|
Last change
on this file was 988, checked in by Silvan Scherrer, 9 years ago |
|
Samba Server: update vendor to version 4.4.3
|
|
File size:
1.2 KB
|
| Line | |
|---|
| 1 | <samba:parameter name="client lanman auth"
|
|---|
| 2 | context="G"
|
|---|
| 3 | type="boolean"
|
|---|
| 4 | xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
|
|---|
| 5 | <description>
|
|---|
| 6 | <para>This parameter determines whether or not <citerefentry><refentrytitle>smbclient</refentrytitle>
|
|---|
| 7 | <manvolnum>8</manvolnum></citerefentry> and other samba client
|
|---|
| 8 | tools will attempt to authenticate itself to servers using the
|
|---|
| 9 | weaker LANMAN password hash. If disabled, only server which support NT
|
|---|
| 10 | password hashes (e.g. Windows NT/2000, Samba, etc... but not
|
|---|
| 11 | Windows 95/98) will be able to be connected from the Samba client.</para>
|
|---|
| 12 |
|
|---|
| 13 | <para>The LANMAN encrypted response is easily broken, due to its
|
|---|
| 14 | case-insensitive nature, and the choice of algorithm. Clients
|
|---|
| 15 | without Windows 95/98 servers are advised to disable
|
|---|
| 16 | this option. </para>
|
|---|
| 17 |
|
|---|
| 18 | <para>Disabling this option will also disable the <command
|
|---|
| 19 | moreinfo="none">client plaintext auth</command> option.</para>
|
|---|
| 20 |
|
|---|
| 21 | <para>Likewise, if the <command moreinfo="none">client ntlmv2
|
|---|
| 22 | auth</command> parameter is enabled, then only NTLMv2 logins will be
|
|---|
| 23 | attempted.</para>
|
|---|
| 24 | </description>
|
|---|
| 25 |
|
|---|
| 26 | <value type="default">no</value>
|
|---|
| 27 | </samba:parameter>
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
