summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/security/clientschannel.xml
blob: d124ad48181831c598444c8cf788d819fb06468c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
<samba:parameter name="client schannel"
                 context="G"
                 type="enum"
                 enumlist="enum_bool_auto"
                 deprecated="1"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>

    <para>
	This option is deprecated with Samba 4.8 and will be removed in future.
	At the same time the default changed to yes, which will be the
	hardcoded behavior in future.
    </para>

    <para>
    This controls whether the client offers or even demands the use of the netlogon schannel.
    <smbconfoption name="client schannel">no</smbconfoption> does not offer the schannel, 
    <smbconfoption name="client schannel">auto</smbconfoption> offers the schannel but does not
    enforce it, and <smbconfoption name="client schannel">yes</smbconfoption> denies access 
    if the server is not able to speak netlogon schannel. 
    </para>

    <para>Note that for active directory domains this is hardcoded to
    <smbconfoption name="client schannel">yes</smbconfoption>.</para>

    <para>This option is over-ridden by the <smbconfoption name="require strong key"/> option.</para>
</description>
<value type="default">yes</value>
<value type="example">auto</value>
</samba:parameter>