diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-12-09 16:47:08 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-12-10 16:08:30 +1100 |
| commit | d69b4f13f7edda8d8457315936051cc9d3fb103f (patch) | |
| tree | 1f383853f38cf6a414567af0e0a5239118dee336 | |
| parent | 635fbf2b5498df5698e240728add95f8ff8cda0f (diff) | |
| download | samba-d69b4f13f7edda8d8457315936051cc9d3fb103f.tar.gz samba-d69b4f13f7edda8d8457315936051cc9d3fb103f.tar.bz2 samba-d69b4f13f7edda8d8457315936051cc9d3fb103f.zip | |
s3-docs Explain change to NTLMv2 by default in the client
| -rw-r--r-- | docs-xml/smbdotconf/security/clientntlmv2auth.xml | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/docs-xml/smbdotconf/security/clientntlmv2auth.xml b/docs-xml/smbdotconf/security/clientntlmv2auth.xml index 9f0627abbf..b151df2447 100644 --- a/docs-xml/smbdotconf/security/clientntlmv2auth.xml +++ b/docs-xml/smbdotconf/security/clientntlmv2auth.xml @@ -10,9 +10,9 @@ response.</para> <para>If enabled, only an NTLMv2 and LMv2 response (both much more - secure than earlier versions) will be sent. Many servers + secure than earlier versions) will be sent. Older servers (including NT4 < SP4, Win9x and Samba 2.2) are not compatible with - NTLMv2. </para> + NTLMv2 when not in an NTLMv2 supporting domain</para> <para>Similarly, if enabled, NTLMv1, <command moreinfo="none">client lanman auth</command> and <command @@ -24,9 +24,10 @@ will be sent by the client, depending on the value of <command moreinfo="none">client lanman auth</command>. </para> - <para>Note that some sites (particularly - those following 'best practice' security polices) only allow NTLMv2 - responses, and not the weaker LM or NTLM.</para> + <para>Note that Windows Vista and later versions already use + NTLMv2 by default, and some sites (particularly those following + 'best practice' security polices) only allow NTLMv2 responses, and + not the weaker LM or NTLM.</para> </description> -<value type="default">no</value> +<value type="default">yes</value> </samba:parameter> |