sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00
Code
samba-mirror/docs-xml/smbdotconf/security/serversmbencryptionalgos.xml

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

22 lines
936 B
XML
Raw Normal View History

docs-xml: add "client/server smb3 encryption algorithms" options This gives administrators more control over the used algorithms. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-13 18:00:59 +02:00
<samba:parameter name="server smb3 encryption algorithms"
context="G"
type="list"
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
<para>This parameter specifies the availability and order of
encryption algorithms which are available for negotiation in the SMB3_11 dialect.
</para>
<para>It is also possible to remove individual algorithms from the default list,
by prefixing them with '-'. This can avoid having to specify a hardcoded list.
</para>
docs-xml: use upper case for "{client,server} smb3 {signing,encryption} algorithms" values This matches what smbstatus prints out. Note there's also the removal of an '-' in "hmac-sha-256" => HMAC-SHA256". BUG: https://bugzilla.samba.org/show_bug.cgi?id=14825 RN: "{client,server} smb3 {signing,encryption} algorithms" should use the same strings as smbstatus output Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Sep 8 16:37:07 UTC 2021 on sn-devel-184
2021-09-08 15:10:14 +02:00
<para>Note: that the removal of AES-128-CCM from the list will result
docs-xml: add "client/server smb3 encryption algorithms" options This gives administrators more control over the used algorithms. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-13 18:00:59 +02:00
in SMB3_00 and SMB3_02 being unavailable, as it is the default and only
available algorithm for these dialects.
</para>
</description>
docs-xml: use upper case for "{client,server} smb3 {signing,encryption} algorithms" values This matches what smbstatus prints out. Note there's also the removal of an '-' in "hmac-sha-256" => HMAC-SHA256". BUG: https://bugzilla.samba.org/show_bug.cgi?id=14825 RN: "{client,server} smb3 {signing,encryption} algorithms" should use the same strings as smbstatus output Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Sep 8 16:37:07 UTC 2021 on sn-devel-184
2021-09-08 15:10:14 +02:00
<value type="default">AES-128-GCM, AES-128-CCM, AES-256-GCM, AES-256-CCM</value>
<value type="example">AES-256-GCM</value>
<value type="example">-AES-128-GCM -AES-128-CCM</value>
docs-xml: add "client/server smb3 encryption algorithms" options This gives administrators more control over the used algorithms. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2021-07-13 18:00:59 +02:00
</samba:parameter>
Copy Permalink