1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
samba-mirror/docs-xml/smbdotconf/security/clientschannel.xml
Stefan Metzmacher c7acae9043 docs-xml: deprecate "client schannel" and change the default to "yes"
This is already the default, because "require strong key = yes" is
the default.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
2018-01-10 01:01:24 +01:00

31 lines
1.2 KiB
XML

<samba:parameter name="client schannel"
context="G"
type="enum"
enumlist="enum_bool_auto"
deprecated="1"
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
<para>
This option is deprecated with Samba 4.8 and will be removed in future.
At the same time the default changed to yes, which will be the
hardcoded behavior in future.
</para>
<para>
This controls whether the client offers or even demands the use of the netlogon schannel.
<smbconfoption name="client schannel">no</smbconfoption> does not offer the schannel,
<smbconfoption name="client schannel">auto</smbconfoption> offers the schannel but does not
enforce it, and <smbconfoption name="client schannel">yes</smbconfoption> denies access
if the server is not able to speak netlogon schannel.
</para>
<para>Note that for active directory domains this is hardcoded to
<smbconfoption name="client schannel">yes</smbconfoption>.</para>
<para>This option yields precedence to the <smbconfoption name="require strong key"/> option.</para>
</description>
<value type="default">yes</value>
<value type="example">auto</value>
</samba:parameter>