Clarify that 'use spnego = yes' is fine in all known situations.

Andrew Bartlett
(This used to be commit 0944c69636eb60bc1a4b2a2257dd05f6d385bd4d)

diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml
index 713d4a012ee141cf71c776b83cfe1378c15d4849..b483a97b3175702f0dba323a4ed2b2cead27a27b 100644 (file)
--- a/docs/docbook/manpages/smb.conf.5.sgml
+++ b/docs/docbook/manpages/smb.conf.5.sgml
@@ -7332,9 +7332,9 @@ let "time++"
                <listitem><para> This variable controls controls whether samba will try 
                to use Simple and Protected NEGOciation (as specified by rfc2478) with 
                WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. 
-               As of samba 3.0alpha it must be set to "no" for these clients to join a samba 
-               domain controller.  It can be set to "yes" to allow samba to participate in an 
-               AD domain controlled by a Windows2000 domain controller.</para>
+               Unless further issues are discovered with our SPNEGO
+               implementation, there is no reason this should ever be
+               disabled.</para>
                <para>Default:  <emphasis>use spnego = yes</emphasis></para>
                </listitem>
                </varlistentry>