<samba:parameter name="client use spnego"
                 context="G"
                 type="boolean"
                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
<description>
    <para> This variable controls whether Samba clients will try 
    to use Simple and Protected NEGOciation (as specified by rfc2478) with 
    supporting servers (including WindowsXP, Windows2000 and Samba
    3.0) to agree upon an authentication
    mechanism.  This enables Kerberos authentication in particular.</para>

    <para>When <smbconfoption name="client NTLMv2 auth"/> is also set to
    <constant>yes</constant> extended security (SPNEGO) is required
    in order to use NTLMv2 only within NTLMSSP. This behavior was
    introduced with the patches for CVE-2016-2111.</para>
</description>

<value type="default">yes</value>
</samba:parameter>
