This option specifies whether the client is required to have a certificate. The certificates listed with either the
ssl
CA
certDir
or the
ssl
CA
certFile
will be searched to confirm that the client has a valid certificate and is authorized to connect to the Samba server. The value of this option is a simple boolean. For example:
[global]
ssl = yes
ssl hosts = 192.168.220.
ssl CA certFile = /usr/local/samba/cert/certFile
ssl require clientcert = yes
We recommend that you require certificates from all clients that could be connecting to the Samba server. The default value for this option is
no
.