docs: deprecate "client use spnego"

This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific
authentication options for possible removal.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/docs-xml/smbdotconf/protocol/clientusespnego.xml b/docs-xml/smbdotconf/protocol/clientusespnego.xml
index b2f3b1257fba653b2db09cb201f9c3aae2fdcd00..2d45f912f17982a887b690ad789d59d6c18ac97e 100644 (file)
--- a/docs-xml/smbdotconf/protocol/clientusespnego.xml
+++ b/docs-xml/smbdotconf/protocol/clientusespnego.xml
@@ -1,8 +1,16 @@
 <samba:parameter name="client use spnego"
                  context="G"
                  type="boolean"
+                deprecated="1"
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
+    <para>This parameter has been deprecated since Samba 4.13 and
+    support for NTLMv2, NTLM and LanMan authentication outside NTLMSSP
+    will be removed in a future Samba release.</para>
+    <para>That is, in the future, the current default of
+    <command>client use spnego = yes</command>
+    will be the enforced behaviour.</para>
+
     <para> This variable controls whether Samba clients will try 
     to use Simple and Protected NEGOciation (as specified by rfc2478) with 
     supporting servers (including WindowsXP, Windows2000 and Samba