This is a merge of the NETLOGON schannel server code from Samba
[sfrench/samba-autobuild/.git] / docs / docbook / smbdotconf / security / serverschannel.xml
1 <samba:parameter xmlns:samba="http://samba.org/common">
2                 <term><anchor id="SERVERSCHANNEL"/>server schannel (G)</term>
3                 <listitem>
4
5                 <para>This controls whether the server offers or even
6                 demands the use of the netlogon schannel.
7                 <parameter>server schannel = no</parameter> does not
8                 offer the schannel, <parameter>server schannel =
9                 auto</parameter> offers the schannel but does not
10                 enforce it, and <parameter>server schannel =
11                 yes</parameter> denies access if the client is not
12                 able to speak netlogon schannel. This is only the case
13                 for Windows NT4 before SP4.</para>
14
15                 <para>Please note that with this set to
16                 <parameter>no</parameter> you will have to apply the
17                 WindowsXP requireSignOrSeal-Registry patch found in
18                 the docs/Registry subdirectory.</para
19
20                 <para>Default: <command>server schannel = auto</command></para>
21
22                 <para>Example: <command>server schannel = yes</command>/para>
23                 </listitem>
24                 <samba:parameter>