Does "client ldap sasl wrapping = sign" specify the min that is allowed or the max we can deal with?

[Richard Sharpe]

Hi,

In looking at the parameter "ldap sasl wrapping" I see the following:

"The client ldap sasl wrapping defines whether ldap traffic will be
signed or signed and encrypted (sealed). Possible values are plain,
sign and seal. "

Is the value specified the minumum that Samba will use, or the max
that it can use?

That is, if I specify "seal" will Samba/Winbindd still work if the ADS
servers use plain or seal?

-- 
Regards,
Richard Sharpe