1 | <?xml version="1.0" encoding="iso-8859-1"?>
|
---|
2 | <!DOCTYPE refentry PUBLIC "-//Samba-Team//DTD DocBook V4.2-Based Variant V1.0//EN" "http://www.samba.org/samba/DTD/samba-doc">
|
---|
3 | <refentry id="vfs_snapper.8">
|
---|
4 |
|
---|
5 | <refmeta>
|
---|
6 | <refentrytitle>vfs_snapper</refentrytitle>
|
---|
7 | <manvolnum>8</manvolnum>
|
---|
8 | <refmiscinfo class="source">Samba</refmiscinfo>
|
---|
9 | <refmiscinfo class="manual">System Administration tools</refmiscinfo>
|
---|
10 | <refmiscinfo class="version">4.4</refmiscinfo>
|
---|
11 | </refmeta>
|
---|
12 |
|
---|
13 |
|
---|
14 | <refnamediv>
|
---|
15 | <refname>vfs_snapper</refname>
|
---|
16 | <refpurpose>
|
---|
17 | Expose snapshots managed by snapper as shadow-copies
|
---|
18 | </refpurpose>
|
---|
19 | </refnamediv>
|
---|
20 |
|
---|
21 | <refsynopsisdiv>
|
---|
22 | <cmdsynopsis>
|
---|
23 | <command>vfs objects = snapper</command>
|
---|
24 | </cmdsynopsis>
|
---|
25 | </refsynopsisdiv>
|
---|
26 |
|
---|
27 | <refsect1>
|
---|
28 | <title>DESCRIPTION</title>
|
---|
29 |
|
---|
30 | <para>This VFS module is part of the
|
---|
31 | <citerefentry><refentrytitle>samba</refentrytitle>
|
---|
32 | <manvolnum>8</manvolnum></citerefentry> suite.</para>
|
---|
33 |
|
---|
34 | <para>
|
---|
35 | The <command>vfs_snapper</command> VFS module exposes snapshots
|
---|
36 | managed by snapper for use by Samba. This provides the ability
|
---|
37 | for remote SMB clients to access shadow-copies via Windows
|
---|
38 | Explorer using the "previous versions" dialog.
|
---|
39 | </para>
|
---|
40 |
|
---|
41 | <para>
|
---|
42 | Snapshots can also be created and remove remotely, using the
|
---|
43 | File Server Remote VSS Protocol (FSRVP). Snapshot creation and
|
---|
44 | deletion requests are forwarded to snapper via DBus.
|
---|
45 | </para>
|
---|
46 |
|
---|
47 | <para>
|
---|
48 | This module is stackable.
|
---|
49 | </para>
|
---|
50 | </refsect1>
|
---|
51 |
|
---|
52 | <refsect1>
|
---|
53 | <title>CONFIGURATION</title>
|
---|
54 |
|
---|
55 | <para>
|
---|
56 | The underlying share path must have a corresponding snapper
|
---|
57 | configuration file. The snapshot directory tree must allow
|
---|
58 | access for relavent users.
|
---|
59 | </para>
|
---|
60 |
|
---|
61 | <programlisting>
|
---|
62 | <smbconfsection name="[share]"/>
|
---|
63 | <smbconfoption name="vfs objects">snapper</smbconfoption>
|
---|
64 | </programlisting>
|
---|
65 |
|
---|
66 | <para>
|
---|
67 | For remote snapshot creation and deletion, Samba's FSRVP
|
---|
68 | server must be configured in the [global] section:
|
---|
69 | </para>
|
---|
70 |
|
---|
71 | <programlisting>
|
---|
72 | <smbconfsection name="[global]"/>
|
---|
73 | <smbconfoption name="rpc_daemon:fssd">fork</smbconfoption>
|
---|
74 | <smbconfoption name="registry shares">yes</smbconfoption>
|
---|
75 | <smbconfoption name="include">registry</smbconfoption>
|
---|
76 | </programlisting>
|
---|
77 | </refsect1>
|
---|
78 |
|
---|
79 | <refsect1>
|
---|
80 | <title>PERMISSIONS</title>
|
---|
81 | <para>
|
---|
82 | Snapper stores snapshots under a .snapshots subdirectory. This
|
---|
83 | directory must permit traversal for any users wishing to access
|
---|
84 | snapshots via the Windows Explorer previous versions dialog.
|
---|
85 | By default, traversal is forbidden for all non-root users.
|
---|
86 | Additionally, users must be granted permission to list snapshots
|
---|
87 | managed by snapper, via snapper's ALLOW_USERS or ALLOW_GROUPS
|
---|
88 | options. Snapper can grant these users and groups .snapshots
|
---|
89 | traversal access automatically via the SYNC_ACL option.
|
---|
90 | </para>
|
---|
91 | <para>
|
---|
92 | Remote snapshot creation and deletion is only permitted by Samba
|
---|
93 | for Active Directory administrators, backup operators, or users
|
---|
94 | explicitly granted SeBackupPrivilege. Snapper must also permit
|
---|
95 | creation and deletion for the appropriate user, via snapper's
|
---|
96 | ALLOW_USERS or ALLOW_GROUPS options.
|
---|
97 | </para>
|
---|
98 | <para>
|
---|
99 | The DiskShadow.exe FSRVP client initially authenticates as the
|
---|
100 | Active Directory computer account. This account must therefore
|
---|
101 | be granted the same permissions as the user account issuing the
|
---|
102 | snapshot creation and deletion requests.
|
---|
103 | </para>
|
---|
104 | </refsect1>
|
---|
105 |
|
---|
106 | <refsect1>
|
---|
107 | <title>VERSION</title>
|
---|
108 |
|
---|
109 | <para>
|
---|
110 | This man page is correct for version 4.3.0 of the Samba suite.
|
---|
111 | </para>
|
---|
112 | </refsect1>
|
---|
113 |
|
---|
114 | <refsect1>
|
---|
115 | <title>AUTHOR</title>
|
---|
116 |
|
---|
117 | <para>The original Samba software and related utilities
|
---|
118 | were created by Andrew Tridgell. Samba is now developed
|
---|
119 | by the Samba Team as an Open Source project similar
|
---|
120 | to the way the Linux kernel is developed.</para>
|
---|
121 |
|
---|
122 | </refsect1>
|
---|
123 |
|
---|
124 | </refentry>
|
---|