← Back to branch summary

~zulcss/samba/server-dailies-3.4

« back to all changes in this revision

Viewing changes to docs-xml/smbdotconf/security/clientntlmv2auth.xml

  • Committer: Chuck Short
  • Date: 2010-09-28 20:38:39 UTC
  • Revision ID: zulcss@ubuntu.com-20100928203839-pgjulytsi9ue63x1
Initial version

Show diffs side-by-side

added added

removed removed

Lines of Context:
docs-xml/smbdotconf/security/clientntlmv2auth.xml
 
1
<samba:parameter name="client ntlmv2 auth"
 
2
                 context="G"
 
3
                                 type="boolean"
 
4
                 advanced="1" developer="1"
 
5
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 
6
<description>
 
7
    <para>This parameter determines whether or not <citerefentry><refentrytitle>smbclient</refentrytitle>
 
8
    <manvolnum>8</manvolnum></citerefentry> will attempt to
 
9
    authenticate itself to servers using the NTLMv2 encrypted password
 
10
    response.</para>
 
11
 
 
12
    <para>If enabled, only an NTLMv2 and LMv2 response (both much more
 
13
    secure than earlier versions) will be sent.  Many servers
 
14
    (including NT4 &lt; SP4, Win9x and Samba 2.2) are not compatible with
 
15
    NTLMv2.  </para>
 
16
 
 
17
    <para>Similarly, if enabled, NTLMv1, <command
 
18
    moreinfo="none">client lanman auth</command> and <command
 
19
    moreinfo="none">client plaintext auth</command>
 
20
    authentication will be disabled.  This also disables share-level 
 
21
    authentication. </para>
 
22
 
 
23
    <para>If disabled, an NTLM response (and possibly a LANMAN response)
 
24
    will be sent by the client, depending on the value of <command
 
25
    moreinfo="none">client lanman auth</command>.  </para>
 
26
 
 
27
    <para>Note that some sites (particularly
 
28
    those following 'best practice' security polices) only allow NTLMv2
 
29
        responses, and not the weaker LM or NTLM.</para>
 
30
</description>
 
31
<value type="default">no</value>
 
32
</samba:parameter>