Document the fact this doesn't work with "security=server".

Fixes bug #4475.
Jeremy.

diff --git a/docs/smbdotconf/security/maptoguest.xml b/docs/smbdotconf/security/maptoguest.xml
index 2dc6605b396709650352b654ee8ad28e31382d85..0f680ae71c4561b800975fe2f0da1dc98865c0c0 100644 (file)
--- a/docs/smbdotconf/security/maptoguest.xml
+++ b/docs/smbdotconf/security/maptoguest.xml
@@ -6,8 +6,8 @@
 <description>
     <para>This parameter is only useful in <smbconfoption name="SECURITY">
     security</smbconfoption> modes other than <parameter moreinfo="none">security = share</parameter> 
-    - i.e. <constant>user</constant>, <constant>server</constant>, 
-    and <constant>domain</constant>.</para>
+    and <parameter moreinfo="none">security = server</parameter>
+    - i.e. <constant>user</constant>, and <constant>domain</constant>.</para>
 
     <para>This parameter can take four different values, which tell
     <citerefentry><refentrytitle>smbd</refentrytitle>
@@ -56,11 +56,15 @@
 
     <para>Note that this parameter is needed to set up &quot;Guest&quot; 
     share services when using <parameter moreinfo="none">security</parameter> modes other than 
-    share. This is because in these modes the name of the resource being
+    share and server. This is because in these modes the name of the resource being
     requested is <emphasis>not</emphasis> sent to the server until after 
     the server has successfully authenticated the client so the server 
     cannot make authentication decisions at the correct time (connection 
-    to the share) for &quot;Guest&quot; shares.</para>
+    to the share) for &quot;Guest&quot; shares. This parameter is not useful with
+    <parameter moreinfo="none">security = server</parameter> as in this security mode
+    no information is returned about whether a user logon failed due to
+    a bad username or bad password, the same error is returned from a modern server
+    in both cases.</para>
 
     <para>For people familiar with the older Samba releases, this 
     parameter maps to the old compile-time setting of the <constant>