From e8d7428fe3d6133519238ce1c9320915cec1e571 Mon Sep 17 00:00:00 2001
From: Jelmer Vernooij <jelmer@samba.org>
Date: Fri, 15 Aug 2003 21:32:44 +0000
Subject: Document 'server schannel', 'client schannel', 'client signing',
 'server signing', 'client plaintext auth' (This used to be commit
 7f4e6de885728e53b7eed445bdb2106ba53d626b)

---
 .../smbdotconf/security/clientplaintextauth.xml       | 12 ++++++++++++
 docs/docbook/smbdotconf/security/clientschannel.xml   | 19 +++++++++++++++++++
 docs/docbook/smbdotconf/security/clientsigning.xml    | 19 +++++++++++++++++++
 docs/docbook/smbdotconf/security/serversigning.xml    | 19 +++++++++++++++++++
 4 files changed, 69 insertions(+)
 create mode 100644 docs/docbook/smbdotconf/security/clientplaintextauth.xml
 create mode 100644 docs/docbook/smbdotconf/security/clientschannel.xml
 create mode 100644 docs/docbook/smbdotconf/security/clientsigning.xml
 create mode 100644 docs/docbook/smbdotconf/security/serversigning.xml

(limited to 'docs/docbook')

diff --git a/docs/docbook/smbdotconf/security/clientplaintextauth.xml b/docs/docbook/smbdotconf/security/clientplaintextauth.xml
new file mode 100644
index 0000000000..ac90ef9fe5
--- /dev/null
+++ b/docs/docbook/smbdotconf/security/clientplaintextauth.xml
@@ -0,0 +1,12 @@
+<samba:parameter name="client plaintext auth"
+                 context="G"
+                 basic="1" advanced="1" wizard="1" developer="1"
+		 xmlns:samba="http://samba.org/common">
+<listitem>
+	<para>Specifies whether a client should send a plaintext 
+	password if the server does not support encrypted passwords.</para>
+	
+    <para>Default: <command moreinfo="none">client plaintext auth = yes</command></para>
+
+</listitem>
+</samba:parameter>
diff --git a/docs/docbook/smbdotconf/security/clientschannel.xml b/docs/docbook/smbdotconf/security/clientschannel.xml
new file mode 100644
index 0000000000..f3ad682517
--- /dev/null
+++ b/docs/docbook/smbdotconf/security/clientschannel.xml
@@ -0,0 +1,19 @@
+<samba:parameter name="client schannel"
+                 context="G"
+                 basic="1"
+		 xmlns:samba="http://samba.org/common">
+<listitem>
+
+    <para>This controls whether the client offers or even
+    demands the use of the netlogon schannel.
+    <parameter>client schannel = no</parameter> does not
+    offer the schannel, <parameter>server schannel =
+    auto</parameter> offers the schannel but does not
+    enforce it, and <parameter>server schannel =
+    yes</parameter> denies access if the server is not
+    able to speak netlogon schannel. </para>
+
+    <para>Default: <command>client schannel = auto</command></para>
+    <para>Example: <command>client schannel = yes</command></para>
+</listitem>
+</samba:parameter>
diff --git a/docs/docbook/smbdotconf/security/clientsigning.xml b/docs/docbook/smbdotconf/security/clientsigning.xml
new file mode 100644
index 0000000000..e006dc71ab
--- /dev/null
+++ b/docs/docbook/smbdotconf/security/clientsigning.xml
@@ -0,0 +1,19 @@
+<samba:parameter name="client signing"
+                 context="G"
+                 basic="1"
+		 xmlns:samba="http://samba.org/common">
+<listitem>
+
+    <para>This controls whether the client offers or requires
+    the server it talks to to use SMB signing. Possible values 
+    are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> 
+    and <emphasis>disabled</emphasis>. 
+    </para>
+
+    <para>When set to auto, SMB signing is offered, but not enforced. 
+    When set to mandatory, SMB signing is required and if set 
+    to disabled, SMB signing is not offered either.</para>
+
+    <para>Default: <command>client signing = auto</command></para>
+</listitem>
+</samba:parameter>
diff --git a/docs/docbook/smbdotconf/security/serversigning.xml b/docs/docbook/smbdotconf/security/serversigning.xml
new file mode 100644
index 0000000000..5108918d84
--- /dev/null
+++ b/docs/docbook/smbdotconf/security/serversigning.xml
@@ -0,0 +1,19 @@
+<samba:parameter name="server signing"
+                 context="G"
+                 basic="1"
+		 xmlns:samba="http://samba.org/common">
+<listitem>
+
+    <para>This controls whether the server offers or requires
+    the client it talks to to use SMB signing. Possible values 
+    are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> 
+    and <emphasis>disabled</emphasis>. 
+    </para>
+
+    <para>When set to auto, SMB signing is offered, but not enforced. 
+    When set to mandatory, SMB signing is required and if set 
+    to disabled, SMB signing is not offered either.</para>
+
+    <para>Default: <command>client signing = False</command></para>
+</listitem>
+</samba:parameter>
-- 
cgit