246a3)
2004-12-23 05:18:53 +03:00
password hashes (e.g. Windows NT/2000 clients, smbclient, but not
Windows 95/98 or the MS DOS network client) will be able to
connect to the Samba host.</para>
Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
<para>The LANMAN encrypted response is easily broken, due to it's
case-insensitive nature, and the choice of algorithm. Servers
Clarify that turning off lanman authentiation applies to password changes as well. Andrew Bartlett (This used to be commit 09c4ae5d0b97f94a514fc587412fca2f8d0246a3)
2004-12-23 05:18:53 +03:00
without Windows 95/98/ME or MS DOS clients are advised to disable
Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
this option. </para>
<para>Unlike the <command moreinfo="none">encypt
passwords</command> option, this parameter cannot alter client
behaviour, and the LANMAN response will still be sent over the
network. See the <command moreinfo="none">client lanman
auth</command> to disable this for Samba's clients (such as smbclient)</para>
<para>If this option, and <command moreinfo="none">ntlm
auth</command> are both disabled, then only NTLMv2 logins will be
permited. Not all clients support NTLMv2, and most will require
Clarify that turning off lanman authentiation applies to password changes as well. Andrew Bartlett (This used to be commit 09c4ae5d0b97f94a514fc587412fca2f8d0246a3)
2004-12-23 05:18:53 +03:00
special configuration to use it.</para>
Add all the source files from the old CVS tree, add the 5 missing chapters from the HOWTO and add jht's Samba by Example book. (This used to be commit 9fb5bcb93e57c5162b3ee6f9c7d777dc0269d100)
2004-04-07 14:15:11 +04:00
</description>
<value type="default">yes</value>
</samba:parameter>
Copy Permalink