diff options
| author | Jeremy Allison <jra@samba.org> | 2012-10-03 12:58:00 -0700 |
|---|---|---|
| committer | Jeremy Allison <jra@samba.org> | 2012-10-03 23:47:23 +0200 |
| commit | fe38a93c71d0adc0be1d43b438ac3b54eaf4ba53 (patch) | |
| tree | de016bfe2fe608a0ecbe6c320460f9cccfbc5bce /docs-xml/smbdotconf/security/serversigning.xml | |
| parent | 49a335731a7139a5c66be596f3d544bef72a8556 (diff) | |
| download | samba-fe38a93c71d0adc0be1d43b438ac3b54eaf4ba53.tar.gz | |
Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
Signing cannot be disabled for SMB2 by design, so fix the documentation
instead.
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Oct 3 23:47:23 CEST 2012 on sn-devel-104
Diffstat (limited to 'docs-xml/smbdotconf/security/serversigning.xml')
| -rw-r--r-- | docs-xml/smbdotconf/security/serversigning.xml | 17 |
1 files changed, 11 insertions, 6 deletions
diff --git a/docs-xml/smbdotconf/security/serversigning.xml b/docs-xml/smbdotconf/security/serversigning.xml index ea21a2c6f64..0aced5d3c17 100644 --- a/docs-xml/smbdotconf/security/serversigning.xml +++ b/docs-xml/smbdotconf/security/serversigning.xml @@ -5,14 +5,19 @@ xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> <description> - <para>This controls whether the client is allowed or required to use SMB signing. Possible values - are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> - and <emphasis>disabled</emphasis>. + <para>This controls whether the client is allowed or required to use SMB1 and SMB2 signing. Possible values + are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> + and <emphasis>disabled</emphasis>. </para> - <para>When set to auto, SMB signing is offered, but not enforced. - When set to mandatory, SMB signing is required and if set - to disabled, SMB signing is not offered either.</para> + <para>When set to auto, SMB1 signing is offered, but not enforced. + When set to mandatory, SMB1 signing is required and if set + to disabled, SMB signing is not offered either.</para> + + <para>For the SMB2 protocol, by design, signing cannot be disabled. In the case + where SMB2 is negotiated, if this parameter is set to <emphasis>disabled</emphasis>, + it will be treated as <emphasis>auto</emphasis>. Setting it to <emphasis>mandatory</emphasis> + will still require SMB2 clients to use signing.</para> </description> <value type="default">Disabled</value> |