summaryrefslogtreecommitdiff
path: root/docs-xml/smbdotconf/logon/rejectmd5clients.xml
blob: 04a5b4da09d0156cd0a48503b47b0128bda05909 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<samba:parameter name="reject md5 clients"
                 context="G"
                 type="boolean"
                 advanced="1"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
	<para>This option controls whether the netlogon server (currently
	only in 'active directory domain controller' mode), will
	reject clients which does not support NETLOGON_NEG_SUPPORTS_AES.</para>

	<para>You can set this to yes if all domain members support aes.
	This will prevent downgrade attacks.</para>

	<para>This option takes precedence to the 'allow nt4 crypto' option.</para>
</description>

<value type="default">no</value>
</samba:parameter>