serverschannel.xml   [plain text]

<samba:parameter name="server schannel"
                 context="G"
                 basic="1"
		 xmlns:samba="http://samba.org/common">
<listitem>

    <para>This controls whether the server offers or even
    demands the use of the netlogon schannel.
    <parameter>server schannel = no</parameter> does not
    offer the schannel, <parameter>server schannel =
    auto</parameter> offers the schannel but does not
    enforce it, and <parameter>server schannel =
    yes</parameter> denies access if the client is not
    able to speak netlogon schannel. This is only the case
    for Windows NT4 before SP4.</para>

    <para>Please note that with this set to
    <parameter>no</parameter> you will have to apply the
    WindowsXP requireSignOrSeal-Registry patch found in
    the docs/Registry subdirectory.</para>

    <para>Default: <command>server schannel = auto</command></para>
    <para>Example: <command>server schannel = yes</command></para>
</listitem>
</samba:parameter>