summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/security/clientschannel.xml
blob: d293ee39619404ac9447ad27176d643fbe5f78bc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
<samba:parameter name="client schannel"
                 context="G"
                 basic="1"
				 type="enum"
		 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>

    <para>
    This controls whether the client offers or even demands the use of the netlogon schannel.
    <smbconfoption name="client schannel">no</smbconfoption> does not offer the schannel, 
    <smbconfoption name="client schannel">auto</smbconfoption> offers the schannel but does not
    enforce it, and <smbconfoption name="client schannel">yes</smbconfoption> denies access 
    if the server is not able to speak netlogon schannel. 
    </para>

    <para>Note that for active directory domains this is hardcoded to
    <smbconfoption name="client schannel">yes</smbconfoption>.</para>

    <para>This option yields precedence to the <smbconfoption name="require strong key"/> option.</para>
</description>
<value type="default">auto</value>
<value type="example">yes</value>
</samba:parameter>