summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security/serverschannel.xml
blob: 6317448fb62ecb89f353dfa836004c6ee95d81da (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
<samba:parameter name="server schannel"
                 context="G"
				 type="boolean-auto"
                 basic="1"
		 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
    <para>
	This controls whether the server offers or even demands the use of the netlogon schannel.
	<smbconfoption name="server schannel">no</smbconfoption> does not offer the schannel, <smbconfoption
	name="server schannel">auto</smbconfoption> offers the schannel but does not enforce it, and <smbconfoption
	name="server schannel">yes</smbconfoption> denies access if the client is not able to speak netlogon schannel.
	This is only the case for Windows NT4 before SP4.
	</para>

    <para>
	Please note that with this set to <literal>no</literal> you will have to apply the WindowsXP
	<filename>WinXP_SignOrSeal.reg</filename> registry patch found in the docs/registry subdirectory of the Samba distribution tarball.
	</para>
</description>

<value type="default">auto</value>
<value type="example">yes</value>
</samba:parameter>