|
Last change
on this file was 862, checked in by Silvan Scherrer, 11 years ago |
|
Samba Server: update trunk to 3.6.23
|
|
File size:
1.3 KB
|
| Line | |
|---|
| 1 | <samba:parameter name="client use spnego principal"
|
|---|
| 2 | context="G"
|
|---|
| 3 | type="boolean"
|
|---|
| 4 | advanced="1" developer="1"
|
|---|
| 5 | xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|---|
| 6 | <description>
|
|---|
| 7 | <para>This parameter determines whether or not
|
|---|
| 8 | <citerefentry><refentrytitle>smbclient</refentrytitle>
|
|---|
| 9 | <manvolnum>8</manvolnum></citerefentry> and other samba components
|
|---|
| 10 | acting as a client will attempt to use the server-supplied
|
|---|
| 11 | principal sometimes given in the SPNEGO exchange.</para>
|
|---|
| 12 |
|
|---|
| 13 | <para>If enabled, Samba can attempt to use Kerberos to contact
|
|---|
| 14 | servers known only by IP address. Kerberos relies on names, so
|
|---|
| 15 | ordinarily cannot function in this situation. </para>
|
|---|
| 16 |
|
|---|
| 17 | <para>If disabled, Samba will use the name used to look up the
|
|---|
| 18 | server when asking the KDC for a ticket. This avoids situations
|
|---|
| 19 | where a server may impersonate another, soliciting authentication
|
|---|
| 20 | as one principal while being known on the network as another.
|
|---|
| 21 | </para>
|
|---|
| 22 |
|
|---|
| 23 | <para>Note that Windows XP SP2 and later versions already follow
|
|---|
| 24 | this behaviour, and Windows Vista and later servers no longer
|
|---|
| 25 | supply this 'rfc4178 hint' principal on the server side.</para>
|
|---|
| 26 | </description>
|
|---|
| 27 | <value type="default">no</value>
|
|---|
| 28 | </samba:parameter>
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
