docs: Explain that winbindd enforces smb signing by default.

Change-Id: I9341fa3bd7480836ac5e0c18e28458175b42d44a
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/docs-xml/smbdotconf/security/clientsigning.xml b/docs-xml/smbdotconf/security/clientsigning.xml
index 34fce3e857cb01cfa7dcca6e5db2e6de4c14ff35..3b5687f769155834d69e5f005a5b77c6000938f7 100644 (file)
--- a/docs-xml/smbdotconf/security/clientsigning.xml
+++ b/docs-xml/smbdotconf/security/clientsigning.xml
@@ -9,8 +9,11 @@
     and <emphasis>disabled</emphasis>. 
     </para>
 
-    <para>When set to auto or default, SMB signing is offered, but not enforced.
-    When set to mandatory, SMB signing is required and if set 
+    <para>When set to auto or default, SMB signing is offered, but not
+    enforced, except in winbindd, where it is enforced to Active
+    Directory Domain Controllers. </para>
+
+    <para>When set to mandatory, SMB signing is required and if set
        to disabled, SMB signing is not offered either.
 </para>
 </description>