From 1b85db57e53533ce14beb79f6d949a08f6ef9f91 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 5 Sep 2019 16:53:20 +1200 Subject: [PATCH] docs: deprecate "client use spnego" This parameter is appicable only to SMBv1 and we are deprecating SMBv1 specific authentication options for possible removal. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14460 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- docs-xml/smbdotconf/protocol/clientusespnego.xml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs-xml/smbdotconf/protocol/clientusespnego.xml b/docs-xml/smbdotconf/protocol/clientusespnego.xml index b2f3b1257fb..2d45f912f17 100644 --- a/docs-xml/smbdotconf/protocol/clientusespnego.xml +++ b/docs-xml/smbdotconf/protocol/clientusespnego.xml @@ -1,8 +1,16 @@ + This parameter has been deprecated since Samba 4.13 and + support for NTLMv2, NTLM and LanMan authentication outside NTLMSSP + will be removed in a future Samba release. + That is, in the future, the current default of + client use spnego = yes + will be the enforced behaviour. + This variable controls whether Samba clients will try to use Simple and Protected NEGOciation (as specified by rfc2478) with supporting servers (including WindowsXP, Windows2000 and Samba -- 2.47.2