summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2012-10-03 12:58:00 -0700
committerJeremy Allison <jra@samba.org>2012-10-03 23:47:23 +0200
commitfe38a93c71d0adc0be1d43b438ac3b54eaf4ba53 (patch)
treede016bfe2fe608a0ecbe6c320460f9cccfbc5bce
parent49a335731a7139a5c66be596f3d544bef72a8556 (diff)
downloadsamba-fe38a93c71d0adc0be1d43b438ac3b54eaf4ba53.tar.gz
samba-fe38a93c71d0adc0be1d43b438ac3b54eaf4ba53.tar.bz2
samba-fe38a93c71d0adc0be1d43b438ac3b54eaf4ba53.zip
Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
Signing cannot be disabled for SMB2 by design, so fix the documentation instead. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Oct 3 23:47:23 CEST 2012 on sn-devel-104
-rw-r--r--docs-xml/smbdotconf/security/serversigning.xml17
1 files changed, 11 insertions, 6 deletions
diff --git a/docs-xml/smbdotconf/security/serversigning.xml b/docs-xml/smbdotconf/security/serversigning.xml
index ea21a2c6f6..0aced5d3c1 100644
--- a/docs-xml/smbdotconf/security/serversigning.xml
+++ b/docs-xml/smbdotconf/security/serversigning.xml
@@ -5,14 +5,19 @@
xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
- <para>This controls whether the client is allowed or required to use SMB signing. Possible values
- are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
- and <emphasis>disabled</emphasis>.
+ <para>This controls whether the client is allowed or required to use SMB1 and SMB2 signing. Possible values
+ are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
+ and <emphasis>disabled</emphasis>.
</para>
- <para>When set to auto, SMB signing is offered, but not enforced.
- When set to mandatory, SMB signing is required and if set
- to disabled, SMB signing is not offered either.</para>
+ <para>When set to auto, SMB1 signing is offered, but not enforced.
+ When set to mandatory, SMB1 signing is required and if set
+ to disabled, SMB signing is not offered either.</para>
+
+ <para>For the SMB2 protocol, by design, signing cannot be disabled. In the case
+ where SMB2 is negotiated, if this parameter is set to <emphasis>disabled</emphasis>,
+ it will be treated as <emphasis>auto</emphasis>. Setting it to <emphasis>mandatory</emphasis>
+ will still require SMB2 clients to use signing.</para>
</description>
<value type="default">Disabled</value>