<samba:parameter name="client schannel"
                 context="G"
                 type="enum"
                 enumlist="enum_bool_auto"
                 deprecated="1"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>

    <para>
	This option is deprecated with Samba 4.8 and will be removed in future.
	At the same time the default changed to yes, which will be the
	hardcoded behavior in future.
    </para>

    <para>
    This controls whether the client offers or even demands the use of the netlogon schannel.
    <smbconfoption name="client schannel">no</smbconfoption> does not offer the schannel, 
    <smbconfoption name="client schannel">auto</smbconfoption> offers the schannel but does not
    enforce it, and <smbconfoption name="client schannel">yes</smbconfoption> denies access 
    if the server is not able to speak netlogon schannel. 
    </para>

    <para>Note that for active directory domains this is hardcoded to
    <smbconfoption name="client schannel">yes</smbconfoption>.</para>

    <para>This option yields precedence to the <smbconfoption name="require strong key"/> option.</para>
</description>
<value type="default">yes</value>
<value type="example">auto</value>
</samba:parameter>
