summaryrefslogtreecommitdiff
path: root/docs-xml/smbdotconf/security/tlspriority.xml
blob: 6d1f0dcb91275c487f380e6ed4ebd9dde23b4b20 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<samba:parameter name="tls priority"
                 type="string"
                 context="G"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
   <para>This option can be set to a string describing the TLS protocols
   to be supported in the parts of Samba that use GnuTLS, specifically
   the AD DC.
   </para>
   <para>The string is appended to the default priority list of GnuTLS.</para>
   <para>The valid options are described in the
   <ulink url="http://gnutls.org/manual/html_node/Priority-Strings.html">GNUTLS
   Priority-Strings documentation at http://gnutls.org/manual/html_node/Priority-Strings.html</ulink>
   </para>
   <para>By default it will try to find a config file matching "SAMBA", but if
   that does not exist will use the entry for "SYSTEM" and last fallback to
   NORMAL. In all cases the SSL3.0 protocol will be disabled.</para>
 </description>

 <value type="default">@SAMBA,SYSTEM,NORMAL:!-VERS-SSL3.0</value>
</samba:parameter>