diff options
author | Günther Deschner <gd@samba.org> | 2014-09-24 23:36:19 +0200 |
---|---|---|
committer | Günther Deschner <gd@samba.org> | 2014-09-26 21:11:35 +0200 |
commit | 215b9f5726db3c0e453b0da1d953ac694fce4b4f (patch) | |
tree | 61eca703dff370ca701ecf00f9846929869fcb39 /docs-xml/manpages | |
parent | f872875f30215c7e6ab5c79bbfb466326bd091c9 (diff) | |
download | samba-215b9f5726db3c0e453b0da1d953ac694fce4b4f.tar.gz samba-215b9f5726db3c0e453b0da1d953ac694fce4b4f.tar.xz samba-215b9f5726db3c0e453b0da1d953ac694fce4b4f.zip |
s3-net: add manpage documentation for "net ads enctypes".
Guenther
Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'docs-xml/manpages')
-rw-r--r-- | docs-xml/manpages/net.8.xml | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/docs-xml/manpages/net.8.xml b/docs-xml/manpages/net.8.xml index f39b420771..9e982e3723 100644 --- a/docs-xml/manpages/net.8.xml +++ b/docs-xml/manpages/net.8.xml @@ -1339,6 +1339,59 @@ to show in the result. </refsect2> <refsect2> + <title>ADS ENCTYPES</title> + +<para> + List, modify or delete the value of the "msDS-SupportedEncryptionTypes" attribute of an account in AD. +</para> + +<para> + This attribute allows to control which Kerberos encryption types are used for the generation of initial and service tickets. The value consists of an integer bitmask with the following values: +</para> + +<para>0x00000001 DES-CBC-CRC</para> +<para>0x00000002 DES-CBC-MD5</para> +<para>0x00000004 RC4-HMAC</para> +<para>0x00000008 AES128-CTS-HMAC-SHA1-96</para> +<para>0x00000010 AES256-CTS-HMAC-SHA1-96</para> + +</refsect2> + +<refsect2> + <title>ADS ENCTYPES LIST <replaceable><ACCOUNTNAME></replaceable></title> + +<para> + List the value of the "msDS-SupportedEncryptionTypes" attribute of a given account. +</para> + +<para>Example: <userinput>net ads enctypes list Computername</userinput></para> + +</refsect2> + +<refsect2> + <title>ADS ENCTYPES SET <replaceable><ACCOUNTNAME></replaceable> <replaceable>[enctypes]</replaceable></title> + +<para> + Set the value of the "msDS-SupportedEncryptionTypes" attribute of the LDAP object of ACCOUNTNAME to a given value. If the value is ommitted, the value is set to 31 which enables all the currently supported encryption types. +</para> + +<para>Example: <userinput>net ads enctypes set Computername 24</userinput></para> + +</refsect2> + +<refsect2> + <title>ADS ENCTYPES DELETE <replaceable><ACCOUNTNAME></replaceable></title> + +<para> + Deletes the "msDS-SupportedEncryptionTypes" attribute of the LDAP object of ACCOUNTNAME. +</para> + +<para>Example: <userinput>net ads enctypes set Computername 24</userinput></para> + +</refsect2> + + +<refsect2> <title>SAM CREATEBUILTINGROUP <NAME></title> <para> |