[PATCH] lib/param: Consolidate code to enable smb signing on the server, always enable on AD DC

[David Disseldorp]

Hi Andrew,

On Mon, 07 Apr 2014 11:11:10 +1200, Andrew Bartlett wrote:
...
> I'm wondering if this is the kind of change we can make during the 4.0
> and 4.1 series?  It would be good to be able to rely on SMB signing
> against AD DC servers, but unless we apply this patch Samba 4.0 and 4.1
> will be exceptions to that unless SMB2 is used. 
> 
> But on the flip side, it changes default values during a release train,
> and I know that is something we generally don't do.

I don't think the change of default is suitable for the 4.0 and 4.1
maintenance branches. Especially given that this change doesn't
explicitly address a bug.

Cheers, David