diff options
| author | Stefan Metzmacher <metze@samba.org> | 2016-03-15 21:02:34 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2016-04-12 19:25:24 +0200 |
| commit | a1900b5bd6722900b42d4580fd47038e8cf5b3ca (patch) | |
| tree | ab042a054b780ee6037122edd5b3e2215e6c37b5 /docs-xml | |
| parent | 6cd48add111a6655791226593cc28ac9d2596602 (diff) | |
| download | samba-a1900b5bd6722900b42d4580fd47038e8cf5b3ca.tar.gz | |
CVE-2016-2111: docs-xml: add "raw NTLMv2 auth" defaulting to "yes"
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11749
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'docs-xml')
| -rw-r--r-- | docs-xml/smbdotconf/security/rawntlmv2auth.xml | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/docs-xml/smbdotconf/security/rawntlmv2auth.xml b/docs-xml/smbdotconf/security/rawntlmv2auth.xml new file mode 100644 index 00000000000..ef262977a0c --- /dev/null +++ b/docs-xml/smbdotconf/security/rawntlmv2auth.xml @@ -0,0 +1,20 @@ +<samba:parameter name="raw NTLMv2 auth" + context="G" + type="boolean" + xmlns:samba="http://www.samba.org/samba/DTD/samba-doc"> +<description> + <para>This parameter determines whether or not <citerefentry><refentrytitle>smbd</refentrytitle> + <manvolnum>8</manvolnum></citerefentry> will allow SMB1 clients without + extended security (without SPNEGO) to use NTLMv2 authentication.</para> + + <para>If this option, <command moreinfo="none">lanman auth</command> + and <command moreinfo="none">ntlm auth</command> are all disabled, + then only clients with SPNEGO support will be permitted. + That means NTLMv2 is only supported within NTLMSSP.</para> + + <para>Note that the default will change to "no" with Samba 4.5.</para> +</description> + +<value type="default">yes</value> +<value type="example">no</value> +</samba:parameter> |