diff options
| author | Stefan Metzmacher <metze@samba.org> | 2021-07-13 21:26:19 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2021-07-15 00:06:31 +0000 |
| commit | be71039be4edf90f28704026aa3d16da0848231c (patch) | |
| tree | 626c4aaa28158c42309eff275ad78a2209e67231 /lib/param | |
| parent | 4a61410f602c3c5cac634b3a18a29378b49281de (diff) | |
| download | samba-be71039be4edf90f28704026aa3d16da0848231c.tar.gz | |
docs-xml: add "client/server smb3 signing algorithms" options
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Diffstat (limited to 'lib/param')
| -rw-r--r-- | lib/param/loadparm.c | 7 | ||||
| -rw-r--r-- | lib/param/loadparm.h | 1 |
2 files changed, 8 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c index 6bfbe1077f6..59e749d9d46 100644 --- a/lib/param/loadparm.c +++ b/lib/param/loadparm.c @@ -2981,6 +2981,13 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx) "yes"); lpcfg_do_global_parameter(lp_ctx, + "client smb3 signing algorithms", + DEFAULT_SMB3_SIGNING_ALGORITHMS); + lpcfg_do_global_parameter(lp_ctx, + "server smb3 signing algorithms", + DEFAULT_SMB3_SIGNING_ALGORITHMS); + + lpcfg_do_global_parameter(lp_ctx, "client smb3 encryption algorithms", DEFAULT_SMB3_ENCRYPTION_ALGORITHMS); lpcfg_do_global_parameter(lp_ctx, diff --git a/lib/param/loadparm.h b/lib/param/loadparm.h index 0f2af4f4167..cae1a2c7de3 100644 --- a/lib/param/loadparm.h +++ b/lib/param/loadparm.h @@ -285,6 +285,7 @@ enum samba_weak_crypto { #define DEFAULT_SMB2_MAX_TRANSACT (8*1024*1024) #define DEFAULT_SMB2_MAX_CREDITS 8192 +#define DEFAULT_SMB3_SIGNING_ALGORITHMS "aes-128-cmac hmac-sha-256" #define DEFAULT_SMB3_ENCRYPTION_ALGORITHMS "aes-128-gcm aes-128-ccm aes-256-gcm aes-256-ccm" #define LOADPARM_EXTRA_LOCALS \ |