Adding upstream version 2:4.17.12+dfsg.upstream/2%4.17.12+dfsgupstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 30 insertions, 0 deletions

diff --git a/docs-xml/smbdotconf/security/clientschannel.xml b/docs-xml/smbdotconf/security/clientschannel.xml
new file mode 100644
index 0000000..d124ad4
--- /dev/null
+++ b/docs-xml/smbdotconf/security/clientschannel.xml
@@ -0,0 +1,30 @@
+<samba:parameter name="client schannel"
+                 context="G"
+                 type="enum"
+                 enumlist="enum_bool_auto"
+                 deprecated="1"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+
+    <para>
+	This option is deprecated with Samba 4.8 and will be removed in future.
+	At the same time the default changed to yes, which will be the
+	hardcoded behavior in future.
+    </para>
+
+    <para>
+    This controls whether the client offers or even demands the use of the netlogon schannel.
+    <smbconfoption name="client schannel">no</smbconfoption> does not offer the schannel, 
+    <smbconfoption name="client schannel">auto</smbconfoption> offers the schannel but does not
+    enforce it, and <smbconfoption name="client schannel">yes</smbconfoption> denies access 
+    if the server is not able to speak netlogon schannel. 
+    </para>
+
+    <para>Note that for active directory domains this is hardcoded to
+    <smbconfoption name="client schannel">yes</smbconfoption>.</para>
+
+    <para>This option is over-ridden by the <smbconfoption name="require strong key"/> option.</para>
+</description>
+<value type="default">yes</value>
+<value type="example">auto</value>
+</samba:parameter>