<samba:parameter name="server schannel" context="G" type="boolean-auto" basic="1" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> <para> This controls whether the server offers or even demands the use of the netlogon schannel. <smbconfoption name="server schannel">no</smbconfoption> does not offer the schannel, <smbconfoption name="server schannel">auto</smbconfoption> offers the schannel but does not enforce it, and <smbconfoption name="server schannel">yes</smbconfoption> denies access if the client is not able to speak netlogon schannel. This is only the case for Windows NT4 before SP4. </para> <para> Please note that with this set to <literal>no</literal>, you will have to apply the WindowsXP <filename>WinXP_SignOrSeal.reg</filename> registry patch found in the docs/registry subdirectory of the Samba distribution tarball. </para> </description> <value type="default">auto</value> <value type="example">yes</value> </samba:parameter>