Changeset 134 for branches/samba-3.0/docs/htmldocs/manpages
- Timestamp:
- May 23, 2008, 6:56:41 AM (17 years ago)
- Location:
- branches/samba-3.0/docs/htmldocs/manpages
- Files:
-
- 57 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/htmldocs/manpages/eventlogadm.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>eventlogadm</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="eventlogadm.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>eventlogadm — push records into the Samba event log store</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">eventlogadm</code> [<code class="option">-d</code>] [<code class="option">-h</code>] <code class="option">-o</code>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>eventlogadm</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="eventlogadm.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>eventlogadm — push records into the Samba event log store</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">eventlogadm</code> [<code class="option">-d</code>] [<code class="option">-h</code>] <code class="option">-o</code> 2 2 <code class="literal">addsource</code> 3 3 <em class="replaceable"><code>EVENTLOG</code></em> … … 7 7 <code class="literal">write</code> 8 8 <em class="replaceable"><code>EVENTLOG</code></em> 9 </p></div></div><div class="refsect1" lang="en"><a name="id2 59595"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">eventlogadm</code> is a filter that accepts9 </p></div></div><div class="refsect1" lang="en"><a name="id282776"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">eventlogadm</code> is a filter that accepts 10 10 formatted event log records on standard input and writes them 11 11 to the Samba event log store. Windows client can then manipulate 12 these record using the usual administration tools.</p></div><div class="refsect1" lang="en"><a name="id2 59373"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term"><code class="option">-d</code></span></dt><dd><p>12 these record using the usual administration tools.</p></div><div class="refsect1" lang="en"><a name="id283360"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term"><code class="option">-d</code></span></dt><dd><p> 13 13 The <code class="literal">-d</code> option causes <code class="literal">eventlogadm</code> to emit debugging 14 14 information. … … 32 32 </p></dd><dt><span class="term"><code class="option">-h</code></span></dt><dd><p> 33 33 Print usage information. 34 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60402"></a><h2>EVENTLOG RECORD FORMAT</h2><p>For the write operation, <code class="literal">eventlogadm</code>34 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282924"></a><h2>EVENTLOG RECORD FORMAT</h2><p>For the write operation, <code class="literal">eventlogadm</code> 35 35 expects to be able to read structured records from standard 36 36 input. These records are a sequence of lines, with the record key … … 81 81 </p></li><li><p> 82 82 <code class="literal">DAT</code> - This field should be left unset. 83 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 00454"></a><h2>EXAMPLES</h2><p>An example of the record format accepted by <code class="literal">eventlogadm</code>:</p><pre class="programlisting">83 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id324474"></a><h2>EXAMPLES</h2><p>An example of the record format accepted by <code class="literal">eventlogadm</code>:</p><pre class="programlisting"> 84 84 LEN: 0 85 85 RS1: 1699505740 … … 87 87 TMG: 1128631322 88 88 TMW: 1128631322 89 EID: 1000 89 EID: 1000 90 90 ETP: INFO 91 ECT: 0 91 ECT: 0 92 92 RS2: 0 93 93 CRN: 0 … … 96 96 SRN: dmlinux 97 97 STR: (root) CMD ( rm -f /var/spool/cron/lastrun/cron.hourly) 98 DAT: 98 DAT: 99 99 </pre><p>Set up an eventlog source, specifying a message file DLL:</p><pre class="programlisting"> 100 100 eventlogadm -o addsource Application MyApplication | \\ … … 104 104 my_program_to_parse_into_eventlog_records | \\ 105 105 eventlogadm SystemLogEvents 106 </pre></div><div class="refsect1" lang="en"><a name="id3 00495"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300505"></a><h2>AUTHOR</h2><p> The original Samba software and related utilities were106 </pre></div><div class="refsect1" lang="en"><a name="id324515"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324525"></a><h2>AUTHOR</h2><p> The original Samba software and related utilities were 107 107 created by Andrew Tridgell. Samba is now developed by the 108 108 Samba Team as an Open Source project similar to the way the -
branches/samba-3.0/docs/htmldocs/manpages/findsmb.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>findsmb</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="findsmb.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>findsmb — list info about machines that respond to SMB2 name queries on a subnet</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">findsmb</code> [subnet broadcast address]</p></div></div><div class="refsect1" lang="en"><a name="id2 59298"></a><h2>DESCRIPTION</h2><p>This perl script is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>findsmb</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="findsmb.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>findsmb — list info about machines that respond to SMB 2 name queries on a subnet</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">findsmb</code> [subnet broadcast address]</p></div></div><div class="refsect1" lang="en"><a name="id283737"></a><h2>DESCRIPTION</h2><p>This perl script is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> 3 3 suite.</p><p><code class="literal">findsmb</code> is a perl script that 4 4 prints out several pieces of information about machines 5 5 on a subnet that respond to SMB name query requests. 6 It uses <a href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>7 and <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>6 It uses <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a> 7 and <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a> 8 8 to obtain this information. 9 </p></div><div class="refsect1" lang="en"><a name="id2 59553"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>Controls whether <code class="literal">findsmb</code> takes9 </p></div><div class="refsect1" lang="en"><a name="id282735"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>Controls whether <code class="literal">findsmb</code> takes 10 10 bugs in Windows95 into account when trying to find a Netbios name 11 11 registered of the remote machine. This option is disabled by default 12 12 because it is specific to Windows 95 and Windows 95 machines only. 13 If set, <a href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>13 If set, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a> 14 14 will be called with <code class="constant">-B</code> option.</p></dd><dt><span class="term">subnet broadcast address</span></dt><dd><p>Without this option, <code class="literal">findsmb 15 15 </code> will probe the subnet of the machine where 16 <a href="findsmb.1.html"><span class="citerefentry"><span class="refentrytitle">findsmb</span>(1)</span></a>16 <a class="citerefentry" href="findsmb.1.html"><span class="citerefentry"><span class="refentrytitle">findsmb</span>(1)</span></a> 17 17 is run. This value is passed to 18 <a href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>19 as part of the <code class="constant">-B</code> option.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59376"></a><h2>EXAMPLES</h2><p>The output of <code class="literal">findsmb</code> lists the following18 <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a> 19 as part of the <code class="constant">-B</code> option.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283365"></a><h2>EXAMPLES</h2><p>The output of <code class="literal">findsmb</code> lists the following 20 20 information for all machines that respond to the initial 21 21 <code class="literal">nmblookup</code> for any name: IP address, NetBIOS name, … … 28 28 not show any information about the operating system or server 29 29 version.</p><p>The command with <code class="constant">-r</code> option 30 must be run on a system without <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> running.30 must be run on a system without <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> running. 31 31 32 32 If <code class="literal">nmbd</code> is running on the system, you will … … 49 49 192.168.35.93 FROGSTAR-PC [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager] 50 50 192.168.35.97 HERBNT1 *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0] 51 </pre></div><div class="refsect1" lang="en"><a name="id2 60385"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of52 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2 60395"></a><h2>SEE ALSO</h2><p><ahref="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>,53 <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, and <ahref="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>54 </p></div><div class="refsect1" lang="en"><a name="id2 60429"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities51 </pre></div><div class="refsect1" lang="en"><a name="id282901"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 52 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id282911"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, 53 <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, and <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a> 54 </p></div><div class="refsect1" lang="en"><a name="id282944"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 55 55 were created by Andrew Tridgell. Samba is now developed 56 56 by the Samba Team as an Open Source project similar 57 57 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 58 58 The man page sources were converted to YODL format (another 59 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">ftp://ftp.icce.rug.nl/pub/unix/</a>)59 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">ftp://ftp.icce.rug.nl/pub/unix/</a>) 60 60 and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for 61 61 Samba 2.2 was done by Gerald Carter. The conversion to DocBook -
branches/samba-3.0/docs/htmldocs/manpages/index.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title></title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article" lang="en"><div class="titlepage"><hr></div><div class="variablelist"><dl><dt><span class="term"><ahref="eventlogadm.8.html" target="_top">eventlogadm(8)</a></span></dt><dd><p>push records into the Samba event log store2 </p></dd><dt><span class="term"><a href="findsmb.1.html" target="_top">findsmb(1)</a></span></dt><dd><p>list info about machines that respond to SMB1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title></title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article" lang="en"><div class="titlepage"><hr></div><div class="variablelist"><dl><dt><span class="term"><a class="ulink" href="eventlogadm.8.html" target="_top">eventlogadm(8)</a></span></dt><dd><p>push records into the Samba event log store 2 </p></dd><dt><span class="term"><a class="ulink" href="findsmb.1.html" target="_top">findsmb(1)</a></span></dt><dd><p>list info about machines that respond to SMB 3 3 name queries on a subnet 4 </p></dd><dt><span class="term"><a href="idmap_ad.8.html" target="_top">idmap_ad(8)</a></span></dt><dd><p>Samba's idmap_ad Backend for Winbind 5 </p></dd><dt><span class="term"><a href="idmap_ldap.8.html" target="_top">idmap_ldap(8)</a></span></dt><dd><p>Samba's idmap_ldap Backend for Winbind 6 </p></dd><dt><span class="term"><a href="idmap_nss.8.html" target="_top">idmap_nss(8)</a></span></dt><dd><p>Samba's idmap_nss Backend for Winbind 7 </p></dd><dt><span class="term"><a href="idmap_rid.8.html" target="_top">idmap_rid(8)</a></span></dt><dd><p>Samba's idmap_rid Backend for Winbind 8 </p></dd><dt><span class="term"><a href="idmap_tdb.8.html" target="_top">idmap_tdb(8)</a></span></dt><dd><p>Samba's idmap_tdb Backend for Winbind 9 </p></dd><dt><span class="term"><a href="libsmbclient.7.html" target="_top">libsmbclient(7)</a></span></dt><dd><p>An extension library for browsers and that can be used as a generic browsing API. 10 </p></dd><dt><span class="term"><a href="lmhosts.5.html" target="_top">lmhosts(5)</a></span></dt><dd><p>The Samba NetBIOS hosts file 11 </p></dd><dt><span class="term"><a href="log2pcap.1.html" target="_top">log2pcap(1)</a></span></dt><dd><p>Extract network traces from Samba log files 12 </p></dd><dt><span class="term"><a href="mount.cifs.8.html" target="_top">mount.cifs(8)</a></span></dt><dd><p>mount using the Common Internet File System (CIFS) 13 </p></dd><dt><span class="term"><a href="net.8.html" target="_top">net(8)</a></span></dt><dd><p>Tool for administration of Samba and remote 4 </p></dd><dt><span class="term"><a class="ulink" href="idmap_ad.8.html" target="_top">idmap_ad(8)</a></span></dt><dd><p>Samba's idmap_ad Backend for Winbind 5 </p></dd><dt><span class="term"><a class="ulink" href="idmap_ldap.8.html" target="_top">idmap_ldap(8)</a></span></dt><dd><p>Samba's idmap_ldap Backend for Winbind 6 </p></dd><dt><span class="term"><a class="ulink" href="idmap_nss.8.html" target="_top">idmap_nss(8)</a></span></dt><dd><p>Samba's idmap_nss Backend for Winbind 7 </p></dd><dt><span class="term"><a class="ulink" href="idmap_rid.8.html" target="_top">idmap_rid(8)</a></span></dt><dd><p>Samba's idmap_rid Backend for Winbind 8 </p></dd><dt><span class="term"><a class="ulink" href="idmap_tdb.8.html" target="_top">idmap_tdb(8)</a></span></dt><dd><p>Samba's idmap_tdb Backend for Winbind 9 </p></dd><dt><span class="term"><a class="ulink" href="ldb.3.html" target="_top">ldb(3)</a></span></dt><dd><p>A light-weight database library 10 </p></dd><dt><span class="term"><a class="ulink" href="ldbadd.1.html" target="_top">ldbadd(1)</a></span></dt><dd><p>Command-line utility for adding records to an LDB 11 </p></dd><dt><span class="term"><a class="ulink" href="ldbdel.1.html" target="_top">ldbdel(1)</a></span></dt><dd><p>Command-line program for deleting LDB records 12 </p></dd><dt><span class="term"><a class="ulink" href="ldbedit.1.html" target="_top">ldbedit(1)</a></span></dt><dd><p>Edit LDB databases using your preferred editor 13 </p></dd><dt><span class="term"><a class="ulink" href="ldbmodify.1.html" target="_top">ldbmodify(1)</a></span></dt><dd><p>Modify records in a LDB database 14 </p></dd><dt><span class="term"><a class="ulink" href="ldbsearch.1.html" target="_top">ldbsearch(1)</a></span></dt><dd><p>Search for records in a LDB database 15 </p></dd><dt><span class="term"><a class="ulink" href="libsmbclient.7.html" target="_top">libsmbclient(7)</a></span></dt><dd><p>An extension library for browsers and that can be used as a generic browsing API. 16 </p></dd><dt><span class="term"><a class="ulink" href="lmhosts.5.html" target="_top">lmhosts(5)</a></span></dt><dd><p>The Samba NetBIOS hosts file 17 </p></dd><dt><span class="term"><a class="ulink" href="log2pcap.1.html" target="_top">log2pcap(1)</a></span></dt><dd><p>Extract network traces from Samba log files 18 </p></dd><dt><span class="term"><a class="ulink" href="mount.cifs.8.html" target="_top">mount.cifs(8)</a></span></dt><dd><p>mount using the Common Internet File System (CIFS) 19 </p></dd><dt><span class="term"><a class="ulink" href="net.8.html" target="_top">net(8)</a></span></dt><dd><p>Tool for administration of Samba and remote 14 20 CIFS servers. 15 21 16 </p></dd><dt><span class="term"><a href="nmbd.8.html" target="_top">nmbd(8)</a></span></dt><dd><p>NetBIOS name server to provide NetBIOS22 </p></dd><dt><span class="term"><a class="ulink" href="nmbd.8.html" target="_top">nmbd(8)</a></span></dt><dd><p>NetBIOS name server to provide NetBIOS 17 23 over IP naming services to clients 18 </p></dd><dt><span class="term"><a href="nmblookup.1.html" target="_top">nmblookup(1)</a></span></dt><dd><p>NetBIOS over TCP/IP client used to lookup NetBIOS24 </p></dd><dt><span class="term"><a class="ulink" href="nmblookup.1.html" target="_top">nmblookup(1)</a></span></dt><dd><p>NetBIOS over TCP/IP client used to lookup NetBIOS 19 25 names 20 </p></dd><dt><span class="term"><a href="ntlm_auth.1.html" target="_top">ntlm_auth(1)</a></span></dt><dd><p>tool to allow external access to Winbind's NTLM authentication function21 </p></dd><dt><span class="term"><a href="pam_winbind.7.html" target="_top">pam_winbind(7)</a></span></dt><dd><p>PAM module for Winbind22 </p></dd><dt><span class="term"><a href="pdbedit.8.html" target="_top">pdbedit(8)</a></span></dt><dd><p>manage the SAM database (Database of Samba Users)23 </p></dd><dt><span class="term"><a href="profiles.1.html" target="_top">profiles(1)</a></span></dt><dd><p>A utility to report and change SIDs in registry files26 </p></dd><dt><span class="term"><a class="ulink" href="ntlm_auth.1.html" target="_top">ntlm_auth(1)</a></span></dt><dd><p>tool to allow external access to Winbind's NTLM authentication function 27 </p></dd><dt><span class="term"><a class="ulink" href="pam_winbind.7.html" target="_top">pam_winbind(7)</a></span></dt><dd><p>PAM module for Winbind 28 </p></dd><dt><span class="term"><a class="ulink" href="pdbedit.8.html" target="_top">pdbedit(8)</a></span></dt><dd><p>manage the SAM database (Database of Samba Users) 29 </p></dd><dt><span class="term"><a class="ulink" href="profiles.1.html" target="_top">profiles(1)</a></span></dt><dd><p>A utility to report and change SIDs in registry files 24 30 25 </p></dd><dt><span class="term"><a href="rpcclient.1.html" target="_top">rpcclient(1)</a></span></dt><dd><p>tool for executing client side31 </p></dd><dt><span class="term"><a class="ulink" href="rpcclient.1.html" target="_top">rpcclient(1)</a></span></dt><dd><p>tool for executing client side 26 32 MS-RPC functions 27 </p></dd><dt><span class="term"><a href="samba.7.html" target="_top">samba(7)</a></span></dt><dd><p>A Windows SMB/CIFS fileserver for UNIX 28 </p></dd><dt><span class="term"><a href="smb.conf.5.html" target="_top">smb.conf(5)</a></span></dt><dd><p>The configuration file for the Samba suite 29 </p></dd><dt><span class="term"><a href="smbcacls.1.html" target="_top">smbcacls(1)</a></span></dt><dd><p>Set or get ACLs on an NT file or directory names 30 </p></dd><dt><span class="term"><a href="smbclient.1.html" target="_top">smbclient(1)</a></span></dt><dd><p>ftp-like client to access SMB/CIFS resources 33 </p></dd><dt><span class="term"><a class="ulink" href="samba.7.html" target="_top">samba(7)</a></span></dt><dd><p>A Windows SMB/CIFS fileserver for UNIX 34 </p></dd><dt><span class="term"><a class="ulink" href="smbcacls.1.html" target="_top">smbcacls(1)</a></span></dt><dd><p>Set or get ACLs on an NT file or directory names 35 </p></dd><dt><span class="term"><a class="ulink" href="smbclient.1.html" target="_top">smbclient(1)</a></span></dt><dd><p>ftp-like client to access SMB/CIFS resources 31 36 on servers 32 </p></dd><dt><span class="term"><a href="smbcontrol.1.html" target="_top">smbcontrol(1)</a></span></dt><dd><p>send messages to smbd, nmbd or winbindd processes 33 </p></dd><dt><span class="term"><a href="smbcquotas.1.html" target="_top">smbcquotas(1)</a></span></dt><dd><p>Set or get QUOTAs of NTFS 5 shares 34 </p></dd><dt><span class="term"><a href="smbd.8.html" target="_top">smbd(8)</a></span></dt><dd><p>server to provide SMB/CIFS services to clients 35 </p></dd><dt><span class="term"><a href="smbget.1.html" target="_top">smbget(1)</a></span></dt><dd><p>wget-like utility for download files over SMB 36 </p></dd><dt><span class="term"><a href="smbgetrc.5.html" target="_top">smbgetrc(5)</a></span></dt><dd><p>configuration file for smbget 37 </p></dd><dt><span class="term"><a href="smbmnt.8.html" target="_top">smbmnt(8)</a></span></dt><dd><p>helper utility for mounting SMB filesystems 38 </p></dd><dt><span class="term"><a href="smbmount.8.html" target="_top">smbmount(8)</a></span></dt><dd><p>mount an smbfs filesystem 39 </p></dd><dt><span class="term"><a href="smbpasswd.5.html" target="_top">smbpasswd(5)</a></span></dt><dd><p>The Samba encrypted password file 40 </p></dd><dt><span class="term"><a href="smbpasswd.8.html" target="_top">smbpasswd(8)</a></span></dt><dd><p>change a user's SMB password 41 </p></dd><dt><span class="term"><a href="smbsh.1.html" target="_top">smbsh(1)</a></span></dt><dd><p>Allows access to remote SMB shares 37 </p></dd><dt><span class="term"><a class="ulink" href="smb.conf.5.html" target="_top">smb.conf(5)</a></span></dt><dd><p>The configuration file for the Samba suite 38 </p></dd><dt><span class="term"><a class="ulink" href="smbcontrol.1.html" target="_top">smbcontrol(1)</a></span></dt><dd><p>send messages to smbd, nmbd or winbindd processes 39 </p></dd><dt><span class="term"><a class="ulink" href="smbcquotas.1.html" target="_top">smbcquotas(1)</a></span></dt><dd><p>Set or get QUOTAs of NTFS 5 shares 40 </p></dd><dt><span class="term"><a class="ulink" href="smbd.8.html" target="_top">smbd(8)</a></span></dt><dd><p>server to provide SMB/CIFS services to clients 41 </p></dd><dt><span class="term"><a class="ulink" href="smbget.1.html" target="_top">smbget(1)</a></span></dt><dd><p>wget-like utility for download files over SMB 42 </p></dd><dt><span class="term"><a class="ulink" href="smbgetrc.5.html" target="_top">smbgetrc(5)</a></span></dt><dd><p>configuration file for smbget 43 </p></dd><dt><span class="term"><a class="ulink" href="smbmnt.8.html" target="_top">smbmnt(8)</a></span></dt><dd><p>helper utility for mounting SMB filesystems 44 </p></dd><dt><span class="term"><a class="ulink" href="smbmount.8.html" target="_top">smbmount(8)</a></span></dt><dd><p>mount an smbfs filesystem 45 </p></dd><dt><span class="term"><a class="ulink" href="smbpasswd.5.html" target="_top">smbpasswd(5)</a></span></dt><dd><p>The Samba encrypted password file 46 </p></dd><dt><span class="term"><a class="ulink" href="smbpasswd.8.html" target="_top">smbpasswd(8)</a></span></dt><dd><p>change a user's SMB password 47 </p></dd><dt><span class="term"><a class="ulink" href="smbsh.1.html" target="_top">smbsh(1)</a></span></dt><dd><p>Allows access to remote SMB shares 42 48 using UNIX commands 43 </p></dd><dt><span class="term"><a href="smbspool.8.html" target="_top">smbspool(8)</a></span></dt><dd><p>send a print file to an SMB printer44 </p></dd><dt><span class="term"><a href="smbstatus.1.html" target="_top">smbstatus(1)</a></span></dt><dd><p>report on current Samba connections45 </p></dd><dt><span class="term"><a href="smbtar.1.html" target="_top">smbtar(1)</a></span></dt><dd><p>shell script for backing up SMB/CIFS shares49 </p></dd><dt><span class="term"><a class="ulink" href="smbspool.8.html" target="_top">smbspool(8)</a></span></dt><dd><p>send a print file to an SMB printer 50 </p></dd><dt><span class="term"><a class="ulink" href="smbstatus.1.html" target="_top">smbstatus(1)</a></span></dt><dd><p>report on current Samba connections 51 </p></dd><dt><span class="term"><a class="ulink" href="smbtar.1.html" target="_top">smbtar(1)</a></span></dt><dd><p>shell script for backing up SMB/CIFS shares 46 52 directly to UNIX tape drives 47 </p></dd><dt><span class="term"><a href="smbtree.1.html" target="_top">smbtree(1)</a></span></dt><dd><p>A text based smb network browser53 </p></dd><dt><span class="term"><a class="ulink" href="smbtree.1.html" target="_top">smbtree(1)</a></span></dt><dd><p>A text based smb network browser 48 54 49 </p></dd><dt><span class="term"><a href="smbumount.8.html" target="_top">smbumount(8)</a></span></dt><dd><p>smbfs umount for normal users50 </p></dd><dt><span class="term"><a href="swat.8.html" target="_top">swat(8)</a></span></dt><dd><p>Samba Web Administration Tool51 </p></dd><dt><span class="term"><a href="tdbbackup.8.html" target="_top">tdbbackup(8)</a></span></dt><dd><p>tool for backing up and for validating the integrity of samba .tdb files52 </p></dd><dt><span class="term"><a href="tdbdump.8.html" target="_top">tdbdump(8)</a></span></dt><dd><p>tool for printing the contents of a TDB file53 </p></dd><dt><span class="term"><a href="tdbtool.8.html" target="_top">tdbtool(8)</a></span></dt><dd><p>manipulate the contents TDB files54 </p></dd><dt><span class="term"><a href="testparm.1.html" target="_top">testparm(1)</a></span></dt><dd><p>check an smb.conf configuration file for55 </p></dd><dt><span class="term"><a class="ulink" href="smbumount.8.html" target="_top">smbumount(8)</a></span></dt><dd><p>smbfs umount for normal users 56 </p></dd><dt><span class="term"><a class="ulink" href="swat.8.html" target="_top">swat(8)</a></span></dt><dd><p>Samba Web Administration Tool 57 </p></dd><dt><span class="term"><a class="ulink" href="tdbbackup.8.html" target="_top">tdbbackup(8)</a></span></dt><dd><p>tool for backing up and for validating the integrity of samba .tdb files 58 </p></dd><dt><span class="term"><a class="ulink" href="tdbdump.8.html" target="_top">tdbdump(8)</a></span></dt><dd><p>tool for printing the contents of a TDB file 59 </p></dd><dt><span class="term"><a class="ulink" href="tdbtool.8.html" target="_top">tdbtool(8)</a></span></dt><dd><p>manipulate the contents TDB files 60 </p></dd><dt><span class="term"><a class="ulink" href="testparm.1.html" target="_top">testparm(1)</a></span></dt><dd><p>check an smb.conf configuration file for 55 61 internal correctness 56 </p></dd><dt><span class="term"><a href="umount.cifs.8.html" target="_top">umount.cifs(8)</a></span></dt><dd><p>for normal, non-root users, to unmount their own Common Internet File System (CIFS) mounts 57 </p></dd><dt><span class="term"><a href="vfs_audit.8.html" target="_top">vfs_audit(8)</a></span></dt><dd><p>record selected Samba VFS operations in the system log 58 </p></dd><dt><span class="term"><a href="vfs_cacheprime.8.html" target="_top">vfs_cacheprime(8)</a></span></dt><dd><p>prime the kernel file data cache 59 </p></dd><dt><span class="term"><a href="vfs_cap.8.html" target="_top">vfs_cap(8)</a></span></dt><dd><p>CAP encode filenames 60 </p></dd><dt><span class="term"><a href="vfs_catia.8.html" target="_top">vfs_catia(8)</a></span></dt><dd><p>translate illegal characters in Catia filenames 61 </p></dd><dt><span class="term"><a href="vfs_commit.8.html" target="_top">vfs_commit(8)</a></span></dt><dd><p>flush dirty data at specified intervals 62 </p></dd><dt><span class="term"><a href="vfs_default_quota.8.html" target="_top">vfs_default_quota(8)</a></span></dt><dd><p>store default quota records for Windows clients 63 </p></dd><dt><span class="term"><a href="vfs_extd_audit.8.html" target="_top">vfs_extd_audit(8)</a></span></dt><dd><p>record selected Samba VFS operations 64 </p></dd><dt><span class="term"><a href="vfs_fake_perms.8.html" target="_top">vfs_fake_perms(8)</a></span></dt><dd><p>enable read only Roaming Profiles 65 </p></dd><dt><span class="term"><a href="vfs_full_audit.8.html" target="_top">vfs_full_audit(8)</a></span></dt><dd><p>record Samba VFS operations in the system log 66 </p></dd><dt><span class="term"><a href="vfs_gpfs.8.html" target="_top">vfs_gpfs(8)</a></span></dt><dd><p>gpfs specific samba extensions like acls and prealloc 67 </p></dd><dt><span class="term"><a href="vfs_netatalk.8.html" target="_top">vfs_netatalk(8)</a></span></dt><dd><p>hide .AppleDouble files from CIFS clients 68 </p></dd><dt><span class="term"><a href="vfs_notify_fam.8.html" target="_top">vfs_notify_fam(8)</a></span></dt><dd><p>FAM support for file change notifications 69 </p></dd><dt><span class="term"><a href="vfs_prealloc.8.html" target="_top">vfs_prealloc(8)</a></span></dt><dd><p>preallocate matching files to a predetermined size 70 </p></dd><dt><span class="term"><a href="vfs_readahead.8.html" target="_top">vfs_readahead(8)</a></span></dt><dd><p>pre-load the kernel buffer cache 71 </p></dd><dt><span class="term"><a href="vfs_readonly.8.html" target="_top">vfs_readonly(8)</a></span></dt><dd><p>make a Samba share read only for a specified time period 72 </p></dd><dt><span class="term"><a href="vfs_recycle.8.html" target="_top">vfs_recycle(8)</a></span></dt><dd><p>Samba VFS recycle bin 73 </p></dd><dt><span class="term"><a href="vfs_shadow_copy.8.html" target="_top">vfs_shadow_copy(8)</a></span></dt><dd><p>Make a Samba share read only for a specified time period 74 </p></dd><dt><span class="term"><a href="vfstest.1.html" target="_top">vfstest(1)</a></span></dt><dd><p>tool for testing samba VFS modules 75 </p></dd><dt><span class="term"><a href="wbinfo.1.html" target="_top">wbinfo(1)</a></span></dt><dd><p>Query information from winbind daemon 76 </p></dd><dt><span class="term"><a href="winbindd.8.html" target="_top">winbindd(8)</a></span></dt><dd><p>Name Service Switch daemon for resolving names 62 </p></dd><dt><span class="term"><a class="ulink" href="umount.cifs.8.html" target="_top">umount.cifs(8)</a></span></dt><dd><p>for normal, non-root users, to unmount their own Common Internet File System (CIFS) mounts 63 </p></dd><dt><span class="term"><a class="ulink" href="vfs_audit.8.html" target="_top">vfs_audit(8)</a></span></dt><dd><p>record selected Samba VFS operations in the system log 64 </p></dd><dt><span class="term"><a class="ulink" href="vfs_cacheprime.8.html" target="_top">vfs_cacheprime(8)</a></span></dt><dd><p>prime the kernel file data cache 65 </p></dd><dt><span class="term"><a class="ulink" href="vfs_cap.8.html" target="_top">vfs_cap(8)</a></span></dt><dd><p>CAP encode filenames 66 </p></dd><dt><span class="term"><a class="ulink" href="vfs_catia.8.html" target="_top">vfs_catia(8)</a></span></dt><dd><p>translate illegal characters in Catia filenames 67 </p></dd><dt><span class="term"><a class="ulink" href="vfs_commit.8.html" target="_top">vfs_commit(8)</a></span></dt><dd><p>flush dirty data at specified intervals 68 </p></dd><dt><span class="term"><a class="ulink" href="vfs_default_quota.8.html" target="_top">vfs_default_quota(8)</a></span></dt><dd><p>store default quota records for Windows clients 69 </p></dd><dt><span class="term"><a class="ulink" href="vfs_extd_audit.8.html" target="_top">vfs_extd_audit(8)</a></span></dt><dd><p>record selected Samba VFS operations 70 </p></dd><dt><span class="term"><a class="ulink" href="vfs_fake_perms.8.html" target="_top">vfs_fake_perms(8)</a></span></dt><dd><p>enable read only Roaming Profiles 71 </p></dd><dt><span class="term"><a class="ulink" href="vfs_full_audit.8.html" target="_top">vfs_full_audit(8)</a></span></dt><dd><p>record Samba VFS operations in the system log 72 </p></dd><dt><span class="term"><a class="ulink" href="vfs_gpfs.8.html" target="_top">vfs_gpfs(8)</a></span></dt><dd><p>gpfs specific samba extensions like acls and prealloc 73 </p></dd><dt><span class="term"><a class="ulink" href="vfs_netatalk.8.html" target="_top">vfs_netatalk(8)</a></span></dt><dd><p>hide .AppleDouble files from CIFS clients 74 </p></dd><dt><span class="term"><a class="ulink" href="vfs_notify_fam.8.html" target="_top">vfs_notify_fam(8)</a></span></dt><dd><p>FAM support for file change notifications 75 </p></dd><dt><span class="term"><a class="ulink" href="vfs_prealloc.8.html" target="_top">vfs_prealloc(8)</a></span></dt><dd><p>preallocate matching files to a predetermined size 76 </p></dd><dt><span class="term"><a class="ulink" href="vfs_readahead.8.html" target="_top">vfs_readahead(8)</a></span></dt><dd><p>pre-load the kernel buffer cache 77 </p></dd><dt><span class="term"><a class="ulink" href="vfs_readonly.8.html" target="_top">vfs_readonly(8)</a></span></dt><dd><p>make a Samba share read only for a specified time period 78 </p></dd><dt><span class="term"><a class="ulink" href="vfs_recycle.8.html" target="_top">vfs_recycle(8)</a></span></dt><dd><p>Samba VFS recycle bin 79 </p></dd><dt><span class="term"><a class="ulink" href="vfs_shadow_copy.8.html" target="_top">vfs_shadow_copy(8)</a></span></dt><dd><p>Make a Samba share read only for a specified time period 80 </p></dd><dt><span class="term"><a class="ulink" href="vfstest.1.html" target="_top">vfstest(1)</a></span></dt><dd><p>tool for testing samba VFS modules 81 </p></dd><dt><span class="term"><a class="ulink" href="vfs_xattr_tdb.8.html" target="_top">vfs_xattr_tdb(8)</a></span></dt><dd><p>Save Extended Attributes (EAs) in a tdb file 82 </p></dd><dt><span class="term"><a class="ulink" href="wbinfo.1.html" target="_top">wbinfo(1)</a></span></dt><dd><p>Query information from winbind daemon 83 </p></dd><dt><span class="term"><a class="ulink" href="winbindd.8.html" target="_top">winbindd(8)</a></span></dt><dd><p>Name Service Switch daemon for resolving names 77 84 from NT servers 78 85 </p></dd></dl></div></div></body></html> -
branches/samba-3.0/docs/htmldocs/manpages/libsmbclient.7.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>libsmbclient</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="libsmbclient.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>libsmbclient — An extension library for browsers and that can be used as a generic browsing API.</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">Browser URL:</code><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>libsmbclient</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="libsmbclient.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>libsmbclient — An extension library for browsers and that can be used as a generic browsing API.</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">Browser URL:</code><p> 2 2 smb://[[[domain:]user[:password@]]server[/share[/path[/file]]]] [?options] 3 </p></p></div></div><div class="refsect1" lang="en"><a name="id2 59294"></a><h2>DESCRIPTION</h2><p>4 This tool is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.3 </p></p></div></div><div class="refsect1" lang="en"><a name="id283733"></a><h2>DESCRIPTION</h2><p> 4 This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite. 5 5 </p><p> 6 6 <code class="literal">libsmbclient</code> is a library toolset that permits applications to manipulate CIFS/SMB network … … 13 13 extension of the capabilities of tools such as file managers and browsers. This man page describes the 14 14 configuration options for this tool so that the user may obtain greatest utility of use. 15 </p></div><div class="refsect1" lang="en"><a name="id2 59550"></a><h2>OPTIONS</h2><p>15 </p></div><div class="refsect1" lang="en"><a name="id282731"></a><h2>OPTIONS</h2><p> 16 16 What the URLs mean: 17 17 </p><div class="variablelist"><dl><dt><span class="term">smb://</span></dt><dd><p> … … 45 45 parameter and will use its value when if the <code class="literal">user</code> parameter was not included 46 46 in the URL. 47 </p></div><div class="refsect1" lang="en"><a name="id2 59420"></a><h2>PROGRAMMERS GUIDE</h2><p>47 </p></div><div class="refsect1" lang="en"><a name="id283406"></a><h2>PROGRAMMERS GUIDE</h2><p> 48 48 Watch this space for future updates. 49 </p></div><div class="refsect1" lang="en"><a name="id2 59429"></a><h2>VERSION</h2><p>49 </p></div><div class="refsect1" lang="en"><a name="id283415"></a><h2>VERSION</h2><p> 50 50 This man page is correct for version 3.0 of the Samba suite. 51 </p></div><div class="refsect1" lang="en"><a name="id2 60355"></a><h2>AUTHOR</h2><p>51 </p></div><div class="refsect1" lang="en"><a name="id283425"></a><h2>AUTHOR</h2><p> 52 52 The original Samba software and related utilities were created by Andrew Tridgell. 53 53 Samba is now developed by the Samba Team as an Open Source project similar to the way -
branches/samba-3.0/docs/htmldocs/manpages/lmhosts.5.html
r39 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>lmhosts</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="lmhosts.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>lmhosts — The Samba NetBIOS hosts file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">lmhosts</code> is the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> NetBIOS name to IP address mapping file.</p></div><div class="refsect1" lang="en"><a name="id259295"></a><h2>DESCRIPTION</h2><p>This file is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="filename">lmhosts</code> is the <span class="emphasis"><em>Samba1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>lmhosts</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="lmhosts.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>lmhosts — The Samba NetBIOS hosts file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">lmhosts</code> is the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> NetBIOS name to IP address mapping file.</p></div><div class="refsect1" lang="en"><a name="id283735"></a><h2>DESCRIPTION</h2><p>This file is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="filename">lmhosts</code> is the <span class="emphasis"><em>Samba 2 2 </em></span> NetBIOS name to IP address mapping file. It 3 3 is very similar to the <code class="filename">/etc/hosts</code> file 4 4 format, except that the hostname component must correspond 5 to the NetBIOS naming format.</p></div><div class="refsect1" lang="en"><a name="id2 59546"></a><h2>FILE FORMAT</h2><p>It is an ASCII file containing one line for NetBIOS name.5 to the NetBIOS naming format.</p></div><div class="refsect1" lang="en"><a name="id282728"></a><h2>FILE FORMAT</h2><p>It is an ASCII file containing one line for NetBIOS name. 6 6 The two fields on each line are separated from each other by 7 7 white space. Any entry beginning with '#' is ignored. Each line … … 26 26 type for a name "NTSERVER" is queried. Any other name type will not 27 27 be resolved.</p><p>The default location of the <code class="filename">lmhosts</code> file 28 is in the same directory as the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file.</p></div><div class="refsect1" lang="en"><a name="id259366"></a><h2>FILES</h2><p>lmhosts is loaded from the configuration directory. This is28 is in the same directory as the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file.</p></div><div class="refsect1" lang="en"><a name="id283354"></a><h2>FILES</h2><p>lmhosts is loaded from the configuration directory. This is 29 29 usually <code class="filename">/etc/samba</code> or <code class="filename">/usr/local/samba/lib</code>. 30 </p></div><div class="refsect1" lang="en"><a name="id2 59388"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id259398"></a><h2>SEE ALSO</h2><p><a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, and <ahref="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>31 </p></div><div class="refsect1" lang="en"><a name="id2 59432"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities30 </p></div><div class="refsect1" lang="en"><a name="id283375"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id283385"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, and <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> 31 </p></div><div class="refsect1" lang="en"><a name="id283419"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 32 32 were created by Andrew Tridgell. Samba is now developed 33 33 by the Samba Team as an Open Source project similar … … 35 35 The man page sources were converted to YODL format (another 36 36 excellent piece of Open Source software, available at 37 <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">37 <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 38 38 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 39 39 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/log2pcap.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>log2pcap</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="log2pcap.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>log2pcap — Extract network traces from Samba log files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">log2pcap</code> [-h] [-q] [logfile] [pcap_file]</p></div></div><div class="refsect1" lang="en"><a name="id259321"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">log2pcap</code> reads in a1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>log2pcap</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="log2pcap.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>log2pcap — Extract network traces from Samba log files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">log2pcap</code> [-h] [-q] [logfile] [pcap_file]</p></div></div><div class="refsect1" lang="en"><a name="id283760"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">log2pcap</code> reads in a 2 2 samba log file and generates a pcap file (readable 3 3 by most sniffers, such as ethereal or tcpdump) based on the packet … … 6 6 right, <code class="constant">10</code> to get the first 512 data bytes of the 7 7 packet and <code class="constant">50</code> to get the whole packet. 8 </p></div><div class="refsect1" lang="en"><a name="id2 59582"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h</span></dt><dd><p>If this parameter is8 </p></div><div class="refsect1" lang="en"><a name="id282764"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h</span></dt><dd><p>If this parameter is 9 9 specified the output file will be a 10 10 hex dump, in a format that is readable … … 18 18 to stdout. 19 19 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 20 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59405"></a><h2>EXAMPLES</h2><p>Extract all network traffic from all samba log files:</p><pre class="programlisting">20 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283394"></a><h2>EXAMPLES</h2><p>Extract all network traffic from all samba log files:</p><pre class="programlisting"> 21 21 <code class="prompt">$</code> log2pcap < /var/log/* > trace.pcap 22 22 </pre><p>Convert to pcap using text2pcap:</p><pre class="programlisting"> 23 23 <code class="prompt">$</code> log2pcap -h samba.log | text2pcap -T 139,139 - trace.pcap 24 </pre></div><div class="refsect1" lang="en"><a name="id2 60358"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id260368"></a><h2>BUGS</h2><p>Only SMB data is extracted from the samba logs, no LDAP,24 </pre></div><div class="refsect1" lang="en"><a name="id282882"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id282892"></a><h2>BUGS</h2><p>Only SMB data is extracted from the samba logs, no LDAP, 25 25 NetBIOS lookup or other data.</p><p>The generated TCP and IP headers don't contain a valid 26 checksum.</p></div><div class="refsect1" lang="en"><a name="id2 60383"></a><h2>SEE ALSO</h2><p><a href="text2pcap.1.html"><span class="citerefentry"><span class="refentrytitle">text2pcap</span>(1)</span></a>, <a href="ethereal.1.html"><span class="citerefentry"><span class="refentrytitle">ethereal</span>(1)</span></a></p></div><div class="refsect1" lang="en"><a name="id260406"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities26 checksum.</p></div><div class="refsect1" lang="en"><a name="id282906"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="text2pcap.1.html"><span class="citerefentry"><span class="refentrytitle">text2pcap</span>(1)</span></a>, <a class="citerefentry" href="ethereal.1.html"><span class="citerefentry"><span class="refentrytitle">ethereal</span>(1)</span></a></p></div><div class="refsect1" lang="en"><a name="id282928"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 27 27 were created by Andrew Tridgell. Samba is now developed 28 28 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/mount.cifs.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>mount.cifs</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="mount.cifs.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>mount.cifs — mount using the Common Internet File System (CIFS)</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">mount.cifs</code> {service} {mount-point} [-o options]</p></div></div><div class="refsect1" lang="en"><a name="id259314"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>mount.cifs mounts a Linux CIFS filesystem. It1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>mount.cifs</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="mount.cifs.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>mount.cifs — mount using the Common Internet File System (CIFS)</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">mount.cifs</code> {service} {mount-point} [-o options]</p></div></div><div class="refsect1" lang="en"><a name="id283752"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>mount.cifs mounts a Linux CIFS filesystem. It 2 2 is usually invoked indirectly by 3 the <a href="mount.8.html"><span class="citerefentry"><span class="refentrytitle">mount</span>(8)</span></a> command when using the3 the <a class="citerefentry" href="mount.8.html"><span class="citerefentry"><span class="refentrytitle">mount</span>(8)</span></a> command when using the 4 4 "-t cifs" option. This command only works in Linux, and the kernel must 5 5 support the cifs filesystem. The CIFS protocol is the successor to the … … 21 21 </p><p><span class="emphasis"><em>mount.cifs</em></span> causes the cifs vfs to launch a thread named cifsd. After mounting it keeps running until 22 22 the mounted resource is unmounted (usually via the umount utility). 23 </p></div><div class="refsect1" lang="en"><a name="id2 59585"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">user=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>specifies the username to connect as. If23 </p></div><div class="refsect1" lang="en"><a name="id282767"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">user=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>specifies the username to connect as. If 24 24 this is not given, then the environment variable <span class="emphasis"><em>USER</em></span> is used. This option can also take the 25 25 form "user%password" or "workgroup/user" or … … 31 31 option is not given then the environment variable 32 32 <span class="emphasis"><em>PASSWD</em></span> is used. If the password is not specified 33 directly or indirectly via an argument to mount <span class="emphasis"><em>mount.cifs</em></span> will prompt33 directly or indirectly via an argument to mount, <span class="emphasis"><em>mount.cifs</em></span> will prompt 34 34 for a password, unless the guest option is specified. 35 35 </p><p>Note that a password which contains the delimiter … … 51 51 the mounted filesystem. 52 52 It may be specified as either a username or a numeric uid. 53 This parameter is ignored when the target server supports 54 the CIFS Unix extensions.</p></dd><dt><span class="term">gid=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the gid that will own all files on 55 the mounted filesystem. 56 It may be specified as either a groupname or a numeric 57 gid. This parameter is ignored when the target server supports 58 the CIFS Unix extensions. 53 For mounts to servers which do support the CIFS Unix extensions, 54 such as a properly configured Samba server, the server provides 55 the uid, gid and mode so this parameter should not be 56 specified unless the server and client uid and gid 57 numbering differ. If the server and client are in the 58 same domain (e.g. running winbind or nss_ldap) and 59 the server supports the Unix Extensions then the uid 60 and gid can be retrieved from the server (and uid 61 and gid would not have to be specifed on the mount. 62 For servers which do not support the CIFS Unix 63 extensions, the default uid (and gid) returned on lookup 64 of existing files will be the uid (gid) of the person 65 who executed the mount (root, except when mount.cifs 66 is configured setuid for user mounts) unless the "uid=" 67 (gid) mount option is specified. For the uid (gid) of newly 68 created files and directories, ie files created since 69 the last mount of the server share, the expected uid 70 (gid) is cached as long as the inode remains in 71 memory on the client. Also note that permission 72 checks (authorization checks) on accesses to a file occur 73 at the server, but there are cases in which an administrator 74 may want to restrict at the client as well. For those 75 servers which do not report a uid/gid owner 76 (such as Windows), permissions can also be checked at the 77 client, and a crude form of client side permission checking 78 can be enabled by specifying file_mode and dir_mode on 79 the client. Note that the mount.cifs helper must be 80 at version 1.10 or higher to support specifying the uid 81 (or gid) in non-numeric form. 82 </p></dd><dt><span class="term">gid=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the gid that will own all files on 83 the mounted filesystem. It may be specified as either a groupname or a numeric 84 gid. For other considerations see the description of uid above. 59 85 </p></dd><dt><span class="term">port=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the port number on the server to attempt to contact to negotiate 60 86 CIFS support. If the CIFS server is not listening on this port or 61 87 if it is not specified, the default ports will be tried i.e. 62 88 port 445 is tried and if no response then port 139 is tried. 63 </p></dd><dt><span class="term">netbiosname=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>When mounting to servers via port 139, specifies the RFC1001 89 </p></dd><dt><span class="term">servern=<em class="replaceable"><code>arg</code></em></span></dt><dd><p> 90 Specify the server netbios name (RFC1001 name) to use 91 when attempting to setup a session to the server. Although 92 rarely needed for mounting to newer servers, this option 93 is needed for mounting to some older servers (such 94 as OS/2 or Windows 98 and Windows ME) since when connecting 95 over port 139 they, unlike most newer servers, do not 96 support a default server name. A server name can be up 97 to 15 characters long and is usually uppercased. 98 </p></dd><dt><span class="term">netbiosname=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>When mounting to servers via port 139, specifies the RFC1001 64 99 source name to use to represent the client netbios machine 65 100 name when doing the RFC1001 netbios session initialize. 66 101 </p></dd><dt><span class="term">file_mode=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>If the server does not support the CIFS Unix extensions this 67 102 overrides the default file mode.</p></dd><dt><span class="term">dir_mode=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>If the server does not support the CIFS Unix extensions this 68 overrides the default mode for directories. </p></dd><dt><span class="term">ip=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the destination host or IP address.</p></dd><dt><span class="term">domain=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the domain (workgroup) of the user </p></dd><dt><span class="term">guest</span></dt><dd><p>don't prompt for a password </p></dd><dt><span class="term">iocharset</span></dt><dd><p>Charset used to convert local path names to and from103 overrides the default mode for directories. </p></dd><dt><span class="term">ip=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the destination IP address. This option is set automatically if the server name portion of the requested UNC name can be resolved so rarely needs to be specified by the user.</p></dd><dt><span class="term">domain=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the domain (workgroup) of the user </p></dd><dt><span class="term">guest</span></dt><dd><p>don't prompt for a password </p></dd><dt><span class="term">iocharset</span></dt><dd><p>Charset used to convert local path names to and from 69 104 Unicode. Unicode is used by default for network path 70 105 names if the server supports it. If iocharset is … … 164 199 </p></dd><dt><span class="term">noserverino</span></dt><dd><p>client generates inode numbers (rather than using the actual one 165 200 from the server) by default. 166 </p></dd><dt><span class="term">nouser_xattr</span></dt><dd><p>(default) Do not allow getfattr/setfattr to get/set xattrs, even if server would support it otherwise. </p></dd><dt><span class="term">rsize=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>default network read size</p></dd><dt><span class="term">wsize=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>default network write size</p></dd><dt><span class="term">--verbose</span></dt><dd><p>Print additional debugging information for the mount. Note that this parameter must be specified before the -o. For example:</p><p>mount -t cifs //server/share /mnt --verbose -o user=username</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id300777"></a><h2>ENVIRONMENT VARIABLES</h2><p> 201 </p></dd><dt><span class="term">nouser_xattr</span></dt><dd><p>(default) Do not allow getfattr/setfattr to get/set xattrs, even if server would support it otherwise. </p></dd><dt><span class="term">rsize=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>default network read size (usually 16K). The client currently 202 can not use rsize larger than CIFSMaxBufSize. CIFSMaxBufSize 203 defaults to 16K and may be changed (from 8K to the maximum 204 kmalloc size allowed by your kernel) at module install time 205 for cifs.ko. Setting CIFSMaxBufSize to a very large value 206 will cause cifs to use more memory and may reduce performance 207 in some cases. To use rsize greater than 127K (the original 208 cifs protocol maximum) also requires that the server support 209 a new Unix Capability flag (for very large read) which some 210 newer servers (e.g. Samba 3.0.26 or later) do. rsize can be 211 set from a minimum of 2048 to a maximum of 130048 (127K or 212 CIFSMaxBufSize, whichever is smaller) 213 214 </p></dd><dt><span class="term">wsize=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>default network write size (default 57344) 215 maximum wsize currently allowed by CIFS is 57344 (fourteen 216 4096 byte pages)</p></dd><dt><span class="term">--verbose</span></dt><dd><p>Print additional debugging information for the mount. Note that this parameter must be specified before the -o. For example:</p><p>mount -t cifs //server/share /mnt --verbose -o user=username</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324899"></a><h2>SERVICE FORMATTING AND DELIMITERS</h2><p> 217 It's generally preferred to use forward slashes (/) as a delimiter in service names. They are considered to be the "universal delimiter" since they are generally not allowed to be embedded within path components on Windows machines and the client can convert them to blackslashes (\) unconditionally. Conversely, backslash characters are allowed by POSIX to be part of a path component, and can't be automatically converted in the same way. 218 </p><p> 219 mount.cifs will attempt to convert backslashes to forward slashes where it's able to do so, but it cannot do so in any path component following the sharename. 220 </p></div><div class="refsect1" lang="en"><a name="id324918"></a><h2>ENVIRONMENT VARIABLES</h2><p> 167 221 The variable <span class="emphasis"><em>USER</em></span> may contain the username of the 168 222 person to be used to authenticate to the server. … … 176 230 of a file to read the password from. A single line of input is 177 231 read and used as the password. 178 </p></div><div class="refsect1" lang="en"><a name="id3 00809"></a><h2>NOTES</h2><p>This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled.</p></div><div class="refsect1" lang="en"><a name="id300820"></a><h2>CONFIGURATION</h2><p>232 </p></div><div class="refsect1" lang="en"><a name="id324946"></a><h2>NOTES</h2><p>This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled.</p></div><div class="refsect1" lang="en"><a name="id324957"></a><h2>CONFIGURATION</h2><p> 179 233 The primary mechanism for making configuration changes and for reading 180 234 debug information for the cifs vfs is via the Linux /proc filesystem. … … 187 241 installation (device driver load). 188 242 For more information see the kernel file <code class="filename">fs/cifs/README</code>. 189 </p></div><div class="refsect1" lang="en"><a name="id3 00847"></a><h2>BUGS</h2><p>Mounting using the CIFS URL specification is currently not supported.243 </p></div><div class="refsect1" lang="en"><a name="id324982"></a><h2>BUGS</h2><p>Mounting using the CIFS URL specification is currently not supported. 190 244 </p><p>The credentials file does not handle usernames or passwords with 191 245 leading space.</p><p> … … 195 249 when reporting bugs (minimum: mount.cifs (try mount.cifs -V), kernel (see /proc/version) and 196 250 server type you are trying to contact. 197 </p></div><div class="refsect1" lang="en"><a name="id3 00867"></a><h2>VERSION</h2><p>This man page is correct for version 1.39of198 the cifs vfs filesystem (roughly Linux kernel 2.6. 15).</p></div><div class="refsect1" lang="en"><a name="id300878"></a><h2>SEE ALSO</h2><p>251 </p></div><div class="refsect1" lang="en"><a name="id325003"></a><h2>VERSION</h2><p>This man page is correct for version 1.52 of 252 the cifs vfs filesystem (roughly Linux kernel 2.6.24).</p></div><div class="refsect1" lang="en"><a name="id325013"></a><h2>SEE ALSO</h2><p> 199 253 Documentation/filesystems/cifs.txt and fs/cifs/README in the linux kernel 200 254 source tree may contain additional options and information. 201 </p><p><a href="umount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">umount.cifs</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id300898"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax and manpage were loosely based on that of smbmount. It255 </p><p><a class="citerefentry" href="umount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">umount.cifs</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id325033"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax and manpage were loosely based on that of smbmount. It 202 256 was converted to Docbook/XML by Jelmer Vernooij.</p><p>The maintainer of the Linux cifs vfs and the userspace 203 tool <span class="emphasis"><em>mount.cifs</em></span> is <a href="mailto:sfrench@samba.org" target="_top">Steve French</a>.204 The <a href="mailto:linux-cifs-client@lists.samba.org" target="_top">Linux CIFS Mailing list</a>257 tool <span class="emphasis"><em>mount.cifs</em></span> is <a class="ulink" href="mailto:sfrench@samba.org" target="_top">Steve French</a>. 258 The <a class="ulink" href="mailto:linux-cifs-client@lists.samba.org" target="_top">Linux CIFS Mailing list</a> 205 259 is the preferred place to ask questions regarding these programs. 206 260 </p></div></div></body></html> -
branches/samba-3.0/docs/htmldocs/manpages/net.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>net</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="net.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>net — Tool for administration of Samba and remote1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>net</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="net.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>net — Tool for administration of Samba and remote 2 2 CIFS servers. 3 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">net</code> {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V]</p></div></div><div class="refsect1" lang="en"><a name="id2 59362"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The samba net utility is meant to work just like the net utility3 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">net</code> {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V]</p></div></div><div class="refsect1" lang="en"><a name="id282818"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The Samba net utility is meant to work just like the net utility 4 4 available for windows and DOS. The first argument should be used 5 5 to specify the protocol to use when executing a certain command. … … 8 8 argument is omitted, net will try to determine it automatically. 9 9 Not all commands are available on all protocols. 10 </p></div><div class="refsect1" lang="en"><a name="id2 59387"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.10 </p></div><div class="refsect1" lang="en"><a name="id283377"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 11 11 </p></dd><dt><span class="term">-w target-workgroup</span></dt><dd><p> 12 12 Sets target workgroup or domain. You have to specify … … 25 25 </p></dd><dt><span class="term">-n <primary NetBIOS name></span></dt><dd><p>This option allows you to override 26 26 the NetBIOS name that Samba uses for itself. This is identical 27 to setting the <a class=" indexterm" name="id260390"></a> parameter in the <code class="filename">smb.conf</code> file.27 to setting the <a class="link" href="smb.conf.5.html#NETBIOSNAME">netbios name</a> parameter in the <code class="filename">smb.conf</code> file. 28 28 However, a command 29 29 line setting will take precedence over settings in … … 43 43 Make queries to the external server using the machine account of the local server. 44 44 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 45 from 0 to 10. 46 not specified is zero.</p><p>The higher this value, the more detail will be45 from 0 to 10. The default value if this parameter is 46 not specified is 0.</p><p>The higher this value, the more detail will be 47 47 logged to the log files about the activities of the 48 48 server. At level 0, only critical errors and serious … … 54 54 use only by developers and generate HUGE amounts of log 55 55 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 56 override the <a class=" indexterm" name="id260134"></a> parameter57 in the <code class="filename">smb.conf</code> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 260151"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id260156"></a><h3>CHANGESECRETPW</h3><p>This command allows the Samba machine account password to be set from an external application56 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 57 in the <code class="filename">smb.conf</code> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324518"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id324523"></a><h3>CHANGESECRETPW</h3><p>This command allows the Samba machine account password to be set from an external application 58 58 to a machine account password that has already been stored in Active Directory. DO NOT USE this command 59 59 unless you know exactly what you are doing. The use of this command requires that the force flag (-f) … … 62 62 this without care and attention as it will overwrite a legitimate machine password without warning. 63 63 YOU HAVE BEEN WARNED. 64 </p></div><div class="refsect2" lang="en"><a name="id 260172"></a><h3>TIME</h3><p>The <code class="literal">NET TIME</code> command allows you to view the time on a remote server65 or synchronise the time on the local server with the time on the remote server.</p><div class="refsect3" lang="en"><a name="id 260188"></a><h4>TIME</h4><p>Without any options, the <code class="literal">NET TIME</code> command64 </p></div><div class="refsect2" lang="en"><a name="id324538"></a><h3>TIME</h3><p>The <code class="literal">NET TIME</code> command allows you to view the time on a remote server 65 or synchronise the time on the local server with the time on the remote server.</p><div class="refsect3" lang="en"><a name="id324553"></a><h4>TIME</h4><p>Without any options, the <code class="literal">NET TIME</code> command 66 66 displays the time on the remote server. 67 </p></div><div class="refsect3" lang="en"><a name="id 260203"></a><h4>TIME SYSTEM</h4><p>Displays the time on the remote server in a format ready for <code class="literal">/bin/date</code></p></div><div class="refsect3" lang="en"><a name="id300441"></a><h4>TIME SET</h4><p>Tries to set the date and time of the local server to that on68 the remote server using <code class="literal">/bin/date</code>. </p></div><div class="refsect3" lang="en"><a name="id3 00456"></a><h4>TIME ZONE</h4><p>Displays the timezone in hours from GMT on the remote computer.</p></div></div><div class="refsect2" lang="en"><a name="id300467"></a><h3>[RPC|ADS] JOIN [TYPE] [-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]</h3><p>67 </p></div><div class="refsect3" lang="en"><a name="id324568"></a><h4>TIME SYSTEM</h4><p>Displays the time on the remote server in a format ready for <code class="literal">/bin/date</code>.</p></div><div class="refsect3" lang="en"><a name="id324583"></a><h4>TIME SET</h4><p>Tries to set the date and time of the local server to that on 68 the remote server using <code class="literal">/bin/date</code>. </p></div><div class="refsect3" lang="en"><a name="id324597"></a><h4>TIME ZONE</h4><p>Displays the timezone in hours from GMT on the remote computer.</p></div></div><div class="refsect2" lang="en"><a name="id324609"></a><h3>[RPC|ADS] JOIN [TYPE] [-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]</h3><p> 69 69 Join a domain. If the account already exists on the server, and 70 70 [TYPE] is MEMBER, the machine will attempt to join automatically. … … 83 83 and ldap, so it may need to be doubled or quadrupled to pass through, 84 84 and it is not used as a delimiter. 85 </p></div><div class="refsect2" lang="en"><a name="id3 00496"></a><h3>[RPC] OLDJOIN [options]</h3><p>Join a domain. Use the OLDJOIN option to join the domain85 </p></div><div class="refsect2" lang="en"><a name="id324636"></a><h3>[RPC] OLDJOIN [options]</h3><p>Join a domain. Use the OLDJOIN option to join the domain 86 86 using the old style of domain joining - you need to create a trust 87 account in server manager first.</p></div><div class="refsect2" lang="en"><a name="id3 00507"></a><h3>[RPC|ADS] USER</h3><div class="refsect3" lang="en"><a name="id300513"></a><h4>[RPC|ADS] USER</h4><p>List all users</p></div><div class="refsect3" lang="en"><a name="id300522"></a><h4>[RPC|ADS] USER DELETE <em class="replaceable"><code>target</code></em></h4><p>Delete specified user</p></div><div class="refsect3" lang="en"><a name="id300535"></a><h4>[RPC|ADS] USER INFO <em class="replaceable"><code>target</code></em></h4><p>List the domain groups of a the specified user.</p></div><div class="refsect3" lang="en"><a name="id300547"></a><h4>[RPC|ADS] USER RENAME <em class="replaceable"><code>oldname</code></em> <em class="replaceable"><code>newname</code></em></h4><p>Rename specified user.</p></div><div class="refsect3" lang="en"><a name="id300563"></a><h4>[RPC|ADS] USER ADD <em class="replaceable"><code>name</code></em> [password] [-F user flags] [-C comment]</h4><p>Add specified user.</p></div></div><div class="refsect2" lang="en"><a name="id300579"></a><h3>[RPC|ADS] GROUP</h3><div class="refsect3" lang="en"><a name="id300584"></a><h4>[RPC|ADS] GROUP [misc options] [targets]</h4><p>List user groups.</p></div><div class="refsect3" lang="en"><a name="id300595"></a><h4>[RPC|ADS] GROUP DELETE <em class="replaceable"><code>name</code></em> [misc. options]</h4><p>Delete specified group.</p></div><div class="refsect3" lang="en"><a name="id300608"></a><h4>[RPC|ADS] GROUP ADD <em class="replaceable"><code>name</code></em> [-C comment]</h4><p>Create specified group.</p></div></div><div class="refsect2" lang="en"><a name="id300623"></a><h3>[RAP|RPC] SHARE</h3><div class="refsect3" lang="en"><a name="id300629"></a><h4>[RAP|RPC] SHARE [misc. options] [targets]</h4><p>Enumerates all exported resources (network shares) on target server.</p></div><div class="refsect3" lang="en"><a name="id300640"></a><h4>[RAP|RPC] SHARE ADD <em class="replaceable"><code>name=serverpath</code></em> [-C comment] [-M maxusers] [targets]</h4><p>Adds a share from a server (makes the export active). Maxusers87 account in server manager first.</p></div><div class="refsect2" lang="en"><a name="id324647"></a><h3>[RPC|ADS] USER</h3><div class="refsect3" lang="en"><a name="id324652"></a><h4>[RPC|ADS] USER</h4><p>List all users</p></div><div class="refsect3" lang="en"><a name="id324662"></a><h4>[RPC|ADS] USER DELETE <em class="replaceable"><code>target</code></em></h4><p>Delete specified user</p></div><div class="refsect3" lang="en"><a name="id324674"></a><h4>[RPC|ADS] USER INFO <em class="replaceable"><code>target</code></em></h4><p>List the domain groups of the specified user.</p></div><div class="refsect3" lang="en"><a name="id324685"></a><h4>[RPC|ADS] USER RENAME <em class="replaceable"><code>oldname</code></em> <em class="replaceable"><code>newname</code></em></h4><p>Rename specified user.</p></div><div class="refsect3" lang="en"><a name="id324700"></a><h4>[RPC|ADS] USER ADD <em class="replaceable"><code>name</code></em> [password] [-F user flags] [-C comment]</h4><p>Add specified user.</p></div></div><div class="refsect2" lang="en"><a name="id324714"></a><h3>[RPC|ADS] GROUP</h3><div class="refsect3" lang="en"><a name="id324720"></a><h4>[RPC|ADS] GROUP [misc options] [targets]</h4><p>List user groups.</p></div><div class="refsect3" lang="en"><a name="id324729"></a><h4>[RPC|ADS] GROUP DELETE <em class="replaceable"><code>name</code></em> [misc. options]</h4><p>Delete specified group.</p></div><div class="refsect3" lang="en"><a name="id324742"></a><h4>[RPC|ADS] GROUP ADD <em class="replaceable"><code>name</code></em> [-C comment]</h4><p>Create specified group.</p></div></div><div class="refsect2" lang="en"><a name="id324756"></a><h3>[RAP|RPC] SHARE</h3><div class="refsect3" lang="en"><a name="id324761"></a><h4>[RAP|RPC] SHARE [misc. options] [targets]</h4><p>Enumerates all exported resources (network shares) on target server.</p></div><div class="refsect3" lang="en"><a name="id324771"></a><h4>[RAP|RPC] SHARE ADD <em class="replaceable"><code>name=serverpath</code></em> [-C comment] [-M maxusers] [targets]</h4><p>Adds a share from a server (makes the export active). Maxusers 88 88 specifies the number of users that can be connected to the 89 share simultaneously.</p></div><div class="refsect3" lang="en"><a name="id3 00655"></a><h4>SHARE DELETE <em class="replaceable"><code>sharenam</code></em></h4><p>Delete specified share.</p></div></div><div class="refsect2" lang="en"><a name="id300668"></a><h3>[RPC|RAP] FILE</h3><div class="refsect3" lang="en"><a name="id300674"></a><h4>[RPC|RAP] FILE</h4><p>List all open files on remote server.</p></div><div class="refsect3" lang="en"><a name="id300684"></a><h4>[RPC|RAP] FILE CLOSE <em class="replaceable"><code>fileid</code></em></h4><p>Close file with specified <em class="replaceable"><code>fileid</code></em> on90 remote server.</p></div><div class="refsect3" lang="en"><a name="id3 00701"></a><h4>[RPC|RAP] FILE INFO <em class="replaceable"><code>fileid</code></em></h4><p>89 share simultaneously.</p></div><div class="refsect3" lang="en"><a name="id324786"></a><h4>SHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p>Delete specified share.</p></div></div><div class="refsect2" lang="en"><a name="id324798"></a><h3>[RPC|RAP] FILE</h3><div class="refsect3" lang="en"><a name="id324804"></a><h4>[RPC|RAP] FILE</h4><p>List all open files on remote server.</p></div><div class="refsect3" lang="en"><a name="id324813"></a><h4>[RPC|RAP] FILE CLOSE <em class="replaceable"><code>fileid</code></em></h4><p>Close file with specified <em class="replaceable"><code>fileid</code></em> on 90 remote server.</p></div><div class="refsect3" lang="en"><a name="id324828"></a><h4>[RPC|RAP] FILE INFO <em class="replaceable"><code>fileid</code></em></h4><p> 91 91 Print information on specified <em class="replaceable"><code>fileid</code></em>. 92 92 Currently listed are: file-id, username, locks, path, permissions. 93 </p></div><div class="refsect3" lang="en"><a name="id300718"></a><h4>[RAP|RPC] FILE USER</h4><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div></div><div class="refsect2" lang="en"><a name="id300730"></a><h3>SESSION</h3><div class="refsect3" lang="en"><a name="id300736"></a><h4>RAP SESSION</h4><p>Without any other options, SESSION enumerates all active SMB/CIFS 94 sessions on the target server.</p></div><div class="refsect3" lang="en"><a name="id300746"></a><h4>RAP SESSION DELETE|CLOSE <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Close the specified sessions.</p></div><div class="refsect3" lang="en"><a name="id300759"></a><h4>RAP SESSION INFO <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Give a list with all the open files in specified session.</p></div></div><div class="refsect2" lang="en"><a name="id300773"></a><h3>RAP SERVER <em class="replaceable"><code>DOMAIN</code></em></h3><p>List all servers in specified domain or workgroup. Defaults 95 to local domain.</p></div><div class="refsect2" lang="en"><a name="id300786"></a><h3>RAP DOMAIN</h3><p>Lists all domains and workgroups visible on the 96 current network.</p></div><div class="refsect2" lang="en"><a name="id300797"></a><h3>RAP PRINTQ</h3><div class="refsect3" lang="en"><a name="id300802"></a><h4>RAP PRINTQ LIST <em class="replaceable"><code>QUEUE_NAME</code></em></h4><p>Lists the specified print queue and print jobs on the server. 93 </p></div><div class="refsect3" lang="en"><a name="id324844"></a><h4>[RAP|RPC] FILE USER <em class="replaceable"><code>user</code></em></h4><p> 94 List files opened by specified <em class="replaceable"><code>user</code></em>. 95 Please note that <code class="literal">net rap file user</code> does not work 96 against Samba servers. 97 </p></div></div><div class="refsect2" lang="en"><a name="id324865"></a><h3>SESSION</h3><div class="refsect3" lang="en"><a name="id324870"></a><h4>RAP SESSION</h4><p>Without any other options, SESSION enumerates all active SMB/CIFS 98 sessions on the target server.</p></div><div class="refsect3" lang="en"><a name="id324881"></a><h4>RAP SESSION DELETE|CLOSE <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Close the specified sessions.</p></div><div class="refsect3" lang="en"><a name="id324893"></a><h4>RAP SESSION INFO <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Give a list with all the open files in specified session.</p></div></div><div class="refsect2" lang="en"><a name="id324906"></a><h3>RAP SERVER <em class="replaceable"><code>DOMAIN</code></em></h3><p>List all servers in specified domain or workgroup. Defaults 99 to local domain.</p></div><div class="refsect2" lang="en"><a name="id324919"></a><h3>RAP DOMAIN</h3><p>Lists all domains and workgroups visible on the 100 current network.</p></div><div class="refsect2" lang="en"><a name="id324929"></a><h3>RAP PRINTQ</h3><div class="refsect3" lang="en"><a name="id324934"></a><h4>RAP PRINTQ LIST <em class="replaceable"><code>QUEUE_NAME</code></em></h4><p>Lists the specified print queue and print jobs on the server. 97 101 If the <em class="replaceable"><code>QUEUE_NAME</code></em> is omitted, all 98 queues are listed.</p></div><div class="refsect3" lang="en"><a name="id3 00819"></a><h4>RAP PRINTQ DELETE <em class="replaceable"><code>JOBID</code></em></h4><p>Delete job with specified id.</p></div></div><div class="refsect2" lang="en"><a name="id300833"></a><h3>RAP VALIDATE <em class="replaceable"><code>user</code></em> [<em class="replaceable"><code>password</code></em>]</h3><p>102 queues are listed.</p></div><div class="refsect3" lang="en"><a name="id324950"></a><h4>RAP PRINTQ DELETE <em class="replaceable"><code>JOBID</code></em></h4><p>Delete job with specified id.</p></div></div><div class="refsect2" lang="en"><a name="id324963"></a><h3>RAP VALIDATE <em class="replaceable"><code>user</code></em> [<em class="replaceable"><code>password</code></em>]</h3><p> 99 103 Validate whether the specified user can log in to the 100 104 remote server. If the password is not specified on the commandline, it 101 105 will be prompted. 102 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id3 00856"></a><h3>RAP GROUPMEMBER</h3><div class="refsect3" lang="en"><a name="id300861"></a><h4>RAP GROUPMEMBER LIST <em class="replaceable"><code>GROUP</code></em></h4><p>List all members of the specified group.</p></div><div class="refsect3" lang="en"><a name="id300874"></a><h4>RAP GROUPMEMBER DELETE <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Delete member from group.</p></div><div class="refsect3" lang="en"><a name="id300890"></a><h4>RAP GROUPMEMBER ADD <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Add member to group.</p></div></div><div class="refsect2" lang="en"><a name="id300907"></a><h3>RAP ADMIN <em class="replaceable"><code>command</code></em></h3><p>Execute the specified <em class="replaceable"><code>command</code></em> on106 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id324984"></a><h3>RAP GROUPMEMBER</h3><div class="refsect3" lang="en"><a name="id324990"></a><h4>RAP GROUPMEMBER LIST <em class="replaceable"><code>GROUP</code></em></h4><p>List all members of the specified group.</p></div><div class="refsect3" lang="en"><a name="id325001"></a><h4>RAP GROUPMEMBER DELETE <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Delete member from group.</p></div><div class="refsect3" lang="en"><a name="id325016"></a><h4>RAP GROUPMEMBER ADD <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Add member to group.</p></div></div><div class="refsect2" lang="en"><a name="id325032"></a><h3>RAP ADMIN <em class="replaceable"><code>command</code></em></h3><p>Execute the specified <em class="replaceable"><code>command</code></em> on 103 107 the remote server. Only works with OS/2 servers. 104 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id3 00928"></a><h3>RAP SERVICE</h3><div class="refsect3" lang="en"><a name="id300934"></a><h4>RAP SERVICE START <em class="replaceable"><code>NAME</code></em> [arguments...]</h4><p>Start the specified service on the remote server. Not implemented yet.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect3" lang="en"><a name="id300953"></a><h4>RAP SERVICE STOP</h4><p>Stop the specified service on the remote server.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div></div><div class="refsect2" lang="en"><a name="id300969"></a><h3>RAP PASSWORD <em class="replaceable"><code>USER</code></em> <em class="replaceable"><code>OLDPASS</code></em> <em class="replaceable"><code>NEWPASS</code></em></h3><p>108 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id325051"></a><h3>RAP SERVICE</h3><div class="refsect3" lang="en"><a name="id325057"></a><h4>RAP SERVICE START <em class="replaceable"><code>NAME</code></em> [arguments...]</h4><p>Start the specified service on the remote server. Not implemented yet.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect3" lang="en"><a name="id325074"></a><h4>RAP SERVICE STOP</h4><p>Stop the specified service on the remote server.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div></div><div class="refsect2" lang="en"><a name="id325089"></a><h3>RAP PASSWORD <em class="replaceable"><code>USER</code></em> <em class="replaceable"><code>OLDPASS</code></em> <em class="replaceable"><code>NEWPASS</code></em></h3><p> 105 109 Change password of <em class="replaceable"><code>USER</code></em> from <em class="replaceable"><code>OLDPASS</code></em> to <em class="replaceable"><code>NEWPASS</code></em>. 106 </p></div><div class="refsect2" lang="en"><a name="id3 01000"></a><h3>LOOKUP</h3><div class="refsect3" lang="en"><a name="id301005"></a><h4>LOOKUP HOST <em class="replaceable"><code>HOSTNAME</code></em> [<em class="replaceable"><code>TYPE</code></em>]</h4><p>110 </p></div><div class="refsect2" lang="en"><a name="id325117"></a><h3>LOOKUP</h3><div class="refsect3" lang="en"><a name="id325122"></a><h4>LOOKUP HOST <em class="replaceable"><code>HOSTNAME</code></em> [<em class="replaceable"><code>TYPE</code></em>]</h4><p> 107 111 Lookup the IP address of the given host with the specified type (netbios suffix). 108 112 The type defaults to 0x20 (workstation). 109 </p></div><div class="refsect3" lang="en"><a name="id3 01023"></a><h4>LOOKUP LDAP [<em class="replaceable"><code>DOMAIN</code></em></h4><p>Give IP address of LDAP server of specified <em class="replaceable"><code>DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id301040"></a><h4>LOOKUP KDC [<em class="replaceable"><code>REALM</code></em>]</h4><p>Give IP address of KDC for the specified <em class="replaceable"><code>REALM</code></em>.110 Defaults to local realm.</p></div><div class="refsect3" lang="en"><a name="id3 01058"></a><h4>LOOKUP DC [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP's of Domain Controllers for specified <em class="replaceable"><code>111 DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id3 01075"></a><h4>LOOKUP MASTER <em class="replaceable"><code>DOMAIN</code></em></h4><p>Give IP of master browser for specified <em class="replaceable"><code>DOMAIN</code></em>112 or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><a name="id3 01093"></a><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It113 </p></div><div class="refsect3" lang="en"><a name="id325140"></a><h4>LOOKUP LDAP [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP address of LDAP server of specified <em class="replaceable"><code>DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id325156"></a><h4>LOOKUP KDC [<em class="replaceable"><code>REALM</code></em>]</h4><p>Give IP address of KDC for the specified <em class="replaceable"><code>REALM</code></em>. 114 Defaults to local realm.</p></div><div class="refsect3" lang="en"><a name="id325172"></a><h4>LOOKUP DC [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP's of Domain Controllers for specified <em class="replaceable"><code> 115 DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id325188"></a><h4>LOOKUP MASTER <em class="replaceable"><code>DOMAIN</code></em></h4><p>Give IP of master browser for specified <em class="replaceable"><code>DOMAIN</code></em> 116 or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><a name="id325204"></a><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It 113 117 can be controlled using 'NET CACHE'.</p><p>All the timeout parameters support the suffixes: 114 118 115 119 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><p> 116 120 117 </p><div class="refsect3" lang="en"><a name="id3 01129"></a><h4>CACHE ADD <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><a name="id301149"></a><h4>CACHE DEL <em class="replaceable"><code>key</code></em></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><a name="id301161"></a><h4>CACHE SET <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><a name="id301181"></a><h4>CACHE SEARCH <em class="replaceable"><code>PATTERN</code></em></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><a name="id301194"></a><h4>CACHE LIST</h4><p>121 </p><div class="refsect3" lang="en"><a name="id325238"></a><h4>CACHE ADD <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><a name="id325256"></a><h4>CACHE DEL <em class="replaceable"><code>key</code></em></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><a name="id325268"></a><h4>CACHE SET <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><a name="id325286"></a><h4>CACHE SEARCH <em class="replaceable"><code>PATTERN</code></em></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><a name="id325298"></a><h4>CACHE LIST</h4><p> 118 122 List all current items in the cache. 119 </p></div><div class="refsect3" lang="en"><a name="id301204"></a><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><a name="id301215"></a><h3>GETLOCALSID [DOMAIN]</h3><p>Print the SID of the specified domain, or if the parameter is 120 omitted, the SID of the domain the local server is in.</p></div><div class="refsect2" lang="en"><a name="id301226"></a><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets domain sid for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><a name="id301237"></a><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups. 121 Parameters take the for "parameter=value". Common options include:</p><div class="itemizedlist"><ul type="disc"><li><p>unixgroup - Name of the UNIX group</p></li><li><p>ntgroup - Name of the Windows NT group (must be 123 </p></div><div class="refsect3" lang="en"><a name="id325308"></a><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><a name="id325318"></a><h3>GETLOCALSID [DOMAIN]</h3><p>Prints the SID of the specified domain, or if the parameter is 124 omitted, the SID of the local server.</p></div><div class="refsect2" lang="en"><a name="id325329"></a><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets SID for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><a name="id325338"></a><h3>GETDOMAINSID</h3><p>Prints the local machine SID and the SID of the current 125 domain.</p></div><div class="refsect2" lang="en"><a name="id325349"></a><h3>SETDOMAINSID</h3><p>Sets the SID of the current domain.</p></div><div class="refsect2" lang="en"><a name="id325358"></a><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups. 126 Common options include:</p><div class="itemizedlist"><ul type="disc"><li><p>unixgroup - Name of the UNIX group</p></li><li><p>ntgroup - Name of the Windows NT group (must be 122 127 resolvable to a SID</p></li><li><p>rid - Unsigned 32-bit integer</p></li><li><p>sid - Full SID in the form of "S-1-..."</p></li><li><p>type - Type of the group; either 'domain', 'local', 123 or 'builtin'</p></li><li><p>comment - Freeform text description of the group</p></li></ul></div><div class="refsect3" lang="en"><a name="id3 01279"></a><h4>GROUPMAP ADD</h4><p>128 or 'builtin'</p></li><li><p>comment - Freeform text description of the group</p></li></ul></div><div class="refsect3" lang="en"><a name="id325398"></a><h4>GROUPMAP ADD</h4><p> 124 129 Add a new group mapping entry: 125 130 </p><pre class="programlisting"> 126 131 net groupmap add {rid=int|sid=string} unixgroup=string \ 127 132 [type={domain|local}] [ntgroup=string] [comment=string] 128 133 </pre><p> 129 </p></div><div class="refsect3" lang="en"><a name="id3 01296"></a><h4>GROUPMAP DELETE</h4><p>Delete a group mapping entry. If more then one group name matches, the first entry found is deleted.</p><p>net groupmap delete {ntgroup=string|sid=SID}</p></div><div class="refsect3" lang="en"><a name="id301310"></a><h4>GROUPMAP MODIFY</h4><p>Update en existing group entry</p><p>134 </p></div><div class="refsect3" lang="en"><a name="id325414"></a><h4>GROUPMAP DELETE</h4><p>Delete a group mapping entry. If more than one group name matches, the first entry found is deleted.</p><p>net groupmap delete {ntgroup=string|sid=SID}</p></div><div class="refsect3" lang="en"><a name="id325427"></a><h4>GROUPMAP MODIFY</h4><p>Update en existing group entry.</p><p> 130 135 </p><pre class="programlisting"> 131 136 net groupmap modify {ntgroup=string|sid=SID} [unixgroup=string] \ 132 137 [comment=string] [type={domain|local}] 133 138 </pre><p> 134 </p></div><div class="refsect3" lang="en"><a name="id3 01330"></a><h4>GROUPMAP LIST</h4><p>List existing group mapping entries</p><p>net groupmap list [verbose] [ntgroup=string] [sid=SID]</p></div></div><div class="refsect2" lang="en"><a name="id301345"></a><h3>MAXRID</h3><p>Prints out the highest RID currently in use on the local139 </p></div><div class="refsect3" lang="en"><a name="id325446"></a><h4>GROUPMAP LIST</h4><p>List existing group mapping entries.</p><p>net groupmap list [verbose] [ntgroup=string] [sid=SID]</p></div></div><div class="refsect2" lang="en"><a name="id325460"></a><h3>MAXRID</h3><p>Prints out the highest RID currently in use on the local 135 140 server (by the active 'passdb backend'). 136 </p></div><div class="refsect2" lang="en"><a name="id3 01356"></a><h3>RPC INFO</h3><p>Print information about the domain of the remote server,141 </p></div><div class="refsect2" lang="en"><a name="id325471"></a><h3>RPC INFO</h3><p>Print information about the domain of the remote server, 137 142 such as domain name, domain sid and number of users and groups. 138 </p></div><div class="refsect2" lang="en"><a name="id301367"></a><h3>[RPC|ADS] TESTJOIN</h3><p>Check whether participation in a domain is still valid.</p></div><div class="refsect2" lang="en"><a name="id301378"></a><h3>[RPC|ADS] CHANGETRUSTPW</h3><p>Force change of domain trust password.</p></div><div class="refsect2" lang="en"><a name="id301388"></a><h3>RPC TRUSTDOM</h3><div class="refsect3" lang="en"><a name="id301393"></a><h4>RPC TRUSTDOM ADD <em class="replaceable"><code>DOMAIN</code></em></h4><p>Add a interdomain trust account for 139 <em class="replaceable"><code>DOMAIN</code></em> to the remote server. 140 </p></div><div class="refsect3" lang="en"><a name="id301410"></a><h4>RPC TRUSTDOM DEL <em class="replaceable"><code>DOMAIM</code></em></h4><p>Remove interdomain trust account for 141 <em class="replaceable"><code>DOMAIN</code></em> from the remote server. 142 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect3" lang="en"><a name="id301431"></a><h4>RPC TRUSTDOM ESTABLISH <em class="replaceable"><code>DOMAIN</code></em></h4><p> 143 </p></div><div class="refsect2" lang="en"><a name="id325482"></a><h3>[RPC|ADS] TESTJOIN</h3><p>Check whether participation in a domain is still valid.</p></div><div class="refsect2" lang="en"><a name="id325491"></a><h3>[RPC|ADS] CHANGETRUSTPW</h3><p>Force change of domain trust password.</p></div><div class="refsect2" lang="en"><a name="id325501"></a><h3>RPC TRUSTDOM</h3><div class="refsect3" lang="en"><a name="id325506"></a><h4>RPC TRUSTDOM ADD <em class="replaceable"><code>DOMAIN</code></em></h4><p>Add a interdomain trust account for <em class="replaceable"><code>DOMAIN</code></em>. 144 This is in fact a Samba account named <em class="replaceable"><code>DOMAIN$</code></em> 145 with the account flag <code class="constant">'I'</code> (interdomain trust account). 146 If the command is used against localhost it has the same effect as 147 <code class="literal">smbpasswd -a -i DOMAIN</code>. Please note that both commands 148 expect a appropriate UNIX account. 149 </p></div><div class="refsect3" lang="en"><a name="id325534"></a><h4>RPC TRUSTDOM DEL <em class="replaceable"><code>DOMAIN</code></em></h4><p>Remove interdomain trust account for 150 <em class="replaceable"><code>DOMAIN</code></em>. If it is used against localhost 151 it has the same effect as <code class="literal">smbpasswd -x DOMAIN$</code>. 152 </p></div><div class="refsect3" lang="en"><a name="id325555"></a><h4>RPC TRUSTDOM ESTABLISH <em class="replaceable"><code>DOMAIN</code></em></h4><p> 143 153 Establish a trust relationship to a trusting domain. 144 154 Interdomain account must already be created on the remote PDC. 145 </p></div><div class="refsect3" lang="en"><a name="id3 01444"></a><h4>RPC TRUSTDOM REVOKE <em class="replaceable"><code>DOMAIN</code></em></h4><p>Abandon relationship to trusted domain</p></div><div class="refsect3" lang="en"><a name="id301457"></a><h4>RPC TRUSTDOM LIST</h4><p>List all current interdomain trust relationships.</p></div><div class="refsect3" lang="en"><a name="id301468"></a><h4>RPC RIGHTS</h4><p>This subcommand is used to view and manage Samba's rights assignments (also146 referred to as privileges). There are three options current available:155 </p></div><div class="refsect3" lang="en"><a name="id325568"></a><h4>RPC TRUSTDOM REVOKE <em class="replaceable"><code>DOMAIN</code></em></h4><p>Abandon relationship to trusted domain</p></div><div class="refsect3" lang="en"><a name="id325580"></a><h4>RPC TRUSTDOM LIST</h4><p>List all current interdomain trust relationships.</p></div><div class="refsect3" lang="en"><a name="id325589"></a><h4>RPC RIGHTS</h4><p>This subcommand is used to view and manage Samba's rights assignments (also 156 referred to as privileges). There are three options currently available: 147 157 <em class="parameter"><code>list</code></em>, <em class="parameter"><code>grant</code></em>, and 148 158 <em class="parameter"><code>revoke</code></em>. More details on Samba's privilege model and its use 149 can be found in the Samba-HOWTO-Collection.</p></div></div><div class="refsect2" lang="en"><a name="id3 01498"></a><h3>RPC ABORTSHUTDOWN</h3><p>Abort the shutdown of a remote server.</p></div><div class="refsect2" lang="en"><a name="id301509"></a><h3>RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]</h3><p>Shut down the remote server.</p><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>159 can be found in the Samba-HOWTO-Collection.</p></div></div><div class="refsect2" lang="en"><a name="id325618"></a><h3>RPC ABORTSHUTDOWN</h3><p>Abort the shutdown of a remote server.</p></div><div class="refsect2" lang="en"><a name="id325627"></a><h3>RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]</h3><p>Shut down the remote server.</p><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p> 150 160 Reboot after shutdown. 151 161 </p></dd><dt><span class="term">-f</span></dt><dd><p> … … 155 165 user of the system can use this time to cancel the shutdown. 156 166 </p></dd><dt><span class="term">-C message</span></dt><dd><p>Display the specified message on the screen to 157 announce the shutdown.</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id3 01568"></a><h3>RPC SAMDUMP</h3><p>Print out sam database of remote server. You need158 to run this against the PDC, from a Samba machine joined as a BDC. </p></div><div class="refsect2" lang="en"><a name="id3 01579"></a><h3>RPC VAMPIRE</h3><p>Export users, aliases and groups from remote server to167 announce the shutdown.</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id325685"></a><h3>RPC SAMDUMP</h3><p>Print out sam database of remote server. You need 168 to run this against the PDC, from a Samba machine joined as a BDC. </p></div><div class="refsect2" lang="en"><a name="id325695"></a><h3>RPC VAMPIRE</h3><p>Export users, aliases and groups from remote server to 159 169 local server. You need to run this against the PDC, from a Samba machine joined as a BDC. 160 </p></div><div class="refsect2" lang="en"><a name="id3 01591"></a><h3>RPC GETSID</h3><p>Fetch domain SID and store it in the local <code class="filename">secrets.tdb</code>. </p></div><div class="refsect2" lang="en"><a name="id301607"></a><h3>ADS LEAVE</h3><p>Make the remote host leave the domain it is part of. </p></div><div class="refsect2" lang="en"><a name="id301617"></a><h3>ADS STATUS</h3><p>Print out status of machine account of the local machine in ADS.170 </p></div><div class="refsect2" lang="en"><a name="id325706"></a><h3>RPC GETSID</h3><p>Fetch domain SID and store it in the local <code class="filename">secrets.tdb</code>. </p></div><div class="refsect2" lang="en"><a name="id325721"></a><h3>ADS LEAVE</h3><p>Make the remote host leave the domain it is part of. </p></div><div class="refsect2" lang="en"><a name="id325731"></a><h3>ADS STATUS</h3><p>Print out status of machine account of the local machine in ADS. 161 171 Prints out quite some debug info. Aimed at developers, regular 162 users should use <code class="literal">NET ADS TESTJOIN</code>.</p></div><div class="refsect2" lang="en"><a name="id3 01634"></a><h3>ADS PRINTER</h3><div class="refsect3" lang="en"><a name="id301640"></a><h4>ADS PRINTER INFO [<em class="replaceable"><code>PRINTER</code></em>] [<em class="replaceable"><code>SERVER</code></em>]</h4><p>172 users should use <code class="literal">NET ADS TESTJOIN</code>.</p></div><div class="refsect2" lang="en"><a name="id325747"></a><h3>ADS PRINTER</h3><div class="refsect3" lang="en"><a name="id325752"></a><h4>ADS PRINTER INFO [<em class="replaceable"><code>PRINTER</code></em>] [<em class="replaceable"><code>SERVER</code></em>]</h4><p> 163 173 Lookup info for <em class="replaceable"><code>PRINTER</code></em> on <em class="replaceable"><code>SERVER</code></em>. The printer name defaults to "*", the 164 server name defaults to the local host.</p></div><div class="refsect3" lang="en"><a name="id3 01665"></a><h4>ADS PRINTER PUBLISH <em class="replaceable"><code>PRINTER</code></em></h4><p>Publish specified printer using ADS.</p></div><div class="refsect3" lang="en"><a name="id301677"></a><h4>ADS PRINTER REMOVE <em class="replaceable"><code>PRINTER</code></em></h4><p>Remove specified printer from ADS directory.</p></div></div><div class="refsect2" lang="en"><a name="id301691"></a><h3>ADS SEARCH <em class="replaceable"><code>EXPRESSION</code></em> <em class="replaceable"><code>ATTRIBUTES...</code></em></h3><p>Perform a raw LDAP search on a ADS server and dump the results. The174 server name defaults to the local host.</p></div><div class="refsect3" lang="en"><a name="id325775"></a><h4>ADS PRINTER PUBLISH <em class="replaceable"><code>PRINTER</code></em></h4><p>Publish specified printer using ADS.</p></div><div class="refsect3" lang="en"><a name="id325787"></a><h4>ADS PRINTER REMOVE <em class="replaceable"><code>PRINTER</code></em></h4><p>Remove specified printer from ADS directory.</p></div></div><div class="refsect2" lang="en"><a name="id325800"></a><h3>ADS SEARCH <em class="replaceable"><code>EXPRESSION</code></em> <em class="replaceable"><code>ATTRIBUTES...</code></em></h3><p>Perform a raw LDAP search on a ADS server and dump the results. The 165 175 expression is a standard LDAP search expression, and the 166 176 attributes are a list of LDAP fields to show in the results.</p><p>Example: <strong class="userinput"><code>net ads search '(objectCategory=group)' sAMAccountName</code></strong> 167 </p></div><div class="refsect2" lang="en"><a name="id3 01718"></a><h3>ADS DN <em class="replaceable"><code>DN</code></em> <em class="replaceable"><code>(attributes)</code></em></h3><p>177 </p></div><div class="refsect2" lang="en"><a name="id325825"></a><h3>ADS DN <em class="replaceable"><code>DN</code></em> <em class="replaceable"><code>(attributes)</code></em></h3><p> 168 178 Perform a raw LDAP search on a ADS server and dump the results. The 169 179 DN standard LDAP DN, and the attributes are a list of LDAP fields 170 180 to show in the result. 171 </p><p>Example: <strong class="userinput"><code>net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountName</code></strong></p></div><div class="refsect2" lang="en"><a name="id3 01744"></a><h3>ADS WORKGROUP</h3><p>Print out workgroup name for specified kerberos realm.</p></div><div class="refsect2" lang="en"><a name="id301754"></a><h3>SAM CREATEBUILTINGROUP <NAME></h3><p>181 </p><p>Example: <strong class="userinput"><code>net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountName</code></strong></p></div><div class="refsect2" lang="en"><a name="id325849"></a><h3>ADS WORKGROUP</h3><p>Print out workgroup name for specified kerberos realm.</p></div><div class="refsect2" lang="en"><a name="id325859"></a><h3>SAM CREATEBUILTINGROUP <NAME></h3><p> 172 182 (Re)Create a BUILTIN group. 173 183 Only a wellknown set of BUILTIN groups can be created with this command. … … 175 185 Users, Guests, Power Users, Account Operators, Server Operators, Print 176 186 Operators, Backup Operators, Replicator, RAS Servers, Pre-Windows 2000 177 ompatible Access.187 compatible Access. 178 188 179 189 This command requires a running Winbindd with idmap allocation properly 180 190 configured. The group gid will be allocated out of the winbindd range. 181 </p></div><div class="refsect2" lang="en"><a name="id3 01768"></a><h3>SAM CREATELOCALGROUP <NAME></h3><p>191 </p></div><div class="refsect2" lang="en"><a name="id325873"></a><h3>SAM CREATELOCALGROUP <NAME></h3><p> 182 192 Create a LOCAL group (also known as Alias). 183 193 184 194 This command requires a running Winbindd with idmap allocation properly 185 195 configured. The group gid will be allocated out of the winbindd range. 186 </p></div><div class="refsect2" lang="en"><a name="id3 01780"></a><h3>SAM DELETELOCALGROUP <NAME></h3><p>196 </p></div><div class="refsect2" lang="en"><a name="id325884"></a><h3>SAM DELETELOCALGROUP <NAME></h3><p> 187 197 Delete an existing LOCAL group (also known as Alias). 188 198 189 </p></div><div class="refsect2" lang="en"><a name="id3 01791"></a><h3>SAM MAPUNIXGROUP <NAME></h3><p>199 </p></div><div class="refsect2" lang="en"><a name="id325894"></a><h3>SAM MAPUNIXGROUP <NAME></h3><p> 190 200 Map an existing Unix group and make it a Domain Group, the domain group 191 201 will have the same name. 192 </p></div><div class="refsect2" lang="en"><a name="id3 01802"></a><h3>SAM UNMAPUNIXGROUP <NAME></h3><p>202 </p></div><div class="refsect2" lang="en"><a name="id325905"></a><h3>SAM UNMAPUNIXGROUP <NAME></h3><p> 193 203 Remove an existing group mapping entry. 194 </p></div><div class="refsect2" lang="en"><a name="id3 01813"></a><h3>SAM ADDMEM <GROUP> <MEMBER></h3><p>204 </p></div><div class="refsect2" lang="en"><a name="id325914"></a><h3>SAM ADDMEM <GROUP> <MEMBER></h3><p> 195 205 Add a member to a Local group. The group can be specified only by name, 196 206 the member can be specified by name or SID. 197 </p></div><div class="refsect2" lang="en"><a name="id3 01824"></a><h3>SAM DELMEM <GROUP> <MEMBER></h3><p>207 </p></div><div class="refsect2" lang="en"><a name="id325926"></a><h3>SAM DELMEM <GROUP> <MEMBER></h3><p> 198 208 Remove a member from a Local group. The group and the member must be 199 209 specified by name. 200 </p></div><div class="refsect2" lang="en"><a name="id3 01835"></a><h3>SAM LISTMEM <GROUP></h3><p>210 </p></div><div class="refsect2" lang="en"><a name="id325937"></a><h3>SAM LISTMEM <GROUP></h3><p> 201 211 List Local group members. The group must be specified by name. 202 </p></div><div class="refsect2" lang="en"><a name="id3 01846"></a><h3>SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]</h3><p>212 </p></div><div class="refsect2" lang="en"><a name="id325947"></a><h3>SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]</h3><p> 203 213 List the specified set of accounts by name. If verbose is specified, 204 214 the rid and description is also provided for each account. 205 </p></div><div class="refsect2" lang="en"><a name="id3 01858"></a><h3>SAM SHOW <NAME></h3><p>206 Show the full DOMAIN\\NAME the SID and the type for the corr isponding215 </p></div><div class="refsect2" lang="en"><a name="id325959"></a><h3>SAM SHOW <NAME></h3><p> 216 Show the full DOMAIN\\NAME the SID and the type for the corresponding 207 217 account. 208 </p></div><div class="refsect2" lang="en"><a name="id3 01868"></a><h3>SAM SET HOMEDIR <NAME> <DIRECTORY></h3><p>218 </p></div><div class="refsect2" lang="en"><a name="id325970"></a><h3>SAM SET HOMEDIR <NAME> <DIRECTORY></h3><p> 209 219 Set the home directory for a user account. 210 </p></div><div class="refsect2" lang="en"><a name="id3 01879"></a><h3>SAM SET PROFILEPATH <NAME> <PATH></h3><p>220 </p></div><div class="refsect2" lang="en"><a name="id325979"></a><h3>SAM SET PROFILEPATH <NAME> <PATH></h3><p> 211 221 Set the profile path for a user account. 212 </p></div><div class="refsect2" lang="en"><a name="id3 01890"></a><h3>SAM SET COMMENT <NAME> <COMMENT></h3><p>222 </p></div><div class="refsect2" lang="en"><a name="id325989"></a><h3>SAM SET COMMENT <NAME> <COMMENT></h3><p> 213 223 Set the comment for a user or group account. 214 </p></div><div class="refsect2" lang="en"><a name="id3 01900"></a><h3>SAM SET FULLNAME <NAME> <FULL NAME></h3><p>224 </p></div><div class="refsect2" lang="en"><a name="id325998"></a><h3>SAM SET FULLNAME <NAME> <FULL NAME></h3><p> 215 225 Set the full name for a user account. 216 </p></div><div class="refsect2" lang="en"><a name="id3 01911"></a><h3>SAM SET LOGONSCRIPT <NAME> <SCRIPT></h3><p>226 </p></div><div class="refsect2" lang="en"><a name="id326008"></a><h3>SAM SET LOGONSCRIPT <NAME> <SCRIPT></h3><p> 217 227 Set the logon script for a user account. 218 </p></div><div class="refsect2" lang="en"><a name="id3 01921"></a><h3>SAM SET HOMEDRIVE <NAME> <DRIVE></h3><p>228 </p></div><div class="refsect2" lang="en"><a name="id326018"></a><h3>SAM SET HOMEDRIVE <NAME> <DRIVE></h3><p> 219 229 Set the home drive for a user account. 220 </p></div><div class="refsect2" lang="en"><a name="id3 01932"></a><h3>SAM SET WORKSTATIONS <NAME> <WORKSTATIONS></h3><p>230 </p></div><div class="refsect2" lang="en"><a name="id326027"></a><h3>SAM SET WORKSTATIONS <NAME> <WORKSTATIONS></h3><p> 221 231 Set the workstations a user account is allowed to log in from. 222 </p></div><div class="refsect2" lang="en"><a name="id3 01943"></a><h3>SAM SET DISABLE <NAME></h3><p>232 </p></div><div class="refsect2" lang="en"><a name="id326037"></a><h3>SAM SET DISABLE <NAME></h3><p> 223 233 Set the "disabled" flag for a user account. 224 </p></div><div class="refsect2" lang="en"><a name="id3 01953"></a><h3>SAM SET PWNOTREQ <NAME></h3><p>234 </p></div><div class="refsect2" lang="en"><a name="id326047"></a><h3>SAM SET PWNOTREQ <NAME></h3><p> 225 235 Set the "password not required" flag for a user account. 226 </p></div><div class="refsect2" lang="en"><a name="id3 01964"></a><h3>SAM SET AUTOLOCK <NAME></h3><p>236 </p></div><div class="refsect2" lang="en"><a name="id326057"></a><h3>SAM SET AUTOLOCK <NAME></h3><p> 227 237 Set the "autolock" flag for a user account. 228 </p></div><div class="refsect2" lang="en"><a name="id3 01974"></a><h3>SAM SET PWNOEXP <NAME></h3><p>238 </p></div><div class="refsect2" lang="en"><a name="id326067"></a><h3>SAM SET PWNOEXP <NAME></h3><p> 229 239 Set the "password do not expire" flag for a user account. 230 </p></div><div class="refsect2" lang="en"><a name="id3 01985"></a><h3>SAM SET PWMUSTCHANGENOW <NAME> [yes|no]</h3><p>231 Set or unset the "password must change" flag f roa user account.232 </p></div><div class="refsect2" lang="en"><a name="id3 01996"></a><h3>SAM POLICY LIST</h3><p>233 List the av ilable account policies.234 </p></div><div class="refsect2" lang="en"><a name="id3 02006"></a><h3>SAM POLICY SHOW <account policy></h3><p>240 </p></div><div class="refsect2" lang="en"><a name="id326077"></a><h3>SAM SET PWDMUSTCHANGENOW <NAME> [yes|no]</h3><p> 241 Set or unset the "password must change" flag for a user account. 242 </p></div><div class="refsect2" lang="en"><a name="id326087"></a><h3>SAM POLICY LIST</h3><p> 243 List the available account policies. 244 </p></div><div class="refsect2" lang="en"><a name="id326097"></a><h3>SAM POLICY SHOW <account policy></h3><p> 235 245 Show the account policy value. 236 </p></div><div class="refsect2" lang="en"><a name="id3 02016"></a><h3>SAM POLICY SET <account policy> <value></h3><p>246 </p></div><div class="refsect2" lang="en"><a name="id326107"></a><h3>SAM POLICY SET <account policy> <value></h3><p> 237 247 Set a value for the account policy. 238 248 Valid values can be: "forever", "never", "off", or a number. 239 </p></div><div class="refsect2" lang="en"><a name="id3 02028"></a><h3>SAM PROVISION</h3><p>249 </p></div><div class="refsect2" lang="en"><a name="id326118"></a><h3>SAM PROVISION</h3><p> 240 250 Only available if ldapsam:editposix is set and winbindd is running. 241 251 Properly populates the ldap tree with the basic accounts (Administrator) 242 252 and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree. 243 </p></div><div class="refsect2" lang="en"><a name="id302040"></a><h3>IDMAP DUMP <output file></h3><p> 244 Dumps the mappings in the specified output file. 245 </p></div><div class="refsect2" lang="en"><a name="id302050"></a><h3>IDMAP RESTORE [input file]</h3><p> 253 </p></div><div class="refsect2" lang="en"><a name="id326130"></a><h3>IDMAP DUMP <local tdb file name></h3><p> 254 Dumps the mappings contained in the local tdb file specified. 255 This command is useful to dump only the mappings produced by the idmap_tdb backend. 256 </p></div><div class="refsect2" lang="en"><a name="id326141"></a><h3>IDMAP RESTORE [input file]</h3><p> 246 257 Restore the mappings from the specified file or stdin. 247 </p></div><div class="refsect2" lang="en"><a name="id3 02061"></a><h3>IDMAP SECRET <DOMAIN>|ALLOC <secret></h3><p>248 Store a secret for the s epcified domain, used primarily for domains258 </p></div><div class="refsect2" lang="en"><a name="id326152"></a><h3>IDMAP SECRET <DOMAIN>|ALLOC <secret></h3><p> 259 Store a secret for the specified domain, used primarily for domains 249 260 that use idmap_ldap as a backend. In this case the secret is used 250 261 as the password for the user DN used to bind to the ldap server. 251 </p></div><div class="refsect2" lang="en"><a name="id3 02073"></a><h3>USERSHARE</h3><p>Starting with version 3.0.23, a Samba server now supports the ability for252 non-root users to add user define shares to be exported using the "net usershare"262 </p></div><div class="refsect2" lang="en"><a name="id326164"></a><h3>USERSHARE</h3><p>Starting with version 3.0.23, a Samba server now supports the ability for 263 non-root users to add user defined shares to be exported using the "net usershare" 253 264 commands. 254 265 </p><p> 255 To set this up, first set up your smb.conf by adding to the [global] section 266 To set this up, first set up your smb.conf by adding to the [global] section: 256 267 257 268 usershare path = /usr/local/samba/lib/usershares … … 278 289 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] - to add or change a user defined share.</td></tr><tr><td>net usershare delete sharename - to delete a user defined share.</td></tr><tr><td>net usershare info [-l|--long] [wildcard sharename] - to print info about a user defined share.</td></tr><tr><td>net usershare list [-l|--long] [wildcard sharename] - to list user defined shares.</td></tr></table><p> 279 290 280 </p><div class="refsect3" lang="en"><a name="id3 02119"></a><h4>USERSHARE ADD <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>[comment]</code></em> <em class="replaceable"><code>[acl]</code></em> <em class="replaceable"><code>[guest_ok=[y|n]]</code></em></h4><p>291 </p><div class="refsect3" lang="en"><a name="id326209"></a><h4>USERSHARE ADD <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>[comment]</code></em> <em class="replaceable"><code>[acl]</code></em> <em class="replaceable"><code>[guest_ok=[y|n]]</code></em></h4><p> 281 292 Add or replace a new user defined share, with name "sharename". 282 293 </p><p> 283 294 "path" specifies the absolute pathname on the system to be exported. 284 Restrictions may be put on this, see the global smb.conf parameters 295 Restrictions may be put on this, see the global smb.conf parameters: 285 296 "usershare owner only", "usershare prefix allow list", and 286 297 "usershare prefix deny list". … … 292 303 Note that guest connections are not allowed unless the smb.conf parameter 293 304 "usershare allow guests" has been set. The definition of a user 294 defined share acl is 305 defined share acl is: "user:permission", where user is a valid 295 306 username on the system and permission can be "F", "R", or "D". 296 307 "F" stands for "full permissions", ie. read and write permissions. … … 315 326 at connect time so will see the change immediately, there is no need 316 327 to restart smbd on adding, deleting or changing a user defined share. 317 </div><div class="refsect3" lang="en"><a name="id3 02183"></a><h4>USERSHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p>328 </div><div class="refsect3" lang="en"><a name="id326266"></a><h4>USERSHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p> 318 329 Deletes the user defined share by name. The Samba smbd daemon 319 330 immediately notices this change, although it will not disconnect 320 331 any users currently connected to the deleted share. 321 </p></div><div class="refsect3" lang="en"><a name="id3 02197"></a><h4>USERSHARE INFO <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>[wildcard sharename]</code></em></h4><p>332 </p></div><div class="refsect3" lang="en"><a name="id326279"></a><h4>USERSHARE INFO <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>[wildcard sharename]</code></em></h4><p> 322 333 Get info on user defined shares owned by the current user matching the given pattern, or all users. 323 334 </p><p> … … 328 339 shares created by other users. 329 340 </p><p> 330 The information given about a share looks like 341 The information given about a share looks like: 331 342 332 343 [foobar] … … 338 349 And is a list of the current settings of the user defined share that can be 339 350 modified by the "net usershare add" command. 340 </p></div><div class="refsect3" lang="en"><a name="id3 02225"></a><h4>USERSHARE LIST <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>wildcard sharename</code></em></h4><p>351 </p></div><div class="refsect3" lang="en"><a name="id326307"></a><h4>USERSHARE LIST <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>wildcard sharename</code></em></h4><p> 341 352 List all the user defined shares owned by the current user matching the given pattern, or all users. 342 353 </p><p> … … 346 357 If the '-l' or '--long' option is also given, it includes the names of user defined 347 358 shares created by other users. 348 </p></div></div><div class="refsect2" lang="en"><a name="id3 02250"></a><h3>HELP [COMMAND]</h3><p>Gives usage information for the specified command.</p></div></div><div class="refsect1" lang="en"><a name="id302261"></a><h2>VERSION</h2><p>This man page is complete for version 3.0 of the Samba349 suite.</p></div><div class="refsect1" lang="en"><a name="id3 02272"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities359 </p></div></div><div class="refsect2" lang="en"><a name="id326334"></a><h3>HELP [COMMAND]</h3><p>Gives usage information for the specified command.</p></div></div><div class="refsect1" lang="en"><a name="id326344"></a><h2>VERSION</h2><p>This man page is complete for version 3.0 of the Samba 360 suite.</p></div><div class="refsect1" lang="en"><a name="id326354"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 350 361 were created by Andrew Tridgell. Samba is now developed 351 362 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/nmbd.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>nmbd</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="nmbd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>nmbd — NetBIOS name server to provide NetBIOS2 over IP naming services to clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">nmbd</code> [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-p <port number>] [-s <configuration file>]</p></div></div><div class="refsect1" lang="en"><a name="id2 59605"></a><h2>DESCRIPTION</h2><p>This program is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">nmbd</code> is a server that understands1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>nmbd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="nmbd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>nmbd — NetBIOS name server to provide NetBIOS 2 over IP naming services to clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">nmbd</code> [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-p <port number>] [-s <configuration file>]</p></div></div><div class="refsect1" lang="en"><a name="id282811"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">nmbd</code> is a server that understands 3 3 and can reply to NetBIOS over IP name service requests, like 4 4 those produced by SMB/CIFS clients such as Windows 95/98/ME, … … 12 12 is running on. Its "own NetBIOS name" is by 13 13 default the primary DNS name of the host it is running on, 14 but this can be overridden by the <a class=" indexterm" name="id259397"></a>netbios name14 but this can be overridden by the <a class="link" href="smb.conf.5.html#NETBIOSNAME">netbios name</a> 15 15 in <code class="filename">smb.conf</code>. Thus <code class="literal">nmbd</code> will 16 16 reply to broadcast queries for its own name(s). Additional 17 17 names for <code class="literal">nmbd</code> to respond on can be set 18 via parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> configuration file.</p><p><code class="literal">nmbd</code> can also be used as a WINS18 via parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> configuration file.</p><p><code class="literal">nmbd</code> can also be used as a WINS 19 19 (Windows Internet Name Server) server. What this basically means 20 20 is that it will act as a WINS database server, creating a … … 23 23 proxy, relaying broadcast queries from clients that do 24 24 not understand how to talk the WINS protocol to a WINS 25 server.</p></div><div class="refsect1" lang="en"><a name="id2 60369"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes25 server.</p></div><div class="refsect1" lang="en"><a name="id283029"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes 26 26 <code class="literal">nmbd</code> to operate as a daemon. That is, 27 27 it detaches itself and runs in the background, fielding … … 52 52 file is a list of NetBIOS names to IP addresses that 53 53 is loaded by the nmbd server and used via the name 54 resolution mechanism <a class=" indexterm" name="id260151"></a>name resolve order described in <ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> to resolve any54 resolution mechanism <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a> described in <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> to resolve any 55 55 NetBIOS name queries needed by the server. Note 56 56 that the contents of this file are <span class="emphasis"><em>NOT</em></span> … … 61 61 are <code class="filename">/usr/local/samba/lib/lmhosts</code>, 62 62 <code class="filename">/usr/samba/lib/lmhosts</code> or 63 <code class="filename">/etc/samba/lmhosts</code>. See the <a href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> man page for details on the contents of this file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 64 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 65 configuration details required by the server. The 66 information in this file includes server-specific 67 information such as what printcap file to use, as well 68 as descriptions of all the services that the server is 69 to provide. See <code class="filename">smb.conf</code> for more information. 70 The default configuration file name is determined at 71 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 72 from 0 to 10. The default value if this parameter is 73 not specified is zero.</p><p>The higher this value, the more detail will be 63 <code class="filename">/etc/samba/lmhosts</code>. See the <a class="citerefentry" href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> man page for details on the contents of this file.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 64 from 0 to 10. The default value if this parameter is 65 not specified is 0.</p><p>The higher this value, the more detail will be 74 66 logged to the log files about the activities of the 75 67 server. At level 0, only critical errors and serious … … 81 73 use only by developers and generate HUGE amounts of log 82 74 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 83 override the <a class="indexterm" name="id300494"></a> parameter 84 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 75 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 76 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 77 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 78 configuration details required by the server. The 79 information in this file includes server-specific 80 information such as what printcap file to use, as well 81 as descriptions of all the services that the server is 82 to provide. See <code class="filename">smb.conf</code> for more information. 83 The default configuration file name is determined at 84 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 85 85 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 86 86 log.smbd, etc...). The log file is never removed by the client. … … 89 89 that <code class="literal">nmbd</code> responds to name queries on. Don't 90 90 use this option unless you are an expert, in which case you 91 won't need help!</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00546"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>If the server is to be run by the91 won't need help!</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324682"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>If the server is to be run by the 92 92 <code class="literal">inetd</code> meta-daemon, this file 93 93 must contain suitable startup information for the … … 101 101 to service port (e.g., 139) and protocol type (e.g., tcp). 102 102 </p></dd><dt><span class="term"><code class="filename">/usr/local/samba/lib/smb.conf</code></span></dt><dd><p>This is the default location of 103 the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server103 the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server 104 104 configuration file. Other common places that systems 105 105 install this file are <code class="filename">/usr/samba/lib/smb.conf</code> 106 106 and <code class="filename">/etc/samba/smb.conf</code>.</p><p>When run as a WINS server (see the 107 <a class=" indexterm" name="id300653"></a>wins support108 parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page),107 <a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support</a> 108 parameter in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page), 109 109 <code class="literal">nmbd</code> 110 110 will store the WINS database in the file <code class="filename">wins.dat</code> 111 111 in the <code class="filename">var/locks</code> directory configured under 112 112 wherever Samba was configured to install itself.</p><p>If <code class="literal">nmbd</code> is acting as a <span class="emphasis"><em> 113 browse master</em></span> (see the <a class=" indexterm" name="id300700"></a>local master114 parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page, <code class="literal">nmbd</code>113 browse master</em></span> (see the <a class="link" href="smb.conf.5.html#LOCALMASTER">local master</a> 114 parameter in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> man page, <code class="literal">nmbd</code> 115 115 will store the browsing database in the file <code class="filename">browse.dat 116 116 </code> in the <code class="filename">var/locks</code> directory 117 117 configured under wherever Samba was configured to install itself. 118 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00739"></a><h2>SIGNALS</h2><p>To shut down an <code class="literal">nmbd</code> process it is recommended118 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324858"></a><h2>SIGNALS</h2><p>To shut down an <code class="literal">nmbd</code> process it is recommended 119 119 that SIGKILL (-9) <span class="emphasis"><em>NOT</em></span> be used, except as a last 120 120 resort, as this may leave the name database in an inconsistent state. … … 127 127 cause <code class="literal">nmbd</code> to dump out its server database in 128 128 the <code class="filename">log.nmb</code> file.</p><p>The debug log level of nmbd may be raised or lowered 129 using <a href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a> (SIGUSR[1|2] signals129 using <a class="citerefentry" href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a> (SIGUSR[1|2] signals 130 130 are no longer used since Samba 2.2). This is to allow 131 131 transient problems to be diagnosed, whilst still running 132 at a normally low log level.</p></div><div class="refsect1" lang="en"><a name="id3 00819"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of133 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00829"></a><h2>SEE ALSO</h2><p>134 <a href="inetd.8.html"><span class="citerefentry"><span class="refentrytitle">inetd</span>(8)</span></a>, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <ahref="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>, and the Internet132 at a normally low log level.</p></div><div class="refsect1" lang="en"><a name="id324930"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 133 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324940"></a><h2>SEE ALSO</h2><p> 134 <a class="citerefentry" href="inetd.8.html"><span class="citerefentry"><span class="refentrytitle">inetd</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>, and the Internet 135 135 RFC's <code class="filename">rfc1001.txt</code>, <code class="filename">rfc1002.txt</code>. 136 136 In addition the CIFS (formerly SMB) specification is available 137 as a link from the Web page <a href="http://samba.org/cifs/" target="_top">138 http://samba.org/cifs/</a>.</p></div><div class="refsect1" lang="en"><a name="id3 00907"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities137 as a link from the Web page <a class="ulink" href="http://samba.org/cifs/" target="_top"> 138 http://samba.org/cifs/</a>.</p></div><div class="refsect1" lang="en"><a name="id325013"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 139 139 were created by Andrew Tridgell. Samba is now developed 140 140 by the Samba Team as an Open Source project similar 141 141 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 142 142 The man page sources were converted to YODL format (another 143 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">143 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 144 144 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 145 145 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/nmblookup.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>nmblookup</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="nmblookup"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>nmblookup — NetBIOS over TCP/IP client used to lookup NetBIOS2 names</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">nmblookup</code> [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}</p></div></div><div class="refsect1" lang="en"><a name="id2 59363"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">nmblookup</code> is used to query NetBIOS names1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>nmblookup</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="nmblookup"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>nmblookup — NetBIOS over TCP/IP client used to lookup NetBIOS 2 names</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">nmblookup</code> [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}</p></div></div><div class="refsect1" lang="en"><a name="id282793"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">nmblookup</code> is used to query NetBIOS names 3 3 and map them to IP addresses in a network using NetBIOS over TCP/IP 4 4 queries. The options allow the name queries to be directed at a 5 5 particular IP broadcast area or to a particular machine. All queries 6 are done over UDP.</p></div><div class="refsect1" lang="en"><a name="id2 59391"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-M</span></dt><dd><p>Searches for a master browser by looking6 are done over UDP.</p></div><div class="refsect1" lang="en"><a name="id283377"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-M</span></dt><dd><p>Searches for a master browser by looking 7 7 up the NetBIOS name <em class="replaceable"><code>name</code></em> with a 8 8 type of <code class="constant">0x1d</code>. If <em class="replaceable"><code> … … 25 25 and only replies to UDP port 137. Unfortunately, on most UNIX 26 26 systems root privilege is needed to bind to this port, and 27 in addition, if the <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> daemon is running on this machine it also binds to this port.27 in addition, if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> daemon is running on this machine it also binds to this port. 28 28 </p></dd><dt><span class="term">-A</span></dt><dd><p>Interpret <em class="replaceable"><code>name</code></em> as 29 29 an IP Address and do a node status query on this address.</p></dd><dt><span class="term">-n <primary NetBIOS name></span></dt><dd><p>This option allows you to override 30 30 the NetBIOS name that Samba uses for itself. This is identical 31 to setting the <a class=" indexterm" name="id260420"></a> parameter in the <code class="filename">smb.conf</code> file.31 to setting the <a class="link" href="smb.conf.5.html#NETBIOSNAME">netbios name</a> parameter in the <code class="filename">smb.conf</code> file. 32 32 However, a command 33 33 line setting will take precedence over settings in … … 49 49 this option the default behavior of nmblookup is to send the 50 50 query to the broadcast address of the network interfaces as 51 either auto-detected or defined in the <a href="smb.conf.5.html#INTERFACES" target="_top"><em class="parameter"><code>interfaces</code></em>52 </a> parameter of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file.51 either auto-detected or defined in the <a class="ulink" href="smb.conf.5.html#INTERFACES" target="_top"><em class="parameter"><code>interfaces</code></em> 52 </a> parameter of the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. 53 53 </p></dd><dt><span class="term">-U <unicast address></span></dt><dd><p>Do a unicast query to the specified address or 54 54 host <em class="replaceable"><code>unicast address</code></em>. This option 55 55 (along with the <em class="parameter"><code>-R</code></em> option) is needed to 56 query a WINS server.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 57 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 58 configuration details required by the server. The 59 information in this file includes server-specific 60 information such as what printcap file to use, as well 61 as descriptions of all the services that the server is 62 to provide. See <code class="filename">smb.conf</code> for more information. 63 The default configuration file name is determined at 64 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 65 from 0 to 10. The default value if this parameter is 66 not specified is zero.</p><p>The higher this value, the more detail will be 56 query a WINS server.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 57 from 0 to 10. The default value if this parameter is 58 not specified is 0.</p><p>The higher this value, the more detail will be 67 59 logged to the log files about the activities of the 68 60 server. At level 0, only critical errors and serious … … 74 66 use only by developers and generate HUGE amounts of log 75 67 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 76 override the <a class="indexterm" name="id300479"></a> parameter 77 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 68 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 69 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 70 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 71 configuration details required by the server. The 72 information in this file includes server-specific 73 information such as what printcap file to use, as well 74 as descriptions of all the services that the server is 75 to provide. See <code class="filename">smb.conf</code> for more information. 76 The default configuration file name is determined at 77 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 78 78 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 79 79 log.smbd, etc...). The log file is never removed by the client. … … 89 89 by appending '#<type>' to the name. This name may also be 90 90 '*', which will return all registered names within a broadcast 91 area.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00559"></a><h2>EXAMPLES</h2><p><code class="literal">nmblookup</code> can be used to query91 area.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324678"></a><h2>EXAMPLES</h2><p><code class="literal">nmblookup</code> can be used to query 92 92 a WINS server (in the same way <code class="literal">nslookup</code> is 93 93 used to query DNS servers). To query a WINS server, <code class="literal">nmblookup</code> 94 94 must be called like this:</p><p><code class="literal">nmblookup -U server -R 'name'</code></p><p>For example, running :</p><p><code class="literal">nmblookup -U samba.org -R 'IRIX#1B'</code></p><p>would query the WINS server samba.org for the domain 95 master browser (1B name type) for the IRIX workgroup.</p></div><div class="refsect1" lang="en"><a name="id3 00608"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of96 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00619"></a><h2>SEE ALSO</h2><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, and <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id300651"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities95 master browser (1B name type) for the IRIX workgroup.</p></div><div class="refsect1" lang="en"><a name="id324723"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 96 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324734"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, and <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id324765"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 97 97 were created by Andrew Tridgell. Samba is now developed 98 98 by the Samba Team as an Open Source project similar 99 99 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 100 100 The man page sources were converted to YODL format (another 101 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">101 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 102 102 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 103 103 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/ntlm_auth.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>ntlm_auth</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="ntlm-auth.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>ntlm_auth — tool to allow external access to Winbind's NTLM authentication function</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">ntlm_auth</code> [-d debuglevel] [-l logdir] [-s <smb config file>]</p></div></div><div class="refsect1" lang="en"><a name="id259314"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">ntlm_auth</code> is a helper utility that authenticates1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>ntlm_auth</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="ntlm-auth.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>ntlm_auth — tool to allow external access to Winbind's NTLM authentication function</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">ntlm_auth</code> [-d debuglevel] [-l logdir] [-s <smb config file>]</p></div></div><div class="refsect1" lang="en"><a name="id283753"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">ntlm_auth</code> is a helper utility that authenticates 2 2 users using NT/LM authentication. It returns 0 if the users is authenticated 3 3 successfully and 1 if access was denied. ntlm_auth uses winbind to access 4 4 the user and authentication data for a domain. This utility 5 5 is only indended to be used by other programs (currently 6 <a href="http://www.squid-cache.org/" target="_top">Squid</a>7 and <a href="http://download.samba.org/ftp/unpacked/lorikeet/trunk/mod_ntlm_winbind/" target="_top">mod_ntlm_winbind</a>)8 </p></div><div class="refsect1" lang="en"><a name="id2 59568"></a><h2>OPERATIONAL REQUIREMENTS</h2><p>9 The <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be operational6 <a class="ulink" href="http://www.squid-cache.org/" target="_top">Squid</a> 7 and <a class="ulink" href="http://download.samba.org/ftp/unpacked/lorikeet/trunk/mod_ntlm_winbind/" target="_top">mod_ntlm_winbind</a>) 8 </p></div><div class="refsect1" lang="en"><a name="id282750"></a><h2>OPERATIONAL REQUIREMENTS</h2><p> 9 The <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be operational 10 10 for many of these commands to function.</p><p>Some of these commands also require access to the directory 11 11 <code class="filename">winbindd_privileged</code> in … … 13 13 this command as root or providing group access 14 14 to the <code class="filename">winbindd_privileged</code> directory. For 15 security reasons, this directory should not be world-accessable. </p></div><div class="refsect1" lang="en"><a name="id2 59359"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">--helper-protocol=PROTO</span></dt><dd><p>15 security reasons, this directory should not be world-accessable. </p></div><div class="refsect1" lang="en"><a name="id282790"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">--helper-protocol=PROTO</span></dt><dd><p> 16 16 Operate as a stdio-based helper. Valid helper protocols are: 17 17 </p><div class="variablelist"><dl><dt><span class="term">squid-2.4-basic</span></dt><dd><p> … … 24 24 <code class="filename">winbindd_privileged</code> in 25 25 <code class="filename">$LOCKDIR</code>. The protocol used is 26 described here: <a href="http://devel.squid-cache.org/ntlm/squid_helper_protocol.html" target="_top">http://devel.squid-cache.org/ntlm/squid_helper_protocol.html</a>.26 described here: <a class="ulink" href="http://devel.squid-cache.org/ntlm/squid_helper_protocol.html" target="_top">http://devel.squid-cache.org/ntlm/squid_helper_protocol.html</a>. 27 27 This protocol has been extended to allow the 28 28 NTLMSSP Negotiate packet to be included as an argument … … 30 30 loss of information in the protocol exchange). 31 31 </p></dd><dt><span class="term">ntlmssp-client-1</span></dt><dd><p> 32 Client-side helper for use with arbit ary external32 Client-side helper for use with arbitrary external 33 33 programs that may wish to use Samba's NTLMSSP 34 authentication knowle ge. </p><p>This helper is a client, and as such may be run by any34 authentication knowledge. </p><p>This helper is a client, and as such may be run by any 35 35 user. The protocol used is 36 effectiv ly the reverse of the previous protocol. A36 effectively the reverse of the previous protocol. A 37 37 <code class="literal">YR</code> command (without any arguments) 38 38 starts the authentication exchange. … … 54 54 RADIUS server or the 'winbind' plugin for pppd, for 55 55 the provision of MSCHAP and MSCHAPv2 authentication. 56 </p><p>This protocol consists of lines in forform:57 <code class="literal">Parameter: value</code> and <code class="literal">Param ter::56 </p><p>This protocol consists of lines in the form: 57 <code class="literal">Parameter: value</code> and <code class="literal">Parameter:: 58 58 Base64-encode value</code>. The presence of a single 59 59 period <code class="literal">.</code> indicates that one side has … … 65 65 a newline. They may also need to decode strings from 66 66 the helper, which likewise may have been base64 encoded.</div><dl><dt><span class="term">Username</span></dt><dd><p>The username, expected to be in 67 Samba's <a class=" indexterm" name="id260130"></a>unix charset.68 </p><div class="example"><a name="id2 60139"></a><p class="title"><b>Example 1. </b></p><div class="example-contents">Username: bob</div></div><p><br class="example-break"></p><div class="example"><a name="id260143"></a><p class="title"><b>Example 2. </b></p><div class="example-contents">Username:: Ym9i</div></div><p><br class="example-break"></p></dd><dt><span class="term">Username</span></dt><dd><p>The user's domain, expected to be in69 Samba's <a class=" indexterm" name="id260157"></a>unix charset.70 </p><div class="example"><a name="id2 60167"></a><p class="title"><b>Example 3. </b></p><div class="example-contents">Domain: WORKGROUP</div></div><p><br class="example-break"></p><div class="example"><a name="id260171"></a><p class="title"><b>Example 4. </b></p><div class="example-contents">Domain:: V09SS0dST1VQ</div></div><p><br class="example-break"></p></dd><dt><span class="term">Full-Username</span></dt><dd><p>The fully qualified username, expected to be in71 Samba's <a class=" indexterm" name="id260184"></a> and qualified with the72 <a class=" indexterm" name="id260190"></a>winbind separator.73 </p><div class="example"><a name="id2 60199"></a><p class="title"><b>Example 5. </b></p><div class="example-contents">Full-Username: WORKGROUP\bob</div></div><p><br class="example-break"></p><div class="example"><a name="id260204"></a><p class="title"><b>Example 6. </b></p><div class="example-contents">Full-Username:: V09SS0dST1VQYm9i</div></div><p><br class="example-break"></p></dd><dt><span class="term">LANMAN-Challenge</span></dt><dd><p>The 8 byte <code class="literal">LANMAN Challenge</code> value,67 Samba's <a class="link" href="smb.conf.5.html#UNIXCHARSET">unix charset</a>. 68 </p><div class="example"><a name="id283022"></a><p class="title"><b>Example 1. </b></p><div class="example-contents">Username: bob</div></div><p><br class="example-break"></p><div class="example"><a name="id283027"></a><p class="title"><b>Example 2. </b></p><div class="example-contents">Username:: Ym9i</div></div><p><br class="example-break"></p></dd><dt><span class="term">Username</span></dt><dd><p>The user's domain, expected to be in 69 Samba's <a class="link" href="smb.conf.5.html#UNIXCHARSET">unix charset</a>. 70 </p><div class="example"><a name="id283053"></a><p class="title"><b>Example 3. </b></p><div class="example-contents">Domain: WORKGROUP</div></div><p><br class="example-break"></p><div class="example"><a name="id283057"></a><p class="title"><b>Example 4. </b></p><div class="example-contents">Domain:: V09SS0dST1VQ</div></div><p><br class="example-break"></p></dd><dt><span class="term">Full-Username</span></dt><dd><p>The fully qualified username, expected to be in 71 Samba's <a class="link" href="smb.conf.5.html#UNIXCHARSET">unix charset</a> and qualified with the 72 <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR">winbind separator</a>. 73 </p><div class="example"><a name="id283094"></a><p class="title"><b>Example 5. </b></p><div class="example-contents">Full-Username: WORKGROUP\bob</div></div><p><br class="example-break"></p><div class="example"><a name="id324564"></a><p class="title"><b>Example 6. </b></p><div class="example-contents">Full-Username:: V09SS0dST1VQYm9i</div></div><p><br class="example-break"></p></dd><dt><span class="term">LANMAN-Challenge</span></dt><dd><p>The 8 byte <code class="literal">LANMAN Challenge</code> value, 74 74 generated randomly by the server, or (in cases such as 75 75 MSCHAPv2) generated in some way by both the server and 76 76 the client. 77 </p><div class="example"><a name="id3 00450"></a><p class="title"><b>Example 7. </b></p><div class="example-contents">LANMAN-Challege: 0102030405060708</div></div><p><br class="example-break"></p></dd><dt><span class="term">LANMAN-Response</span></dt><dd><p>The 24 byte <code class="literal">LANMAN Response</code> value,77 </p><div class="example"><a name="id324585"></a><p class="title"><b>Example 7. </b></p><div class="example-contents">LANMAN-Challege: 0102030405060708</div></div><p><br class="example-break"></p></dd><dt><span class="term">LANMAN-Response</span></dt><dd><p>The 24 byte <code class="literal">LANMAN Response</code> value, 78 78 calculated from the user's password and the supplied 79 79 <code class="literal">LANMAN Challenge</code>. Typically, this 80 80 is provided over the network by a client wishing to authenticate. 81 </p><div class="example"><a name="id3 00478"></a><p class="title"><b>Example 8. </b></p><div class="example-contents">LANMAN-Response: 0102030405060708090A0B0C0D0E0F101112131415161718</div></div><p><br class="example-break"></p></dd><dt><span class="term">NT-Response</span></dt><dd><p>The >= 24 byte <code class="literal">NT Response</code>81 </p><div class="example"><a name="id324612"></a><p class="title"><b>Example 8. </b></p><div class="example-contents">LANMAN-Response: 0102030405060708090A0B0C0D0E0F101112131415161718</div></div><p><br class="example-break"></p></dd><dt><span class="term">NT-Response</span></dt><dd><p>The >= 24 byte <code class="literal">NT Response</code> 82 82 calculated from the user's password and the supplied 83 83 <code class="literal">LANMAN Challenge</code>. Typically, this is 84 84 provided over the network by a client wishing to authenticate. 85 </p><div class="example"><a name="id3 00508"></a><p class="title"><b>Example 9. </b></p><div class="example-contents">NT-Response: 0102030405060708090A0B0C0D0E0F101112131415161718</div></div><p><br class="example-break"></p></dd><dt><span class="term">Password</span></dt><dd><p>The user's password. This would be85 </p><div class="example"><a name="id324640"></a><p class="title"><b>Example 9. </b></p><div class="example-contents">NT-Response: 0102030405060708090A0B0C0D0E0F101112131415161718</div></div><p><br class="example-break"></p></dd><dt><span class="term">Password</span></dt><dd><p>The user's password. This would be 86 86 provided by a network client, if the helper is being 87 87 used in a legacy situation that exposes plaintext 88 88 passwords in this way. 89 </p><div class="example"><a name="id3 00526"></a><p class="title"><b>Example 10. </b></p><div class="example-contents">Password: samba2</div></div><p><br class="example-break"></p><div class="example"><a name="id300530"></a><p class="title"><b>Example 11. </b></p><div class="example-contents">Password:: c2FtYmEy</div></div><p><br class="example-break"></p></dd><dt><span class="term">Request-User-Session-Key</span></dt><dd><p>Apon sucessful authenticaiton, return89 </p><div class="example"><a name="id324657"></a><p class="title"><b>Example 10. </b></p><div class="example-contents">Password: samba2</div></div><p><br class="example-break"></p><div class="example"><a name="id324662"></a><p class="title"><b>Example 11. </b></p><div class="example-contents">Password:: c2FtYmEy</div></div><p><br class="example-break"></p></dd><dt><span class="term">Request-User-Session-Key</span></dt><dd><p>Apon sucessful authenticaiton, return 90 90 the user session key associated with the login. 91 </p><div class="example"><a name="id3 00547"></a><p class="title"><b>Example 12. </b></p><div class="example-contents">Request-User-Session-Key: Yes</div></div><p><br class="example-break"></p></dd><dt><span class="term">Request-LanMan-Session-Key</span></dt><dd><p>Apon sucessful authenticaiton, return91 </p><div class="example"><a name="id324678"></a><p class="title"><b>Example 12. </b></p><div class="example-contents">Request-User-Session-Key: Yes</div></div><p><br class="example-break"></p></dd><dt><span class="term">Request-LanMan-Session-Key</span></dt><dd><p>Apon sucessful authenticaiton, return 92 92 the LANMAN session key associated with the login. 93 </p><div class="example"><a name="id3 00564"></a><p class="title"><b>Example 13. </b></p><div class="example-contents">Request-LanMan-Session-Key: Yes</div></div><p><br class="example-break"></p></dd></dl></div></dd></dl></div></dd><dt><span class="term">--username=USERNAME</span></dt><dd><p>93 </p><div class="example"><a name="id324694"></a><p class="title"><b>Example 13. </b></p><div class="example-contents">Request-LanMan-Session-Key: Yes</div></div><p><br class="example-break"></p></dd></dl></div></dd></dl></div></dd><dt><span class="term">--username=USERNAME</span></dt><dd><p> 94 94 Specify username of user to authenticate 95 95 </p></dd><dt><span class="term">--domain=DOMAIN</span></dt><dd><p> … … 99 99 </p></dd><dt><span class="term">--challenge=STRING</span></dt><dd><p>NTLM challenge (in HEXADECIMAL)</p></dd><dt><span class="term">--lm-response=RESPONSE</span></dt><dd><p>LM Response to the challenge (in HEXADECIMAL)</p></dd><dt><span class="term">--nt-response=RESPONSE</span></dt><dd><p>NT or NTLMv2 Response to the challenge (in HEXADECIMAL)</p></dd><dt><span class="term">--password=PASSWORD</span></dt><dd><p>User's plaintext password</p><p>If 100 100 not specified on the command line, this is prompted for when 101 required. </p><p>For the NTLMSSP based server roles, this param ter101 required. </p><p>For the NTLMSSP based server roles, this parameter 102 102 specifies the expected password, allowing testing without 103 103 winbindd operational.</p></dd><dt><span class="term">--request-lm-key</span></dt><dd><p>Retreive LM session key</p></dd><dt><span class="term">--request-nt-key</span></dt><dd><p>Request NT key</p></dd><dt><span class="term">--diagnostics</span></dt><dd><p>Perform Diagnostics on the authentication 104 104 chain. Uses the password from <code class="literal">--password</code> 105 105 or prompts for one.</p></dd><dt><span class="term">--require-membership-of={SID|Name}</span></dt><dd><p>Require that a user be a member of specified 106 group (either name or SID) for authentication to succeed.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 107 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 108 configuration details required by the server. The 109 information in this file includes server-specific 110 information such as what printcap file to use, as well 111 as descriptions of all the services that the server is 112 to provide. See <code class="filename">smb.conf</code> for more information. 113 The default configuration file name is determined at 114 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 115 from 0 to 10. The default value if this parameter is 116 not specified is zero.</p><p>The higher this value, the more detail will be 106 group (either name or SID) for authentication to succeed.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 107 from 0 to 10. The default value if this parameter is 108 not specified is 0.</p><p>The higher this value, the more detail will be 117 109 logged to the log files about the activities of the 118 110 server. At level 0, only critical errors and serious … … 124 116 use only by developers and generate HUGE amounts of log 125 117 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 126 override the <a class="indexterm" name="id300786"></a> parameter 127 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 118 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 119 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 120 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 121 configuration details required by the server. The 122 information in this file includes server-specific 123 information such as what printcap file to use, as well 124 as descriptions of all the services that the server is 125 to provide. See <code class="filename">smb.conf</code> for more information. 126 The default configuration file name is determined at 127 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 128 128 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 129 129 log.smbd, etc...). The log file is never removed by the client. 130 130 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 131 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00830"></a><h2>EXAMPLE SETUP</h2><p>To setup ntlm_auth for use by squid 2.5, with both basic and131 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324948"></a><h2>EXAMPLE SETUP</h2><p>To setup ntlm_auth for use by squid 2.5, with both basic and 132 132 NTLMSSP authentication, the following 133 133 should be placed in the <code class="filename">squid.conf</code> file. … … 145 145 auth_param ntlm program ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of='WORKGROUP\Domain Users' 146 146 auth_param basic program ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of='WORKGROUP\Domain Users' 147 </pre></div><div class="refsect1" lang="en"><a name="id3 00883"></a><h2>TROUBLESHOOTING</h2><p>If you're experiencing problems with authenticating Internet Explorer running147 </pre></div><div class="refsect1" lang="en"><a name="id324997"></a><h2>TROUBLESHOOTING</h2><p>If you're experiencing problems with authenticating Internet Explorer running 148 148 under MS Windows 9X or Millenium Edition against ntlm_auth's NTLMSSP authentication 149 149 helper (--helper-protocol=squid-2.5-ntlmssp), then please read 150 <a href="http://support.microsoft.com/support/kb/articles/Q239/8/69.ASP" target="_top">150 <a class="ulink" href="http://support.microsoft.com/support/kb/articles/Q239/8/69.ASP" target="_top"> 151 151 the Microsoft Knowledge Base article #239869 and follow instructions described there</a>. 152 </p></div><div class="refsect1" lang="en"><a name="id3 00901"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba153 suite.</p></div><div class="refsect1" lang="en"><a name="id3 00912"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities152 </p></div><div class="refsect1" lang="en"><a name="id325015"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba 153 suite.</p></div><div class="refsect1" lang="en"><a name="id325025"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 154 154 were created by Andrew Tridgell. Samba is now developed 155 155 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/pam_winbind.7.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pam_winbind</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pam_winbind.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>pam_winbind — PAM module for Winbind</p></div><div class="refsect1" lang="en"><a name="id291806"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pam_winbind</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pam_winbind.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>pam_winbind — PAM module for Winbind</p></div><div class="refsect1" lang="en"><a name="id315537"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p> 2 2 pam_winbind is a PAM module that can authenticate users against the local domain by talking to the Winbind daemon. 3 </p></div><div class="refsect1" lang="en"><a name="id2 59300"></a><h2>OPTIONS</h2><p>3 </p></div><div class="refsect1" lang="en"><a name="id283737"></a><h2>OPTIONS</h2><p> 4 4 5 5 pam_winbind supports several options which can either be set in … … 12 12 </p><div class="variablelist"><dl><dt><span class="term">debug</span></dt><dd><p>Gives debugging output to syslog.</p></dd><dt><span class="term">debug_state</span></dt><dd><p>Gives detailed PAM state debugging output to syslog.</p></dd><dt><span class="term">require_membership_of=[SID or NAME]</span></dt><dd><p> 13 13 If this option is set, pam_winbind will only succeed if the user is a member of the given SID or NAME. A SID 14 can be either a group-SID, a alias-SID or even auser-SID. It is also possible to give a NAME instead of the14 can be either a group-SID, an alias-SID or even an user-SID. It is also possible to give a NAME instead of the 15 15 SID. That name must have the form: <em class="parameter"><code>MYDOMAIN\\mygroup</code></em> or 16 16 <em class="parameter"><code>MYDOMAIN\\myuser</code></em>. pam_winbind will, in that case, lookup the SID internally. Note that … … 56 56 57 57 58 </p></div><div class="refsect1" lang="en"><a name="id2 60366"></a><h2>SEE ALSO</h2><p><a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id260401"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of Samba.</p></div><div class="refsect1" lang="en"><a name="id260411"></a><h2>AUTHOR</h2><p>58 </p></div><div class="refsect1" lang="en"><a name="id282887"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id282921"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of Samba.</p></div><div class="refsect1" lang="en"><a name="id282931"></a><h2>AUTHOR</h2><p> 59 59 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by 60 60 the Samba Team as an Open Source project similar to the way the Linux kernel is developed. -
branches/samba-3.0/docs/htmldocs/manpages/pdbedit.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pdbedit</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pdbedit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>pdbedit — manage the SAM database (Database of Samba Users)</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">pdbedit</code> [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-t, --password-from-stdin] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control] [-y]</p></div></div><div class="refsect1" lang="en"><a name="id259437"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The pdbedit program is used to manage the users accounts1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pdbedit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="pdbedit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>pdbedit — manage the SAM database (Database of Samba Users)</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">pdbedit</code> [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-t, --password-from-stdin] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control] [-y]</p></div></div><div class="refsect1" lang="en"><a name="id283425"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The pdbedit program is used to manage the users accounts 2 2 stored in the sam database and can only be run by root.</p><p>The pdbedit tool uses the passdb modular interface and is 3 3 independent from the kind of users database used (currently there … … 5 5 without changing the tool).</p><p>There are five main ways to use pdbedit: adding a user account, 6 6 removing a user account, modifing a user account, listing user 7 accounts, importing users accounts.</p></div><div class="refsect1" lang="en"><a name="id2 60385"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-L</span></dt><dd><p>This option lists all the user accounts7 accounts, importing users accounts.</p></div><div class="refsect1" lang="en"><a name="id282907"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-L</span></dt><dd><p>This option lists all the user accounts 8 8 present in the users database. 9 9 This option prints a list of user/uid pairs separated by … … 36 36 out the account fields in a format compatible with the 37 37 <code class="filename">smbpasswd</code> file format. (see the 38 <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for details)</p><p>Example: <code class="literal">pdbedit -L -w</code></p><pre class="programlisting">38 <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for details)</p><p>Example: <code class="literal">pdbedit -L -w</code></p><pre class="programlisting"> 39 39 sorce:500:508818B733CE64BEAAD3B435B51404EE: 40 40 D2A2418EFC466A8A0F6B1DBB5C3DB80C: … … 79 79 </pre><p> 80 80 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>pdbedit does not call the unix password syncronisation 81 script if <a class=" indexterm" name="id300639"></a>unix password sync81 script if <a class="link" href="smb.conf.5.html#UNIXPASSWORDSYNC">unix password sync</a> 82 82 has been set. It only updates the data in the Samba 83 83 user database. … … 121 121 applies to the account policies instead of the user database.</p><p>This option will allow to migrate account policies from their default 122 122 tdb-store into a passdb backend, e.g. an LDAP directory server.</p><p>Example: <code class="literal">pdbedit -y -i tdbsam: -e ldapsam:ldap://my.ldap.host</code></p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 123 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 124 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 125 configuration details required by the server. The 126 information in this file includes server-specific 127 information such as what printcap file to use, as well 128 as descriptions of all the services that the server is 129 to provide. See <code class="filename">smb.conf</code> for more information. 130 The default configuration file name is determined at 131 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 132 from 0 to 10. The default value if this parameter is 133 not specified is zero.</p><p>The higher this value, the more detail will be 123 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 124 from 0 to 10. The default value if this parameter is 125 not specified is 0.</p><p>The higher this value, the more detail will be 134 126 logged to the log files about the activities of the 135 127 server. At level 0, only critical errors and serious … … 141 133 use only by developers and generate HUGE amounts of log 142 134 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 143 override the <a class="indexterm" name="id301024"></a> parameter 144 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 135 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 136 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 137 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 138 configuration details required by the server. The 139 information in this file includes server-specific 140 information such as what printcap file to use, as well 141 as descriptions of all the services that the server is 142 to provide. See <code class="filename">smb.conf</code> for more information. 143 The default configuration file name is determined at 144 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 145 145 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 146 146 log.smbd, etc...). The log file is never removed by the client. 147 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 01057"></a><h2>NOTES</h2><p>This command may be used only by root.</p></div><div class="refsect1" lang="en"><a name="id301067"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of148 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 01078"></a><h2>SEE ALSO</h2><p><a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a></p></div><div class="refsect1" lang="en"><a name="id301101"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities147 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id325150"></a><h2>NOTES</h2><p>This command may be used only by root.</p></div><div class="refsect1" lang="en"><a name="id325160"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 148 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id325170"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a></p></div><div class="refsect1" lang="en"><a name="id325192"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 149 149 were created by Andrew Tridgell. Samba is now developed 150 150 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/profiles.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>profiles</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="profiles.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>profiles — A utility to report and change SIDs in registry files2 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">profiles</code> [-v] [-c SID] [-n SID] {file}</p></div></div><div class="refsect1" lang="en"><a name="id2 59321"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">profiles</code> is a utility that1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>profiles</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="profiles.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>profiles — A utility to report and change SIDs in registry files 2 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">profiles</code> [-v] [-c SID] [-n SID] {file}</p></div></div><div class="refsect1" lang="en"><a name="id283760"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">profiles</code> is a utility that 3 3 reports and changes SIDs in windows registry files. It currently only 4 4 supports NT. 5 </p></div><div class="refsect1" lang="en"><a name="id2 59563"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">file</span></dt><dd><p>Registry file to view or edit. </p></dd><dt><span class="term">-v,--verbose</span></dt><dd><p>Increases verbosity of messages.5 </p></div><div class="refsect1" lang="en"><a name="id282744"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">file</span></dt><dd><p>Registry file to view or edit. </p></dd><dt><span class="term">-v,--verbose</span></dt><dd><p>Increases verbosity of messages. 6 6 </p></dd><dt><span class="term">-c SID1 -n SID2</span></dt><dd><p>Change all occurences of SID1 in <code class="filename">file</code> by SID2. 7 7 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 8 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59374"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba9 suite.</p></div><div class="refsect1" lang="en"><a name="id2 59384"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities8 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283361"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba 9 suite.</p></div><div class="refsect1" lang="en"><a name="id283371"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 10 10 were created by Andrew Tridgell. Samba is now developed 11 11 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/rpcclient.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>rpcclient</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="rpcclient.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>rpcclient — tool for executing client side2 MS-RPC functions</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">rpcclient</code> [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logdir] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}</p></div></div><div class="refsect1" lang="en"><a name="id2 59598"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">rpcclient</code> is a utility initially developed1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>rpcclient</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="rpcclient.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>rpcclient — tool for executing client side 2 MS-RPC functions</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">rpcclient</code> [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logdir] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}</p></div></div><div class="refsect1" lang="en"><a name="id282779"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">rpcclient</code> is a utility initially developed 3 3 to test MS-RPC functionality in Samba itself. It has undergone 4 4 several stages of development and stability. Many system administrators 5 5 have now written scripts around it to manage Windows NT clients from 6 their UNIX workstation. </p></div><div class="refsect1" lang="en"><a name="id2 59376"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">server</span></dt><dd><p>NetBIOS name of Server to which to connect.6 their UNIX workstation. </p></div><div class="refsect1" lang="en"><a name="id283364"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">server</span></dt><dd><p>NetBIOS name of Server to which to connect. 7 7 The server can be any SMB/CIFS server. The name is 8 resolved using the <a class=" indexterm" name="id259394"></a>name resolve order line from <ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-c|--command='command string'</span></dt><dd><p>execute semicolon separated commands (listed8 resolved using the <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a> line from <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></dd><dt><span class="term">-c|--command='command string'</span></dt><dd><p>execute semicolon separated commands (listed 9 9 below)) </p></dd><dt><span class="term">-I IP-address</span></dt><dd><p><em class="replaceable"><code>IP address</code></em> is the address of the server to connect to. 10 10 It should be specified in standard "a.b.c.d" notation. </p><p>Normally the client would attempt to locate a named … … 16 16 connected to will be ignored. </p><p>There is no default for this parameter. If not supplied, 17 17 it will be determined automatically by the client as described 18 above. </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 19 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 20 configuration details required by the server. The 21 information in this file includes server-specific 22 information such as what printcap file to use, as well 23 as descriptions of all the services that the server is 24 to provide. See <code class="filename">smb.conf</code> for more information. 25 The default configuration file name is determined at 26 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 27 from 0 to 10. The default value if this parameter is 28 not specified is zero.</p><p>The higher this value, the more detail will be 18 above. </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 19 from 0 to 10. The default value if this parameter is 20 not specified is 0.</p><p>The higher this value, the more detail will be 29 21 logged to the log files about the activities of the 30 22 server. At level 0, only critical errors and serious … … 36 28 use only by developers and generate HUGE amounts of log 37 29 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 38 override the <a class="indexterm" name="id260427"></a> parameter 39 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 30 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 31 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 32 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 33 configuration details required by the server. The 34 information in this file includes server-specific 35 information such as what printcap file to use, as well 36 as descriptions of all the services that the server is 37 to provide. See <code class="filename">smb.conf</code> for more information. 38 The default configuration file name is determined at 39 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 40 40 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 41 41 log.smbd, etc...). The log file is never removed by the client. … … 73 73 it in directly. </p></dd><dt><span class="term">-n <primary NetBIOS name></span></dt><dd><p>This option allows you to override 74 74 the NetBIOS name that Samba uses for itself. This is identical 75 to setting the <a class=" indexterm" name="id300444"></a> parameter in the <code class="filename">smb.conf</code> file.75 to setting the <a class="link" href="smb.conf.5.html#NETBIOSNAME">netbios name</a> parameter in the <code class="filename">smb.conf</code> file. 76 76 However, a command 77 77 line setting will take precedence over settings in … … 90 90 the <code class="filename">smb.conf</code> manual page for the list of valid 91 91 options. </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 92 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00529"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id300535"></a><h3>LSARPC</h3><div class="variablelist"><dl><dt><span class="term">lsaquery</span></dt><dd><p>Query info policy</p></dd><dt><span class="term">lookupsids</span></dt><dd><p>Resolve a list92 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324654"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id324659"></a><h3>LSARPC</h3><div class="variablelist"><dl><dt><span class="term">lsaquery</span></dt><dd><p>Query info policy</p></dd><dt><span class="term">lookupsids</span></dt><dd><p>Resolve a list 93 93 of SIDs to usernames. 94 94 </p></dd><dt><span class="term">lookupnames</span></dt><dd><p>Resolve a list 95 95 of usernames to SIDs. 96 </p></dd><dt><span class="term">enumtrusts</span></dt><dd><p>Enumerate trusted domains</p></dd><dt><span class="term">enumprivs</span></dt><dd><p>Enumerate privileges</p></dd><dt><span class="term">getdispname</span></dt><dd><p>Get the privilege name</p></dd><dt><span class="term">lsaenumsid</span></dt><dd><p>Enumerate the LSA SIDS</p></dd><dt><span class="term">lsaenumprivsaccount</span></dt><dd><p>Enumerate the privileges of an SID</p></dd><dt><span class="term">lsaenumacctrights</span></dt><dd><p>Enumerate the rights of an SID</p></dd><dt><span class="term">lsaenumacctwithright</span></dt><dd><p>Enumerate accounts with a right</p></dd><dt><span class="term">lsaaddacctrights</span></dt><dd><p>Add rights to an account</p></dd><dt><span class="term">lsaremoveacctrights</span></dt><dd><p>Remove rights from an account</p></dd><dt><span class="term">lsalookupprivvalue</span></dt><dd><p>Get a privilege value given its name</p></dd><dt><span class="term">lsaquerysecobj</span></dt><dd><p>Query LSA security object</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id3 00659"></a><h3>LSARPC-DS</h3><div class="variablelist"><dl><dt><span class="term">dsroledominfo</span></dt><dd><p>Get Primary Domain Information</p></dd></dl></div><p> </p><p><span class="emphasis"><em>DFS</em></span></p><div class="variablelist"><dl><dt><span class="term">dfsexist</span></dt><dd><p>Query DFS support</p></dd><dt><span class="term">dfsadd</span></dt><dd><p>Add a DFS share</p></dd><dt><span class="term">dfsremove</span></dt><dd><p>Remove a DFS share</p></dd><dt><span class="term">dfsgetinfo</span></dt><dd><p>Query DFS share info</p></dd><dt><span class="term">dfsenum</span></dt><dd><p>Enumerate dfs shares</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id300728"></a><h3>REG</h3><div class="variablelist"><dl><dt><span class="term">shutdown</span></dt><dd><p>Remote Shutdown</p></dd><dt><span class="term">abortshutdown</span></dt><dd><p>Abort Shutdown</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id300753"></a><h3>SRVSVC</h3><div class="variablelist"><dl><dt><span class="term">srvinfo</span></dt><dd><p>Server query info</p></dd><dt><span class="term">netshareenum</span></dt><dd><p>Enumerate shares</p></dd><dt><span class="term">netfileenum</span></dt><dd><p>Enumerate open files</p></dd><dt><span class="term">netremotetod</span></dt><dd><p>Fetch remote time of day</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id300795"></a><h3>SAMR</h3><div class="variablelist"><dl><dt><span class="term">queryuser</span></dt><dd><p>Query user info</p></dd><dt><span class="term">querygroup</span></dt><dd><p>Query group info</p></dd><dt><span class="term">queryusergroups</span></dt><dd><p>Query user groups</p></dd><dt><span class="term">querygroupmem</span></dt><dd><p>Query group membership</p></dd><dt><span class="term">queryaliasmem</span></dt><dd><p>Query alias membership</p></dd><dt><span class="term">querydispinfo</span></dt><dd><p>Query display info</p></dd><dt><span class="term">querydominfo</span></dt><dd><p>Query domain info</p></dd><dt><span class="term">enumdomusers</span></dt><dd><p>Enumerate domain users</p></dd><dt><span class="term">enumdomgroups</span></dt><dd><p>Enumerate domain groups</p></dd><dt><span class="term">enumalsgroups</span></dt><dd><p>Enumerate alias groups</p></dd><dt><span class="term">createdomuser</span></dt><dd><p>Create domain user</p></dd><dt><span class="term">samlookupnames</span></dt><dd><p>Look up names</p></dd><dt><span class="term">samlookuprids</span></dt><dd><p>Look up names</p></dd><dt><span class="term">deletedomuser</span></dt><dd><p>Delete domain user</p></dd><dt><span class="term">samquerysecobj</span></dt><dd><p>Query SAMR security object</p></dd><dt><span class="term">getdompwinfo</span></dt><dd><p>Retrieve domain password info</p></dd><dt><span class="term">lookupdomain</span></dt><dd><p>Look up domain</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id300941"></a><h3>SPOOLSS</h3><div class="variablelist"><dl><dt><span class="term">adddriver <arch> <config> [<version>]</span></dt><dd><p>96 </p></dd><dt><span class="term">enumtrusts</span></dt><dd><p>Enumerate trusted domains</p></dd><dt><span class="term">enumprivs</span></dt><dd><p>Enumerate privileges</p></dd><dt><span class="term">getdispname</span></dt><dd><p>Get the privilege name</p></dd><dt><span class="term">lsaenumsid</span></dt><dd><p>Enumerate the LSA SIDS</p></dd><dt><span class="term">lsaenumprivsaccount</span></dt><dd><p>Enumerate the privileges of an SID</p></dd><dt><span class="term">lsaenumacctrights</span></dt><dd><p>Enumerate the rights of an SID</p></dd><dt><span class="term">lsaenumacctwithright</span></dt><dd><p>Enumerate accounts with a right</p></dd><dt><span class="term">lsaaddacctrights</span></dt><dd><p>Add rights to an account</p></dd><dt><span class="term">lsaremoveacctrights</span></dt><dd><p>Remove rights from an account</p></dd><dt><span class="term">lsalookupprivvalue</span></dt><dd><p>Get a privilege value given its name</p></dd><dt><span class="term">lsaquerysecobj</span></dt><dd><p>Query LSA security object</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id324773"></a><h3>LSARPC-DS</h3><div class="variablelist"><dl><dt><span class="term">dsroledominfo</span></dt><dd><p>Get Primary Domain Information</p></dd></dl></div><p> </p><p><span class="emphasis"><em>DFS</em></span></p><div class="variablelist"><dl><dt><span class="term">dfsexist</span></dt><dd><p>Query DFS support</p></dd><dt><span class="term">dfsadd</span></dt><dd><p>Add a DFS share</p></dd><dt><span class="term">dfsremove</span></dt><dd><p>Remove a DFS share</p></dd><dt><span class="term">dfsgetinfo</span></dt><dd><p>Query DFS share info</p></dd><dt><span class="term">dfsenum</span></dt><dd><p>Enumerate dfs shares</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id324838"></a><h3>REG</h3><div class="variablelist"><dl><dt><span class="term">shutdown</span></dt><dd><p>Remote Shutdown</p></dd><dt><span class="term">abortshutdown</span></dt><dd><p>Abort Shutdown</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id324863"></a><h3>SRVSVC</h3><div class="variablelist"><dl><dt><span class="term">srvinfo</span></dt><dd><p>Server query info</p></dd><dt><span class="term">netshareenum</span></dt><dd><p>Enumerate shares</p></dd><dt><span class="term">netfileenum</span></dt><dd><p>Enumerate open files</p></dd><dt><span class="term">netremotetod</span></dt><dd><p>Fetch remote time of day</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id324902"></a><h3>SAMR</h3><div class="variablelist"><dl><dt><span class="term">queryuser</span></dt><dd><p>Query user info</p></dd><dt><span class="term">querygroup</span></dt><dd><p>Query group info</p></dd><dt><span class="term">queryusergroups</span></dt><dd><p>Query user groups</p></dd><dt><span class="term">querygroupmem</span></dt><dd><p>Query group membership</p></dd><dt><span class="term">queryaliasmem</span></dt><dd><p>Query alias membership</p></dd><dt><span class="term">querydispinfo</span></dt><dd><p>Query display info</p></dd><dt><span class="term">querydominfo</span></dt><dd><p>Query domain info</p></dd><dt><span class="term">enumdomusers</span></dt><dd><p>Enumerate domain users</p></dd><dt><span class="term">enumdomgroups</span></dt><dd><p>Enumerate domain groups</p></dd><dt><span class="term">enumalsgroups</span></dt><dd><p>Enumerate alias groups</p></dd><dt><span class="term">createdomuser</span></dt><dd><p>Create domain user</p></dd><dt><span class="term">samlookupnames</span></dt><dd><p>Look up names</p></dd><dt><span class="term">samlookuprids</span></dt><dd><p>Look up names</p></dd><dt><span class="term">deletedomuser</span></dt><dd><p>Delete domain user</p></dd><dt><span class="term">samquerysecobj</span></dt><dd><p>Query SAMR security object</p></dd><dt><span class="term">getdompwinfo</span></dt><dd><p>Retrieve domain password info</p></dd><dt><span class="term">lookupdomain</span></dt><dd><p>Look up domain</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id325039"></a><h3>SPOOLSS</h3><div class="variablelist"><dl><dt><span class="term">adddriver <arch> <config> [<version>]</span></dt><dd><p> 97 97 Execute an AddPrinterDriver() RPC to install the printer driver 98 98 information on the server. Note that the driver files should … … 179 179 <code class="literal">enumdrivers</code> commands for obtaining a list of 180 180 of installed printers and drivers.</p></dd><dt><span class="term">addform</span></dt><dd><p>Add form</p></dd><dt><span class="term">setform</span></dt><dd><p>Set form</p></dd><dt><span class="term">getform</span></dt><dd><p>Get form</p></dd><dt><span class="term">deleteform</span></dt><dd><p>Delete form</p></dd><dt><span class="term">enumforms</span></dt><dd><p>Enumerate form</p></dd><dt><span class="term">setprinter</span></dt><dd><p>Set printer comment</p></dd><dt><span class="term">setprinterdata</span></dt><dd><p>Set REG_SZ printer data</p></dd><dt><span class="term">setprintername <printername> 181 <newprintername></span></dt><dd><p>Set printer name</p></dd><dt><span class="term">rffpcnex</span></dt><dd><p>Rffpcnex test</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id3 01320"></a><h3>NETLOGON</h3><div class="variablelist"><dl><dt><span class="term">logonctrl2</span></dt><dd><p>Logon Control 2</p></dd><dt><span class="term">logonctrl</span></dt><dd><p>Logon Control</p></dd><dt><span class="term">samsync</span></dt><dd><p>Sam Synchronisation</p></dd><dt><span class="term">samdeltas</span></dt><dd><p>Query Sam Deltas</p></dd><dt><span class="term">samlogon</span></dt><dd><p>Sam Logon</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id301380"></a><h3>GENERAL COMMANDS</h3><div class="variablelist"><dl><dt><span class="term">debuglevel</span></dt><dd><p>Set the current181 <newprintername></span></dt><dd><p>Set printer name</p></dd><dt><span class="term">rffpcnex</span></dt><dd><p>Rffpcnex test</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id325391"></a><h3>NETLOGON</h3><div class="variablelist"><dl><dt><span class="term">logonctrl2</span></dt><dd><p>Logon Control 2</p></dd><dt><span class="term">logonctrl</span></dt><dd><p>Logon Control</p></dd><dt><span class="term">samsync</span></dt><dd><p>Sam Synchronisation</p></dd><dt><span class="term">samdeltas</span></dt><dd><p>Query Sam Deltas</p></dd><dt><span class="term">samlogon</span></dt><dd><p>Sam Logon</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id325449"></a><h3>GENERAL COMMANDS</h3><div class="variablelist"><dl><dt><span class="term">debuglevel</span></dt><dd><p>Set the current 182 182 debug level used to log information.</p></dd><dt><span class="term">help (?)</span></dt><dd><p>Print a listing of all 183 183 known commands or extended help on a particular command. 184 184 </p></dd><dt><span class="term">quit (exit)</span></dt><dd><p>Exit <code class="literal">rpcclient 185 </code>.</p></dd></dl></div></div></div><div class="refsect1" lang="en"><a name="id3 01422"></a><h2>BUGS</h2><p><code class="literal">rpcclient</code> is designed as a developer testing tool185 </code>.</p></dd></dl></div></div></div><div class="refsect1" lang="en"><a name="id325488"></a><h2>BUGS</h2><p><code class="literal">rpcclient</code> is designed as a developer testing tool 186 186 and may not be robust in certain areas (such as command line parsing). 187 187 It has been known to generate a core dump upon failures when invalid … … 193 193 to be... a bit flaky in places. </p><p>The development of Samba's implementation is also a bit rough, 194 194 and as more of the services are understood, it can even result in 195 versions of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <ahref="rpcclient.1.html"><span class="citerefentry"><span class="refentrytitle">rpcclient</span>(1)</span></a> that are incompatible for some commands or services. Additionally,195 versions of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <a class="citerefentry" href="rpcclient.1.html"><span class="citerefentry"><span class="refentrytitle">rpcclient</span>(1)</span></a> that are incompatible for some commands or services. Additionally, 196 196 the developers are sending reports to Microsoft, and problems found 197 197 or reported to Microsoft are fixed in Service Packs, which may 198 result in incompatibilities.</p></div><div class="refsect1" lang="en"><a name="id3 01473"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba199 suite.</p></div><div class="refsect1" lang="en"><a name="id3 01484"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities198 result in incompatibilities.</p></div><div class="refsect1" lang="en"><a name="id325537"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba 199 suite.</p></div><div class="refsect1" lang="en"><a name="id325547"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 200 200 were created by Andrew Tridgell. Samba is now developed 201 201 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/samba.7.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>samba</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="samba.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>samba — A Windows SMB/CIFS fileserver for UNIX</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">samba</code></p></div></div><div class="refsect1" lang="en"><a name="id291817"></a><h2>DESCRIPTION</h2><p>The Samba software suite is a collection of programs1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>samba</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="samba.7"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>samba — A Windows SMB/CIFS fileserver for UNIX</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">samba</code></p></div></div><div class="refsect1" lang="en"><a name="id283742"></a><h2>DESCRIPTION</h2><p>The Samba software suite is a collection of programs 2 2 that implements the Server Message Block (commonly abbreviated 3 3 as SMB) protocol for UNIX systems. This protocol is sometimes 4 4 also referred to as the Common Internet File System (CIFS). For a 5 more thorough description, see <a href="http://www.ubiqx.org/cifs/" target="_top">5 more thorough description, see <a class="ulink" href="http://www.ubiqx.org/cifs/" target="_top"> 6 6 http://www.ubiqx.org/cifs/</a>. Samba also implements the NetBIOS 7 protocol in nmbd.</p><div class="variablelist"><dl><dt><span class="term"><a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">smbd</code> daemon provides the file and print services to7 protocol in nmbd.</p><div class="variablelist"><dl><dt><span class="term"><a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">smbd</code> daemon provides the file and print services to 8 8 SMB clients, such as Windows 95/98, Windows NT, Windows 9 9 for Workgroups or LanManager. The configuration file 10 for this daemon is described in <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>11 </p></dd><dt><span class="term"><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">nmbd</code>10 for this daemon is described in <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> 11 </p></dd><dt><span class="term"><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">nmbd</code> 12 12 daemon provides NetBIOS nameservice and browsing 13 13 support. The configuration file for this daemon 14 is described in <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></dd><dt><span class="term"><ahref="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbclient</code>14 is described in <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></dd><dt><span class="term"><a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbclient</code> 15 15 program implements a simple ftp-like client. This 16 16 is useful for accessing SMB shares on other compatible 17 17 servers (such as Windows NT), and can also be used 18 18 to allow a UNIX box to print to a printer attached to 19 any SMB server (such as a PC running Windows NT).</p></dd><dt><span class="term"><a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a></span></dt><dd><p>The <code class="literal">testparm</code>20 utility is a simple syntax checker for Samba's <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> configuration file.</p></dd><dt><span class="term"><ahref="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a></span></dt><dd><p>The <code class="literal">testprns</code>19 any SMB server (such as a PC running Windows NT).</p></dd><dt><span class="term"><a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a></span></dt><dd><p>The <code class="literal">testparm</code> 20 utility is a simple syntax checker for Samba's <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> configuration file.</p></dd><dt><span class="term"><a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a></span></dt><dd><p>The <code class="literal">testprns</code> 21 21 utility supports testing printer names defined 22 22 in your <code class="filename">printcap</code> file used 23 by Samba.</p></dd><dt><span class="term"><a href="smbstatus.1.html"><span class="citerefentry"><span class="refentrytitle">smbstatus</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbstatus</code>23 by Samba.</p></dd><dt><span class="term"><a class="citerefentry" href="smbstatus.1.html"><span class="citerefentry"><span class="refentrytitle">smbstatus</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbstatus</code> 24 24 tool provides access to information about the 25 current connections to <code class="literal">smbd</code>.</p></dd><dt><span class="term"><a href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a></span></dt><dd><p>The <code class="literal">nmblookup</code>25 current connections to <code class="literal">smbd</code>.</p></dd><dt><span class="term"><a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a></span></dt><dd><p>The <code class="literal">nmblookup</code> 26 26 tools allows NetBIOS name queries to be made 27 from a UNIX host.</p></dd><dt><span class="term"><a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">smbpasswd</code>27 from a UNIX host.</p></dd><dt><span class="term"><a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a></span></dt><dd><p>The <code class="literal">smbpasswd</code> 28 28 command is a tool for changing LanMan and Windows NT 29 password hashes on Samba and Windows NT servers.</p></dd><dt><span class="term"><a href="smbcacls.1.html"><span class="citerefentry"><span class="refentrytitle">smbcacls</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbcacls</code> command is30 a tool to set ACL's on remote CIFS servers. </p></dd><dt><span class="term"><a href="smbsh.1.html"><span class="citerefentry"><span class="refentrytitle">smbsh</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbsh</code> command is29 password hashes on Samba and Windows NT servers.</p></dd><dt><span class="term"><a class="citerefentry" href="smbcacls.1.html"><span class="citerefentry"><span class="refentrytitle">smbcacls</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbcacls</code> command is 30 a tool to set ACL's on remote CIFS servers. </p></dd><dt><span class="term"><a class="citerefentry" href="smbsh.1.html"><span class="citerefentry"><span class="refentrytitle">smbsh</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbsh</code> command is 31 31 a program that allows you to run a unix shell with 32 with an overloaded VFS.</p></dd><dt><span class="term"><a href="smbtree.1.html"><span class="citerefentry"><span class="refentrytitle">smbtree</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbtree</code> command33 is a text-based network neighborhood tool.</p></dd><dt><span class="term"><a href="smbtar.1.html"><span class="citerefentry"><span class="refentrytitle">smbtar</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbtar</code> can make34 backups of data on CIFS/SMB servers.</p></dd><dt><span class="term"><a href="smbspool.8.html"><span class="citerefentry"><span class="refentrytitle">smbspool</span>(8)</span></a></span></dt><dd><p><code class="literal">smbspool</code> is a32 with an overloaded VFS.</p></dd><dt><span class="term"><a class="citerefentry" href="smbtree.1.html"><span class="citerefentry"><span class="refentrytitle">smbtree</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbtree</code> command 33 is a text-based network neighborhood tool.</p></dd><dt><span class="term"><a class="citerefentry" href="smbtar.1.html"><span class="citerefentry"><span class="refentrytitle">smbtar</span>(1)</span></a></span></dt><dd><p>The <code class="literal">smbtar</code> can make 34 backups of data on CIFS/SMB servers.</p></dd><dt><span class="term"><a class="citerefentry" href="smbspool.8.html"><span class="citerefentry"><span class="refentrytitle">smbspool</span>(8)</span></a></span></dt><dd><p><code class="literal">smbspool</code> is a 35 35 helper utility for printing on printers connected 36 to CIFS servers. </p></dd><dt><span class="term"><a href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a></span></dt><dd><p><code class="literal">smbcontrol</code> is a utility36 to CIFS servers. </p></dd><dt><span class="term"><a class="citerefentry" href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a></span></dt><dd><p><code class="literal">smbcontrol</code> is a utility 37 37 that can change the behaviour of running samba daemons. 38 </p></dd><dt><span class="term"><a href="rpcclient.1.html"><span class="citerefentry"><span class="refentrytitle">rpcclient</span>(1)</span></a></span></dt><dd><p><code class="literal">rpcclient</code> is a utility38 </p></dd><dt><span class="term"><a class="citerefentry" href="rpcclient.1.html"><span class="citerefentry"><span class="refentrytitle">rpcclient</span>(1)</span></a></span></dt><dd><p><code class="literal">rpcclient</code> is a utility 39 39 that can be used to execute RPC commands on remote 40 CIFS servers.</p></dd><dt><span class="term"><a href="pdbedit.8.html"><span class="citerefentry"><span class="refentrytitle">pdbedit</span>(8)</span></a></span></dt><dd><p>The <code class="literal">pdbedit</code> command40 CIFS servers.</p></dd><dt><span class="term"><a class="citerefentry" href="pdbedit.8.html"><span class="citerefentry"><span class="refentrytitle">pdbedit</span>(8)</span></a></span></dt><dd><p>The <code class="literal">pdbedit</code> command 41 41 can be used to maintain the local user database on 42 a samba server.</p></dd><dt><span class="term"><a href="findsmb.1.html"><span class="citerefentry"><span class="refentrytitle">findsmb</span>(1)</span></a></span></dt><dd><p>The <code class="literal">findsmb</code> command42 a samba server.</p></dd><dt><span class="term"><a class="citerefentry" href="findsmb.1.html"><span class="citerefentry"><span class="refentrytitle">findsmb</span>(1)</span></a></span></dt><dd><p>The <code class="literal">findsmb</code> command 43 43 can be used to find SMB servers on the local network. 44 </p></dd><dt><span class="term"><a href="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a></span></dt><dd><p>The <code class="literal">net</code> command44 </p></dd><dt><span class="term"><a class="citerefentry" href="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a></span></dt><dd><p>The <code class="literal">net</code> command 45 45 is supposed to work similar to the DOS/Windows 46 NET.EXE command.</p></dd><dt><span class="term"><a href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a></span></dt><dd><p><code class="literal">swat</code> is a web-based46 NET.EXE command.</p></dd><dt><span class="term"><a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a></span></dt><dd><p><code class="literal">swat</code> is a web-based 47 47 interface to configuring <code class="filename">smb.conf</code>. 48 </p></dd><dt><span class="term"><a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a></span></dt><dd><p><code class="literal">winbindd</code> is a daemon48 </p></dd><dt><span class="term"><a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a></span></dt><dd><p><code class="literal">winbindd</code> is a daemon 49 49 that is used for integrating authentication and 50 the user database into unix.</p></dd><dt><span class="term"><a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a></span></dt><dd><p><code class="literal">wbinfo</code> is a utility50 the user database into unix.</p></dd><dt><span class="term"><a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a></span></dt><dd><p><code class="literal">wbinfo</code> is a utility 51 51 that retrieves and stores information related to winbind. 52 </p></dd><dt><span class="term"><a href="profiles.1.html"><span class="citerefentry"><span class="refentrytitle">profiles</span>(1)</span></a></span></dt><dd><p><code class="literal">profiles</code> is a command-line52 </p></dd><dt><span class="term"><a class="citerefentry" href="profiles.1.html"><span class="citerefentry"><span class="refentrytitle">profiles</span>(1)</span></a></span></dt><dd><p><code class="literal">profiles</code> is a command-line 53 53 utility that can be used to replace all occurences of 54 54 a certain SID with another SID. 55 </p></dd><dt><span class="term"><a href="log2pcap.1.html"><span class="citerefentry"><span class="refentrytitle">log2pcap</span>(1)</span></a></span></dt><dd><p><code class="literal">log2pcap</code> is a utility55 </p></dd><dt><span class="term"><a class="citerefentry" href="log2pcap.1.html"><span class="citerefentry"><span class="refentrytitle">log2pcap</span>(1)</span></a></span></dt><dd><p><code class="literal">log2pcap</code> is a utility 56 56 for generating pcap trace files from Samba log 57 files.</p></dd><dt><span class="term"><a href="vfstest.1.html"><span class="citerefentry"><span class="refentrytitle">vfstest</span>(1)</span></a></span></dt><dd><p><code class="literal">vfstest</code> is a utility58 that can be used to test vfs modules.</p></dd><dt><span class="term"><a href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></span></dt><dd><p><code class="literal">ntlm_auth</code> is a helper-utility57 files.</p></dd><dt><span class="term"><a class="citerefentry" href="vfstest.1.html"><span class="citerefentry"><span class="refentrytitle">vfstest</span>(1)</span></a></span></dt><dd><p><code class="literal">vfstest</code> is a utility 58 that can be used to test vfs modules.</p></dd><dt><span class="term"><a class="citerefentry" href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></span></dt><dd><p><code class="literal">ntlm_auth</code> is a helper-utility 59 59 for external programs wanting to do NTLM-authentication. 60 60 </p></dd><dt><span class="term"> 61 <a href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a>,62 <a href="smbumount.8.html"><span class="citerefentry"><span class="refentrytitle">smbumount</span>(8)</span></a>,63 <a href="smbmnt.8.html"><span class="citerefentry"><span class="refentrytitle">smbmnt</span>(8)</span></a></span></dt><dd><p><code class="literal">smbmount</code>,<code class="literal">smbumount</code> and <code class="literal">smbmnt</code> are commands that can be used to61 <a class="citerefentry" href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a>, 62 <a class="citerefentry" href="smbumount.8.html"><span class="citerefentry"><span class="refentrytitle">smbumount</span>(8)</span></a>, 63 <a class="citerefentry" href="smbmnt.8.html"><span class="citerefentry"><span class="refentrytitle">smbmnt</span>(8)</span></a></span></dt><dd><p><code class="literal">smbmount</code>,<code class="literal">smbumount</code> and <code class="literal">smbmnt</code> are commands that can be used to 64 64 mount CIFS/SMB shares on Linux. 65 </p></dd><dt><span class="term"><a href="smbcquotas.1.html"><span class="citerefentry"><span class="refentrytitle">smbcquotas</span>(1)</span></a></span></dt><dd><p><code class="literal">smbcquotas</code> is a tool that66 can set remote QUOTA's on server with NTFS 5. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00727"></a><h2>COMPONENTS</h2><p>The Samba suite is made up of several components. Each65 </p></dd><dt><span class="term"><a class="citerefentry" href="smbcquotas.1.html"><span class="citerefentry"><span class="refentrytitle">smbcquotas</span>(1)</span></a></span></dt><dd><p><code class="literal">smbcquotas</code> is a tool that 66 can set remote QUOTA's on server with NTFS 5. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324751"></a><h2>COMPONENTS</h2><p>The Samba suite is made up of several components. Each 67 67 component is described in a separate manual page. It is strongly 68 68 recommended that you read the documentation that comes with Samba 69 69 and the manual pages of those components that you use. If the 70 70 manual pages and documents aren't clear enough then please visit 71 <a href="http://devel.samba.org/" target="_top">http://devel.samba.org</a>71 <a class="ulink" href="http://devel.samba.org/" target="_top">http://devel.samba.org</a> 72 72 for information on how to file a bug report or submit a patch.</p><p>If you require help, visit the Samba webpage at 73 <a href="http://samba.org/" target="_top">http://www.samba.org/</a> and73 <a class="ulink" href="http://samba.org/" target="_top">http://www.samba.org/</a> and 74 74 explore the many option available to you. 75 </p></div><div class="refsect1" lang="en"><a name="id3 00756"></a><h2>AVAILABILITY</h2><p>The Samba software suite is licensed under the75 </p></div><div class="refsect1" lang="en"><a name="id324778"></a><h2>AVAILABILITY</h2><p>The Samba software suite is licensed under the 76 76 GNU Public License(GPL). A copy of that license should 77 77 have come with the package in the file COPYING. You are … … 81 81 directory pub/samba/. It is also available on several 82 82 mirror sites worldwide.</p><p>You may also find useful information about Samba 83 on the newsgroup <a href="news:comp.protocols.smb" target="_top">83 on the newsgroup <a class="ulink" href="news:comp.protocols.smb" target="_top"> 84 84 comp.protocol.smb</a> and the Samba mailing 85 85 list. Details on how to join the mailing list are given in … … 87 87 or Konqueror) then you will also find lots of useful information, 88 88 including back issues of the Samba mailing list, at 89 <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>.</p></div><div class="refsect1" lang="en"><a name="id300794"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the90 Samba suite. </p></div><div class="refsect1" lang="en"><a name="id3 00805"></a><h2>CONTRIBUTIONS</h2><p>If you wish to contribute to the Samba project,89 <a class="ulink" href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>.</p></div><div class="refsect1" lang="en"><a name="id324815"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the 90 Samba suite. </p></div><div class="refsect1" lang="en"><a name="id324825"></a><h2>CONTRIBUTIONS</h2><p>If you wish to contribute to the Samba project, 91 91 then I suggest you join the Samba mailing list at 92 <a href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>.92 <a class="ulink" href="http://lists.samba.org/" target="_top">http://lists.samba.org</a>. 93 93 </p><p>If you have patches to submit, visit 94 <a href="http://devel.samba.org/" target="_top">http://devel.samba.org/</a>94 <a class="ulink" href="http://devel.samba.org/" target="_top">http://devel.samba.org/</a> 95 95 for information on how to do it properly. We prefer patches 96 in <code class="literal">diff -u</code> format.</p></div><div class="refsect1" lang="en"><a name="id3 00837"></a><h2>CONTRIBUTORS</h2><p>Contributors to the project are now too numerous96 in <code class="literal">diff -u</code> format.</p></div><div class="refsect1" lang="en"><a name="id324855"></a><h2>CONTRIBUTORS</h2><p>Contributors to the project are now too numerous 97 97 to mention here but all deserve the thanks of all Samba 98 98 users. To see a full list, look at the 99 99 <code class="filename">change-log</code> in the source package 100 for the pre-CVS changes and at <a href="http://cvs.samba.org/" target="_top">100 for the pre-CVS changes and at <a class="ulink" href="http://cvs.samba.org/" target="_top"> 101 101 http://cvs.samba.org/</a> 102 102 for the contributors to Samba post-CVS. CVS is the Open Source 103 103 source code control system used by the Samba Team to develop 104 Samba. The project would have been unmanageable without it.</p></div><div class="refsect1" lang="en"><a name="id3 00862"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities104 Samba. The project would have been unmanageable without it.</p></div><div class="refsect1" lang="en"><a name="id324879"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 105 105 were created by Andrew Tridgell. Samba is now developed 106 106 by the Samba Team as an Open Source project similar 107 107 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 108 108 The man page sources were converted to YODL format (another 109 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">109 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 110 110 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 111 111 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smb.conf.5.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id291806"></a><h2>SYNOPSIS</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id315538"></a><h2>SYNOPSIS</h2><p> 2 2 The <code class="filename">smb.conf</code> file is a configuration file for the Samba suite. <code class="filename">smb.conf</code> contains runtime configuration information for the Samba programs. The 3 3 <code class="filename">smb.conf</code> file is designed to be configured and administered by the 4 <a href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> program. The4 <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> program. The 5 5 complete description of the file format and possible parameters held within are here for reference purposes. 6 6 </p></div><div class="refsect1" lang="en"><a name="FILEFORMATSECT"></a><h2>FILE FORMAT</h2><p> … … 27 27 which may be given as yes/no, 0/1 or true/false. Case is not significant in boolean values, but is preserved 28 28 in string values. Some items such as create masks are numeric. 29 </p></div><div class="refsect1" lang="en"><a name="id2 59596"></a><h2>SECTION DESCRIPTIONS</h2><p>29 </p></div><div class="refsect1" lang="en"><a name="id282776"></a><h2>SECTION DESCRIPTIONS</h2><p> 30 30 Each section in the configuration file (except for the [global] section) describes a shared resource (known as 31 31 a “<span class="quote">share</span>”). The section name is the name of the shared resource and the parameters within the … … 56 56 </p><pre class="programlisting"> 57 57 <em class="parameter"><code>[foo]</code></em> 58 <a class=" indexterm" name="id259433"></a>path = /home/bar59 <a class=" indexterm" name="id260355"></a>read only = no58 <a class="link" href="smb.conf.5.html#PATH">path = /home/bar</a> 59 <a class="link" href="smb.conf.5.html#READONLY">read only = no</a> 60 60 </pre><p> 61 61 </p><p> … … 65 65 </p><pre class="programlisting"> 66 66 <em class="parameter"><code>[aprinter]</code></em> 67 <a class=" indexterm" name="id260383"></a>path = /usr/spool/public68 <a class=" indexterm" name="id260390"></a>read only = yes69 <a class=" indexterm" name="id260397"></a>printable = yes70 <a class=" indexterm" name="id260404"></a>guest ok = yes67 <a class="link" href="smb.conf.5.html#PATH">path = /usr/spool/public</a> 68 <a class="link" href="smb.conf.5.html#READONLY">read only = yes</a> 69 <a class="link" href="smb.conf.5.html#PRINTABLE">printable = yes</a> 70 <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> 71 71 </pre><p> 72 </p></div><div class="refsect1" lang="en"><a name="id2 60415"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id260420"></a><h3>The [global] section</h3><p>72 </p></div><div class="refsect1" lang="en"><a name="id283054"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id283060"></a><h3>The [global] section</h3><p> 73 73 Parameters in this section apply to the server as a whole, or are defaults for sections that do not 74 74 specifically define certain items. See the notes under PARAMETERS for more information. … … 106 106 </p><pre class="programlisting"> 107 107 <em class="parameter"><code>[homes]</code></em> 108 <a class=" indexterm" name="id260157"></a>read only = no108 <a class="link" href="smb.conf.5.html#READONLY">read only = no</a> 109 109 </pre><p> 110 110 </p><p> … … 138 138 </p><pre class="programlisting"> 139 139 <em class="parameter"><code>[printers]</code></em> 140 <a class=" indexterm" name="id300481"></a>path = /usr/spool/public141 <a class=" indexterm" name="id300488"></a>guest ok = yes142 <a class=" indexterm" name="id300495"></a>printable = yes140 <a class="link" href="smb.conf.5.html#PATH">path = /usr/spool/public</a> 141 <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> 142 <a class="link" href="smb.conf.5.html#PRINTABLE">printable = yes</a> 143 143 </pre><p> 144 144 </p><p> … … 161 161 <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the 162 162 <code class="literal">printcap name</code> option for more details. 163 </p></div></div></div><div class="refsect1" lang="en"><a name="id3 00553"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete163 </p></div></div></div><div class="refsect1" lang="en"><a name="id324680"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete 164 164 their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and 165 165 is controlled by a set of parameters in the [global] section of the smb.conf. … … 179 179 180 180 </p><pre class="programlisting"> 181 <a class=" indexterm" name="id300682"></a>usershare path = /usr/local/samba/lib/usershares182 <a class=" indexterm" name="id300690"></a>usershare max shares = 10# (or the desired number of shares)181 <a class="link" href="smb.conf.5.html#USERSHAREPATH">usershare path = /usr/local/samba/lib/usershares</a> 182 <a class="link" href="smb.conf.5.html#USERSHAREMAXSHARES">usershare max shares = 10</a> # (or the desired number of shares) 183 183 </pre><p> 184 184 185 185 to the global 186 186 section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares 187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00757"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324875"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p> 188 188 Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>). Some parameters 189 189 are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal … … 197 197 find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred 198 198 synonym. 199 </p></div><div class="refsect1" lang="en"><a name="id3 00798"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>199 </p></div><div class="refsect1" lang="en"><a name="id324914"></a><h2>VARIABLE SUBSTITUTIONS</h2><p> 200 200 Many of the strings that are settable in the config file can take substitutions. For example the option 201 201 “<span class="quote">path = /tmp/%u</span>” is interpreted as “<span class="quote">path = /tmp/john</span>” if the user connected with the … … 215 215 </p></dd><dt><span class="term">%R</span></dt><dd><p>the selected protocol level after protocol negotiation. It can be one of CORE, COREPLUS, 216 216 LANMAN1, LANMAN2 or NT1.</p></dd><dt><span class="term">%d</span></dt><dd><p>the process id of the current server 217 process.</p></dd><dt><span class="term">%a</span></dt><dd><p>the architecture of the remote 218 machine. It currently recognizes Samba (<code class="constant">Samba</code>), 219 the Linux CIFS file system (<code class="constant">CIFSFS</code>), OS/2, (<code class="constant">OS2</code>), 220 Windows for Workgroups (<code class="constant">WfWg</code>), Windows 9x/ME 221 (<code class="constant">Win95</code>), Windows NT (<code class="constant">WinNT</code>), 222 Windows 2000 (<code class="constant">Win2K</code>), Windows XP (<code class="constant">WinXP</code>), 223 and Windows 2003 (<code class="constant">Win2K3</code>). Anything else will be known as 224 <code class="constant">UNKNOWN</code>.</p></dd><dt><span class="term">%I</span></dt><dd><p>the IP address of the client machine.</p></dd><dt><span class="term">%i</span></dt><dd><p>the local IP address to which a client connected.</p></dd><dt><span class="term">%T</span></dt><dd><p>the current date and time.</p></dd><dt><span class="term">%D</span></dt><dd><p>name of the domain or workgroup of the current user.</p></dd><dt><span class="term">%w</span></dt><dd><p>the winbind separator.</p></dd><dt><span class="term">%$(<em class="replaceable"><code>envvar</code></em>)</span></dt><dd><p>the value of the environment variable 217 process.</p></dd><dt><span class="term">%a</span></dt><dd><p> 218 The architecture of the remote 219 machine. It currently recognizes Samba (<code class="constant">Samba</code>), 220 the Linux CIFS file system (<code class="constant">CIFSFS</code>), OS/2, (<code class="constant">OS2</code>), 221 Windows for Workgroups (<code class="constant">WfWg</code>), Windows 9x/ME 222 (<code class="constant">Win95</code>), Windows NT (<code class="constant">WinNT</code>), 223 Windows 2000 (<code class="constant">Win2K</code>), 224 Windows XP (<code class="constant">WinXP</code>), 225 Windows XP 64-bit(<code class="constant">WinXP64</code>), 226 Windows 2003 including 227 2003R2 (<code class="constant">Win2K3</code>), and Windows 228 Vista (<code class="constant">Vista</code>). Anything else will be known as 229 <code class="constant">UNKNOWN</code>.</p></dd><dt><span class="term">%I</span></dt><dd><p>the IP address of the client machine.</p></dd><dt><span class="term">%i</span></dt><dd><p>the local IP address to which a client connected.</p></dd><dt><span class="term">%T</span></dt><dd><p>the current date and time.</p></dd><dt><span class="term">%D</span></dt><dd><p>name of the domain or workgroup of the current user.</p></dd><dt><span class="term">%w</span></dt><dd><p>the winbind separator.</p></dd><dt><span class="term">%$(<em class="replaceable"><code>envvar</code></em>)</span></dt><dd><p>the value of the environment variable 225 230 <em class="replaceable"><code>envar</code></em>.</p></dd></dl></div><p> 226 231 The following substitutes apply only to some configuration options (only those that are … … 254 259 controls what the default case is for new filenames (ie. files that don't currently exist in the filesystem). 255 260 Default <span class="emphasis"><em>lower</em></span>. IMPORTANT NOTE: This option will be used to modify the case of 256 <span class="emphasis"><em>all</em></span> incoming client filenames, not just new filenames if the options <a class=" indexterm" name="id301239"></a>case sensitive = yes, <a class="indexterm" name="id301246"></a>preserve case = No,257 <a class=" indexterm" name="id301253"></a>short preserve case = Noare set. This change is needed as part of the261 <span class="emphasis"><em>all</em></span> incoming client filenames, not just new filenames if the options <a class="link" href="smb.conf.5.html#CASESENSITIVE">case sensitive = yes</a>, <a class="link" href="smb.conf.5.html#PRESERVECASE">preserve case = No</a>, 262 <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case = No</a> are set. This change is needed as part of the 258 263 optimisations for directories containing large numbers of files. 259 264 </p></dd><dt><span class="term">preserve case = yes/no</span></dt><dd><p> … … 301 306 If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account 302 307 =</code> for the service, irrespective of the supplied password. 303 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id301448"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="variablelist"><dl><dt><span class="term"><a name="ABORTSHUTDOWNSCRIPT"></a>abort shutdown script (G)</span></dt><dd><p>This a full path name to a script called by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 304 should stop a shutdown procedure issued by the <a class="indexterm" name="id301488"></a>shutdown script.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id325539"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id325549"></a> 309 310 abort shutdown script (G) 311 </h3></div></div></div><a class="indexterm" name="id325550"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 312 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 305 313 right, this command will be run as user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> 306 314 </em></span> 307 315 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> 308 316 </em></span> 309 </p></dd><dt><span class="term"><a name="ACLCHECKPERMISSIONS"></a>acl check permissions (S)</span></dt><dd><p>This boolean parameter controls what <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 317 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id325623"></a> 318 319 acl check permissions (S) 320 </h3></div></div></div><a class="indexterm" name="id325624"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 310 321 from a Windows client. If a Windows client doesn't have permissions to delete a file then they 311 322 expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by … … 327 338 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code> 328 339 </em></span> 329 </p></dd><dt><span class="term"><a name="ACLCOMPATIBILITY"></a>acl compatibility (S)</span></dt><dd><p>This parameter specifies what OS ACL semantics should 340 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id282494"></a> 341 342 acl compatibility (S) 343 </h3></div></div></div><a class="indexterm" name="id282495"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should 330 344 be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4, 331 345 <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>. … … 336 350 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code> 337 351 </em></span> 338 </p></dd><dt><span class="term"><a name="ACLGROUPCONTROL"></a>acl group control (S)</span></dt><dd><p> 352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id325826"></a> 353 354 acl group control (S) 355 </h3></div></div></div><a class="indexterm" name="id325828"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 339 356 In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions 340 357 and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the … … 349 366 </p><p> 350 367 This parameter allows Samba to also permit delegation of the control over a point in the exported 351 directory hierarchy in much the same wa sas Windows. This allows all members of a UNIX group to368 directory hierarchy in much the same way as Windows. This allows all members of a UNIX group to 352 369 control the permissions on a file or directory they have group ownership on. 353 370 </p><p> 354 This parameter is best used with the <a class=" indexterm" name="id301716"></a>inherit owneroption and also355 on on a share containing directories with the UNIX <span class="emphasis"><em>setgid bit</em></span> bitset371 This parameter is best used with the <a class="link" href="smb.conf.5.html#INHERITOWNER">inherit owner</a> option and also 372 on on a share containing directories with the UNIX <span class="emphasis"><em>setgid bit</em></span> set 356 373 on them, which causes new files and directories created within it to inherit the group 357 374 ownership from the containing directory. … … 361 378 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code> 362 379 </em></span> 363 </p></dd><dt><span class="term"><a name="ACLMAPFULLCONTROL"></a>acl map full control (S)</span></dt><dd><p> 364 This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 380 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id325907"></a> 381 382 acl map full control (S) 383 </h3></div></div></div><a class="indexterm" name="id325908"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 384 This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 365 385 allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX 366 386 ACE entry of "rwx" will be returned in a Windows ACL as "FULL CONTROL", is this parameter is set to false any … … 369 389 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code> 370 390 </em></span> 371 </p></dd><dt><span class="term"><a name="ADDGROUPSCRIPT"></a>add group script (G)</span></dt><dd><p> 372 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 391 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id325954"></a> 392 393 add group script (G) 394 </h3></div></div></div><a class="indexterm" name="id325956"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 395 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 373 396 will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful 374 397 for installations using the Windows NT domain administration tools. The script is free to create a group with … … 379 402 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code> 380 403 </em></span> 381 </p></dd><dt><span class="term"><a name="ADDMACHINESCRIPT"></a>add machine script (G)</span></dt><dd><p> 404 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326025"></a> 405 406 add machine script (G) 407 </h3></div></div></div><a class="indexterm" name="id326026"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 382 408 This is the full pathname to a script that will be run by 383 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is409 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is 384 410 added to Samba's domain and a Unix account matching the machine's name appended with a "$" does not 385 411 already exist. 386 </p><p>This option is very similar to the <a class=" indexterm" name="id301914"></a>add user script, and likewise uses the %u412 </p><p>This option is very similar to the <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a>, and likewise uses the %u 387 413 substitution for the account name. Do not use the %m 388 414 substitution. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal"></code> … … 390 416 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code> 391 417 </em></span> 392 </p></dd><dt><span class="term"><a name="ADDPORTCOMMAND"></a>add port command (G)</span></dt><dd><p>Samba 3.0.23 introduces support for adding printer ports 418 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326098"></a> 419 420 add port command (G) 421 </h3></div></div></div><a class="indexterm" name="id326100"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports 393 422 remotely using the Windows "Add Standard TCP/IP Port Wizard". 394 423 This option defines an external program to be executed when 395 424 smbd receives a request to add a new Port to the system. 396 he script is passed two parameters: 397 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://<hostname>[:<portnumber>] 425 The script is passed two parameters:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://<hostname>[:<portnumber>] 398 426 or lpd://<hostname>/<queuename>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal"></code> 399 427 </em></span> 400 428 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code> 401 429 </em></span> 402 </p></dd><dt><span class="term"><a name="ADDPRINTERCOMMAND"></a>add printer command (G)</span></dt><dd><p>With the introduction of MS-RPC based printing 430 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326178"></a> 431 432 add printer command (G) 433 </h3></div></div></div><a class="indexterm" name="id326179"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing 403 434 support for Windows NT/2000 clients in Samba 2.2, The MS Add 404 435 Printer Wizard (APW) icon is now also available in the … … 411 442 to the print system and to add the appropriate service definition 412 443 to the <code class="filename">smb.conf</code> file in order that it can be 413 shared by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>The <em class="parameter"><code>addprinter command</code></em> is444 shared by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>The <em class="parameter"><code>addprinter command</code></em> is 414 445 automatically invoked with the following parameter (in 415 446 order):</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>printer name</code></em></p></li><li><p><em class="parameter"><code>share name</code></em></p></li><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>driver name</code></em></p></li><li><p><em class="parameter"><code>location</code></em></p></li><li><p><em class="parameter"><code>Windows 9x driver location</code></em></p></li></ul></div><p>All parameters are filled in from the PRINTER_INFO_2 structure sent … … 429 460 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add printer command</code></em> = <code class="literal">/usr/bin/addprinter</code> 430 461 </em></span> 431 </p></dd><dt><span class="term"><a name="ADDSHARECOMMAND"></a>add share command (G)</span></dt><dd><p>Samba 2.2.0 introduced the ability to dynamically 432 add and delete shares via the Windows NT 4.0 Server Manager. The 433 <em class="parameter"><code>add share command</code></em> is used to define an 434 external program or script which will add a new service definition 435 to <code class="filename">smb.conf</code>. In order to successfully 436 execute the <em class="parameter"><code>add share command</code></em>, <code class="literal">smbd</code> 437 requires that the administrator be connected using a root account (i.e. 438 uid == 0). 439 </p><p> 440 When executed, <code class="literal">smbd</code> will automatically invoke the 462 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326348"></a> 463 464 add share command (G) 465 </h3></div></div></div><a class="indexterm" name="id326349"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 466 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 467 Manager. The <em class="parameter"><code>add share command</code></em> is used to define an external program 468 or script which will add a new service definition to <code class="filename">smb.conf</code>. In order 469 to successfully execute the <em class="parameter"><code>add share command</code></em>, <code class="literal">smbd</code> requires that the administrator be connected using a root account (i.e. uid == 0). 470 </p><p> 471 If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in 472 <em class="parameter"><code>change share</code></em> parameter are executed as root. 473 </p><p> 474 When executed, <code class="literal">smbd</code> will automatically invoke the 441 475 <em class="parameter"><code>add share command</code></em> with five parameters. 442 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 443 of the global <code class="filename">smb.conf</code> file. 444 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new 445 share. 476 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location of the global <code class="filename">smb.conf</code> file. 477 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new share. 446 478 </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing** 447 479 directory on disk. 448 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate 449 with the newshare.480 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate with the new 481 share. 450 482 </p></li><li><p><em class="parameter"><code>max 451 483 connections</code></em> … … 453 485 share. 454 486 </p></li></ul></div><p> 455 This parameter is only used for add file shares. To add printer shares, 456 see the <a class="indexterm" name="id302354"></a>addprinter command. 487 This parameter is only used for add file shares. To add printer shares, see the <a class="link" href="smb.conf.5.html#ADDPRINTERCOMMAND">addprinter command</a>. 457 488 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal"></code> 458 489 </em></span> 459 490 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 460 491 </em></span> 461 </p></dd><dt><span class="term"><a name="ADDUSERSCRIPT"></a>add user script (G)</span></dt><dd><p> 492 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326523"></a> 493 494 add user script (G) 495 </h3></div></div></div><a class="indexterm" name="id326524"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 462 496 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by 463 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>497 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 464 498 under special circumstances described below. 465 499 </p><p> … … 470 504 <span class="emphasis"><em>ON DEMAND</em></span> when a user accesses the Samba server. 471 505 </p><p> 472 In order to use this option, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must <span class="emphasis"><em>NOT</em></span> be set to473 <a class=" indexterm" name="id302456"></a>security = share and <a class="indexterm" name="id302463"></a>add user script506 In order to use this option, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must <span class="emphasis"><em>NOT</em></span> be set to 507 <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> and <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a> 474 508 must be set to a full pathname for a script that will create a UNIX user given one argument of 475 509 <em class="parameter"><code>%u</code></em>, which expands into the UNIX user name to create. 476 510 </p><p> 477 511 When the Windows user attempts to access the Samba server, at login (session setup in 478 the SMB protocol) time, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> contacts the <a class="indexterm" name="id302489"></a>password server512 the SMB protocol) time, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> contacts the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> 479 513 and attempts to authenticate the given user with the given password. If the authentication 480 514 succeeds then <code class="literal">smbd</code> attempts to find a UNIX user in the UNIX 481 515 password database to map the Windows user into. If this lookup fails, and 482 <a class=" indexterm" name="id302504"></a>add user scriptis set then <code class="literal">smbd</code> will516 <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a> is set then <code class="literal">smbd</code> will 483 517 call the specified script <span class="emphasis"><em>AS ROOT</em></span>, expanding any 484 518 <em class="parameter"><code>%u</code></em> argument to be the user name to create. … … 488 522 match existing Windows NT accounts. 489 523 </p><p> 490 See also <a class=" indexterm" name="id302541"></a>security, <a class="indexterm" name="id302548"></a>password server,491 <a class=" indexterm" name="id302555"></a>delete user script.524 See also <a class="link" href="smb.conf.5.html#SECURITY">security</a>, <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a>, 525 <a class="link" href="smb.conf.5.html#DELETEUSERSCRIPT">delete user script</a>. 492 526 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal"></code> 493 527 </em></span> 494 528 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code> 495 529 </em></span> 496 </p></dd><dt><span class="term"><a name="ADDUSERTOGROUPSCRIPT"></a>add user to group script (G)</span></dt><dd><p> 530 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326711"></a> 531 532 add user to group script (G) 533 </h3></div></div></div><a class="indexterm" name="id326712"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 497 534 Full path to the script that will be called when a user is added to a group using the Windows NT domain administration 498 tools. It will be run by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>535 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 499 536 <span class="emphasis"><em>AS ROOT</em></span>. Any <em class="parameter"><code>%g</code></em> will be replaced with the group name and 500 537 any <em class="parameter"><code>%u</code></em> will be replaced with the user name. … … 506 543 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code> 507 544 </em></span> 508 </p></dd><dt><span class="term"><a name="ADMINUSERS"></a>admin users (S)</span></dt><dd><p>This is a list of users who will be granted 545 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326794"></a> 546 547 admin users (S) 548 </h3></div></div></div><a class="indexterm" name="id326795"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted 509 549 administrative privileges on the share. This means that they 510 550 will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in 511 551 this list will be able to do anything they like on the share, 512 irrespective of file permissions.</p><p>This parameter will not work with the <a class=" indexterm" name="id302715"></a>security = sharein552 irrespective of file permissions.</p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in 513 553 Samba 3.0. This is by design.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal"></code> 514 554 </em></span> 515 555 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code> 516 556 </em></span> 517 </p></dd><dt><span class="term"><a name="AFSSHARE"></a>afs share (S)</span></dt><dd><p>This parameter controls whether special AFS features are enabled 557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326862"></a> 558 559 afs share (S) 560 </h3></div></div></div><a class="indexterm" name="id326864"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled 518 561 for this share. If enabled, it assumes that the directory exported via 519 562 the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The … … 522 565 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code> 523 566 </em></span> 524 </p></dd><dt><span class="term"><a name="AFSUSERNAMEMAP"></a>afs username map (G)</span></dt><dd><p>If you are using the fake kaserver AFS feature, you might 567 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326907"></a> 568 569 afs username map (G) 570 </h3></div></div></div><a class="indexterm" name="id326908"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might 525 571 want to hand-craft the usernames you are creating tokens for. 526 572 For example this is necessary if you have users from several domain … … 532 578 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code> 533 579 </em></span> 534 </p></dd><dt><span class="term"><a name="AIOREADSIZE"></a>aio read size (S)</span></dt><dd><p>If Samba has been built with asynchronous I/O support and this 580 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id326966"></a> 581 582 aio read size (S) 583 </h3></div></div></div><a class="indexterm" name="id326967"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 535 584 integer parameter is set to non-zero value, 536 585 Samba will read from file asynchronously when size of request is bigger 537 586 than this value. Note that it happens only for non-chained and non-chaining 538 587 reads and when not using write cache.</p><p>Current implementation of asynchronous I/O in Samba 3.0 does support 539 only up to 10 outstanding asynchronous requests, read and write combined.</p> 540 541 write cache size 542 aio write size 543 544 <p>Default: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">0</code> 588 only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOWRITESIZE">aio write size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">0</code> 545 589 </em></span> 546 590 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">16384 … … 548 592 request size</code> 549 593 </em></span> 550 </p></dd><dt><span class="term"><a name="AIOWRITESIZE"></a>aio write size (S)</span></dt><dd><p>If Samba has been built with asynchronous I/O support and this 594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327045"></a> 595 596 aio write size (S) 597 </h3></div></div></div><a class="indexterm" name="id327046"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 551 598 integer parameter is set to non-zero value, 552 599 Samba will write to file asynchronously when size of request is bigger 553 600 than this value. Note that it happens only for non-chained and non-chaining 554 601 reads and when not using write cache.</p><p>Current implementation of asynchronous I/O in Samba 3.0 does support 555 only up to 10 outstanding asynchronous requests, read and write combined.</p> 556 557 write cache size 558 aio read size 559 560 <p>Default: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">0</code> 602 only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOREADSIZE">aio read size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">0</code> 561 603 </em></span> 562 604 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">16384 … … 564 606 request size</code> 565 607 </em></span> 566 </p></dd><dt><span class="term"><a name="ALGORITHMICRIDBASE"></a>algorithmic rid base (G)</span></dt><dd><p>This determines how Samba will use its 608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327124"></a> 609 610 algorithmic rid base (G) 611 </h3></div></div></div><a class="indexterm" name="id327125"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its 567 612 algorithmic mapping from uids/gid to the RIDs needed to construct 568 613 NT Security Identifiers. … … 574 619 mapping can't be 'turned off', but pushing it 'out of the way' should 575 620 resolve the issues. Users and groups can then be assigned 'low' RIDs 576 in arbit ary-rid supporting backends.621 in arbitrary-rid supporting backends. 577 622 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">1000</code> 578 623 </em></span> 579 624 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code> 580 625 </em></span> 581 </p></dd><dt><span class="term"><a name="ALLOCATIONROUNDUPSIZE"></a>allocation roundup size (S)</span></dt><dd><p>This parameter allows an administrator to tune the 626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327189"></a> 627 628 allocation roundup size (S) 629 </h3></div></div></div><a class="indexterm" name="id327190"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the 582 630 allocation size reported to Windows clients. The default 583 631 size of 1Mb generally results in improved Windows client … … 591 639 # (to disable roundups)</code> 592 640 </em></span> 593 </p></dd><dt><span class="term"><a name="ALLOWTRUSTEDDOMAINS"></a>allow trusted domains (G)</span></dt><dd><p> 594 This option only takes effect when the <a class="indexterm" name="id303140"></a>security option is set to 641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327249"></a> 642 643 allow trusted domains (G) 644 </h3></div></div></div><a class="indexterm" name="id327250"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 645 This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY">security</a> option is set to 595 646 <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. 596 647 If it is set to no, then attempts to connect to a resource from … … 606 657 can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code> 607 658 </em></span> 608 </p></dd><dt><span class="term"><a name="ANNOUNCEAS"></a>announce as (G)</span></dt><dd><p>This specifies what type of server <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 659 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327313"></a> 660 661 announce as (G) 662 </h3></div></div></div><a class="indexterm" name="id327314"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 609 663 list. By default this is set to Windows NT. The valid options 610 664 are : "NT Server" (which can also be written as "NT"), … … 618 672 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code> 619 673 </em></span> 620 </p></dd><dt><span class="term"><a name="ANNOUNCEVERSION"></a>announce version (G)</span></dt><dd><p>This specifies the major and minor version numbers 674 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327382"></a> 675 676 announce version (G) 677 </h3></div></div></div><a class="indexterm" name="id327383"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers 621 678 that nmbd will use when announcing itself as a server. The default 622 679 is 4.9. Do not change this parameter unless you have a specific … … 625 682 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code> 626 683 </em></span> 627 </p></dd><dt><span class="term"><a name="AUTHMETHODS"></a>auth methods (G)</span></dt><dd><p> 684 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327436"></a> 685 686 auth methods (G) 687 </h3></div></div></div><a class="indexterm" name="id327438"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p> 628 688 This option allows the administrator to chose what authentication methods <code class="literal">smbd</code> 629 will use when authenticating a user. This option defaults to sensible values based on <a class=" indexterm" name="id303341"></a>security.689 will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY">security</a>. 630 690 This should be considered a developer option and used only in rare circumstances. In the majority (if not all) 631 691 of production servers, the default setting should be adequate. … … 646 706 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code> 647 707 </em></span> 648 </p></dd><dt><span class="term"><a name="AVAILABLE"></a>available (S)</span></dt><dd><p>This parameter lets you "turn off" a service. If 708 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327532"></a> 709 710 available (S) 711 </h3></div></div></div><a class="indexterm" name="id327533"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If 649 712 <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span> 650 713 attempts to connect to the service will fail. Such failures are 651 714 logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code> 652 715 </em></span> 653 </p></dd><dt><span class="term"><a name="BINDINTERFACESONLY"></a>bind interfaces only (G)</span></dt><dd><p>This global parameter allows the Samba admin 716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327578"></a> 717 718 bind interfaces only (G) 719 </h3></div></div></div><a class="indexterm" name="id327579"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin 654 720 to limit what interfaces on a machine will serve SMB requests. It 655 affects file service <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <ahref="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p>721 affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p> 656 722 For name service it causes <code class="literal">nmbd</code> to bind to ports 137 and 138 on the 657 interfaces listed in the <a class=" indexterm" name="id303510"></a>interfacesparameter. <code class="literal">nmbd</code>723 interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter. <code class="literal">nmbd</code> 658 724 also binds to the "all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes of 659 725 reading broadcast messages. If this option is not set then <code class="literal">nmbd</code> will 660 service name requests on all of these sockets. If <a class=" indexterm" name="id303531"></a>bind interfaces onlyis set then726 service name requests on all of these sockets. If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set then 661 727 <code class="literal">nmbd</code> will check the source address of any packets coming in on the 662 728 broadcast sockets and discard any that don't match the broadcast addresses of the interfaces in the 663 <a class=" indexterm" name="id303545"></a>interfacesparameter list. As unicast packets are received on the other sockets it729 <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list. As unicast packets are received on the other sockets it 664 730 allows <code class="literal">nmbd</code> to refuse to serve names to machines that send packets that 665 arrive through any interfaces not listed in the <a class=" indexterm" name="id303560"></a>interfaceslist. IP Source address731 arrive through any interfaces not listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> list. IP Source address 666 732 spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for 667 733 <code class="literal">nmbd</code>. 668 734 </p><p> 669 For file service it causes <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to bind only to the interface list given in the <a class="indexterm" name="id303585"></a>interfacesparameter. This restricts the networks that <code class="literal">smbd</code> will735 For file service it causes <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to bind only to the interface list given in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter. This restricts the networks that <code class="literal">smbd</code> will 670 736 serve to packets coming in those interfaces. Note that you should not use this parameter for machines that 671 737 are serving PPP or other intermittent or non-broadcast network interfaces as it will not cope with 672 738 non-permanent interfaces. 673 739 </p><p> 674 If <a class=" indexterm" name="id303604"></a>bind interfaces onlyis set then unless the network address675 <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class=" indexterm" name="id303615"></a>interfacesparameter list676 <a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> and677 <a href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> may not work as740 If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set then unless the network address 741 <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list 742 <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> and 743 <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> may not work as 678 744 expected due to the reasons covered below. 679 745 </p><p> 680 746 To change a users SMB password, the <code class="literal">smbpasswd</code> by default connects to the 681 747 <span class="emphasis"><em>localhost - 127.0.0.1</em></span> address as an SMB client to issue the password change request. If 682 <a class=" indexterm" name="id303653"></a>bind interfaces onlyis set then unless the network address683 <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class=" indexterm" name="id303664"></a>interfacesparameter list then <code class="literal"> smbpasswd</code> will fail to connect in it's default mode. <code class="literal">smbpasswd</code> can be forced to use the primary IP interface of the local host by using684 its <a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> <em class="parameter"><code>-r <em class="replaceable"><code>remote machine</code></em></code></em> parameter, with <em class="replaceable"><code>remote748 <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set then unless the network address 749 <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list then <code class="literal"> smbpasswd</code> will fail to connect in it's default mode. <code class="literal">smbpasswd</code> can be forced to use the primary IP interface of the local host by using 750 its <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> <em class="parameter"><code>-r <em class="replaceable"><code>remote machine</code></em></code></em> parameter, with <em class="replaceable"><code>remote 685 751 machine</code></em> set to the IP name of the primary interface of the local host. 686 752 </p><p> … … 692 758 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code> 693 759 </em></span> 694 </p></dd><dt><span class="term"><a name="BLOCKINGLOCKS"></a>blocking locks (S)</span></dt><dd><p>This parameter controls the behavior 695 of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 760 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327875"></a> 761 762 blocking locks (S) 763 </h3></div></div></div><a class="indexterm" name="id327876"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior 764 of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 696 765 to obtain a byte range lock on a region of an open file, and the 697 766 request has a time limit associated with it.</p><p>If this parameter is set and the lock range requested … … 703 772 cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code> 704 773 </em></span> 705 </p></dd><dt><span class="term"><a name="BLOCKSIZE"></a>block size (S)</span></dt><dd><p>This parameter controls the behavior of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 774 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id327934"></a> 775 776 block size (S) 777 </h3></div></div></div><a class="indexterm" name="id327935"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 706 778 sizes. By default, this reports a disk block size of 1024 bytes. 707 779 </p><p>Changing this parameter may have some effect on the … … 717 789 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code> 718 790 </em></span> 719 </p></dd><dt><span class="term"><a name="BROWSABLE"></a>browsable</span></dt><dd><p>This parameter is a synonym for browseable.</p></dd><dt><span class="term"><a name="BROWSEABLE"></a>browseable (S)</span></dt><dd><p>This controls whether this share is seen in 791 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328005"></a><a name="BROWSABLE"></a>browsable</h3></div></div></div><a class="indexterm" name="id328006"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328031"></a> 792 793 browseable (S) 794 </h3></div></div></div><a class="indexterm" name="id328032"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in 720 795 the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code> 721 796 </em></span> 722 </p></dd><dt><span class="term"><a name="BROWSELIST"></a>browse list (G)</span></dt><dd><p>This controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328068"></a> 798 799 browse list (G) 800 </h3></div></div></div><a class="indexterm" name="id328070"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 723 801 a client doing a <code class="literal">NetServerEnum</code> call. Normally 724 802 set to <code class="constant">yes</code>. You should never need to change 725 803 this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code> 726 804 </em></span> 727 </p></dd><dt><span class="term"><a name="CASESIGNAMES"></a>casesignames</span></dt><dd><p>This parameter is a synonym for case sensitive.</p></dd><dt><span class="term"><a name="CASESENSITIVE"></a>case sensitive (S)</span></dt><dd><p>See the discussion in the section <a class="indexterm" name="id304074"></a>name mangling.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 728 </em></span> 729 </p></dd><dt><span class="term"><a name="CHANGENOTIFY"></a>change notify (S)</span></dt><dd><p>This parameter specifies whether Samba should reply 805 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328121"></a><a name="CASESIGNAMES"></a>casesignames</h3></div></div></div><a class="indexterm" name="id328122"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328146"></a> 806 807 case sensitive (S) 808 </h3></div></div></div><a class="indexterm" name="id328147"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 809 </em></span> 810 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328190"></a> 811 812 change notify (S) 813 </h3></div></div></div><a class="indexterm" name="id328191"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply 730 814 to a client's file change notify requests. 731 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">no</code> 732 </em></span> 733 </p></dd><dt><span class="term"><a name="CHANGESHARECOMMAND"></a>change share command (G)</span></dt><dd><p>Samba 2.2.0 introduced the ability to dynamically 734 add and delete shares via the Windows NT 4.0 Server Manager. The 735 <em class="parameter"><code>change share command</code></em> is used to define an 736 external program or script which will modify an existing service definition 737 in <code class="filename">smb.conf</code>. In order to successfully 738 execute the <em class="parameter"><code>change share command</code></em>, <code class="literal">smbd</code> 739 requires that the administrator be connected using a root account (i.e. 740 uid == 0). 741 </p><p> 742 When executed, <code class="literal">smbd</code> will automatically invoke the 815 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code> 816 </em></span> 817 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328231"></a> 818 819 change share command (G) 820 </h3></div></div></div><a class="indexterm" name="id328232"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 821 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 822 Manager. The <em class="parameter"><code>change share command</code></em> is used to define an external 823 program or script which will modify an existing service definition in <code class="filename">smb.conf</code>. In order to successfully execute the <em class="parameter"><code>change 824 share command</code></em>, <code class="literal">smbd</code> requires that the administrator be 825 connected using a root account (i.e. uid == 0). 826 </p><p> 827 If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in 828 <em class="parameter"><code>change share</code></em> parameter are executed as root. 829 </p><p> 830 When executed, <code class="literal">smbd</code> will automatically invoke the 743 831 <em class="parameter"><code>change share command</code></em> with five parameters. 744 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 745 of the global <code class="filename">smb.conf</code> file. 746 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new 832 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 833 of the global <code class="filename">smb.conf</code> file. 834 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new 747 835 share. 748 836 </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing** 749 837 directory on disk. 750 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate 838 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate 751 839 with the new share. 752 840 </p></li><li><p><em class="parameter"><code>max … … 755 843 share. 756 844 </p></li></ul></div><p> 757 This parameter is only used modify existing file shares definitions. To modify 845 This parameter is only used modify existing file shares definitions. To modify 758 846 printer shares, use the "Printers..." folder as seen when browsing the Samba host. 759 847 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal"></code> … … 761 849 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 762 850 </em></span> 763 </p></dd><dt><span class="term"><a name="CHECKPASSWORDSCRIPT"></a>check password script (G)</span></dt><dd><p>The name of a program that can be used to check password 851 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328401"></a> 852 853 check password script (G) 854 </h3></div></div></div><a class="indexterm" name="id328402"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password 764 855 complexity. The password is sent to the program's standrad input.</p><p>The program must return 0 on good password any other value otherwise. 765 856 In case the password is considered weak (the program do not return 0) the 766 857 user will be notified and the password change will fail.</p><p>Note: In the example directory there is a sample program called crackcheck 767 that uses cracklib to checkpassword quality</p>. 768 769 770 <p>Default: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">Disabled</code> 858 that uses cracklib to checkpassword quality.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">Disabled</code> 771 859 </em></span> 772 860 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">check password script = /usr/local/sbin/crackcheck</code> 773 861 </em></span> 774 </p></dd><dt><span class="term"><a name="CLIENTLANMANAUTH"></a>client lanman auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 862 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328464"></a> 863 864 client lanman auth (G) 865 </h3></div></div></div><a class="indexterm" name="id328465"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 775 866 tools will attempt to authenticate itself to servers using the 776 867 weaker LANMAN password hash. If disabled, only server which support NT … … 783 874 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">yes</code> 784 875 </em></span> 785 </p></dd><dt><span class="term"><a name="CLIENTNTLMV2AUTH"></a>client ntlmv2 auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 876 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328533"></a> 877 878 client ntlmv2 auth (G) 879 </h3></div></div></div><a class="indexterm" name="id328534"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 786 880 authenticate itself to servers using the NTLMv2 encrypted password 787 881 response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more … … 795 889 responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code> 796 890 </em></span> 797 </p></dd><dt><span class="term"><a name="CLIENTPLAINTEXTAUTH"></a>client plaintext auth (G)</span></dt><dd><p>Specifies whether a client should send a plaintext 891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328613"></a> 892 893 client plaintext auth (G) 894 </h3></div></div></div><a class="indexterm" name="id328614"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext 798 895 password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">yes</code> 799 896 </em></span> 800 </p></dd><dt><span class="term"><a name="CLIENTSCHANNEL"></a>client schannel (G)</span></dt><dd><p> 897 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328651"></a> 898 899 client schannel (G) 900 </h3></div></div></div><a class="indexterm" name="id328652"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 801 901 This controls whether the client offers or even demands the use of the netlogon schannel. 802 <a class=" indexterm" name="id304593"></a>client schannel = nodoes not offer the schannel,803 <a class=" indexterm" name="id304601"></a>client schannel = autooffers the schannel but does not804 enforce it, and <a class=" indexterm" name="id304608"></a>client schannel = yesdenies access902 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = no</a> does not offer the schannel, 903 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = auto</a> offers the schannel but does not 904 enforce it, and <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = yes</a> denies access 805 905 if the server is not able to speak netlogon schannel. 806 906 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">auto</code> … … 808 908 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code> 809 909 </em></span> 810 </p></dd><dt><span class="term"><a name="CLIENTSIGNING"></a>client signing (G)</span></dt><dd><p>This controls whether the client offers or requires 910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328727"></a> 911 912 client signing (G) 913 </h3></div></div></div><a class="indexterm" name="id328728"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires 811 914 the server it talks to to use SMB signing. Possible values 812 915 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 814 917 </p><p>When set to auto, SMB signing is offered, but not enforced. 815 918 When set to mandatory, SMB signing is required and if set 816 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 817 </em></span> 818 </p></dd><dt><span class="term"><a name="CLIENTUSESPNEGO"></a>client use spnego (G)</span></dt><dd><p> This variable controls whether Samba clients will try 919 to disabled, SMB signing is not offered either. 920 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 921 </em></span> 922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328779"></a> 923 924 client use spnego (G) 925 </h3></div></div></div><a class="indexterm" name="id328780"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 819 926 to use Simple and Protected NEGOciation (as specified by rfc2478) with 820 927 supporting servers (including WindowsXP, Windows2000 and Samba … … 822 929 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 823 930 </em></span> 824 </p></dd><dt><span class="term"><a name="COMMENT"></a>comment (S)</span></dt><dd><p>This is a text field that is seen next to a share 931 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328818"></a> 932 933 comment (S) 934 </h3></div></div></div><a class="indexterm" name="id328820"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 825 935 when a client does a queries the server, either via the network 826 936 neighborhood or via <code class="literal">net view</code> to list what shares 827 937 are available.</p><p>If you want to set the string that is displayed next to the 828 machine name then see the <a class=" indexterm" name="id304778"></a>server stringparameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">938 machine name then see the <a class="link" href="smb.conf.5.html#SERVERSTRING">server string</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal"> 829 939 # No comment</code> 830 940 </em></span> 831 941 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 832 942 </em></span> 833 </p></dd><dt><span class="term"><a name="CONFIGFILE"></a>config file (G)</span></dt><dd><p>This allows you to override the config file 943 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328889"></a> 944 945 config file (G) 946 </h3></div></div></div><a class="indexterm" name="id328890"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file 834 947 to use, instead of the default (usually <code class="filename">smb.conf</code>). 835 948 There is a chicken and egg problem here as this option is set … … 841 954 clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code> 842 955 </em></span> 843 </p></dd><dt><span class="term"><a name="COPY"></a>copy (S)</span></dt><dd><p>This parameter allows you to "clone" service 956 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id328950"></a> 957 958 copy (S) 959 </h3></div></div></div><a class="indexterm" name="id328951"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service 844 960 entries. The specified service is simply duplicated under the 845 961 current service's name. Any parameters specified in the current … … 851 967 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code> 852 968 </em></span> 853 </p></dd><dt><span class="term"><a name="CREATEMODE"></a>create mode</span></dt><dd><p>This parameter is a synonym for create mask.</p></dd><dt><span class="term"><a name="CREATEMASK"></a>create mask (S)</span></dt><dd><p> 969 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329008"></a><a name="CREATEMODE"></a>create mode</h3></div></div></div><a class="indexterm" name="id329009"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329034"></a> 970 971 create mask (S) 972 </h3></div></div></div><a class="indexterm" name="id329035"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 854 973 When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to 855 974 UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may … … 861 980 </p><p> 862 981 Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the 863 <a class=" indexterm" name="id305012"></a>force create modeparameter which is set to 000 by default.864 </p><p> 865 This parameter does not affect directory masks. See the parameter <a class=" indexterm" name="id305023"></a>directory mask982 <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> parameter which is set to 000 by default. 983 </p><p> 984 This parameter does not affect directory masks. See the parameter <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a> 866 985 for details. 867 986 </p><p> 868 987 Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the 869 administrator wishes to enforce a mask on access control lists also, they need to set the <a class=" indexterm" name="id305036"></a>security mask.988 administrator wishes to enforce a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#SECURITYMASK">security mask</a>. 870 989 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0744</code> 871 990 </em></span> 872 991 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 873 992 </em></span> 874 </p></dd><dt><span class="term"><a name="CSCPOLICY"></a>csc policy (S)</span></dt><dd><p> 993 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329141"></a> 994 995 csc policy (S) 996 </h3></div></div></div><a class="indexterm" name="id329142"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 875 997 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 876 998 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 879 1001 </p><p> 880 1002 For example, shares containing roaming profiles can have offline caching disabled using 881 <a class=" indexterm" name="id305112"></a>csc policy = disable.1003 <a class="link" href="smb.conf.5.html#CSCPOLICY">csc policy = disable</a>. 882 1004 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">manual</code> 883 1005 </em></span> 884 1006 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code> 885 1007 </em></span> 886 </p></dd><dt><span class="term"><a name="CUPSOPTIONS"></a>cups options (S)</span></dt><dd><p> 887 This parameter is only applicable if <a class="indexterm" name="id305175"></a>printing is 1008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329213"></a> 1009 1010 cups options (S) 1011 </h3></div></div></div><a class="indexterm" name="id329214"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1012 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is 888 1013 set to <code class="constant">cups</code>. Its value is a free form string of options 889 1014 passed directly to the cups library. … … 893 1018 specific option (as listed in "lpoptions -d printername -l") 894 1019 valid for the target queue. 1020 Multiple parameters should be space-delimited name/value pairs according to 1021 the PAPI text option ABNF specification. Collection values 1022 ("name={a=... b=... c=...}") are stored with the curley brackets intact. 895 1023 </p><p> 896 1024 You should set this parameter to <code class="constant">raw</code> if your CUPS server … … 901 1029 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">""</code> 902 1030 </em></span> 903 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw,media=a4,job-sheets=secret,secret"</code> 904 </em></span> 905 </p></dd><dt><span class="term"><a name="CUPSSERVER"></a>cups server (G)</span></dt><dd><p> 906 This parameter is only applicable if <a class="indexterm" name="id305268"></a>printing is set to <code class="constant">cups</code>. 1031 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code> 1032 </em></span> 1033 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329303"></a> 1034 1035 cups server (G) 1036 </h3></div></div></div><a class="indexterm" name="id329304"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1037 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">cups</code>. 907 1038 </p><p> 908 1039 If set, this option overrides the ServerName option in the CUPS <code class="filename">client.conf</code>. This is … … 917 1048 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code> 918 1049 </em></span> 919 </p></dd><dt><span class="term"><a name="DEADTIME"></a>deadtime (G)</span></dt><dd><p>The value of the parameter (a decimal integer) 1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329395"></a> 1051 1052 deadtime (G) 1053 </h3></div></div></div><a class="indexterm" name="id329396"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer) 920 1054 represents the number of minutes of inactivity before a connection 921 1055 is considered dead, and it is disconnected. The deadtime only takes … … 929 1063 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code> 930 1064 </em></span> 931 </p></dd><dt><span class="term"><a name="DEBUGHIRESTIMESTAMP"></a>debug hires timestamp (G)</span></dt><dd><p> 1065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329467"></a> 1066 1067 debug hires timestamp (G) 1068 </h3></div></div></div><a class="indexterm" name="id329468"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 932 1069 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 933 1070 boolean parameter adds microsecond resolution to the timestamp message header when turned on. 934 1071 </p><p> 935 Note that the parameter <a class=" indexterm" name="id305445"></a>debug timestampmust be on for this to have an effect.1072 Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect. 936 1073 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">no</code> 937 1074 </em></span> 938 </p></dd><dt><span class="term"><a name="DEBUGPID"></a>debug pid (G)</span></dt><dd><p> 939 When using only one log file for more then one forked <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 1075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329516"></a> 1076 1077 debug pid (G) 1078 </h3></div></div></div><a class="indexterm" name="id329517"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1079 When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 940 1080 message. This boolean parameter is adds the process-id to the timestamp message headers in the 941 1081 logfile when turned on. 942 1082 </p><p> 943 Note that the parameter <a class=" indexterm" name="id305504"></a>debug timestampmust be on for this to have an effect.1083 Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect. 944 1084 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code> 945 1085 </em></span> 946 </p></dd><dt><span class="term"><a name="DEBUGPREFIXTIMESTAMP"></a>debug prefix timestamp (G)</span></dt><dd><p> 1086 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329573"></a> 1087 1088 debug prefix timestamp (G) 1089 </h3></div></div></div><a class="indexterm" name="id329574"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 947 1090 With this option enabled, the timestamp message header is prefixed to the debug message without the 948 filename and function information that is included with the <a class=" indexterm" name="id305552"></a>debug timestamp1091 filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> 949 1092 parameter. This gives timestamps to the messages without adding an additional line. 950 1093 </p><p> 951 Note that this parameter overrides the <a class=" indexterm" name="id305563"></a>debug timestampparameter.1094 Note that this parameter overrides the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> parameter. 952 1095 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 953 1096 </em></span> 954 </p></dd><dt><span class="term"><a name="TIMESTAMPLOGS"></a>timestamp logs</span></dt><dd><p>This parameter is a synonym for debug timestamp.</p></dd><dt><span class="term"><a name="DEBUGTIMESTAMP"></a>debug timestamp (G)</span></dt><dd><p> 1097 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329630"></a><a name="TIMESTAMPLOGS"></a>timestamp logs</h3></div></div></div><a class="indexterm" name="id329631"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329655"></a> 1098 1099 debug timestamp (G) 1100 </h3></div></div></div><a class="indexterm" name="id329656"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 955 1101 Samba debug log messages are timestamped by default. If you are running at a high 956 <a class=" indexterm" name="id305630"></a>debug levelthese timestamps can be distracting. This1102 <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a> these timestamps can be distracting. This 957 1103 boolean parameter allows timestamping to be turned off. 958 1104 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 959 1105 </em></span> 960 </p></dd><dt><span class="term"><a name="DEBUGUID"></a>debug uid (G)</span></dt><dd><p> 1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329701"></a> 1107 1108 debug uid (G) 1109 </h3></div></div></div><a class="indexterm" name="id329702"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 961 1110 Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the 962 1111 current euid, egid, uid and gid to the timestamp message headers in the log file if turned on. 963 1112 </p><p> 964 Note that the parameter <a class=" indexterm" name="id305681"></a>debug timestampmust be on for this to have an effect.1113 Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect. 965 1114 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 966 1115 </em></span> 967 </p></dd><dt><span class="term"><a name="DEFAULTCASE"></a>default case (S)</span></dt><dd><p>See the section on <a class="indexterm" name="id305726"></a>name mangling. 968 Also note the <a class="indexterm" name="id305734"></a>short preserve case parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 969 </em></span> 970 </p></dd><dt><span class="term"><a name="DEFAULTDEVMODE"></a>default devmode (S)</span></dt><dd><p>This parameter is only applicable to <a class="indexterm" name="id305779"></a>printable services. 1116 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329750"></a> 1117 1118 default case (S) 1119 </h3></div></div></div><a class="indexterm" name="id329751"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. 1120 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1121 </em></span> 1122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329801"></a> 1123 1124 default devmode (S) 1125 </h3></div></div></div><a class="indexterm" name="id329802"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services. 971 1126 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 972 1127 server has a Device Mode which defines things such as paper size and … … 988 1143 will instruct smbd to generate a default one. 989 1144 </p><p>For more information on Windows NT/2k printing and Device Modes, 990 see the <a href="http://msdn.microsoft.com/" target="_top">MSDN documentation</a>.1145 see the <a class="ulink" href="http://msdn.microsoft.com/" target="_top">MSDN documentation</a>. 991 1146 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 992 1147 </em></span> 993 </p></dd><dt><span class="term"><a name="DEFAULT"></a>default</span></dt><dd><p>This parameter is a synonym for default service.</p></dd><dt><span class="term"><a name="DEFAULTSERVICE"></a>default service (G)</span></dt><dd><p>This parameter specifies the name of a service 1148 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329880"></a><a name="DEFAULT"></a>default</h3></div></div></div><a class="indexterm" name="id329881"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329905"></a> 1149 1150 default service (G) 1151 </h3></div></div></div><a class="indexterm" name="id329906"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 994 1152 which will be connected to if the service actually requested cannot 995 1153 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 997 1155 parameter is not given, attempting to connect to a nonexistent 998 1156 service results in an error.</p><p> 999 Typically the default service would be a <a class=" indexterm" name="id305892"></a>guest ok, <a class="indexterm" name="id305899"></a>read-onlyservice.</p><p>Also note that the apparent service name will be changed to equal1157 Typically the default service would be a <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a>, <a class="link" href="smb.conf.5.html#READ-ONLY">read-only</a> service.</p><p>Also note that the apparent service name will be changed to equal 1000 1158 that of the requested service, this is very useful as it allows you to use macros like <em class="parameter"><code>%S</code></em> to make a wildcard service. 1001 1159 </p><p>Note also that any "_" characters in the name of the service … … 1005 1163 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code> 1006 1164 </em></span> 1007 </p></dd><dt><span class="term"><a name="DEFERSHARINGVIOLATIONS"></a>defer sharing violations (G)</span></dt><dd><p> 1165 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id329998"></a> 1166 1167 defer sharing violations (G) 1168 </h3></div></div></div><a class="indexterm" name="id329999"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1008 1169 Windows allows specifying how a file will be shared with 1009 1170 other processes when it is opened. Sharing violations occur when … … 1018 1179 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code> 1019 1180 </em></span> 1020 </p></dd><dt><span class="term"><a name="DELETEGROUPSCRIPT"></a>delete group script (G)</span></dt><dd><p>This is the full pathname to a script that will 1021 be run <span class="emphasis"><em>AS ROOT</em></span> <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1181 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330046"></a> 1182 1183 delete group script (G) 1184 </h3></div></div></div><a class="indexterm" name="id330048"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1185 be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1022 1186 It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. 1023 1187 This script is only useful for installations using the Windows NT domain administration tools. 1024 1188 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code> 1025 1189 </em></span> 1026 </p></dd><dt><span class="term"><a name="DELETEPRINTERCOMMAND"></a>deleteprinter command (G)</span></dt><dd><p>With the introduction of MS-RPC based printer 1190 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330101"></a> 1191 1192 deleteprinter command (G) 1193 </h3></div></div></div><a class="indexterm" name="id330102"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer 1027 1194 support for Windows NT/2000 clients in Samba 2.2, it is now 1028 1195 possible to delete printer at run time by issuing the 1029 1196 DeletePrinter() RPC call.</p><p>For a Samba host this means that the printer must be 1030 1197 physically deleted from underlying printing system. The 1031 <a class=" indexterm" name="id306089"></a>deleteprinter commanddefines a script to be run which1198 <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> defines a script to be run which 1032 1199 will perform the necessary operations for removing the printer 1033 1200 from the print system and from <code class="filename">smb.conf</code>. 1034 </p><p>The <a class=" indexterm" name="id306106"></a>deleteprinter commandis1035 automatically called with only one parameter: <a class=" indexterm" name="id306114"></a>printer name.1036 </p><p>Once the <a class=" indexterm" name="id306124"></a>deleteprinter commandhas1201 </p><p>The <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> is 1202 automatically called with only one parameter: <a class="link" href="smb.conf.5.html#PRINTERNAME">printer name</a>. 1203 </p><p>Once the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> has 1037 1204 been executed, <code class="literal">smbd</code> will reparse the <code class="filename"> 1038 1205 smb.conf</code> to associated printer no longer exists. … … 1042 1209 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1043 1210 </em></span> 1044 </p></dd><dt><span class="term"><a name="DELETEREADONLY"></a>delete readonly (S)</span></dt><dd><p>This parameter allows readonly files to be deleted. 1211 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330216"></a> 1212 1213 delete readonly (S) 1214 </h3></div></div></div><a class="indexterm" name="id330217"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1045 1215 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1046 1216 as rcs, where UNIX file ownership prevents changing file 1047 1217 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1048 1218 </em></span> 1049 </p></dd><dt><span class="term"><a name="DELETESHARECOMMAND"></a>delete share command (G)</span></dt><dd><p>Samba 2.2.0 introduced the ability to dynamically 1050 add and delete shares via the Windows NT 4.0 Server Manager. The 1051 <em class="parameter"><code>delete share command</code></em> is used to define an 1052 external program or script which will remove an existing service 1053 definition from <code class="filename">smb.conf</code>. In order to successfully 1054 execute the <em class="parameter"><code>delete share command</code></em>, <code class="literal">smbd</code> 1055 requires that the administrator be connected using a root account (i.e. 1056 uid == 0). 1057 </p><p> 1058 When executed, <code class="literal">smbd</code> will automatically invoke the 1219 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330259"></a> 1220 1221 delete share command (G) 1222 </h3></div></div></div><a class="indexterm" name="id330260"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1223 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 1224 Manager. The <em class="parameter"><code>delete share command</code></em> is used to define an external 1225 program or script which will remove an existing service definition from 1226 <code class="filename">smb.conf</code>. In order to successfully execute the 1227 <em class="parameter"><code>delete share command</code></em>, <code class="literal">smbd</code> 1228 requires that the administrator be connected using a root account (i.e. uid == 0). 1229 </p><p> 1230 If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in 1231 <em class="parameter"><code>change share</code></em> parameter are executed as root. 1232 </p><p> 1233 When executed, <code class="literal">smbd</code> will automatically invoke the 1059 1234 <em class="parameter"><code>delete share command</code></em> with two parameters. 1060 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 1061 of the global <code class="filename">smb.conf</code> file. 1062 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of 1235 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 1236 of the global <code class="filename">smb.conf</code> file. 1237 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of 1063 1238 the existing service. 1064 1239 </p></li></ul></div><p> 1065 This parameter is only used to remove file shares. To delete printer shares, 1066 see the <a class=" indexterm" name="id306327"></a>deleteprinter command.1240 This parameter is only used to remove file shares. To delete printer shares, 1241 see the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a>. 1067 1242 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal"></code> 1068 1243 </em></span> 1069 1244 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1070 1245 </em></span> 1071 </p></dd><dt><span class="term"><a name="DELETEUSERFROMGROUPSCRIPT"></a>delete user from group script (G)</span></dt><dd><p>Full path to the script that will be called when 1246 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330402"></a> 1247 1248 delete user from group script (G) 1249 </h3></div></div></div><a class="indexterm" name="id330403"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1072 1250 a user is removed from a group using the Windows NT domain administration 1073 tools. It will be run by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>.1251 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. 1074 1252 Any <em class="parameter"><code>%g</code></em> will be replaced with the group name and 1075 1253 any <em class="parameter"><code>%u</code></em> will be replaced with the user name. … … 1078 1256 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code> 1079 1257 </em></span> 1080 </p></dd><dt><span class="term"><a name="DELETEUSERSCRIPT"></a>delete user script (G)</span></dt><dd><p>This is the full pathname to a script that will 1081 be run by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1258 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330476"></a> 1259 1260 delete user script (G) 1261 </h3></div></div></div><a class="indexterm" name="id330477"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1262 be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1082 1263 with remote RPC (NT) tools. 1083 1264 </p><p>This script is called when a remote client removes a user … … 1087 1268 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1088 1269 </em></span> 1089 </p></dd><dt><span class="term"><a name="DELETEVETOFILES"></a>delete veto files (S)</span></dt><dd><p>This option is used when Samba is attempting to 1270 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330549"></a> 1271 1272 delete veto files (S) 1273 </h3></div></div></div><a class="indexterm" name="id330550"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to 1090 1274 delete a directory that contains one or more vetoed directories 1091 (see the <a class=" indexterm" name="id306545"></a>veto files1275 (see the <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a> 1092 1276 option). If this option is set to <code class="constant">no</code> (the default) then if a vetoed 1093 1277 directory contains any non-vetoed files or directories then the … … 1097 1281 serving systems such as NetAtalk which create meta-files within 1098 1282 directories you might normally veto DOS/Windows users from seeing 1099 (e.g. <code class="filename">.AppleDouble</code>)</p><p>Setting <a class=" indexterm" name="id306576"></a>delete veto files = yesallows these1283 (e.g. <code class="filename">.AppleDouble</code>)</p><p>Setting <a class="link" href="smb.conf.5.html#DELETEVETOFILES">delete veto files = yes</a> allows these 1100 1284 directories to be transparently deleted when the parent directory 1101 1285 is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code> 1102 1286 </em></span> 1103 </p></dd><dt><span class="term"><a name="DFREECACHETIME"></a>dfree cache time (S)</span></dt><dd><p> 1287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330624"></a> 1288 1289 dfree cache time (S) 1290 </h3></div></div></div><a class="indexterm" name="id330626"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 1104 1291 The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem 1105 1292 occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur … … 1109 1296 This is a new parameter introduced in Samba version 3.0.21. It specifies in seconds the time that smbd will 1110 1297 cache the output of a disk free query. If set to zero (the default) no caching is done. This allows a heavily 1111 loaded server to prevent rapid spawning of <a class=" indexterm" name="id306636"></a>dfree commandscripts increasing the load.1298 loaded server to prevent rapid spawning of <a class="link" href="smb.conf.5.html#DFREECOMMAND">dfree command</a> scripts increasing the load. 1112 1299 </p><p> 1113 1300 By default this parameter is zero, meaning no caching will be done. 1114 1301 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code> 1115 1302 </em></span> 1116 </p></dd><dt><span class="term"><a name="DFREECOMMAND"></a>dfree command (S)</span></dt><dd><p> 1303 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330690"></a> 1304 1305 dfree command (S) 1306 </h3></div></div></div><a class="indexterm" name="id330691"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1117 1307 The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a 1118 1308 problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may … … 1125 1315 </p><p> 1126 1316 In Samba version 3.0.21 this parameter has been changed to be a per-share parameter, and in addition the 1127 parameter <a class=" indexterm" name="id306708"></a>dfree cache timewas added to allow the output of this script to be cached1317 parameter <a class="link" href="smb.conf.5.html#DFREECACHETIME">dfree cache time</a> was added to allow the output of this script to be cached 1128 1318 for systems under heavy load. 1129 1319 </p><p> … … 1140 1330 </p><pre class="programlisting"> 1141 1331 #!/bin/sh 1142 df $1 | tail -1 | awk '{print $ 2" "$4}'1332 df $1 | tail -1 | awk '{print $(NF-4),$(NF-2)}' 1143 1333 </pre><p> 1144 1334 or perhaps (on Sys V based systems): … … 1152 1342 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code> 1153 1343 </em></span> 1154 </p></dd><dt><span class="term"><a name="DIRECTORYMODE"></a>directory mode</span></dt><dd><p>This parameter is a synonym for directory mask.</p></dd><dt><span class="term"><a name="DIRECTORYMASK"></a>directory mask (S)</span></dt><dd><p>This parameter is the octal modes which are 1344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330797"></a><a name="DIRECTORYMODE"></a>directory mode</h3></div></div></div><a class="indexterm" name="id330798"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330822"></a> 1345 1346 directory mask (S) 1347 </h3></div></div></div><a class="indexterm" name="id330823"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are 1155 1348 used when converting DOS modes to UNIX modes when creating UNIX 1156 1349 directories.</p><p>When a directory is created, the necessary permissions are … … 1163 1356 and 'other' write bits from the UNIX mode, allowing only the 1164 1357 user who owns the directory to modify it.</p><p>Following this Samba will bit-wise 'OR' the UNIX mode 1165 created from this parameter with the value of the <a class=" indexterm" name="id306842"></a>force directory modeparameter.1358 created from this parameter with the value of the <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> parameter. 1166 1359 This parameter is set to 000 by default (i.e. no extra mode bits are added).</p><p>Note that this parameter does not apply to permissions 1167 1360 set by Windows NT/2000 ACL editors. If the administrator wishes to enforce 1168 a mask on access control lists also, they need to set the <a class=" indexterm" name="id306854"></a>directory security mask.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0755</code>1361 a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK">directory security mask</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0755</code> 1169 1362 </em></span> 1170 1363 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1171 1364 </em></span> 1172 </p></dd><dt><span class="term"><a name="DIRECTORYSECURITYMASK"></a>directory security mask (S)</span></dt><dd><p>This parameter controls what UNIX permission bits 1173 can be modified when a Windows NT client is manipulating the UNIX 1174 permission on a directory using the native NT security dialog 1365 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id330915"></a> 1366 1367 directory security mask (S) 1368 </h3></div></div></div><a class="indexterm" name="id330916"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1369 will be set when a Windows NT client is manipulating the UNIX 1370 permission on a directory using the native NT security dialog 1175 1371 box.</p><p> 1176 This parameter is applied as a mask (AND'ed with) to the changed permission bits, thus preventing any bits not 1177 in this mask from being modified. Make sure not to mix up this parameter with <a class="indexterm" name="id306924"></a>force directory security mode, which works similar like this one but uses logical OR instead of AND. 1178 Essentially, zero bits in this mask may be treated as a set of bits the user is not allowed to change. 1179 </p><p>If not set explicitly this parameter is set to 0777 1180 meaning a user is allowed to modify all the user/group/world 1372 This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting 1373 any bits not in this mask. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCEDIRECTORYSECURITYMODE">force directory security mode</a>, which works similar like this one but uses logical OR instead of AND. 1374 Essentially, zero bits in this mask are a set of bits that will always be set to zero. 1375 </p><p> 1376 Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the 1377 file permissions regardless of the previous status of this bits on the file. 1378 </p><p>If not set explicitly this parameter is set to 0777 1379 meaning a user is allowed to set all the user/group/world 1181 1380 permissions on a directory.</p><p><span class="emphasis"><em>Note</em></span> that users who can access the 1182 1381 Samba server through other means can easily bypass this restriction, … … 1187 1386 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code> 1188 1387 </em></span> 1189 </p></dd><dt><span class="term"><a name="DISABLENETBIOS"></a>disable netbios (G)</span></dt><dd><p>Enabling this parameter will disable netbios support 1388 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331003"></a> 1389 1390 disable netbios (G) 1391 </h3></div></div></div><a class="indexterm" name="id331004"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support 1190 1392 in Samba. Netbios is the only available form of browsing in 1191 1393 all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to … … 1193 1395 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code> 1194 1396 </em></span> 1195 </p></dd><dt><span class="term"><a name="DISABLESPOOLSS"></a>disable spoolss (G)</span></dt><dd><p>Enabling this parameter will disable Samba's support 1397 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331047"></a> 1398 1399 disable spoolss (G) 1400 </h3></div></div></div><a class="indexterm" name="id331048"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support 1196 1401 for the SPOOLSS set of MS-RPC's and will yield identical behavior 1197 1402 as Samba 2.0.x. Windows NT/2000 clients will downgrade to using … … 1205 1410 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code> 1206 1411 </em></span> 1207 </p></dd><dt><span class="term"><a name="DISPLAYCHARSET"></a>display charset (G)</span></dt><dd><p> 1412 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331092"></a> 1413 1414 display charset (G) 1415 </h3></div></div></div><a class="indexterm" name="id331093"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p> 1208 1416 Specifies the charset that samba will use to print messages to stdout and stderr. 1209 1417 The default value is "LOCALE", which means automatically set, depending on the 1210 1418 current locale. The value should generally be the same as the value of the parameter 1211 <a class=" indexterm" name="id258203"></a>unix charset.1419 <a class="link" href="smb.conf.5.html#UNIXCHARSET">unix charset</a>. 1212 1420 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">"LOCALE" or "ASCII" (depending on the system)</code> 1213 1421 </em></span> 1214 1422 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1215 1423 </em></span> 1216 </p></dd><dt><span class="term"><a name="DMAPISUPPORT"></a>dmapi support (S)</span></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1424 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331154"></a> 1425 1426 dmapi support (S) 1427 </h3></div></div></div><a class="indexterm" name="id331155"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1217 1428 determine whether a file is offline or not. This would typically 1218 1429 be used in conjunction with a hierarchical storage system that … … 1229 1440 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1230 1441 </em></span> 1231 </p></dd><dt><span class="term"><a name="DNSPROXY"></a>dns proxy (G)</span></dt><dd><p>Specifies that <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1442 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331207"></a> 1443 1444 dns proxy (G) 1445 </h3></div></div></div><a class="indexterm" name="id331208"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1232 1446 finding that a NetBIOS name has not been registered, should treat the 1233 1447 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1238 1452 action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code> 1239 1453 </em></span> 1240 </p></dd><dt><span class="term"><a name="DOMAINLOGONS"></a>domain logons (G)</span></dt><dd><p> 1454 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331266"></a> 1455 1456 domain logons (G) 1457 </h3></div></div></div><a class="indexterm" name="id331267"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1241 1458 If set to <code class="constant">yes</code>, the Samba server will 1242 1459 provide the netlogon service for Windows 9X network logons for the 1243 <a class=" indexterm" name="id307348"></a>workgroupit is in.1460 <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> it is in. 1244 1461 This will also cause the Samba server to act as a domain 1245 1462 controller for NT4 style domain services. For more details on … … 1248 1465 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code> 1249 1466 </em></span> 1250 </p></dd><dt><span class="term"><a name="DOMAINMASTER"></a>domain master (G)</span></dt><dd><p> 1251 Tell <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1467 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331316"></a> 1468 1469 domain master (G) 1470 </h3></div></div></div><a class="indexterm" name="id331317"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1471 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1252 1472 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a 1253 1473 special domain specific NetBIOS name that identifies it as a domain master browser for its given 1254 <a class=" indexterm" name="id307410"></a>workgroup. Local master browsers in the same <a class="indexterm" name="id307417"></a>workgroupon1474 <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a>. Local master browsers in the same <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> on 1255 1475 broadcast-isolated subnets will give this <code class="literal">nmbd</code> their local browse lists, 1256 and then ask <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> for a1476 and then ask <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> for a 1257 1477 complete copy of the browse list for the whole wide area network. Browser clients will then contact their 1258 1478 local master browser, and will receive the domain-wide browse list, instead of just the list for their 1259 1479 broadcast-isolated subnet. 1260 1480 </p><p> 1261 Note that Windows NT Primary Domain Controllers expect to be able to claim this <a class=" indexterm" name="id307445"></a>workgroupspecific special NetBIOS name that identifies them as domain master browsers for that1262 <a class=" indexterm" name="id307453"></a>workgroupby default (i.e. there is no way to prevent a Windows NT PDC from attempting1481 Note that Windows NT Primary Domain Controllers expect to be able to claim this <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> specific special NetBIOS name that identifies them as domain master browsers for that 1482 <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> by default (i.e. there is no way to prevent a Windows NT PDC from attempting 1263 1483 to do this). This means that if this parameter is set and <code class="literal">nmbd</code> claims the 1264 special name for a <a class=" indexterm" name="id307467"></a>workgroupbefore a Windows NT PDC is able to do so then cross1484 special name for a <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> before a Windows NT PDC is able to do so then cross 1265 1485 subnet browsing will behave strangely and may fail. 1266 1486 </p><p> 1267 If <a class=" indexterm" name="id307478"></a>domain logons = yes, then the default behavior is to enable the1268 <a class=" indexterm" name="id307486"></a>domain master parameter. If <a class="indexterm" name="id307493"></a>domain logonsis not enabled (the1269 default setting), then neither will <a class=" indexterm" name="id307501"></a>domain masterbe enabled by default.1270 </p><p> 1271 When <a class=" indexterm" name="id307511"></a>domain logons = Yesthe default setting for this parameter is1272 Yes, with the result that Samba will be a PDC. If <a class=" indexterm" name="id307519"></a>domain master = No,1487 If <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons = yes</a>, then the default behavior is to enable the 1488 <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master</a> parameter. If <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons</a> is not enabled (the 1489 default setting), then neither will <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master</a> be enabled by default. 1490 </p><p> 1491 When <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons = Yes</a> the default setting for this parameter is 1492 Yes, with the result that Samba will be a PDC. If <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master = No</a>, 1273 1493 Samba will function as a BDC. In general, this parameter should be set to 'No' only on a BDC. 1274 1494 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1275 1495 </em></span> 1276 </p></dd><dt><span class="term"><a name="DONTDESCEND"></a>dont descend (S)</span></dt><dd><p>There are certain directories on some systems 1496 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331483"></a> 1497 1498 dont descend (S) 1499 </h3></div></div></div><a class="indexterm" name="id331484"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1277 1500 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1278 1501 of interest to clients or are infinitely deep (recursive). This … … 1285 1508 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1286 1509 </em></span> 1287 </p></dd><dt><span class="term"><a name="DOSCHARSET"></a>dos charset (G)</span></dt><dd><p>DOS SMB clients assume the server has 1510 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331557"></a> 1511 1512 dos charset (G) 1513 </h3></div></div></div><a class="indexterm" name="id331558"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1288 1514 the same charset as they do. This option specifies which 1289 1515 charset Samba should talk to DOS clients. 1290 1516 </p><p>The default depends on which charsets you have installed. 1291 1517 Samba tries to use charset 850 but falls back to ASCII in 1292 case it is not available. Run <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="DOSFILEMODE"></a>dos filemode (S)</span></dt><dd><p> The default behavior in Samba is to provide 1518 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331596"></a> 1519 1520 dos filemode (S) 1521 </h3></div></div></div><a class="indexterm" name="id331597"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide 1293 1522 UNIX-like behavior where only the owner of a file/directory is 1294 1523 able to change the permissions on it. However, this behavior … … 1300 1529 Ownership of the file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1301 1530 </em></span> 1302 </p></dd><dt><span class="term"><a name="DOSFILETIMERESOLUTION"></a>dos filetime resolution (S)</span></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1531 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331637"></a> 1532 1533 dos filetime resolution (S) 1534 </h3></div></div></div><a class="indexterm" name="id331638"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1303 1535 granularity on time resolution is two seconds. Setting this parameter 1304 1536 for a share causes Samba to round the reported time down to the 1305 1537 nearest two second boundary when a query call that requires one second 1306 resolution is made to <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>This option is mainly used as a compatibility option for Visual1538 resolution is made to <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>This option is mainly used as a compatibility option for Visual 1307 1539 C++ when used against Samba shares. If oplocks are enabled on a 1308 1540 share, Visual C++ uses two different time reading calls to check if a … … 1315 1547 happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code> 1316 1548 </em></span> 1317 </p></dd><dt><span class="term"><a name="DOSFILETIMES"></a>dos filetimes (S)</span></dt><dd><p>Under DOS and Windows, if a user can write to a 1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331693"></a> 1550 1551 dos filetimes (S) 1552 </h3></div></div></div><a class="indexterm" name="id331694"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a 1318 1553 file they can change the timestamp on it. Under POSIX semantics, 1319 1554 only the owner of the file or root may change the timestamp. By … … 1321 1556 timestamp on a file if the user <code class="literal">smbd</code> is acting 1322 1557 on behalf of is not the file owner. Setting this option to <code class="constant"> 1323 yes</code> allows DOS semantics and <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will change the file1558 yes</code> allows DOS semantics and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will change the file 1324 1559 timestamp as DOS requires. Due to changes in Microsoft Office 2000 and beyond, 1325 1560 the default for this parameter has been changed from "no" to "yes" in Samba 3.0.14 … … 1329 1564 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1330 1565 </em></span> 1331 </p></dd><dt><span class="term"><a name="EASUPPORT"></a>ea support (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331752"></a> 1567 1568 ea support (S) 1569 </h3></div></div></div><a class="indexterm" name="id331753"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1332 1570 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1333 1571 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1336 1574 extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code> 1337 1575 </em></span> 1338 </p></dd><dt><span class="term"><a name="ENABLEASUSUPPORT"></a>enable asu support (G)</span></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331800"></a> 1577 1578 enable asu support (G) 1579 </h3></div></div></div><a class="indexterm" name="id331801"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1339 1580 require some special accomodations such as creating a builting [ADMIN$] 1340 1581 share that only supports IPC connections. The has been the default … … 1344 1585 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1345 1586 </em></span> 1346 </p></dd><dt><span class="term"><a name="ENABLEPRIVILEGES"></a>enable privileges (G)</span></dt><dd><p> 1587 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331841"></a> 1588 1589 enable privileges (G) 1590 </h3></div></div></div><a class="indexterm" name="id331842"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1347 1591 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1348 1592 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1357 1601 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code> 1358 1602 </em></span> 1359 </p></dd><dt><span class="term"><a name="ENCRYPTPASSWORDS"></a>encrypt passwords (G)</span></dt><dd><p>This boolean controls whether encrypted passwords 1603 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331896"></a> 1604 1605 encrypt passwords (G) 1606 </h3></div></div></div><a class="indexterm" name="id331897"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords 1360 1607 will be negotiated with the client. Note that Windows NT 4.0 SP3 and 1361 1608 above and also Windows 98 will by default expect encrypted passwords … … 1374 1621 plain text passwords you must set this parameter to no. 1375 1622 </p><p>In order for encrypted passwords to work correctly 1376 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must either1377 have access to a local <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> file (see the <ahref="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> program for information on how to set up1378 and maintain this file), or set the <a class=" indexterm" name="id308038"></a>security = [server|domain|ads]parameter which1623 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must either 1624 have access to a local <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> file (see the <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> program for information on how to set up 1625 and maintain this file), or set the <a class="link" href="smb.conf.5.html#SECURITY">security = [server|domain|ads]</a> parameter which 1379 1626 causes <code class="literal">smbd</code> to authenticate against another 1380 1627 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1381 1628 </em></span> 1382 </p></dd><dt><span class="term"><a name="ENHANCEDBROWSING"></a>enhanced browsing (G)</span></dt><dd><p>This option enables a couple of enhancements to 1629 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id331987"></a> 1630 1631 enhanced browsing (G) 1632 </h3></div></div></div><a class="indexterm" name="id331988"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1383 1633 cross-subnet browse propagation that have been added in Samba 1384 1634 but which are not standard in Microsoft implementations. … … 1393 1643 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> 1394 1644 </em></span> 1395 </p></dd><dt><span class="term"><a name="ENUMPORTSCOMMAND"></a>enumports command (G)</span></dt><dd><p>The concept of a "port" is fairly foreign 1645 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332041"></a> 1646 1647 enumports command (G) 1648 </h3></div></div></div><a class="indexterm" name="id332042"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign 1396 1649 to UNIX hosts. Under Windows NT/2000 print servers, a port 1397 1650 is associated with a port monitor and generally takes the form of … … 1410 1663 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 1411 1664 </em></span> 1412 </p></dd><dt><span class="term"><a name="EVENTLOGLIST"></a>eventlog list (G)</span></dt><dd><p>This option defines a list of log names that Samba will 1665 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332116"></a> 1666 1667 eventlog list (G) 1668 </h3></div></div></div><a class="indexterm" name="id332117"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 1413 1669 report to the Microsoft EventViewer utility. The listed 1414 1670 eventlogs will be associated with tdb file on disk in the … … 1423 1679 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 1424 1680 </em></span> 1425 </p></dd><dt><span class="term"><a name="FAKEDIRECTORYCREATETIMES"></a>fake directory create times (S)</span></dt><dd><p>NTFS and Windows VFAT file systems keep a create 1681 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332185"></a> 1682 1683 fake directory create times (S) 1684 </h3></div></div></div><a class="indexterm" name="id332186"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create 1426 1685 time for all files and directories. This is not the same as the 1427 1686 ctime - status change time - that Unix keeps, so Samba by default … … 1445 1704 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 1446 1705 </em></span> 1447 </p></dd><dt><span class="term"><a name="FAKEOPLOCKS"></a>fake oplocks (S)</span></dt><dd><p>Oplocks are the way that SMB clients get permission 1706 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332240"></a> 1707 1708 fake oplocks (S) 1709 </h3></div></div></div><a class="indexterm" name="id332241"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 1448 1710 from a server to locally cache file operations. If a server grants 1449 1711 an oplock (opportunistic lock) then the client is free to assume … … 1451 1713 cache file data. With some oplock types the client may even cache 1452 1714 file open/close operations. This can give enormous performance benefits. 1453 </p><p>When you set <code class="literal">fake oplocks = yes</code>, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will1454 always grant oplock requests no matter how many clients are using the file.</p><p>It is generally much better to use the real <a class=" indexterm" name="id308378"></a>oplockssupport rather1715 </p><p>When you set <code class="literal">fake oplocks = yes</code>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will 1716 always grant oplock requests no matter how many clients are using the file.</p><p>It is generally much better to use the real <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> support rather 1455 1717 than this parameter.</p><p>If you enable this option on all read-only shares or 1456 1718 shares that you know will only be accessed from one client at a … … 1461 1723 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 1462 1724 </em></span> 1463 </p></dd><dt><span class="term"><a name="FOLLOWSYMLINKS"></a>follow symlinks (S)</span></dt><dd><p> 1464 This parameter allows the Samba administrator to stop <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1725 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332314"></a> 1726 1727 follow symlinks (S) 1728 </h3></div></div></div><a class="indexterm" name="id332315"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1729 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1465 1730 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being 1466 1731 followed (the user will get an error). This option is very useful to stop users from adding a symbolic … … 1471 1736 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 1472 1737 </em></span> 1473 </p></dd><dt><span class="term"><a name="FORCECREATEMODE"></a>force create mode (S)</span></dt><dd><p>This parameter specifies a set of UNIX mode bit 1738 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332379"></a> 1739 1740 force create mode (S) 1741 </h3></div></div></div><a class="indexterm" name="id332380"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1474 1742 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1475 1743 file created by Samba. This is done by bitwise 'OR'ing these bits onto … … 1484 1752 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code> 1485 1753 </em></span> 1486 </p></dd><dt><span class="term"><a name="FORCEDIRECTORYMODE"></a>force directory mode (S)</span></dt><dd><p>This parameter specifies a set of UNIX mode bit 1754 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332448"></a> 1755 1756 force directory mode (S) 1757 </h3></div></div></div><a class="indexterm" name="id332450"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1487 1758 permissions that will <span class="emphasis"><em>always</em></span> be set on a directory 1488 1759 created by Samba. This is done by bitwise 'OR'ing these bits onto the … … 1497 1768 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 1498 1769 </em></span> 1499 </p></dd><dt><span class="term"><a name="FORCEDIRECTORYSECURITYMODE"></a>force directory security mode (S)</span></dt><dd><p> 1770 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332518"></a> 1771 1772 force directory security mode (S) 1773 </h3></div></div></div><a class="indexterm" name="id332519"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1500 1774 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 1501 1775 the UNIX permission on a directory using the native NT security dialog box. 1502 1776 </p><p> 1503 1777 This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this 1504 mask that the user may have modified to be on. Make sure not to mix up this parameter with <a class=" indexterm" name="id308652"></a>directory security mask, which works in a similar manner to this one, but uses a logical AND instead1778 mask that the user may have modified to be on. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK">directory security mask</a>, which works in a similar manner to this one, but uses a logical AND instead 1505 1779 of an OR. 1506 1780 </p><p> … … 1518 1792 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code> 1519 1793 </em></span> 1520 </p></dd><dt><span class="term"><a name="GROUP"></a>group</span></dt><dd><p>This parameter is a synonym for force group.</p></dd><dt><span class="term"><a name="FORCEGROUP"></a>force group (S)</span></dt><dd><p>This specifies a UNIX group name that will be 1794 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332602"></a><a name="GROUP"></a>group</h3></div></div></div><a class="indexterm" name="id332603"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332627"></a> 1795 1796 force group (S) 1797 </h3></div></div></div><a class="indexterm" name="id332628"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be 1521 1798 assigned as the default primary group for all users connecting 1522 1799 to this service. This is useful for sharing files by ensuring … … 1536 1813 primary group assigned to sys when accessing this Samba share. All 1537 1814 other users will retain their ordinary primary group.</p><p> 1538 If the <a class=" indexterm" name="id308775"></a>force userparameter is also set the group specified in1815 If the <a class="link" href="smb.conf.5.html#FORCEUSER">force user</a> parameter is also set the group specified in 1539 1816 <em class="parameter"><code>force group</code></em> will override the primary group 1540 1817 set in <em class="parameter"><code>force user</code></em>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal"></code> … … 1542 1819 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code> 1543 1820 </em></span> 1544 </p></dd><dt><span class="term"><a name="FORCEPRINTERNAME"></a>force printername (S)</span></dt><dd><p>When printing from Windows NT (or later), 1821 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332718"></a> 1822 1823 force printername (S) 1824 </h3></div></div></div><a class="indexterm" name="id332719"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later), 1545 1825 each printer in <code class="filename">smb.conf</code> has two 1546 1826 associated names which can be used by the client. The first … … 1565 1845 folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code> 1566 1846 </em></span> 1567 </p></dd><dt><span class="term"><a name="FORCESECURITYMODE"></a>force security mode (S)</span></dt><dd><p> 1847 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332792"></a> 1848 1849 force security mode (S) 1850 </h3></div></div></div><a class="indexterm" name="id332793"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1568 1851 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 1569 1852 the UNIX permission on a file using the native NT security dialog box. 1570 1853 </p><p> 1571 1854 This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this 1572 mask that the user may have modified to be on. Make sure not to mix up this parameter with <a class=" indexterm" name="id308932"></a>security mask, which works similar like this one but uses logical AND instead of OR.1855 mask that the user may have modified to be on. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#SECURITYMASK">security mask</a>, which works similar like this one but uses logical AND instead of OR. 1573 1856 </p><p> 1574 1857 Essentially, one bits in this mask may be treated as a set of bits that, when modifying security on a file, … … 1585 1868 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code> 1586 1869 </em></span> 1587 </p></dd><dt><span class="term"><a name="FORCEUNKNOWNACLUSER"></a>force unknown acl user (S)</span></dt><dd><p> 1870 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332876"></a> 1871 1872 force unknown acl user (S) 1873 </h3></div></div></div><a class="indexterm" name="id332877"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1588 1874 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 1589 1875 representation of a user or group id) as the owner or group owner of the file will be silently … … 1599 1885 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code> 1600 1886 </em></span> 1601 </p></dd><dt><span class="term"><a name="FORCEUSER"></a>force user (S)</span></dt><dd><p>This specifies a UNIX user name that will be 1887 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332929"></a> 1888 1889 force user (S) 1890 </h3></div></div></div><a class="indexterm" name="id332930"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be 1602 1891 assigned as the default user for all users connecting to this service. 1603 1892 This is useful for sharing files. You should also use it carefully … … 1613 1902 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code> 1614 1903 </em></span> 1615 </p></dd><dt><span class="term"><a name="FSTYPE"></a>fstype (S)</span></dt><dd><p> 1904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id332994"></a> 1905 1906 fstype (S) 1907 </h3></div></div></div><a class="indexterm" name="id332995"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1616 1908 This parameter allows the administrator to configure the string that specifies the type of filesystem a share 1617 is using that is reported by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>1909 is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 1618 1910 when a client queries the filesystem type for a share. The default type is <code class="constant">NTFS</code> for compatibility 1619 1911 with Windows NT but this can be changed to other strings such as <code class="constant">Samba</code> or <code class="constant">FAT</code> … … 1623 1915 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code> 1624 1916 </em></span> 1625 </p></dd><dt><span class="term"><a name="GETQUOTACOMMAND"></a>get quota command (G)</span></dt><dd><p>The <code class="literal">get quota command</code> should only be used 1917 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333067"></a> 1918 1919 get quota command (G) 1920 </h3></div></div></div><a class="indexterm" name="id333068"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used 1626 1921 whenever there is no operating system API available from the OS that 1627 1922 samba can use.</p><p>This option is only available with <code class="literal">./configure --with-sys-quotas</code>. … … 1635 1930 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code> 1636 1931 </em></span> 1637 </p></dd><dt><span class="term"><a name="GETWDCACHE"></a>getwd cache (G)</span></dt><dd><p>This is a tuning option. When this is enabled a 1932 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333230"></a> 1933 1934 getwd cache (G) 1935 </h3></div></div></div><a class="indexterm" name="id333231"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a 1638 1936 caching algorithm will be used to reduce the time taken for getwd() 1639 1937 calls. This can have a significant impact on performance, especially 1640 when the <a class="indexterm" name="id309382"></a>wide smbconfoptions parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 1641 </em></span> 1642 </p></dd><dt><span class="term"><a name="GUESTACCOUNT"></a>guest account (G)</span></dt><dd><p>This is a username which will be used for access 1643 to services which are specified as <a class="indexterm" name="id309432"></a>guest ok (see below). Whatever privileges this 1938 when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 1939 </em></span> 1940 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333279"></a> 1941 1942 guest account (G) 1943 </h3></div></div></div><a class="indexterm" name="id333280"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 1944 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> (see below). Whatever privileges this 1644 1945 user has will be available to any client connecting to the guest service. 1645 1946 This user must exist in the password file, but does not require … … 1658 1959 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code> 1659 1960 </em></span> 1660 </p></dd><dt><span class="term"><a name="PUBLIC"></a>public</span></dt><dd><p>This parameter is a synonym for guest ok.</p></dd><dt><span class="term"><a name="GUESTOK"></a>guest ok (S)</span></dt><dd><p>If this parameter is <code class="constant">yes</code> for 1961 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333368"></a><a name="PUBLIC"></a>public</h3></div></div></div><a class="indexterm" name="id333369"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333393"></a> 1962 1963 guest ok (S) 1964 </h3></div></div></div><a class="indexterm" name="id333394"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 1661 1965 a service, then no password is required to connect to the service. 1662 Privileges will be those of the <a class=" indexterm" name="id309550"></a>guest account.</p><p>This paramater nullifies the benifits of setting1663 <a class=" indexterm" name="id309561"></a>restrict anonymous = 21664 </p><p>See the section below on <a class=" indexterm" name="id309572"></a>securityfor more information about this option.1966 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p><p>This paramater nullifies the benifits of setting 1967 <a class="link" href="smb.conf.5.html#RESTRICTANONYMOUS">restrict anonymous = 2</a> 1968 </p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option. 1665 1969 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 1666 1970 </em></span> 1667 </p></dd><dt><span class="term"><a name="ONLYGUEST"></a>only guest</span></dt><dd><p>This parameter is a synonym for guest only.</p></dd><dt><span class="term"><a name="GUESTONLY"></a>guest only (S)</span></dt><dd><p>If this parameter is <code class="constant">yes</code> for 1971 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333462"></a><a name="ONLYGUEST"></a>only guest</h3></div></div></div><a class="indexterm" name="id333463"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333487"></a> 1972 1973 guest only (S) 1974 </h3></div></div></div><a class="indexterm" name="id333488"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 1668 1975 a service, then only guest connections to the service are permitted. 1669 This parameter will have no effect if <a class=" indexterm" name="id309642"></a>guest ok is not set for the service.</p><p>See the section below on <a class="indexterm" name="id309653"></a>securityfor more information about this option.1976 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option. 1670 1977 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 1671 1978 </em></span> 1672 </p></dd><dt><span class="term"><a name="HIDEDOTFILES"></a>hide dot files (S)</span></dt><dd><p>This is a boolean parameter that controls whether 1979 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333546"></a> 1980 1981 hide dot files (S) 1982 </h3></div></div></div><a class="indexterm" name="id333547"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 1673 1983 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 1674 1984 </em></span> 1675 </p></dd><dt><span class="term"><a name="HIDEFILES"></a>hide files (S)</span></dt><dd><p>This is a list of files or directories that are not 1985 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333584"></a> 1986 1987 hide files (S) 1988 </h3></div></div></div><a class="indexterm" name="id333585"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 1676 1989 visible but are accessible. The DOS 'hidden' attribute is applied 1677 1990 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 1684 1997 as they are scanned.</p><p> 1685 1998 The example shown above is based on files that the Macintosh 1686 SMB client (DAVE) available from <a href="http://www.thursby.com" target="_top">1999 SMB client (DAVE) available from <a class="ulink" href="http://www.thursby.com" target="_top"> 1687 2000 Thursby</a> creates for internal use, and also still hides 1688 2001 all files beginning with a dot. … … 1695 2008 # no file are hidden</code> 1696 2009 </em></span> 1697 </p></dd><dt><span class="term"><a name="HIDESPECIALFILES"></a>hide special files (S)</span></dt><dd><p> 2010 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333659"></a> 2011 2012 hide special files (S) 2013 </h3></div></div></div><a class="indexterm" name="id333660"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1698 2014 This parameter prevents clients from seeing special files such as sockets, devices and 1699 2015 fifo's in directory listings. 1700 2016 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 1701 2017 </em></span> 1702 </p></dd><dt><span class="term"><a name="HIDEUNREADABLE"></a>hide unreadable (S)</span></dt><dd><p>This parameter prevents clients from seeing the 2018 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333697"></a> 2019 2020 hide unreadable (S) 2021 </h3></div></div></div><a class="indexterm" name="id333698"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the 1703 2022 existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code> 1704 2023 </em></span> 1705 </p></dd><dt><span class="term"><a name="HIDEUNWRITEABLEFILES"></a>hide unwriteable files (S)</span></dt><dd><p> 2024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333735"></a> 2025 2026 hide unwriteable files (S) 2027 </h3></div></div></div><a class="indexterm" name="id333736"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1706 2028 This parameter prevents clients from seeing the existance of files that cannot be written to. 1707 2029 Defaults to off. Note that unwriteable directories are shown as usual. 1708 2030 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code> 1709 2031 </em></span> 1710 </p></dd><dt><span class="term"><a name="HOMEDIRMAP"></a>homedir map (G)</span></dt><dd><p> 1711 If <a class="indexterm" name="id309932"></a>nis homedir is <code class="constant">yes</code>, and <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 2032 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333773"></a> 2033 2034 homedir map (G) 2035 </h3></div></div></div><a class="indexterm" name="id333774"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2036 If <a class="link" href="smb.conf.5.html#NISHOMEDIR">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 1712 2037 then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. 1713 2038 At present, only the Sun auto.home map format is understood. The form of the map is: … … 1723 2048 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 1724 2049 </em></span> 1725 </p></dd><dt><span class="term"><a name="HOSTMSDFS"></a>host msdfs (G)</span></dt><dd><p> 2050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333870"></a> 2051 2052 host msdfs (G) 2053 </h3></div></div></div><a class="indexterm" name="id333871"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1726 2054 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 1727 2055 Dfs trees hosted on the server. 1728 2056 </p><p> 1729 See also the <a class=" indexterm" name="id310039"></a>msdfs rootshare level parameter. For more information on2057 See also the <a class="link" href="smb.conf.5.html#MSDFSROOT">msdfs root</a> share level parameter. For more information on 1730 2058 setting up a Dfs tree on Samba, refer to the MSFDS chapter in the book Samba3-HOWTO. 1731 2059 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 1732 2060 </em></span> 1733 </p></dd><dt><span class="term"><a name="HOSTNAMELOOKUPS"></a>hostname lookups (G)</span></dt><dd><p>Specifies whether samba should use (expensive) 2061 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id333932"></a> 2062 2063 hostname lookups (G) 2064 </h3></div></div></div><a class="indexterm" name="id333933"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 1734 2065 hostname lookups or use the ip addresses instead. An example place 1735 2066 where hostname lookups are currently used is when checking … … 1739 2070 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code> 1740 2071 </em></span> 1741 </p></dd><dt><span class="term"><a name="ALLOWHOSTS"></a>allow hosts</span></dt><dd><p>This parameter is a synonym for hosts allow.</p></dd><dt><span class="term"><a name="HOSTSALLOW"></a>hosts allow (S)</span></dt><dd><p>A synonym for this parameter is <a class="indexterm" name="id310176"></a>allow hosts.</p><p>This parameter is a comma, space, or tab delimited 2072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334002"></a><a name="ALLOWHOSTS"></a>allow hosts</h3></div></div></div><a class="indexterm" name="id334003"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334033"></a> 2073 2074 hosts allow (S) 2075 </h3></div></div></div><a class="indexterm" name="id334034"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 1742 2076 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 1743 2077 apply to all services, regardless of whether the individual … … 1749 2083 page may not be present on your system, so a brief description will 1750 2084 be given here also.</p><p>Note that the localhost address 127.0.0.1 will always 1751 be allowed access unless specifically denied by a <a class=" indexterm" name="id310214"></a>hosts denyoption.</p><p>You can also specify hosts by network/netmask pairs and2085 be allowed access unless specifically denied by a <a class="link" href="smb.conf.5.html#HOSTSDENY">hosts deny</a> option.</p><p>You can also specify hosts by network/netmask pairs and 1752 2086 by netgroup names if your system supports netgroups. The 1753 2087 <span class="emphasis"><em>EXCEPT</em></span> keyword can also be used to limit a 1754 2088 wildcard list. The following examples may provide some help:</p><p>Example 1: allow all IPs in 150.203.*.*; except one</p><p><code class="literal">hosts allow = 150.203. EXCEPT 150.203.6.66</code></p><p>Example 2: allow hosts that match the given network/netmask</p><p><code class="literal">hosts allow = 150.203.15.0/255.255.255.0</code></p><p>Example 3: allow a couple of hosts</p><p><code class="literal">hosts allow = lapland, arvidsjaur</code></p><p>Example 4: allow only hosts in NIS netgroup "foonet", but 1755 deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access2089 deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access 1756 2090 to see if it does what you expect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal"> 1757 2091 # none (i.e., all hosts permitted access)</code> … … 1759 2093 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 1760 2094 </em></span> 1761 </p></dd><dt><span class="term"><a name="DENYHOSTS"></a>deny hosts</span></dt><dd><p>This parameter is a synonym for hosts deny.</p></dd><dt><span class="term"><a name="HOSTSDENY"></a>hosts deny (S)</span></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 2095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334221"></a><a name="DENYHOSTS"></a>deny hosts</h3></div></div></div><a class="indexterm" name="id334222"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334251"></a> 2096 2097 hosts deny (S) 2098 </h3></div></div></div><a class="indexterm" name="id334252"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 1762 2099 - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to 1763 2100 services unless the specific services have their own lists to override … … 1766 2103 In the event that it is necessary to deny all by default, use the keyword 1767 2104 ALL (or the netmask <code class="literal">0.0.0.0/0</code>) and then explicitly specify 1768 to the <a class=" indexterm" name="id310401"></a>hosts allow = hosts allowparameter those hosts2105 to the <a class="link" href="smb.conf.5.html#HOSTSALLOW">hosts allow = hosts allow</a> parameter those hosts 1769 2106 that should be permitted access. 1770 2107 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal"> … … 1773 2110 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code> 1774 2111 </em></span> 1775 </p></dd><dt><span class="term"><a name="IDMAPALLOCBACKEND"></a>idmap alloc backend (G)</span></dt><dd><p> 2112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334347"></a> 2113 2114 idmap alloc backend (G) 2115 </h3></div></div></div><a class="indexterm" name="id334348"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1776 2116 The idmap alloc backend provides a plugin interface for Winbind to use 1777 2117 when allocating Unix uids/gids for Windows SIDs. This option is 1778 to be used in conjunction with the <a class=" indexterm" name="id310466"></a>idmap domains2118 to be used in conjunction with the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> 1779 2119 parameter and refers to the name of the idmap module which will provide 1780 2120 the id allocation functionality. Please refer to the man page 1781 2121 for each idmap plugin to determine whether or not the module implements 1782 the allocation feature. The most common plugins are the tdb (<a href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>)1783 and ldap (<a href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>) libraries.1784 </p><p>Also refer to the <a class=" indexterm" name="id310495"></a>idmap alloc configoption.2122 the allocation feature. The most common plugins are the tdb (<a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>) 2123 and ldap (<a class="citerefentry" href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>) libraries. 2124 </p><p>Also refer to the <a class="link" href="smb.conf.5.html#IDMAPALLOCCONFIG">idmap alloc config</a> option. 1785 2125 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 1786 2126 </em></span> 1787 </p></dd><dt><span class="term"><a name="IDMAPALLOCCONFIG"></a>idmap alloc config (G)</span></dt><dd><p> 2127 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334438"></a> 2128 2129 idmap alloc config (G) 2130 </h3></div></div></div><a class="indexterm" name="id334439"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 1788 2131 The idmap alloc config prefix provides a means of managing settings 1789 for the backend defined by the <a class=" indexterm" name="id310546"></a>idmap alloc backend2132 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc backend</a> 1790 2133 parameter. Refer to the man page for each idmap plugin regarding 1791 2134 specific configuration details. 1792 </p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="IDMAPBACKEND"></a>idmap backend (G)</span></dt><dd><p> 2135 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334478"></a> 2136 2137 idmap backend (G) 2138 </h3></div></div></div><a class="indexterm" name="id334479"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1793 2139 The idmap backend provides a plugin interface for Winbind to use 1794 2140 varying backends to store SID/uid/gid mapping tables. This 1795 2141 option is mutually exclusive with the newer and more flexible 1796 <a class=" indexterm" name="id310581"></a>idmap domainsparameter. The main difference2142 <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> parameter. The main difference 1797 2143 between the "idmap backend" and the "idmap domains" 1798 2144 is that the former only allows on backend for all domains while the 1799 2145 latter supports configuring backends on a per domain basis. 1800 </p><p>Examples of SID/uid/gid backends include tdb (<a href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>),1801 ldap (<a href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>), rid (<ahref="idmap_rid.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_rid</span>(8)</span></a>),1802 and ad (<a href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>).2146 </p><p>Examples of SID/uid/gid backends include tdb (<a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>), 2147 ldap (<a class="citerefentry" href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>), rid (<a class="citerefentry" href="idmap_rid.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_rid</span>(8)</span></a>), 2148 and ad (<a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>). 1803 2149 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code> 1804 2150 </em></span> 1805 </p></dd><dt><span class="term"><a name="IDMAPCACHETIME"></a>idmap cache time (G)</span></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2151 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334568"></a> 2152 2153 idmap cache time (G) 2154 </h3></div></div></div><a class="indexterm" name="id334569"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 1806 2155 idmap interface will cache positive SID/uid/gid query results. 1807 2156 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">900</code> 1808 2157 </em></span> 1809 </p></dd><dt><span class="term"><a name="IDMAPCONFIG"></a>idmap config (G)</span></dt><dd><p> 2158 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334609"></a> 2159 2160 idmap config (G) 2161 </h3></div></div></div><a class="indexterm" name="id334610"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 1810 2162 The idmap config prefix provides a means of managing each domain 1811 defined by the <a class=" indexterm" name="id310703"></a>idmap domainsoption using Samba's2163 defined by the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> option using Samba's 1812 2164 parameteric option support. The idmap config prefix should be 1813 2165 followed by the name of the domain, a colon, and a setting specific to … … 1823 2175 </p></dd><dt><span class="term">readonly = [yes|no]</span></dt><dd><p> 1824 2176 Mark the domain as readonly which means that no attempts to 1825 allocate a uid or gid (by the <a class=" indexterm" name="id310750"></a>idmap alloc backend) for any user or group in that domain2177 allocate a uid or gid (by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc backend</a>) for any user or group in that domain 1826 2178 will be attempted. 1827 2179 </p></dd></dl></div><p> 1828 The following example illustrates how to configure the <a href="idmap_ad.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ad</span>(8)</span></a>1829 for the CORP domain and the <a href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a> backend for all other domains. The2180 The following example illustrates how to configure the <a class="citerefentry" href="idmap_ad.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ad</span>(8)</span></a> 2181 for the CORP domain and the <a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a> backend for all other domains. The 1830 2182 TRUSTEDDOMAINS string is simply a key used to reference the "idmap 1831 2183 config" settings and does not represent the actual name of a domain. … … 1839 2191 idmap config TRUSTEDDOMAINS:default = yes 1840 2192 idmap config TRUSTEDDOMAINS:range = 1000 - 9999 1841 </pre><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="IDMAPDOMAINS"></a>idmap domains (G)</span></dt><dd><p> 2193 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334730"></a> 2194 2195 idmap domains (G) 2196 </h3></div></div></div><a class="indexterm" name="id334731"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1842 2197 The idmap domains option defines a list of Windows domains which will each 1843 2198 have a separately configured backend for managing Winbind's SID/uid/gid 1844 tables. This parameter is mutually exclusive with the older <a class=" indexterm" name="id310818"></a>idmap backendoption.2199 tables. This parameter is mutually exclusive with the older <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> option. 1845 2200 </p><p> 1846 2201 Values consist of the short domain name for Winbind's primary or collection … … 1848 2203 domain backend for any domain not explicitly listed. 1849 2204 </p><p> 1850 Refer to the <a class=" indexterm" name="id310834"></a>idmap configfor details about2205 Refer to the <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> for details about 1851 2206 managing the SID/uid/gid backend for each domain. 1852 2207 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap domains</code></em> = <code class="literal">default AD CORP</code> 1853 2208 </em></span> 1854 </p></dd><dt><span class="term"><a name="WINBINDGID"></a>winbind gid</span></dt><dd><p>This parameter is a synonym for idmap gid.</p></dd><dt><span class="term"><a name="IDMAPGID"></a>idmap gid (G)</span></dt><dd><p>The idmap gid parameter specifies the range of group ids 2209 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334808"></a><a name="WINBINDGID"></a>winbind gid</h3></div></div></div><a class="indexterm" name="id334809"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334838"></a> 2210 2211 idmap gid (G) 2212 </h3></div></div></div><a class="indexterm" name="id334839"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 1855 2213 that are allocated for the purpose of mapping UNX groups to NT group 1856 2214 SIDs. This range of group ids should have no 1857 2215 existing local or NIS groups within it as strange conflicts can 1858 occur otherwise.</p><p>See also the <a class=" indexterm" name="id310911"></a>idmap backend, <a class="indexterm" name="id310918"></a>idmap domains, and <a class="indexterm" name="id310925"></a>idmap configoptions.2216 occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> options. 1859 2217 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal"></code> 1860 2218 </em></span> 1861 2219 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code> 1862 2220 </em></span> 1863 </p></dd><dt><span class="term"><a name="IDMAPNEGATIVECACHETIME"></a>idmap negative cache time (G)</span></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2221 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334932"></a> 2222 2223 idmap negative cache time (G) 2224 </h3></div></div></div><a class="indexterm" name="id334933"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 1864 2225 idmap interface will cache negative SID/uid/gid query results. 1865 2226 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code> 1866 2227 </em></span> 1867 </p></dd><dt><span class="term"><a name="WINBINDUID"></a>winbind uid</span></dt><dd><p>This parameter is a synonym for idmap uid.</p></dd><dt><span class="term"><a name="IDMAPUID"></a>idmap uid (G)</span></dt><dd><p> 2228 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id334974"></a><a name="WINBINDUID"></a>winbind uid</h3></div></div></div><a class="indexterm" name="id334975"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335004"></a> 2229 2230 idmap uid (G) 2231 </h3></div></div></div><a class="indexterm" name="id335005"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1868 2232 The idmap uid parameter specifies the range of user ids that are 1869 2233 allocated for use in mapping UNIX users to NT user SIDs. This 1870 2234 range of ids should have no existing local 1871 or NIS users within it as strange conflicts can occur otherwise.</p><p>See also the <a class=" indexterm" name="id311053"></a>idmap backend, <a class="indexterm" name="id311060"></a>idmap domains, and <a class="indexterm" name="id311067"></a>idmap configoptions.2235 or NIS users within it as strange conflicts can occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> options. 1872 2236 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal"></code> 1873 2237 </em></span> 1874 2238 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 1875 2239 </em></span> 1876 </p></dd><dt><span class="term"><a name="INCLUDE"></a>include (G)</span></dt><dd><p> 2240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335097"></a> 2241 2242 include (G) 2243 </h3></div></div></div><a class="indexterm" name="id335098"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1877 2244 This allows you to include one config file inside another. The file is included literally, as though typed 1878 2245 in place. … … 1884 2251 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 1885 2252 </em></span> 1886 </p></dd><dt><span class="term"><a name="INHERITACLS"></a>inherit acls (S)</span></dt><dd><p>This parameter can be used to ensure that if default acls 2253 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335174"></a> 2254 2255 inherit acls (S) 2256 </h3></div></div></div><a class="indexterm" name="id335176"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 1887 2257 exist on parent directories, they are always honored when creating a 1888 2258 new file or subdirectory in these parent directories. The default … … 1892 2262 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 1893 2263 </em></span> 1894 </p></dd><dt><span class="term"><a name="INHERITOWNER"></a>inherit owner (S)</span></dt><dd><p>The ownership of new files and directories 2264 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335218"></a> 2265 2266 inherit owner (S) 2267 </h3></div></div></div><a class="indexterm" name="id335219"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 1895 2268 is normally governed by effective uid of the connected user. 1896 2269 This option allows the Samba administrator to specify that … … 1901 2274 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 1902 2275 </em></span> 1903 </p></dd><dt><span class="term"><a name="INHERITPERMISSIONS"></a>inherit permissions (S)</span></dt><dd><p> 1904 The permissions on new files and directories are normally governed by <a class="indexterm" name="id311291"></a>create mask, 1905 <a class="indexterm" name="id311298"></a>directory mask, <a class="indexterm" name="id311305"></a>force create mode and <a class="indexterm" name="id311312"></a>force directory mode but the boolean inherit permissions parameter overrides this. 2276 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335266"></a> 2277 2278 inherit permissions (S) 2279 </h3></div></div></div><a class="indexterm" name="id335267"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2280 The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>, 2281 <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> but the boolean inherit permissions parameter overrides this. 1906 2282 </p><p>New directories inherit the mode of the parent directory, 1907 2283 including bits such as setgid.</p><p> 1908 2284 New files inherit their read/write bits from the parent directory. Their execute bits continue to be 1909 determined by <a class=" indexterm" name="id311328"></a>map archive, <a class="indexterm" name="id311335"></a>map hidden and <a class="indexterm" name="id311342"></a>map systemas usual.2285 determined by <a class="link" href="smb.conf.5.html#MAPARCHIVE">map archive</a>, <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPSYSTEM">map system</a> as usual. 1910 2286 </p><p>Note that the setuid bit is <span class="emphasis"><em>never</em></span> set via 1911 2287 inheritance (the code explicitly prohibits this).</p><p>This can be particularly useful on large systems with … … 1913 2289 share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code> 1914 2290 </em></span> 1915 </p></dd><dt><span class="term"><a name="INTERFACES"></a>interfaces (G)</span></dt><dd><p>This option allows you to override the default 2291 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335403"></a> 2292 2293 interfaces (G) 2294 </h3></div></div></div><a class="indexterm" name="id335404"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default 1916 2295 network interfaces list that Samba will use for browsing, name 1917 2296 registration and other NBT traffic. By default Samba will query … … 1937 2316 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code> 1938 2317 </em></span> 1939 </p></dd><dt><span class="term"><a name="INVALIDUSERS"></a>invalid users (S)</span></dt><dd><p>This is a list of users that should not be allowed 2318 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335508"></a> 2319 2320 invalid users (S) 2321 </h3></div></div></div><a class="indexterm" name="id335509"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed 1940 2322 to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span> 1941 2323 check to absolutely ensure an improper setting does not breach … … 1957 2339 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 1958 2340 </em></span> 1959 </p></dd><dt><span class="term"><a name="IPRINTSERVER"></a>iprint server (G)</span></dt><dd><p> 1960 This parameter is only applicable if <a class="indexterm" name="id311602"></a>printing is set to <code class="constant">iprint</code>. 2341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335608"></a> 2342 2343 iprint server (G) 2344 </h3></div></div></div><a class="indexterm" name="id335609"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2345 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">iprint</code>. 1961 2346 </p><p> 1962 2347 If set, this option overrides the ServerName option in the CUPS <code class="filename">client.conf</code>. This is … … 1966 2351 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code> 1967 2352 </em></span> 1968 </p></dd><dt><span class="term"><a name="KEEPALIVE"></a>keepalive (G)</span></dt><dd><p>The value of the parameter (an integer) represents 2353 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335690"></a> 2354 2355 keepalive (G) 2356 </h3></div></div></div><a class="indexterm" name="id335692"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents 1969 2357 the number of seconds between <em class="parameter"><code>keepalive</code></em> 1970 2358 packets. If this parameter is zero, no keepalive packets will be 1971 2359 sent. Keepalive packets, if sent, allow the server to tell whether 1972 2360 a client is still present and responding.</p><p>Keepalives should, in general, not be needed if the socket 1973 has the SO_KEEPALIVE attribute set on it by default. (see <a class=" indexterm" name="id311691"></a>socket options).2361 has the SO_KEEPALIVE attribute set on it by default. (see <a class="link" href="smb.conf.5.html#SOCKETOPTIONS">socket options</a>). 1974 2362 Basically you should only use this option if you strike difficulties.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">300</code> 1975 2363 </em></span> 1976 2364 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 1977 2365 </em></span> 1978 </p></dd><dt><span class="term"><a name="KERNELCHANGENOTIFY"></a>kernel change notify (S)</span></dt><dd><p>This parameter specifies whether Samba should ask the 2366 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335772"></a> 2367 2368 kernel change notify (S) 2369 </h3></div></div></div><a class="indexterm" name="id335773"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 1979 2370 kernel for change notifications in directories so that 1980 2371 SMB clients can refresh whenever the data on the server changes. … … 1983 2374 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 1984 2375 </em></span> 1985 </p></dd><dt><span class="term"><a name="KERNELOPLOCKS"></a>kernel oplocks (G)</span></dt><dd><p>For UNIXes that support kernel based <a class="indexterm" name="id311797"></a>oplocks 2376 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335818"></a> 2377 2378 kernel oplocks (G) 2379 </h3></div></div></div><a class="indexterm" name="id335819"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 1986 2380 (currently only IRIX and the Linux 2.4 kernel), this parameter 1987 2381 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks 1988 2382 </code></em> to be broken whenever a local UNIX process or NFS operation 1989 accesses a file that <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> has oplocked. This allows complete2383 accesses a file that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> has oplocked. This allows complete 1990 2384 data consistency between SMB/CIFS, NFS and local file access (and is 1991 2385 a <span class="emphasis"><em>very</em></span> cool feature :-).</p><p>This parameter defaults to <code class="constant">on</code>, but is translated … … 1993 2387 You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code> 1994 2388 </em></span> 1995 </p></dd><dt><span class="term"><a name="LANMANAUTH"></a>lanman auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 2389 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335900"></a> 2390 2391 lanman auth (G) 2392 </h3></div></div></div><a class="indexterm" name="id335901"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 1996 2393 authenticate users or permit password changes 1997 2394 using the LANMAN password hash. If disabled, only clients which support NT … … 2010 2407 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">yes</code> 2011 2408 </em></span> 2012 </p></dd><dt><span class="term"><a name="LARGEREADWRITE"></a>large readwrite (G)</span></dt><dd><p>This parameter determines whether or not 2013 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2409 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id335983"></a> 2410 2411 large readwrite (G) 2412 </h3></div></div></div><a class="indexterm" name="id335984"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2413 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2014 2414 streaming read and write varient SMB requests introduced with 2015 2415 Windows 2000. Note that due to Windows 2000 client redirector bugs … … 2019 2419 tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code> 2020 2420 </em></span> 2021 </p></dd><dt><span class="term"><a name="LDAPADMINDN"></a>ldap admin dn (G)</span></dt><dd><p> 2022 The <a class="indexterm" name="id312005"></a>ldap admin dn defines the Distinguished Name (DN) name used by Samba to contact 2023 the ldap server when retreiving user account information. The <a class="indexterm" name="id312013"></a>ldap admin dn is used 2421 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336035"></a> 2422 2423 ldap admin dn (G) 2424 </h3></div></div></div><a class="indexterm" name="id336036"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2425 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> defines the Distinguished Name (DN) name used by Samba to contact 2426 the ldap server when retreiving user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> is used 2024 2427 in conjunction with the admin dn password stored in the <code class="filename">private/secrets.tdb</code> 2025 file. See the <a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>2428 file. See the <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> 2026 2429 man page for more information on how to accomplish this. 2027 2430 </p><p> 2028 The <a class="indexterm" name="id312038"></a>ldap admin dn requires a fully specified DN. The <a class="indexterm" name="id312046"></a>ldap suffix is not appended to the <a class="indexterm" name="id312053"></a>ldap admin dn. 2029 </p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="LDAPDELETEDN"></a>ldap delete dn (G)</span></dt><dd><p> This parameter specifies whether a delete 2431 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>. 2432 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336136"></a> 2433 2434 ldap delete dn (G) 2435 </h3></div></div></div><a class="indexterm" name="id336137"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete 2030 2436 operation in the ldapsam deletes the complete entry or only the attributes 2031 2437 specific to Samba. 2032 2438 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code> 2033 2439 </em></span> 2034 </p></dd><dt><span class="term"><a name="LDAPGROUPSUFFIX"></a>ldap group suffix (G)</span></dt><dd><p>This parameter specifies the suffix that is 2440 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336178"></a> 2441 2442 ldap group suffix (G) 2443 </h3></div></div></div><a class="indexterm" name="id336179"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is 2035 2444 used for groups when these are added to the LDAP directory. 2036 If this parameter is unset, the value of <a class=" indexterm" name="id312126"></a>ldap suffixwill be used instead. The suffix string is pre-pended to the2037 <a class=" indexterm" name="id312134"></a>ldap suffixstring so use a partial DN.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal"></code>2445 If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the 2446 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal"></code> 2038 2447 </em></span> 2039 2448 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2040 2449 </em></span> 2041 </p></dd><dt><span class="term"><a name="LDAPIDMAPSUFFIX"></a>ldap idmap suffix (G)</span></dt><dd><p> 2450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336256"></a> 2451 2452 ldap idmap suffix (G) 2453 </h3></div></div></div><a class="indexterm" name="id336258"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2042 2454 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2043 is unset, the value of <a class=" indexterm" name="id312196"></a>ldap suffixwill be used instead. The suffix2044 string is pre-pended to the <a class=" indexterm" name="id312204"></a>ldap suffixstring so use a partial DN.2455 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix 2456 string is pre-pended to the <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN. 2045 2457 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal"></code> 2046 2458 </em></span> 2047 2459 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code> 2048 2460 </em></span> 2049 </p></dd><dt><span class="term"><a name="LDAPMACHINESUFFIX"></a>ldap machine suffix (G)</span></dt><dd><p> 2461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336336"></a> 2462 2463 ldap machine suffix (G) 2464 </h3></div></div></div><a class="indexterm" name="id336337"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2050 2465 It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of 2051 <a class=" indexterm" name="id312266"></a>ldap suffixwill be used instead. The suffix string is pre-pended to the2052 <a class=" indexterm" name="id312274"></a>ldap suffixstring so use a partial DN.2466 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the 2467 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN. 2053 2468 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal"></code> 2054 2469 </em></span> 2055 2470 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2056 2471 </em></span> 2057 </p></dd><dt><span class="term"><a name="LDAPPASSWDSYNC"></a>ldap passwd sync (G)</span></dt><dd><p> 2472 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336414"></a> 2473 2474 ldap passwd sync (G) 2475 </h3></div></div></div><a class="indexterm" name="id336415"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2058 2476 This option is used to define whether or not Samba should sync the LDAP password with the NT 2059 2477 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password 2060 2478 change via SAMBA. 2061 2479 </p><p> 2062 The <a class=" indexterm" name="id312340"></a>ldap passwd synccan be set to one of three values:2480 The <a class="link" href="smb.conf.5.html#LDAPPASSWDSYNC">ldap passwd sync</a> can be set to one of three values: 2063 2481 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Yes</code></em> = Try 2064 2482 to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>No</code></em> = Update NT and … … 2066 2484 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 2067 2485 </em></span> 2068 </p></dd><dt><span class="term"><a name="LDAPREPLICATIONSLEEP"></a>ldap replication sleep (G)</span></dt><dd><p> 2486 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336509"></a> 2487 2488 ldap replication sleep (G) 2489 </h3></div></div></div><a class="indexterm" name="id336510"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2069 2490 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 2070 2491 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 2079 2500 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code> 2080 2501 </em></span> 2081 </p></dd><dt><span class="term"><a name="LDAPSAM:EDITPOSIX"></a>ldapsam:editposix (G)</span></dt><dd><p> 2502 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336564"></a> 2503 2504 ldapsam:editposix (G) 2505 </h3></div></div></div><a class="indexterm" name="id336565"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2082 2506 Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller 2083 2507 eliminating the need to set up custom scripts to add and manage the posix users and groups. This option … … 2092 2516 the smb.conf ldap options must be properly configured. 2093 2517 2094 The typical ldap setup used with the <a class=" indexterm" name="id312494"></a>ldapsam:trusted = yesoption2095 is usually sufficient to use <a class=" indexterm" name="id312501"></a>ldapsam:editposix = yesas well.2518 The typical ldap setup used with the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a> option 2519 is usually sufficient to use <a class="link" href="smb.conf.5.html#LDAPSAM:EDITPOSIX">ldapsam:editposix = yes</a> as well. 2096 2520 </p><p> 2097 2521 An example configuration can be the following: … … 2158 2582 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code> 2159 2583 </em></span> 2160 </p></dd><dt><span class="term"><a name="LDAPSAM:TRUSTED"></a>ldapsam:trusted (G)</span></dt><dd><p> 2584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336673"></a> 2585 2586 ldapsam:trusted (G) 2587 </h3></div></div></div><a class="indexterm" name="id336674"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 2161 2588 By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to 2162 2589 access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group … … 2166 2593 are used to deal with user and group attributes lack such optimization. 2167 2594 </p><p> 2168 To make Samba scale well in large environments, the <a class=" indexterm" name="id312581"></a>ldapsam:trusted = yes2595 To make Samba scale well in large environments, the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a> 2169 2596 option assumes that the complete user and group database that is relevant to Samba is stored in LDAP with the 2170 2597 standard posixAccount/posixGroup attributes. It further assumes that the Samba auxiliary object classes are 2171 2598 stored together with the POSIX data in the same LDAP object. If these assumptions are met, 2172 <a class=" indexterm" name="id312590"></a>ldapsam:trusted = yescan be activated and Samba can bypass the2599 <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a> can be activated and Samba can bypass the 2173 2600 NSS system to query user group memberships. Optimized LDAP queries can greatly speed up domain logon and 2174 2601 administration tasks. Depending on the size of the LDAP database a factor of 100 or more for common queries … … 2176 2603 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code> 2177 2604 </em></span> 2178 </p></dd><dt><span class="term"><a name="LDAPSSL"></a>ldap ssl (G)</span></dt><dd><p>This option is used to define whether or not Samba should 2605 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336748"></a> 2606 2607 ldap ssl (G) 2608 </h3></div></div></div><a class="indexterm" name="id336750"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 2179 2609 use SSL when connecting to the ldap server 2180 2610 This is <span class="emphasis"><em>NOT</em></span> related to 2181 2611 Samba's previous SSL support which was enabled by specifying the 2182 2612 <code class="literal">--with-ssl</code> option to the <code class="filename">configure</code> 2183 script.</p><p>The <a class=" indexterm" name="id312659"></a>ldap sslcan be set to one of three values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never2613 script.</p><p>The <a class="link" href="smb.conf.5.html#LDAPSSL">ldap ssl</a> can be set to one of three values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never 2184 2614 use SSL when querying the directory.</p></li><li><p><em class="parameter"><code>Start_tls</code></em> = Use 2185 2615 the LDAPv3 StartTLS extended operation (RFC2830) for … … 2187 2617 on the ldaps port when contacting the <em class="parameter"><code>ldap server</code></em>. Only available when the 2188 2618 backwards-compatiblity <code class="literal">--with-ldapsam</code> option is specified 2189 to configure. See <a class=" indexterm" name="id312714"></a>passdb backend</p>.2619 to configure. See <a class="link" href="smb.conf.5.html#PASSDBBACKEND">passdb backend</a></p>. 2190 2620 </li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start_tls</code> 2191 2621 </em></span> 2192 </p></dd><dt><span class="term"><a name="LDAPSUFFIX"></a>ldap suffix (G)</span></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 2193 The ldap suffix will be appended to the values specified for the <a class="indexterm" name="id312767"></a>ldap user suffix, 2194 <a class="indexterm" name="id312774"></a>ldap group suffix, <a class="indexterm" name="id312781"></a>ldap machine suffix, and the 2195 <a class="indexterm" name="id312788"></a>ldap idmap suffix. Each of these should be given only a DN relative to the 2196 <a class="indexterm" name="id312796"></a>ldap suffix. 2622 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336881"></a> 2623 2624 ldap suffix (G) 2625 </h3></div></div></div><a class="indexterm" name="id336882"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 2626 The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX">ldap user suffix</a>, 2627 <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX">ldap machine suffix</a>, and the 2628 <a class="link" href="smb.conf.5.html#LDAPIDMAPSUFFIX">ldap idmap suffix</a>. Each of these should be given only a DN relative to the 2629 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a>. 2197 2630 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal"></code> 2198 2631 </em></span> 2199 2632 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 2200 2633 </em></span> 2201 </p></dd><dt><span class="term"><a name="LDAPTIMEOUT"></a>ldap timeout (G)</span></dt><dd><p> 2634 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id336997"></a> 2635 2636 ldap timeout (G) 2637 </h3></div></div></div><a class="indexterm" name="id336998"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2202 2638 When Samba connects to an ldap server that servermay be down or unreachable. To prevent Samba from hanging whilst 2203 2639 waiting for the connection this parameter specifies in seconds how long Samba should wait before failing the … … 2205 2641 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> 2206 2642 </em></span> 2207 </p></dd><dt><span class="term"><a name="LDAPUSERSUFFIX"></a>ldap user suffix (G)</span></dt><dd><p> 2643 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337040"></a> 2644 2645 ldap user suffix (G) 2646 </h3></div></div></div><a class="indexterm" name="id337041"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2208 2647 This parameter specifies where users are added to the tree. If this parameter is unset, 2209 the value of <a class=" indexterm" name="id312898"></a>ldap suffixwill be used instead. The suffix2210 string is pre-pended to the <a class=" indexterm" name="id312906"></a>ldap suffixstring so use a partial DN.2648 the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix 2649 string is pre-pended to the <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN. 2211 2650 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal"></code> 2212 2651 </em></span> 2213 2652 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 2214 2653 </em></span> 2215 </p></dd><dt><span class="term"><a name="LEVEL2OPLOCKS"></a>level2 oplocks (S)</span></dt><dd><p>This parameter controls whether Samba supports 2654 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337118"></a> 2655 2656 level2 oplocks (S) 2657 </h3></div></div></div><a class="indexterm" name="id337119"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports 2216 2658 level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients 2217 2659 that have an oplock on a file to downgrade from a read-write oplock … … 2227 2669 delete any read-ahead caches.</p><p>It is recommended that this parameter be turned on to 2228 2670 speed access to shared executables.</p><p>For more discussions on level2 oplocks see the CIFS spec.</p><p> 2229 Currently, if <a class=" indexterm" name="id312993"></a>kernel oplocksare supported then2671 Currently, if <a class="link" href="smb.conf.5.html#KERNELOPLOCKS">kernel oplocks</a> are supported then 2230 2672 level2 oplocks are not granted (even if this parameter is set to 2231 <code class="constant">yes</code>). Note also, the <a class=" indexterm" name="id313004"></a>oplocks2673 <code class="constant">yes</code>). Note also, the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 2232 2674 parameter must be set to <code class="constant">yes</code> on this share in order for 2233 2675 this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code> 2234 2676 </em></span> 2235 </p></dd><dt><span class="term"><a name="LMANNOUNCE"></a>lm announce (G)</span></dt><dd><p>This parameter determines if <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 2677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337214"></a> 2678 2679 lm announce (G) 2680 </h3></div></div></div><a class="indexterm" name="id337215"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 2236 2681 broadcasts that are needed by OS/2 clients in order for them to see 2237 2682 the Samba server in their browse list. This parameter can have three … … 2241 2686 broadcasts. If set to <code class="constant">yes</code> Samba will produce 2242 2687 Lanman announce broadcasts at a frequency set by the parameter 2243 <a class=" indexterm" name="id313085"></a>lm interval. If set to <code class="constant">auto</code>2688 <a class="link" href="smb.conf.5.html#LMINTERVAL">lm interval</a>. If set to <code class="constant">auto</code> 2244 2689 Samba will not send Lanman announce broadcasts by default but will 2245 2690 listen for them. If it hears such a broadcast on the wire it will 2246 2691 then start sending them at a frequency set by the parameter 2247 <a class=" indexterm" name="id313097"></a>lm interval.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">auto</code>2692 <a class="link" href="smb.conf.5.html#LMINTERVAL">lm interval</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">auto</code> 2248 2693 </em></span> 2249 2694 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 2250 2695 </em></span> 2251 </p></dd><dt><span class="term"><a name="LMINTERVAL"></a>lm interval (G)</span></dt><dd><p>If Samba is set to produce Lanman announce 2696 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337329"></a> 2697 2698 lm interval (G) 2699 </h3></div></div></div><a class="indexterm" name="id337330"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 2252 2700 broadcasts needed by OS/2 clients (see the 2253 <a class=" indexterm" name="id313160"></a>lm announceparameter) then this2701 <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a> parameter) then this 2254 2702 parameter defines the frequency in seconds with which they will be 2255 2703 made. If this is set to zero then no Lanman announcements will be 2256 made despite the setting of the <a class=" indexterm" name="id313168"></a>lm announce2704 made despite the setting of the <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a> 2257 2705 parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">60</code> 2258 2706 </em></span> 2259 2707 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code> 2260 2708 </em></span> 2261 </p></dd><dt><span class="term"><a name="LOADPRINTERS"></a>load printers (G)</span></dt><dd><p>A boolean variable that controls whether all 2709 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337410"></a> 2710 2711 load printers (G) 2712 </h3></div></div></div><a class="indexterm" name="id337411"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all 2262 2713 printers in the printcap will be loaded for browsing by default. 2263 See the <a class=" indexterm" name="id313232"></a>printerssection for2714 See the <a class="link" href="smb.conf.5.html#PRINTERS">printers</a> section for 2264 2715 more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code> 2265 2716 </em></span> 2266 </p></dd><dt><span class="term"><a name="LOCALMASTER"></a>local master (G)</span></dt><dd><p>This option allows <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 2717 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337463"></a> 2718 2719 local master (G) 2720 </h3></div></div></div><a class="indexterm" name="id337464"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 2267 2721 on a subnet. If set to <code class="constant">no</code> then <code class="literal"> 2268 2722 nmbd</code> will not attempt to become a local master browser … … 2274 2728 master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code> 2275 2729 </em></span> 2276 </p></dd><dt><span class="term"><a name="LOCKDIR"></a>lock dir</span></dt><dd><p>This parameter is a synonym for lock directory.</p></dd><dt><span class="term"><a name="LOCKDIRECTORY"></a>lock directory (G)</span></dt><dd><p>This option specifies the directory where lock 2730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337560"></a><a name="LOCKDIR"></a>lock dir</h3></div></div></div><a class="indexterm" name="id337561"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337590"></a> 2731 2732 lock directory (G) 2733 </h3></div></div></div><a class="indexterm" name="id337591"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock 2277 2734 files will be placed. The lock files are used to implement the 2278 <a class=" indexterm" name="id313394"></a>max connectionsoption.2735 <a class="link" href="smb.conf.5.html#MAXCONNECTIONS">max connections</a> option. 2279 2736 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">${prefix}/var/locks</code> 2280 2737 </em></span> 2281 2738 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 2282 2739 </em></span> 2283 </p></dd><dt><span class="term"><a name="LOCKING"></a>locking (S)</span></dt><dd><p>This controls whether or not locking will be 2740 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337660"></a> 2741 2742 locking (S) 2743 </h3></div></div></div><a class="indexterm" name="id337662"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 2284 2744 performed by the server in response to lock requests from the 2285 2745 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 2291 2751 is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a 2292 2752 specific service, as lack of locking may result in data corruption. 2293 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="LOCKSPINCOUNT"></a>lock spin count (G)</span></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 2753 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337730"></a> 2754 2755 lock spin count (G) 2756 </h3></div></div></div><a class="indexterm" name="id337731"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 2294 2757 The functionality it contolled is now controlled by the parameter 2295 <a class=" indexterm" name="id313524"></a>lock spin time.2758 <a class="link" href="smb.conf.5.html#LOCKSPINTIME">lock spin time</a>. 2296 2759 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 2297 2760 </em></span> 2298 </p></dd><dt><span class="term"><a name="LOCKSPINTIME"></a>lock spin time (G)</span></dt><dd><p>The time in microseconds that smbd should 2761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337782"></a> 2762 2763 lock spin time (G) 2764 </h3></div></div></div><a class="indexterm" name="id337783"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should 2299 2765 keep waiting to see if a failed lock request can 2300 2766 be granted. This parameter has changed in default 2301 2767 value from Samba 3.0.23 from 10 to 200. The associated 2302 <a class=" indexterm" name="id313571"></a>lock spin countparameter is2768 <a class="link" href="smb.conf.5.html#LOCKSPINCOUNT">lock spin count</a> parameter is 2303 2769 no longer used in Samba 3.0.24. You should not need 2304 2770 to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code> 2305 2771 </em></span> 2306 </p></dd><dt><span class="term"><a name="LOGFILE"></a>log file (G)</span></dt><dd><p> 2772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337837"></a> 2773 2774 log file (G) 2775 </h3></div></div></div><a class="indexterm" name="id337838"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2307 2776 This option allows you to override the name of the Samba log file (also known as the debug file). 2308 2777 </p><p> … … 2310 2779 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 2311 2780 </em></span> 2312 </p></dd><dt><span class="term"><a name="DEBUGLEVEL"></a>debuglevel</span></dt><dd><p>This parameter is a synonym for log level.</p></dd><dt><span class="term"><a name="LOGLEVEL"></a>log level (G)</span></dt><dd><p> 2781 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337887"></a><a name="DEBUGLEVEL"></a>debuglevel</h3></div></div></div><a class="indexterm" name="id337888"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id337916"></a> 2782 2783 log level (G) 2784 </h3></div></div></div><a class="indexterm" name="id337918"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2313 2785 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 2314 <code class="filename">smb.conf</code> file. This parameter has been extended since the 2.2.x 2315 series, now it allow to specify the debug level for multiple debug classes. This is to give greater 2316 flexibility in the configuration of the system. 2317 </p><p> 2318 The default will be the log level specified on the command line or level zero if none was specified. 2319 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 2320 </em></span> 2321 </p></dd><dt><span class="term"><a name="LOGONDRIVE"></a>logon drive (G)</span></dt><dd><p> 2786 <code class="filename">smb.conf</code> file. 2787 </p><p>This parameter has been extended since the 2.2.x 2788 series, now it allows to specify the debug level for multiple 2789 debug classes. This is to give greater flexibility in the configuration 2790 of the system. The following debug classes are currently implemented: 2791 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>all</code></em></p></li><li><p><em class="parameter"><code>tdb</code></em></p></li><li><p><em class="parameter"><code>printdrivers</code></em></p></li><li><p><em class="parameter"><code>lanman</code></em></p></li><li><p><em class="parameter"><code>smb</code></em></p></li><li><p><em class="parameter"><code>rpc_parse</code></em></p></li><li><p><em class="parameter"><code>rpc_srv</code></em></p></li><li><p><em class="parameter"><code>rpc_cli</code></em></p></li><li><p><em class="parameter"><code>passdb</code></em></p></li><li><p><em class="parameter"><code>sam</code></em></p></li><li><p><em class="parameter"><code>auth</code></em></p></li><li><p><em class="parameter"><code>winbind</code></em></p></li><li><p><em class="parameter"><code>vfs</code></em></p></li><li><p><em class="parameter"><code>idmap</code></em></p></li><li><p><em class="parameter"><code>quota</code></em></p></li><li><p><em class="parameter"><code>acls</code></em></p></li><li><p><em class="parameter"><code>locking</code></em></p></li><li><p><em class="parameter"><code>msdfs</code></em></p></li><li><p><em class="parameter"><code>dmapi</code></em></p></li><li><p><em class="parameter"><code>registry</code></em></p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">0</code> 2792 </em></span> 2793 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 2794 </em></span> 2795 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338145"></a> 2796 2797 logon drive (G) 2798 </h3></div></div></div><a class="indexterm" name="id338146"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2322 2799 This parameter specifies the local path to which the home directory will be 2323 connected (see <a class=" indexterm" name="id313742"></a>logon home) and is only used by NT2800 connected (see <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a>) and is only used by NT 2324 2801 Workstations. 2325 2802 </p><p> … … 2329 2806 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 2330 2807 </em></span> 2331 </p></dd><dt><span class="term"><a name="LOGONHOME"></a>logon home (G)</span></dt><dd><p> 2808 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338218"></a> 2809 2810 logon home (G) 2811 </h3></div></div></div><a class="indexterm" name="id338219"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 2332 2812 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 2333 2813 It allows you to do … … 2348 2828 <code class="literal">net use /home</code> but use the whole string when dealing with profiles. 2349 2829 </p><p> 2350 Note that in prior versions of Samba, the <a class=" indexterm" name="id313860"></a>logon pathwas returned rather than2830 Note that in prior versions of Samba, the <a class="link" href="smb.conf.5.html#LOGONPATH">logon path</a> was returned rather than 2351 2831 <em class="parameter"><code>logon home</code></em>. This broke <code class="literal">net use /home</code> 2352 2832 but allowed profiles outside the home directory. The current implementation is correct, and can be used for 2353 2833 profiles if you use the above trick. 2354 2834 </p><p> 2355 Disable this feature by setting <a class=" indexterm" name="id313884"></a>logon home = ""- using the empty string.2835 Disable this feature by setting <a class="link" href="smb.conf.5.html#LOGONHOME">logon home = ""</a> - using the empty string. 2356 2836 </p><p> 2357 2837 This option is only useful if Samba is set up as a logon server. … … 2360 2840 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code> 2361 2841 </em></span> 2362 </p></dd><dt><span class="term"><a name="LOGONPATH"></a>logon path (G)</span></dt><dd><p> 2842 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338370"></a> 2843 2844 logon path (G) 2845 </h3></div></div></div><a class="indexterm" name="id338371"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p> 2363 2846 This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are 2364 2847 stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming 2365 2848 profiles. To find out how to handle roaming profiles for Win 9X system, see the 2366 <a class=" indexterm" name="id313953"></a>logon homeparameter.2849 <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a> parameter. 2367 2850 </p><p> 2368 2851 This option takes the standard substitutions, allowing you to have separate logon scripts for each user or … … 2393 2876 </p></div><p>Note that this option is only useful if Samba is set up as a domain controller.</p><p> 2394 2877 Disable the use of roaming profiles by setting the value of this parameter to the empty string. For 2395 example, <a class=" indexterm" name="id314030"></a>logon path = "". Take note that even if the default setting2878 example, <a class="link" href="smb.conf.5.html#LOGONPATH">logon path = ""</a>. Take note that even if the default setting 2396 2879 in the smb.conf file is the empty string, any value specified in the user account settings in the passdb 2397 2880 backend will over-ride the effect of setting this parameter to null. Disabling of all roaming profile use … … 2404 2887 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 2405 2888 </em></span> 2406 </p></dd><dt><span class="term"><a name="LOGONSCRIPT"></a>logon script (G)</span></dt><dd><p> 2889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338516"></a> 2890 2891 logon script (G) 2892 </h3></div></div></div><a class="indexterm" name="id338517"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2407 2893 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 2408 2894 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 2410 2896 </p><p> 2411 2897 The script must be a relative path to the <em class="parameter"><code>[netlogon]</code></em> service. If the [netlogon] 2412 service specifies a <a class=" indexterm" name="id314112"></a>path of <code class="filename">/usr/local/samba/netlogon</code>, and <a class="indexterm" name="id314125"></a>logon script = STARTUP.BAT, then the file that will be downloaded is:2898 service specifies a <a class="link" href="smb.conf.5.html#PATH">path</a> of <code class="filename">/usr/local/samba/netlogon</code>, and <a class="link" href="smb.conf.5.html#LOGONSCRIPT">logon script = STARTUP.BAT</a>, then the file that will be downloaded is: 2413 2899 </p><pre class="programlisting"> 2414 2900 /usr/local/samba/netlogon/STARTUP.BAT … … 2435 2921 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 2436 2922 </em></span> 2437 </p></dd><dt><span class="term"><a name="LPPAUSECOMMAND"></a>lppause command (S)</span></dt><dd><p>This parameter specifies the command to be 2923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338674"></a> 2924 2925 lppause command (S) 2926 </h3></div></div></div><a class="indexterm" name="id338675"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 2438 2927 executed on the server host in order to stop printing or spooling 2439 2928 a specific print job.</p><p>This command should be a program or script which takes … … 2450 2939 in the lppause command as the PATH may not be available to the server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal"> 2451 2940 # Currently no default value is given to 2452 this string, unless the value of the <a class=" indexterm" name="id314292"></a>printing2941 this string, unless the value of the <a class="link" href="smb.conf.5.html#PRINTING">printing</a> 2453 2942 parameter is <code class="constant">SYSV</code>, in which case the default is : 2454 2943 <code class="literal">lp -i %p-%j -H hold</code> or if the value of the … … 2459 2948 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 2460 2949 </em></span> 2461 </p></dd><dt><span class="term"><a name="LPQCACHETIME"></a>lpq cache time (G)</span></dt><dd><p>This controls how long lpq info will be cached 2950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338810"></a> 2951 2952 lpq cache time (G) 2953 </h3></div></div></div><a class="indexterm" name="id338811"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 2462 2954 for to prevent the <code class="literal">lpq</code> command being called too 2463 2955 often. A separate cache is kept for each variation of the <code class="literal"> … … 2472 2964 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 2473 2965 </em></span> 2474 </p></dd><dt><span class="term"><a name="LPQCOMMAND"></a>lpq command (S)</span></dt><dd><p>This parameter specifies the command to be 2966 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id338922"></a> 2967 2968 lpq command (S) 2969 </h3></div></div></div><a class="indexterm" name="id338923"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 2475 2970 executed on the server host in order to obtain <code class="literal">lpq 2476 2971 </code>-style printer status information.</p><p>This command should be a program or script which … … 2494 2989 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 2495 2990 </em></span> 2496 </p></dd><dt><span class="term"><a name="LPRESUMECOMMAND"></a>lpresume command (S)</span></dt><dd><p>This parameter specifies the command to be 2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339038"></a> 2992 2993 lpresume command (S) 2994 </h3></div></div></div><a class="indexterm" name="id339039"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 2497 2995 executed on the server host in order to restart or continue 2498 2996 printing or spooling a specific print job.</p><p>This command should be a program or script which takes 2499 2997 a printer name and job number to resume the print job. See 2500 also the <a class=" indexterm" name="id314599"></a>lppause commandparameter.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name2998 also the <a class="link" href="smb.conf.5.html#LPPAUSECOMMAND">lppause command</a> parameter.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name 2501 2999 is put in its place. A <em class="parameter"><code>%j</code></em> is replaced with 2502 3000 the job number (an integer).</p><p>Note that it is good practice to include the absolute path 2503 3001 in the <em class="parameter"><code>lpresume command</code></em> as the PATH may not 2504 be available to the server.</p><p>See also the <a class=" indexterm" name="id314635"></a>printingparameter.</p><p>Default: Currently no default value is given3002 be available to the server.</p><p>See also the <a class="link" href="smb.conf.5.html#PRINTING">printing</a> parameter.</p><p>Default: Currently no default value is given 2505 3003 to this string, unless the value of the <em class="parameter"><code>printing</code></em> 2506 parameter is <code class="constant">SYSV</code>, in which case the default is :</p><p><code class="literal">lp -i %p-%j -H resume</code></p><p>or if the value of the <em class="parameter"><code>printing</code></em> parameter 2507 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">lpresume command = /usr/bin/lpalt %p-%j -p2</code> 2508 </em></span> 2509 </p></dd><dt><span class="term"><a name="LPRMCOMMAND"></a>lprm command (S)</span></dt><dd><p>This parameter specifies the command to be 3004 parameter is <code class="constant">SYSV</code>, in which case the default is:</p><p><code class="literal">lp -i %p-%j -H resume</code></p><p>or if the value of the <em class="parameter"><code>printing</code></em> parameter 3005 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3006 </em></span> 3007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339181"></a> 3008 3009 lprm command (S) 3010 </h3></div></div></div><a class="indexterm" name="id339182"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 2510 3011 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 2511 3012 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 2524 3025 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 2525 3026 </em></span> 2526 </p></dd><dt><span class="term"><a name="MACHINEPASSWORDTIMEOUT"></a>machine password timeout (G)</span></dt><dd><p> 2527 If a Samba server is a member of a Windows NT Domain (see the <a class="indexterm" name="id314802"></a>security = domain parameter) then periodically a running smbd process will try and change 3027 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339263"></a> 3028 3029 machine password timeout (G) 3030 </h3></div></div></div><a class="indexterm" name="id339264"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3031 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter) then periodically a running smbd process will try and change 2528 3032 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb 2529 3033 </code>. This parameter specifies how often this password will be changed, in seconds. The default is one 2530 3034 week (expressed in seconds), the same as a Windows NT Domain member server. 2531 3035 </p><p> 2532 See also <a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>,2533 and the <a class=" indexterm" name="id314828"></a>security = domainparameter.3036 See also <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, 3037 and the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter. 2534 3038 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 2535 3039 </em></span> 2536 </p></dd><dt><span class="term"><a name="MAGICOUTPUT"></a>magic output (S)</span></dt><dd><p> 3040 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339345"></a> 3041 3042 magic output (S) 3043 </h3></div></div></div><a class="indexterm" name="id339346"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2537 3044 This parameter specifies the name of a file which will contain output created by a magic script (see the 2538 <a class=" indexterm" name="id314875"></a>magic scriptparameter below).3045 <a class="link" href="smb.conf.5.html#MAGICSCRIPT">magic script</a> parameter below). 2539 3046 </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script 2540 3047 </code></em> in the same directory the output file content is undefined. … … 2543 3050 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 2544 3051 </em></span> 2545 </p></dd><dt><span class="term"><a name="MAGICSCRIPT"></a>magic script (S)</span></dt><dd><p>This parameter specifies the name of a file which, 3052 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339425"></a> 3053 3054 magic script (S) 3055 </h3></div></div></div><a class="indexterm" name="id339426"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 2546 3056 if opened, will be executed by the server when the file is closed. 2547 3057 This allows a UNIX script to be sent to the Samba host and … … 2549 3059 completion assuming that the user has the appropriate level 2550 3060 of privilege and the file permissions allow the deletion.</p><p>If the script generates output, output will be sent to 2551 the file specified by the <a class=" indexterm" name="id314959"></a>magic output3061 the file specified by the <a class="link" href="smb.conf.5.html#MAGICOUTPUT">magic output</a> 2552 3062 parameter (see above).</p><p>Note that some shells are unable to interpret scripts 2553 3063 containing CR/LF instead of CR as … … 2559 3069 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 2560 3070 </em></span> 2561 </p></dd><dt><span class="term"><a name="MANGLEDMAP"></a>mangled map (S)</span></dt><dd><p> 3071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339523"></a> 3072 3073 mangled map (S) 3074 </h3></div></div></div><a class="indexterm" name="id339524"></a><a name="MANGLEDMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2562 3075 This is for those who want to directly map UNIX file names which cannot be represented on 2563 3076 Windows/DOS. The mangling of names is not always what is needed. In particular you may have … … 2570 3083 you would use: 2571 3084 </p><p> 2572 <a class=" indexterm" name="id315073"></a>mangled map = (*.html *.htm).3085 <a class="link" href="smb.conf.5.html#MANGLEDMAP">mangled map = (*.html *.htm)</a>. 2573 3086 </p><p> 2574 3087 One very useful case is to remove the annoying <code class="filename">;1</code> off … … 2580 3093 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangled map</code></em> = <code class="literal">(*;1 *;)</code> 2581 3094 </em></span> 2582 </p></dd><dt><span class="term"><a name="MANGLEDNAMES"></a>mangled names (S)</span></dt><dd><p>This controls whether non-DOS names under UNIX 3095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339635"></a> 3096 3097 mangled names (S) 3098 </h3></div></div></div><a class="indexterm" name="id339636"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 2583 3099 should be mapped to DOS-compatible names ("mangled") and made visible, 2584 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class=" indexterm" name="id315151"></a>name manglingfor3100 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a> for 2585 3101 details on how to control the mangling process.</p><p>If mangling is used then the mangling algorithm is as follows:</p><div class="itemizedlist"><ul type="disc"><li><p>The first (up to) five alphanumeric characters 2586 3102 before the rightmost dot of the filename are preserved, forced … … 2592 3108 only if it contains any upper case characters or is longer than three 2593 3109 characters.</p><p>Note that the character to use may be specified using 2594 the <a class=" indexterm" name="id315185"></a>mangling char3110 the <a class="link" href="smb.conf.5.html#MANGLINGCHAR">mangling char</a> 2595 3111 option, if you don't like '~'.</p></li><li><p>Files whose UNIX name begins with a dot will be 2596 3112 presented as DOS hidden files. The mangled name will be created as … … 2605 3121 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 2606 3122 </em></span> 2607 </p></dd><dt><span class="term"><a name="MANGLEPREFIX"></a>mangle prefix (G)</span></dt><dd><p> controls the number of prefix 3123 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339754"></a> 3124 3125 mangle prefix (G) 3126 </h3></div></div></div><a class="indexterm" name="id339756"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 2608 3127 characters from the original name used when generating 2609 3128 the mangled names. A larger value will give a weaker … … 2615 3134 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 2616 3135 </em></span> 2617 </p></dd><dt><span class="term"><a name="MANGLINGCHAR"></a>mangling char (S)</span></dt><dd><p>This controls what character is used as 2618 the <span class="emphasis"><em>magic</em></span> character in <a class="indexterm" name="id315321"></a>name mangling. The 3136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339818"></a> 3137 3138 mangling char (S) 3139 </h3></div></div></div><a class="indexterm" name="id339819"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3140 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. The 2619 3141 default is a '~' but this may interfere with some software. Use this option to set 2620 3142 it to whatever you prefer. This is effective only when mangling method is hash.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">~</code> … … 2622 3144 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 2623 3145 </em></span> 2624 </p></dd><dt><span class="term"><a name="MANGLINGMETHOD"></a>mangling method (G)</span></dt><dd><p> controls the algorithm used for the generating 3146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339891"></a> 3147 3148 mangling method (G) 3149 </h3></div></div></div><a class="indexterm" name="id339892"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 2625 3150 the mangled names. Can take two different values, "hash" and 2626 3151 "hash2". "hash" is the algorithm that was used … … 2633 3158 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 2634 3159 </em></span> 2635 </p></dd><dt><span class="term"><a name="MAPACLINHERIT"></a>map acl inherit (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id339952"></a> 3161 3162 map acl inherit (S) 3163 </h3></div></div></div><a class="indexterm" name="id339954"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 2636 3164 access control entry flags stored in Windows ACLs into an extended attribute 2637 3165 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 2641 3169 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 2642 3170 </em></span> 2643 </p></dd><dt><span class="term"><a name="MAPARCHIVE"></a>map archive (S)</span></dt><dd><p> 3171 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340005"></a> 3172 3173 map archive (S) 3174 </h3></div></div></div><a class="indexterm" name="id340006"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2644 3175 This controls whether the DOS archive attribute 2645 3176 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 2649 3180 be quite annoying for shared source code, documents, etc... 2650 3181 </p><p> 2651 Note that this requires the <a class=" indexterm" name="id315501"></a>create maskparameter to be set such that owner3182 Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> parameter to be set such that owner 2652 3183 execute bit is not masked out (i.e. it must include 100). See the parameter 2653 <a class=" indexterm" name="id315509"></a>create maskfor details.3184 <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> for details. 2654 3185 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 2655 3186 </em></span> 2656 </p></dd><dt><span class="term"><a name="MAPHIDDEN"></a>map hidden (S)</span></dt><dd><p> 3187 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340074"></a> 3188 3189 map hidden (S) 3190 </h3></div></div></div><a class="indexterm" name="id340075"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2657 3191 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 2658 3192 </p><p> 2659 Note that this requires the <a class=" indexterm" name="id315559"></a>create maskto be set such that the world execute2660 bit is not masked out (i.e. it must include 001). See the parameter <a class=" indexterm" name="id315567"></a>create mask3193 Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> to be set such that the world execute 3194 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> 2661 3195 for details. 2662 </p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="MAPREADONLY"></a>map read only (S)</span></dt><dd><p> 3196 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340128"></a> 3197 3198 map read only (S) 3199 </h3></div></div></div><a class="indexterm" name="id340129"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 2663 3200 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 2664 3201 </p><p> 2665 This parameter can take three different values, which tell <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> how to display the read only attribute on files, where either2666 <a class=" indexterm" name="id315613"></a>store dos attributesis set to <code class="constant">No</code>, or no extended attribute is2667 present. If <a class=" indexterm" name="id315624"></a>store dos attributesis set to <code class="constant">yes</code> then this3202 This parameter can take three different values, which tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> how to display the read only attribute on files, where either 3203 <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> is set to <code class="constant">No</code>, or no extended attribute is 3204 present. If <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> is set to <code class="constant">yes</code> then this 2668 3205 parameter is <span class="emphasis"><em>ignored</em></span>. This is a new parameter introduced in Samba version 3.0.21. 2669 3206 </p><p>The three settings are :</p><div class="itemizedlist"><ul type="disc"><li><p> … … 2673 3210 </p></li><li><p> 2674 3211 <code class="constant">Permissions</code> - The read only DOS attribute is mapped to the effective permissions of 2675 the connecting user, as evaluated by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> by reading the unix permissions and POSIX ACL (if present).3212 the connecting user, as evaluated by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> by reading the unix permissions and POSIX ACL (if present). 2676 3213 If the connecting user does not have permission to modify the file, the read only attribute 2677 3214 is reported as being set on the file. 2678 3215 </p></li><li><p> 2679 3216 <code class="constant">No</code> - The read only DOS attribute is unaffected by permissions, and can only be set by 2680 the <a class=" indexterm" name="id315681"></a>store dos attributesmethod. This may be useful for exporting mounted CDs.3217 the <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> method. This may be useful for exporting mounted CDs. 2681 3218 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code> 2682 3219 </em></span> 2683 </p></dd><dt><span class="term"><a name="MAPSYSTEM"></a>map system (S)</span></dt><dd><p> 3220 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340269"></a> 3221 3222 map system (S) 3223 </h3></div></div></div><a class="indexterm" name="id340270"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 2684 3224 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 2685 3225 </p><p> 2686 Note that this requires the <a class=" indexterm" name="id315731"></a>create maskto be set such that the group3226 Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> to be set such that the group 2687 3227 execute bit is not masked out (i.e. it must include 010). See the parameter 2688 <a class=" indexterm" name="id315739"></a>create maskfor details.3228 <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> for details. 2689 3229 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 2690 3230 </em></span> 2691 </p></dd><dt><span class="term"><a name="MAPTOGUEST"></a>map to guest (G)</span></dt><dd><p>This parameter is only useful in <a class="indexterm" name="id315785"></a>SECURITY = 2692 security modes other than <em class="parameter"><code>security = share</code></em> 3231 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340335"></a> 3232 3233 map to guest (G) 3234 </h3></div></div></div><a class="indexterm" name="id340336"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY = 3235 security</a> modes other than <em class="parameter"><code>security = share</code></em> 2693 3236 and <em class="parameter"><code>security = server</code></em> 2694 3237 - i.e. <code class="constant">user</code>, and <code class="constant">domain</code>.</p><p>This parameter can take four different values, which tell 2695 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> what to do with user3238 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> what to do with user 2696 3239 login requests that don't match a valid UNIX user in some way.</p><p>The four settings are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">Never</code> - Means user login 2697 3240 requests with an invalid password are rejected. This is the … … 2699 3242 logins with an invalid password are rejected, unless the username 2700 3243 does not exist, in which case it is treated as a guest login and 2701 mapped into the <a class=" indexterm" name="id315849"></a>guest account.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins3244 mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins 2702 3245 with an invalid password are treated as a guest login and mapped 2703 into the <a class=" indexterm" name="id315866"></a>guest account. Note that3246 into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>. Note that 2704 3247 this can cause problems as it means that any user incorrectly typing 2705 3248 their password will be silently logged on as "guest" - and … … 2731 3274 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 2732 3275 </em></span> 2733 </p></dd><dt><span class="term"><a name="MAXCONNECTIONS"></a>max connections (S)</span></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3276 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340551"></a> 3277 3278 max connections (S) 3279 </h3></div></div></div><a class="indexterm" name="id340552"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 2734 3280 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 2735 3281 will be refused if this number of connections to the service are already open. A value 2736 3282 of zero mean an unlimited number of connections may be made.</p><p>Record lock files are used to implement this feature. The lock files will be stored in 2737 the directory specified by the <a class=" indexterm" name="id316002"></a>lock directoryoption.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">0</code>3283 the directory specified by the <a class="link" href="smb.conf.5.html#LOCKDIRECTORY">lock directory</a> option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">0</code> 2738 3284 </em></span> 2739 3285 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 2740 3286 </em></span> 2741 </p></dd><dt><span class="term"><a name="MAXDISKSIZE"></a>max disk size (G)</span></dt><dd><p>This option allows you to put an upper limit 3287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340632"></a> 3288 3289 max disk size (G) 3290 </h3></div></div></div><a class="indexterm" name="id340633"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 2742 3291 on the apparent size of disks. If you set this option to 100 2743 3292 then all shares will appear to be not larger than 100 MB in … … 2753 3302 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 2754 3303 </em></span> 2755 </p></dd><dt><span class="term"><a name="MAXLOGSIZE"></a>max log size (G)</span></dt><dd><p> 3304 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340717"></a> 3305 3306 max log size (G) 3307 </h3></div></div></div><a class="indexterm" name="id340718"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2756 3308 This option (an integer in kilobytes) specifies the max size the log file should grow to. 2757 3309 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 2762 3314 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 2763 3315 </em></span> 2764 </p></dd><dt><span class="term"><a name="MAXMUX"></a>max mux (G)</span></dt><dd><p>This option controls the maximum number of 3316 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340785"></a> 3317 3318 max mux (G) 3319 </h3></div></div></div><a class="indexterm" name="id340786"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 2765 3320 outstanding simultaneous SMB operations that Samba tells the client 2766 3321 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 2767 3322 </em></span> 2768 </p></dd><dt><span class="term"><a name="MAXOPENFILES"></a>max open files (G)</span></dt><dd><p>This parameter limits the maximum number of 2769 open files that one <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340827"></a> 3324 3325 max open files (G) 3326 </h3></div></div></div><a class="indexterm" name="id340828"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3327 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 2770 3328 serving process may have open for a client at any one time. The 2771 3329 default for this parameter is set very high (10,000) as Samba uses … … 2774 3332 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code> 2775 3333 </em></span> 2776 </p></dd><dt><span class="term"><a name="MAXPRINTJOBS"></a>max print jobs (S)</span></dt><dd><p>This parameter limits the maximum number of 3334 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340882"></a> 3335 3336 max print jobs (S) 3337 </h3></div></div></div><a class="indexterm" name="id340884"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 2777 3338 jobs allowable in a Samba printer queue at any given moment. 2778 If this number is exceeded, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client.3339 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. 2779 3340 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">1000</code> 2780 3341 </em></span> 2781 3342 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 2782 3343 </em></span> 2783 </p></dd><dt><span class="term"><a name="PROTOCOL"></a>protocol</span></dt><dd><p>This parameter is a synonym for max protocol.</p></dd><dt><span class="term"><a name="MAXPROTOCOL"></a>max protocol (G)</span></dt><dd><p>The value of the parameter (a string) is the highest 3344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340950"></a><a name="PROTOCOL"></a>protocol</h3></div></div></div><a class="indexterm" name="id340951"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id340980"></a> 3345 3346 max protocol (G) 3347 </h3></div></div></div><a class="indexterm" name="id340982"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 2784 3348 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No 2785 3349 concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on … … 2793 3357 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 2794 3358 </em></span> 2795 </p></dd><dt><span class="term"><a name="MAXREPORTEDPRINTJOBS"></a>max reported print jobs (S)</span></dt><dd><p> 3359 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341100"></a> 3360 3361 max reported print jobs (S) 3362 </h3></div></div></div><a class="indexterm" name="id341101"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2796 3363 This parameter limits the maximum number of jobs displayed in a port monitor for 2797 3364 Samba printer queue at any given moment. If this number is exceeded, the excess … … 2802 3369 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 2803 3370 </em></span> 2804 </p></dd><dt><span class="term"><a name="MAXSMBDPROCESSES"></a>max smbd processes (G)</span></dt><dd><p>This parameter limits the maximum number of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341159"></a> 3372 3373 max smbd processes (G) 3374 </h3></div></div></div><a class="indexterm" name="id341160"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 2805 3375 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 2806 3376 resources to handle more than this number of connections. Remember that under normal operating 2807 conditions, each user will have an <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> associated with him or her to handle connections to all3377 conditions, each user will have an <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> associated with him or her to handle connections to all 2808 3378 shares from a given host.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">0</code> 2809 3379 </em></span> 2810 3380 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 2811 3381 </em></span> 2812 </p></dd><dt><span class="term"><a name="MAXSTATCACHESIZE"></a>max stat cache size (G)</span></dt><dd><p>This parameter limits the size in memory of any 2813 <em class="parameter"><code>stat cache</code></em> being used 2814 to speed up case insensitive name mappings. This parameter is 2815 the number of kilobyte (1024) units the stat cache can use. 2816 A value of zero means unlimited which is not advised aѕ it can 2817 use a lot of memory. 2818 You should not need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">1024</code> 3382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341236"></a> 3383 3384 max stat cache size (G) 3385 </h3></div></div></div><a class="indexterm" name="id341237"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3386 <em class="parameter"><code>stat cache</code></em> being used 3387 to speed up case insensitive name mappings. It represents 3388 the number of kilobyte (1024) units the stat cache can use. 3389 A value of zero, meaning unlimited, is not advisable due to 3390 increased memory useage. You should not need to change this 3391 parameter. 3392 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">256</code> 2819 3393 </em></span> 2820 3394 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 2821 3395 </em></span> 2822 </p></dd><dt><span class="term"><a name="MAXTTL"></a>max ttl (G)</span></dt><dd><p>This option tells <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3396 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341302"></a> 3397 3398 max ttl (G) 3399 </h3></div></div></div><a class="indexterm" name="id341303"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 2823 3400 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 2824 3401 requesting a name using either a broadcast packet or from a WINS server. You should 2825 3402 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 2826 3403 </em></span> 2827 </p></dd><dt><span class="term"><a name="MAXWINSTTL"></a>max wins ttl (G)</span></dt><dd><p>This option tells <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 2828 (<a class="indexterm" name="id316771"></a>wins support = yes) what the maximum 3404 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341358"></a> 3405 3406 max wins ttl (G) 3407 </h3></div></div></div><a class="indexterm" name="id341359"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3408 (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the maximum 2829 3409 'time to live' of NetBIOS names that <code class="literal">nmbd</code> 2830 3410 will grant will be (in seconds). You should never need to change this 2831 3411 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 2832 3412 </em></span> 2833 </p></dd><dt><span class="term"><a name="MAXXMIT"></a>max xmit (G)</span></dt><dd><p>This option controls the maximum packet size 3413 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341426"></a> 3414 3415 max xmit (G) 3416 </h3></div></div></div><a class="indexterm" name="id341427"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 2834 3417 that will be negotiated by Samba. The default is 16644, which 2835 3418 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 2839 3422 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 2840 3423 </em></span> 2841 </p></dd><dt><span class="term"><a name="MESSAGECOMMAND"></a>message command (G)</span></dt><dd><p>This specifies what command to run when the 3424 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341486"></a> 3425 3426 message command (G) 3427 </h3></div></div></div><a class="indexterm" name="id341487"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 2842 3428 server receives a WinPopup style message.</p><p>This would normally be a command that would 2843 3429 deliver the message somehow. How this is to be done is … … 2878 3464 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 2879 3465 </em></span> 2880 </p></dd><dt><span class="term"><a name="MINPRINTSPACE"></a>min print space (S)</span></dt><dd><p>This sets the minimum amount of free disk 3466 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341678"></a> 3467 3468 min print space (S) 3469 </h3></div></div></div><a class="indexterm" name="id341679"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 2881 3470 space that must be available before a user will be able to spool 2882 3471 a print job. It is specified in kilobytes. The default is 0, which … … 2885 3474 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 2886 3475 </em></span> 2887 </p></dd><dt><span class="term"><a name="MINPROTOCOL"></a>min protocol (G)</span></dt><dd><p>The value of the parameter (a string) is the 3476 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341738"></a> 3477 3478 min protocol (G) 3479 </h3></div></div></div><a class="indexterm" name="id341739"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 2888 3480 lowest SMB protocol dialect than Samba will support. Please refer 2889 to the <a class=" indexterm" name="id317130"></a>max protocol3481 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL">max protocol</a> 2890 3482 parameter for a list of valid protocol names and a brief description 2891 3483 of each. You may also wish to refer to the C source code in 2892 3484 <code class="filename">source/smbd/negprot.c</code> for a listing of known protocol 2893 3485 dialects supported by clients.</p><p>If you are viewing this parameter as a security measure, you should 2894 also refer to the <a class=" indexterm" name="id317149"></a>lanman authparameter. Otherwise, you should never need3486 also refer to the <a class="link" href="smb.conf.5.html#LANMANAUTH">lanman auth</a> parameter. Otherwise, you should never need 2895 3487 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">CORE</code> 2896 3488 </em></span> 2897 3489 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 2898 3490 </em></span> 2899 </p></dd><dt><span class="term"><a name="MINWINSTTL"></a>min wins ttl (G)</span></dt><dd><p>This option tells <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 2900 when acting as a WINS server (<a class="indexterm" name="id317220"></a>wins support = yes) what the minimum 'time to live' 3491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341830"></a> 3492 3493 min wins ttl (G) 3494 </h3></div></div></div><a class="indexterm" name="id341831"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 3495 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the minimum 'time to live' 2901 3496 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in 2902 3497 seconds). You should never need to change this parameter. The default 2903 3498 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 2904 3499 </em></span> 2905 </p></dd><dt><span class="term"><a name="MSDFSPROXY"></a>msdfs proxy (S)</span></dt><dd><p>This parameter indicates that the share is a 3500 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341896"></a> 3501 3502 msdfs proxy (S) 3503 </h3></div></div></div><a class="indexterm" name="id341897"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 2906 3504 stand-in for another CIFS share whose location is specified by 2907 3505 the value of the parameter. When clients attempt to connect to 2908 3506 this share, they are redirected to the proxied share using 2909 3507 the SMB-Dfs protocol.</p><p>Only Dfs roots can act as proxy shares. Take a look at the 2910 <a class="indexterm" name="id317279"></a>msdfs root and <a class="indexterm" name="id317286"></a>host msdfs 2911 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\\otherserver\someshare</code> 2912 </em></span> 2913 </p></dd><dt><span class="term"><a name="MSDFSROOT"></a>msdfs root (S)</span></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 3508 <a class="link" href="smb.conf.5.html#MSDFSROOT">msdfs root</a> and <a class="link" href="smb.conf.5.html#HOSTMSDFS">host msdfs</a> 3509 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 3510 </em></span> 3511 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id341969"></a> 3512 3513 msdfs root (S) 3514 </h3></div></div></div><a class="indexterm" name="id341970"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 2914 3515 share as a Dfs root and allows clients to browse the 2915 3516 distributed file system tree rooted at the share directory. … … 2919 3520 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 2920 3521 </em></span> 2921 </p></dd><dt><span class="term"><a name="NAMECACHETIMEOUT"></a>name cache timeout (G)</span></dt><dd><p>Specifies the number of seconds it takes before 3522 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342022"></a> 3523 3524 name cache timeout (G) 3525 </h3></div></div></div><a class="indexterm" name="id342023"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 2922 3526 entries in samba's hostname resolve cache time out. If 2923 3527 the timeout is set to 0. the caching is disabled. … … 2926 3530 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 2927 3531 </em></span> 2928 </p></dd><dt><span class="term"><a name="NAMERESOLVEORDER"></a>name resolve order (G)</span></dt><dd><p>This option is used by the programs in the Samba 3532 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342080"></a> 3533 3534 name resolve order (G) 3535 </h3></div></div></div><a class="indexterm" name="id342081"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 2929 3536 suite to determine what naming services to use and in what order 2930 3537 to resolve host names to IP addresses. Its main purpose to is to … … 2944 3551 _ldap._tcp.domain. 2945 3552 </p></li><li><p><code class="constant">wins</code> : Query a name with 2946 the IP address listed in the <a class=" indexterm" name="id317498"></a>WINSSERVERparameter. If no WINS server has3553 the IP address listed in the <a class="link" href="smb.conf.5.html#WINSSERVER">WINSSERVER</a> parameter. If no WINS server has 2947 3554 been specified this method will be ignored.</p></li><li><p><code class="constant">bcast</code> : Do a broadcast on 2948 each of the known local interfaces listed in the <a class=" indexterm" name="id317515"></a>interfaces3555 each of the known local interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> 2949 3556 parameter. This is the least reliable of the name resolution 2950 3557 methods as it depends on the target host being on a locally … … 2957 3564 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 2958 3565 </em></span> 2959 </p></dd><dt><span class="term"><a name="NETBIOSALIASES"></a>netbios aliases (G)</span></dt><dd><p>This is a list of NetBIOS names that nmbd will 3566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342261"></a> 3567 3568 netbios aliases (G) 3569 </h3></div></div></div><a class="indexterm" name="id342262"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 2960 3570 advertise as additional names by which the Samba server is known. This allows one machine 2961 3571 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 2967 3577 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 2968 3578 </em></span> 2969 </p></dd><dt><span class="term"><a name="NETBIOSNAME"></a>netbios name (G)</span></dt><dd><p> 3579 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342322"></a> 3580 3581 netbios name (G) 3582 </h3></div></div></div><a class="indexterm" name="id342323"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 2970 3583 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 2971 3584 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 2980 3593 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 2981 3594 </em></span> 2982 </p></dd><dt><span class="term"><a name="NETBIOSSCOPE"></a>netbios scope (G)</span></dt><dd><p>This sets the NetBIOS scope that Samba will 3595 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342399"></a> 3596 3597 netbios scope (G) 3598 </h3></div></div></div><a class="indexterm" name="id342400"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 2983 3599 operate under. This should not be set unless every machine 2984 3600 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 2985 3601 </em></span> 2986 </p></dd><dt><span class="term"><a name="NISHOMEDIR"></a>nis homedir (G)</span></dt><dd><p>Get the home share server from a NIS map. For 3602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342440"></a> 3603 3604 nis homedir (G) 3605 </h3></div></div></div><a class="indexterm" name="id342441"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 2987 3606 UNIX systems that use an automounter, the user's home directory 2988 3607 will often be mounted on a workstation on demand from a remote … … 2998 3617 server. When Samba is returning the home share to the client, it 2999 3618 will consult the NIS map specified in 3000 <a class=" indexterm" name="id317804"></a>homedir mapand return the server3619 <a class="link" href="smb.conf.5.html#HOMEDIRMAP">homedir map</a> and return the server 3001 3620 listed there.</p><p>Note that for this option to work there must be a working 3002 3621 NIS system and the Samba server with this option must also 3003 3622 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 3004 3623 </em></span> 3005 </p></dd><dt><span class="term"><a name="NTACLSUPPORT"></a>nt acl support (S)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342511"></a> 3625 3626 nt acl support (S) 3627 </h3></div></div></div><a class="indexterm" name="id342512"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3006 3628 UNIX permissions into Windows NT access control lists. The UNIX 3007 3629 permissions considered are the the traditional UNIX owner and … … 3010 3632 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 3011 3633 </em></span> 3012 </p></dd><dt><span class="term"><a name="NTLMAUTH"></a>ntlm auth (G)</span></dt><dd><p>This parameter determines whether or not <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 3634 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342562"></a> 3635 3636 ntlm auth (G) 3637 </h3></div></div></div><a class="indexterm" name="id342563"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 3013 3638 authenticate users using the NTLM encrypted password response. 3014 3639 If disabled, either the lanman password hash or an NTLMv2 response … … 3018 3643 special configuration to us it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 3019 3644 </em></span> 3020 </p></dd><dt><span class="term"><a name="NTPIPESUPPORT"></a>nt pipe support (G)</span></dt><dd><p>This boolean parameter controls whether 3021 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 3645 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342622"></a> 3646 3647 nt pipe support (G) 3648 </h3></div></div></div><a class="indexterm" name="id342623"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 3649 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 3022 3650 clients to connect to the NT SMB specific <code class="constant">IPC$</code> 3023 3651 pipes. This is a developer debugging option and can be left 3024 3652 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 3025 3653 </em></span> 3026 </p></dd><dt><span class="term"><a name="NTSTATUSSUPPORT"></a>nt status support (G)</span></dt><dd><p>This boolean parameter controls whether <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 3654 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342676"></a> 3655 3656 nt status support (G) 3657 </h3></div></div></div><a class="indexterm" name="id342677"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 3027 3658 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 3028 3659 If this option is set to <code class="constant">no</code> then Samba offers … … 3030 3661 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 3031 3662 </em></span> 3032 </p></dd><dt><span class="term"><a name="NULLPASSWORDS"></a>null passwords (G)</span></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 3033 </em></span> 3034 </p></dd><dt><span class="term"><a name="OBEYPAMRESTRICTIONS"></a>obey pam restrictions (G)</span></dt><dd><p>When Samba 3.0 is configured to enable PAM support 3663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342734"></a> 3664 3665 null passwords (G) 3666 </h3></div></div></div><a class="indexterm" name="id342735"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 3667 </em></span> 3668 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342785"></a> 3669 3670 obey pam restrictions (G) 3671 </h3></div></div></div><a class="indexterm" name="id342786"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 3035 3672 (i.e. --with-pam), this parameter will control whether or not Samba 3036 3673 should obey PAM's account and session management directives. The 3037 3674 default behavior is to use PAM for clear text authentication only 3038 3675 and to ignore any account or session management. Note that Samba 3039 always ignores PAM for authentication in the case of <a class=" indexterm" name="id318122"></a>encrypt passwords = yes. The reason3676 always ignores PAM for authentication in the case of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords = yes</a>. The reason 3040 3677 is that PAM modules cannot support the challenge/response 3041 3678 authentication mechanism needed in the presence of SMB password encryption. 3042 3679 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 3043 3680 </em></span> 3044 </p></dd><dt><span class="term"><a name="ONLYUSER"></a>only user (S)</span></dt><dd><p>This is a boolean option that controls whether 3681 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342841"></a> 3682 3683 only user (S) 3684 </h3></div></div></div><a class="indexterm" name="id342842"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 3045 3685 connections with usernames not in the <em class="parameter"><code>user</code></em> 3046 3686 list will be allowed. By default this option is disabled so that a … … 3048 3688 this parameter will force the server to only use the login 3049 3689 names from the <em class="parameter"><code>user</code></em> list and is only really 3050 useful in <a class=" indexterm" name="id318183"></a>security = sharelevel security.</p><p>Note that this also means Samba won't try to deduce3690 useful in <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> level security.</p><p>Note that this also means Samba won't try to deduce 3051 3691 usernames from the service name. This can be annoying for 3052 3692 the [homes] section. To get around this you could use <code class="literal">user = … … 3055 3695 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 3056 3696 </em></span> 3057 </p></dd><dt><span class="term"><a name="OPENFILESDATABASEHASHSIZE"></a>open files database hash size (G)</span></dt><dd><p>This parameter was added in Samba 3.0.23. This is an internal tuning parameter that sets 3697 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342924"></a> 3698 3699 open files database hash size (G) 3700 </h3></div></div></div><a class="indexterm" name="id342925"></a><a name="OPENFILESDATABASEHASHSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter was added in Samba 3.0.23. This is an internal tuning parameter that sets 3058 3701 the hash size of the tdb used for the open file databases. The presence of this parameter 3059 3702 allows tuning of the system for very large (thousands of concurrent users) Samba setups. … … 3063 3706 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>open files database hash size</code></em> = <code class="literal">1338457</code> 3064 3707 </em></span> 3065 </p></dd><dt><span class="term"><a name="OPLOCKBREAKWAITTIME"></a>oplock break wait time (G)</span></dt><dd><p> 3708 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id342986"></a> 3709 3710 oplock break wait time (G) 3711 </h3></div></div></div><a class="indexterm" name="id342988"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3066 3712 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 3067 3713 quickly when that client issues an SMB that can cause an oplock break request, then the network client can … … 3072 3718 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 3073 3719 </em></span> 3074 </p></dd><dt><span class="term"><a name="OPLOCKCONTENTIONLIMIT"></a>oplock contention limit (S)</span></dt><dd><p> 3075 This is a <span class="emphasis"><em>very</em></span> advanced <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 3720 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343035"></a> 3721 3722 oplock contention limit (S) 3723 </h3></div></div></div><a class="indexterm" name="id343036"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3724 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 3076 3725 granting of oplocks under multiple client contention for the same file. 3077 3726 </p><p> 3078 In brief it specifies a number, which causes <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>not to grant an oplock even when requested if the3727 In brief it specifies a number, which causes <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>not to grant an oplock even when requested if the 3079 3728 approximate number of clients contending for an oplock on the same file goes over this 3080 3729 limit. This causes <code class="literal">smbd</code> to behave in a similar … … 3084 3733 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 3085 3734 </em></span> 3086 </p></dd><dt><span class="term"><a name="OPLOCKS"></a>oplocks (S)</span></dt><dd><p> 3735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343113"></a> 3736 3737 oplocks (S) 3738 </h3></div></div></div><a class="indexterm" name="id343114"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3087 3739 This boolean option tells <code class="literal">smbd</code> whether to 3088 3740 issue oplocks (opportunistic locks) to file open requests on this … … 3096 3748 </p><p> 3097 3749 Oplocks may be selectively turned off on certain files with a share. See 3098 the <a class=" indexterm" name="id318454"></a>veto oplock filesparameter. On some systems3750 the <a class="link" href="smb.conf.5.html#VETOOPLOCKFILES">veto oplock files</a> parameter. On some systems 3099 3751 oplocks are recognized by the underlying operating system. This 3100 3752 allows data synchronization between all access to oplocked files, 3101 3753 whether it be via Samba or NFS or a local UNIX process. See the 3102 <a class=" indexterm" name="id318463"></a>kernel oplocksparameter for details.3754 <a class="link" href="smb.conf.5.html#KERNELOPLOCKS">kernel oplocks</a> parameter for details. 3103 3755 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 3104 3756 </em></span> 3105 </p></dd><dt><span class="term"><a name="OS2DRIVERMAP"></a>os2 driver map (G)</span></dt><dd><p>The parameter is used to define the absolute 3757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343203"></a> 3758 3759 os2 driver map (G) 3760 </h3></div></div></div><a class="indexterm" name="id343204"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 3106 3761 path to a file containing a mapping of Windows NT printer driver 3107 3762 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 3113 3768 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 3114 3769 </em></span> 3115 </p></dd><dt><span class="term"><a name="OSLEVEL"></a>os level (G)</span></dt><dd><p> 3770 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343264"></a> 3771 3772 os level (G) 3773 </h3></div></div></div><a class="indexterm" name="id343265"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3116 3774 This integer value controls what level Samba advertises itself as for browse elections. The value of this 3117 parameter determines whether <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="indexterm" name="id318576"></a>workgroupin the local broadcast area.3775 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> in the local broadcast area. 3118 3776 </p><p><span class="emphasis"><em> 3119 Note :</em></span>By default, Samba will win a local master browsing election over all Microsoft operating3120 systems except a Windows NT 4.0/2000 Domain Controller. 3777 Note:</em></span> By default, Samba will win a local master browsing election over all Microsoft operating 3778 systems except a Windows NT 4.0/2000 Domain Controller. This means that a misconfigured Samba host can 3121 3779 effectively isolate a subnet for browsing purposes. This parameter is largely auto-configured in the Samba-3 3122 release series and it is seldom necessary to manually over -ride the default setting. Please refer to3780 release series and it is seldom necessary to manually override the default setting. Please refer to 3123 3781 chapter 9 of the Samba-3 HOWTO document for further information regarding the use of this parameter. 3782 <span class="emphasis"><em>Note:</em></span> The maximum value for this parameter is 255. If you use higher values, counting 3783 will start at 0! 3124 3784 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">20</code> 3125 3785 </em></span> 3126 3786 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 3127 3787 </em></span> 3128 </p></dd><dt><span class="term"><a name="PAMPASSWORDCHANGE"></a>pam password change (G)</span></dt><dd><p>With the addition of better PAM support in Samba 2.2, 3788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343355"></a> 3789 3790 pam password change (G) 3791 </h3></div></div></div><a class="indexterm" name="id343356"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 3129 3792 this parameter, it is possible to use PAM's password change control 3130 3793 flag for Samba. If enabled, then PAM will be used for password 3131 3794 changes when requested by an SMB client instead of the program listed in 3132 <a class=" indexterm" name="id318651"></a>passwd program.3795 <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a>. 3133 3796 It should be possible to enable this without changing your 3134 <a class="indexterm" name="id318658"></a>passwd chat parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 3135 </em></span> 3136 </p></dd><dt><span class="term"><a name="PANICACTION"></a>panic action (G)</span></dt><dd><p>This is a Samba developer option that allows a 3137 system command to be called when either <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> crashes. This is usually used to 3797 <a class="link" href="smb.conf.5.html#PASSWDCHAT">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 3798 </em></span> 3799 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343424"></a> 3800 3801 panic action (G) 3802 </h3></div></div></div><a class="indexterm" name="id343425"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 3803 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 3138 3804 draw attention to the fact that a problem occurred. 3139 3805 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal"></code> … … 3141 3807 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 3142 3808 </em></span> 3143 </p></dd><dt><span class="term"><a name="PARANOIDSERVERSECURITY"></a>paranoid server security (G)</span></dt><dd><p>Some version of NT 4.x allow non-guest 3809 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343498"></a> 3810 3811 paranoid server security (G) 3812 </h3></div></div></div><a class="indexterm" name="id343499"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 3144 3813 users with a bad passowrd. When this option is enabled, samba will not 3145 3814 use a broken NT 4.x server as password server, but instead complain … … 3149 3818 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 3150 3819 </em></span> 3151 </p></dd><dt><span class="term"><a name="PASSDBBACKEND"></a>passdb backend (G)</span></dt><dd><p>This option allows the administrator to chose which backend 3820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343545"></a> 3821 3822 passdb backend (G) 3823 </h3></div></div></div><a class="indexterm" name="id343546"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 3152 3824 will be used for storing user and possibly group information. This allows 3153 you to swap between d fferent storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location'3825 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' 3154 3826 string that has meaning only to that particular backed. These are separated 3155 3827 by a : character.</p><p>Available backends can include: … … 3158 3830 </p></li><li><p><code class="literal">tdbsam</code> - The TDB based password storage 3159 3831 backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb 3160 in the <a class=" indexterm" name="id318855"></a>private dirdirectory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb3832 in the <a class="link" href="smb.conf.5.html#PRIVATEDIR">private dir</a> directory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb 3161 3833 backend. Takes an LDAP URL as an optional argument (defaults to 3162 3834 <code class="literal">ldap://localhost</code>)</p><p>LDAP connections should be secured where possible. This may be done using either 3163 Start-TLS (see <a class=" indexterm" name="id318885"></a>ldap ssl) or by3835 Start-TLS (see <a class="link" href="smb.conf.5.html#LDAPSSL">ldap ssl</a>) or by 3164 3836 specifying <em class="parameter"><code>ldaps://</code></em> in 3165 the URL argument. </p><p>Multiple servers may also be specified in double-quotes , if your3166 LDAP libraries supports the LDAP URL notation. 3167 (OpenLDAP does). 3837 the URL argument. </p><p>Multiple servers may also be specified in double-quotes. 3838 Whether multiple servers are supported or not and the exact 3839 syntax depends on the LDAP library you use. 3168 3840 </p></li></ul></div><p> 3169 3841 … … 3173 3845 passdb backend = tdbsam:/etc/samba/private/passdb.tdb 3174 3846 3175 or 3847 or multi server LDAP URL with OpenLDAP library: 3176 3848 3177 3849 passdb backend = ldapsam:"ldap://ldap-1.example.com ldap://ldap-2.example.com" 3850 3851 or multi server LDAP URL with Netscape based LDAP library: 3852 3853 passdb backend = ldapsam:"ldap://ldap-1.example.com ldap-2.example.com" 3178 3854 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code> 3179 3855 </em></span> 3180 </p></dd><dt><span class="term"><a name="PASSDBEXPANDEXPLICIT"></a>passdb expand explicit (G)</span></dt><dd><p> 3856 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343687"></a> 3857 3858 passdb expand explicit (G) 3859 </h3></div></div></div><a class="indexterm" name="id343688"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3181 3860 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 3182 3861 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 3184 3863 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 3185 3864 </em></span> 3186 </p></dd><dt><span class="term"><a name="PASSWDCHAT"></a>passwd chat (G)</span></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 3187 conversation that takes places between <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 3188 program to change the user's password. The string describes a 3189 sequence of response-receive pairs that <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> uses to determine what to send to the 3190 <a class="indexterm" name="id319013"></a>passwd program and what to expect back. If the expected output is not 3191 received then the password is not changed.</p><p>This chat sequence is often quite site specific, depending 3192 on what local methods are used for password control (such as NIS 3193 etc).</p><p>Note that this parameter only is only used if the <a class="indexterm" name="id319030"></a>unix password sync parameter is set to <code class="constant">yes</code>. This sequence is 3194 then called <span class="emphasis"><em>AS ROOT</em></span> when the SMB password in the 3195 smbpasswd file is being changed, without access to the old password 3196 cleartext. This means that root must be able to reset the user's password without 3197 knowing the text of the previous password. In the presence of 3198 NIS/YP, this means that the <a class="indexterm" name="id319046"></a>passwd program must 3199 be executed on the NIS master. 3200 </p><p>The string can contain the macro <em class="parameter"><code>%n</code></em> which is substituted 3201 for the new password. The chat sequence can also contain the standard 3202 macros \n, \r, \t and \s to 3203 give line-feed, carriage-return, tab and space. The chat sequence string can also contain 3204 a '*' which matches any sequence of characters. Double quotes can be used to collect strings with spaces 3205 in them into a single string.</p><p>If the send string in any part of the chat sequence is a full 3206 stop ".", then no string is sent. Similarly, if the 3207 expect string is a full stop then no string is expected.</p><p>If the <a class="indexterm" name="id319074"></a>pam password change parameter is set to <code class="constant">yes</code>, the 3208 chat pairs may be matched in any order, and success is determined by the PAM result, not any particular 3209 output. The \n macro is ignored for PAM conversions. 3210 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">*new*password* %n\n*new*password* %n\n *changed*</code> 3211 </em></span> 3212 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter OLD password*" %o\n "*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 3213 </em></span> 3214 </p></dd><dt><span class="term"><a name="PASSWDCHATDEBUG"></a>passwd chat debug (G)</span></dt><dd><p>This boolean specifies if the passwd chat script 3865 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343730"></a> 3866 3867 passwd chat debug (G) 3868 </h3></div></div></div><a class="indexterm" name="id343731"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 3215 3869 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 3216 3870 strings passed to and received from the passwd chat are printed 3217 in the <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log with a3218 <a class=" indexterm" name="id319156"></a>debug level3871 in the <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log with a 3872 <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a> 3219 3873 of 100. This is a dangerous option as it will allow plaintext passwords 3220 3874 to be seen in the <code class="literal">smbd</code> log. It is available to help … … 3222 3876 when calling the <em class="parameter"><code>passwd program</code></em> and should 3223 3877 be turned off after this has been done. This option has no effect if the 3224 <a class="indexterm" name="id319184"></a>pam password change 3225 paramter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 3226 </em></span> 3227 </p></dd><dt><span class="term"><a name="PASSWDCHATTIMEOUT"></a>passwd chat timeout (G)</span></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 3878 <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE">pam password change</a> 3879 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 3880 </em></span> 3881 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343826"></a> 3882 3883 passwd chat timeout (G) 3884 </h3></div></div></div><a class="indexterm" name="id343827"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 3228 3885 answer from a passwd chat script being run. Once the initial answer is received 3229 3886 the subsequent answers must be received in one tenth of this time. The default it 3230 3887 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 3231 3888 </em></span> 3232 </p></dd><dt><span class="term"><a name="PASSWDPROGRAM"></a>passwd program (G)</span></dt><dd><p>The name of a program that can be used to set 3889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id343869"></a> 3890 3891 passwd chat (G) 3892 </h3></div></div></div><a class="indexterm" name="id343870"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 3893 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 3894 program to change the user's password. The string describes a 3895 sequence of response-receive pairs that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> uses to determine what to send to the 3896 <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a> and what to expect back. If the expected output is not 3897 received then the password is not changed.</p><p>This chat sequence is often quite site specific, depending 3898 on what local methods are used for password control (such as NIS 3899 etc).</p><p>Note that this parameter only is only used if the <a class="link" href="smb.conf.5.html#UNIXPASSWORDSYNC">unix password sync</a> parameter is set to <code class="constant">yes</code>. This sequence is 3900 then called <span class="emphasis"><em>AS ROOT</em></span> when the SMB password in the 3901 smbpasswd file is being changed, without access to the old password 3902 cleartext. This means that root must be able to reset the user's password without 3903 knowing the text of the previous password. In the presence of 3904 NIS/YP, this means that the <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a> must 3905 be executed on the NIS master. 3906 </p><p>The string can contain the macro <em class="parameter"><code>%n</code></em> which is substituted 3907 for the new password. The old passsword (<em class="parameter"><code>%o</code></em>) is only available when 3908 <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords</a> has been disabled. 3909 The chat sequence can also contain the standard macros 3910 \n, \r, \t and \s to give line-feed, carriage-return, tab 3911 and space. The chat sequence string can also contain 3912 a '*' which matches any sequence of characters. Double quotes can 3913 be used to collect strings with spaces in them into a single 3914 string.</p><p>If the send string in any part of the chat sequence is a full 3915 stop ".", then no string is sent. Similarly, if the 3916 expect string is a full stop then no string is expected.</p><p>If the <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE">pam password change</a> parameter is set to <code class="constant">yes</code>, the 3917 chat pairs may be matched in any order, and success is determined by the PAM result, not any particular 3918 output. The \n macro is ignored for PAM conversions. 3919 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">*new*password* %n\n*new*password* %n\n *changed*</code> 3920 </em></span> 3921 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 3922 </em></span> 3923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344052"></a> 3924 3925 passwd program (G) 3926 </h3></div></div></div><a class="indexterm" name="id344053"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 3233 3927 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 3234 3928 will be replaced with the user name. The user name is checked for … … 3251 3945 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 3252 3946 </em></span> 3253 </p></dd><dt><span class="term"><a name="PASSWORDLEVEL"></a>password level (G)</span></dt><dd><p>Some client/server combinations have difficulty 3947 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344178"></a> 3948 3949 password level (G) 3950 </h3></div></div></div><a class="indexterm" name="id344179"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 3254 3951 with mixed-case passwords. One offending client is Windows for 3255 3952 Workgroups, which for some reason forces passwords to upper … … 3269 3966 made - the password as is and the password in all-lower case.</p><p>This parameter is used only when using plain-text passwords. It is 3270 3967 not at all used when encrypted passwords as in use (that is the default 3271 since samba-3.0.0). Use this only when <a class=" indexterm" name="id319448"></a>encrypt passwords = No.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">0</code>3968 since samba-3.0.0). Use this only when <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords = No</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">0</code> 3272 3969 </em></span> 3273 3970 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 3274 3971 </em></span> 3275 </p></dd><dt><span class="term"><a name="PASSWORDSERVER"></a>password server (G)</span></dt><dd><p>By specifying the name of another SMB server 3972 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344300"></a> 3973 3974 password server (G) 3975 </h3></div></div></div><a class="indexterm" name="id344301"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 3276 3976 or Active Directory domain controller with this option, 3277 3977 and using <code class="literal">security = [ads|domain|server]</code> … … 3285 3985 have no effect on password servers for Windows NT 4.0 domains or netbios 3286 3986 connections.</p><p>If parameter is a name, it is looked up using the 3287 parameter <a class=" indexterm" name="id319530"></a>name resolve orderand so may resolved3987 parameter <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a> and so may resolved 3288 3988 by any method and order described in that parameter.</p><p>The password server must be a machine capable of using 3289 3989 the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in … … 3335 4035 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">*</code> 3336 4036 </em></span> 3337 </p></dd><dt><span class="term"><a name="DIRECTORY"></a>directory</span></dt><dd><p>This parameter is a synonym for path.</p></dd><dt><span class="term"><a name="PATH"></a>path (S)</span></dt><dd><p>This parameter specifies a directory to which 4037 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344580"></a><a name="DIRECTORY"></a>directory</h3></div></div></div><a class="indexterm" name="id344581"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344610"></a> 4038 4039 path (S) 4040 </h3></div></div></div><a class="indexterm" name="id344611"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 3338 4041 the user of the service is to be given access. In the case of 3339 4042 printable services, this is where print data will spool prior to … … 3347 4050 will be replaced by the NetBIOS name of the machine they are 3348 4051 connecting from. These replacements are very useful for setting 3349 up pseudo home directories for users.</p><p>Note that this path will be based on <a class=" indexterm" name="id319834"></a>root dir4052 up pseudo home directories for users.</p><p>Note that this path will be based on <a class="link" href="smb.conf.5.html#ROOTDIR">root dir</a> 3350 4053 if one was specified.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal"></code> 3351 4054 </em></span> 3352 4055 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 3353 4056 </em></span> 3354 </p></dd><dt><span class="term"><a name="PIDDIRECTORY"></a>pid directory (G)</span></dt><dd><p> 4057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344706"></a> 4058 4059 pid directory (G) 4060 </h3></div></div></div><a class="indexterm" name="id344707"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3355 4061 This option specifies the directory where pid files will be placed. 3356 4062 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 3358 4064 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 3359 4065 </em></span> 3360 </p></dd><dt><span class="term"><a name="POSIXLOCKING"></a>posix locking (S)</span></dt><dd><p> 3361 The <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4066 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344764"></a> 4067 4068 posix locking (S) 4069 </h3></div></div></div><a class="indexterm" name="id344765"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4070 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 3362 4071 daemon maintains an database of file locks obtained by SMB clients. The default behavior is 3363 4072 to map this internal database to POSIX locks. This means that file locks obtained by SMB clients are … … 3366 4075 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 3367 4076 </em></span> 3368 </p></dd><dt><span class="term"><a name="POSTEXEC"></a>postexec (S)</span></dt><dd><p>This option specifies a command to be run 4077 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344819"></a> 4078 4079 postexec (S) 4080 </h3></div></div></div><a class="indexterm" name="id344820"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 3369 4081 whenever the service is disconnected. It takes the usual 3370 4082 substitutions. The command may be run as the root on some … … 3374 4086 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 3375 4087 </em></span> 3376 </p></dd><dt><span class="term"><a name="EXEC"></a>exec</span></dt><dd><p>This parameter is a synonym for preexec.</p></dd><dt><span class="term"><a name="PREEXEC"></a>preexec (S)</span></dt><dd><p>This option specifies a command to be run whenever 4088 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344888"></a> 4089 4090 preexec close (S) 4091 </h3></div></div></div><a class="indexterm" name="id344889"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4092 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC">preexec</a> 4093 should close the service being connected to. 4094 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4095 </em></span> 4096 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344940"></a><a name="EXEC"></a>exec</h3></div></div></div><a class="indexterm" name="id344941"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id344970"></a> 4097 4098 preexec (S) 4099 </h3></div></div></div><a class="indexterm" name="id344971"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 3377 4100 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 3378 4101 message every time they log in. Maybe a message of the day? Here … … 3381 4104 /usr/local/samba/bin/smbclient -M %m -I %I' & </code> 3382 4105 </p><p>Of course, this could get annoying after a while :-)</p><p> 3383 See also <a class=" indexterm" name="id320111"></a>preexec close and <a class="indexterm" name="id320118"></a>postexec.4106 See also <a class="link" href="smb.conf.5.html#PREEXECCLOSE">preexec close</a> and <a class="link" href="smb.conf.5.html#POSTEXEC">postexec</a>. 3384 4107 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal"></code> 3385 4108 </em></span> 3386 4109 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 3387 4110 </em></span> 3388 </p></dd><dt><span class="term"><a name="PREEXECCLOSE"></a>preexec close (S)</span></dt><dd><p> 3389 This boolean option controls whether a non-zero return code from <a class="indexterm" name="id320180"></a>preexec 3390 should close the service being connected to. 3391 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 3392 </em></span> 3393 </p></dd><dt><span class="term"><a name="PREFEREDMASTER"></a>prefered master</span></dt><dd><p>This parameter is a synonym for preferred master.</p></dd><dt><span class="term"><a name="PREFERREDMASTER"></a>preferred master (G)</span></dt><dd><p> 3394 This boolean parameter controls if <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4111 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345071"></a><a name="PREFEREDMASTER"></a>prefered master</h3></div></div></div><a class="indexterm" name="id345072"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345101"></a> 4112 4113 preferred master (G) 4114 </h3></div></div></div><a class="indexterm" name="id345102"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4115 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 3395 4116 </p><p> 3396 4117 If this is set to <code class="constant">yes</code>, on startup, <code class="literal">nmbd</code> will force 3397 4118 an election, and it will have a slight advantage in winning the election. It is recommended that this 3398 parameter is used in conjunction with <a class=" indexterm" name="id320270"></a>domain master = yes, so that4119 parameter is used in conjunction with <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master = yes</a>, so that 3399 4120 <code class="literal">nmbd</code> can guarantee becoming a domain master. 3400 4121 </p><p> … … 3405 4126 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 3406 4127 </em></span> 3407 </p></dd><dt><span class="term"><a name="AUTOSERVICES"></a>auto services</span></dt><dd><p>This parameter is a synonym for preload.</p></dd><dt><span class="term"><a name="PRELOAD"></a>preload (G)</span></dt><dd><p>This is a list of services that you want to be 4128 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345188"></a> 4129 4130 preload modules (G) 4131 </h3></div></div></div><a class="indexterm" name="id345189"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4132 be loaded into smbd before a client connects. This improves 4133 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> 4134 </em></span> 4135 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4136 </em></span> 4137 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345245"></a><a name="AUTOSERVICES"></a>auto services</h3></div></div></div><a class="indexterm" name="id345246"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345276"></a> 4138 4139 preload (G) 4140 </h3></div></div></div><a class="indexterm" name="id345277"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 3408 4141 automatically added to the browse lists. This is most useful 3409 4142 for homes and printers services that would otherwise not be 3410 4143 visible.</p><p> 3411 4144 Note that if you just want all printers in your 3412 printcap file loaded then the <a class=" indexterm" name="id320355"></a>load printers4145 printcap file loaded then the <a class="link" href="smb.conf.5.html#LOADPRINTERS">load printers</a> 3413 4146 option is easier. 3414 4147 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal"></code> … … 3416 4149 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 3417 4150 </em></span> 3418 </p></dd><dt><span class="term"><a name="PRELOADMODULES"></a>preload modules (G)</span></dt><dd><p>This is a list of paths to modules that should 3419 be loaded into smbd before a client connects. This improves 3420 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> 3421 </em></span> 3422 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 3423 </em></span> 3424 </p></dd><dt><span class="term"><a name="PRESERVECASE"></a>preserve case (S)</span></dt><dd><p> 4151 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345350"></a> 4152 4153 preserve case (S) 4154 </h3></div></div></div><a class="indexterm" name="id345351"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3425 4155 This controls if new filenames are created with the case that the client passes, or if 3426 they are forced to be the <a class=" indexterm" name="id320472"></a>default case.3427 </p><p> 3428 See the section on <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a> for a fuller discussion.4156 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. 4157 </p><p> 4158 See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a> for a fuller discussion. 3429 4159 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 3430 4160 </em></span> 3431 </p></dd><dt><span class="term"><a name="PRINTOK"></a>print ok</span></dt><dd><p>This parameter is a synonym for printable.</p></dd><dt><span class="term"><a name="PRINTABLE"></a>printable (S)</span></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345413"></a><a name="PRINTOK"></a>print ok</h3></div></div></div><a class="indexterm" name="id345414"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345443"></a> 4162 4163 printable (S) 4164 </h3></div></div></div><a class="indexterm" name="id345444"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 3432 4165 clients may open, write to and submit spool files on the directory 3433 4166 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing 3434 4167 to the service path (user privileges permitting) via the spooling 3435 of print data. The <a class=" indexterm" name="id320662"></a>read onlyparameter controls only non-printing access to4168 of print data. The <a class="link" href="smb.conf.5.html#READONLY">read only</a> parameter controls only non-printing access to 3436 4169 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 3437 4170 </em></span> 3438 </p></dd><dt><span class="term"><a name="PRINTCAPCACHETIME"></a>printcap cache time (G)</span></dt><dd><p>This option specifies the number of seconds before the printing 4171 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345503"></a> 4172 4173 printcap cache time (G) 4174 </h3></div></div></div><a class="indexterm" name="id345504"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 3439 4175 subsystem is again asked for the known printers. If the value 3440 4176 is greater than 60 the initial waiting time is set to 60 seconds … … 3446 4182 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 3447 4183 </em></span> 3448 </p></dd><dt><span class="term"><a name="PRINTCAP"></a>printcap</span></dt><dd><p>This parameter is a synonym for printcap name.</p></dd><dt><span class="term"><a name="PRINTCAPNAME"></a>printcap name (S)</span></dt><dd><p> 4184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345567"></a><a name="PRINTCAP"></a>printcap</h3></div></div></div><a class="indexterm" name="id345568"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345598"></a> 4185 4186 printcap name (S) 4187 </h3></div></div></div><a class="indexterm" name="id345599"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3449 4188 This parameter may be used to override the compiled-in default printcap name used by the server (usually 3450 <code class="filename"> /etc/printcap</code>). See the discussion of the <a href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this.4189 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. 3451 4190 </p><p> 3452 4191 To use the CUPS printing interface set <code class="literal">printcap name = cups </code>. This should 3453 be supplemented by an addtional setting <a class=" indexterm" name="id320815"></a>printing = cupsin the [global]4192 be supplemented by an addtional setting <a class="link" href="smb.conf.5.html#PRINTING">printing = cups</a> in the [global] 3454 4193 section. <code class="literal">printcap name = cups</code> will use the "dummy" printcap 3455 4194 created by CUPS, as specified in your CUPS configuration file. … … 3481 4220 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 3482 4221 </em></span> 3483 </p></dd><dt><span class="term"><a name="PRINTCOMMAND"></a>print command (S)</span></dt><dd><p>After a print job has finished spooling to 4222 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id345769"></a> 4223 4224 print command (S) 4225 </h3></div></div></div><a class="indexterm" name="id345770"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 3484 4226 a service, this command will be used via a <code class="literal">system()</code> 3485 4227 call to process the spool file. Typically the command specified will … … 3504 4246 be created but not processed and (most importantly) not removed.</p><p>Note that printing may fail on some UNIXes from the 3505 4247 <code class="constant">nobody</code> account. If this happens then create 3506 an alternative guest account that can print and set the <a class=" indexterm" name="id321038"></a>guest account4248 an alternative guest account that can print and set the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a> 3507 4249 in the [global] section.</p><p>You can form quite complex print commands by realizing 3508 4250 that they are just passed to a shell. For example the following … … 3511 4253 /tmp/print.log; lpr -P %p %s; rm %s</code></p><p>You may have to vary this command considerably depending 3512 4254 on how you normally print files on your system. The default for 3513 the parameter varies depending on the setting of the <a class=" indexterm" name="id321064"></a>printing4255 the parameter varies depending on the setting of the <a class="link" href="smb.conf.5.html#PRINTING">printing</a> 3514 4256 parameter.</p><p>Default: For <code class="literal">printing = BSD, AIX, QNX, LPRNG 3515 4257 or PLP :</code></p><p><code class="literal">print command = lpr -r -P%p %s</code></p><p>For <code class="literal">printing = SYSV or HPUX :</code></p><p><code class="literal">print command = lp -c -d%p %s; rm %s</code></p><p>For <code class="literal">printing = SOFTQ :</code></p><p><code class="literal">print command = lp -d%p -s %s; rm %s</code></p><p>For printing = CUPS : If SAMBA is compiled against 3516 libcups, then <a class=" indexterm" name="id321121"></a>printcap = cups4258 libcups, then <a class="link" href="smb.conf.5.html#PRINTCAP">printcap = cups</a> 3517 4259 uses the CUPS API to 3518 4260 submit jobs, etc. Otherwise it maps to the System V … … 3523 4265 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 3524 4266 </em></span> 3525 </p></dd><dt><span class="term"><a name="PRINTERADMIN"></a>printer admin (S)</span></dt><dd><p> 4267 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346012"></a> 4268 4269 printer admin (S) 4270 </h3></div></div></div><a class="indexterm" name="id346013"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3526 4271 This lists users who can do anything to printers 3527 4272 via the remote administration interfaces offered … … 3539 4284 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 3540 4285 </em></span> 3541 </p></dd><dt><span class="term"><a name="PRINTER"></a>printer</span></dt><dd><p>This parameter is a synonym for printer name.</p></dd><dt><span class="term"><a name="PRINTERNAME"></a>printer name (S)</span></dt><dd><p> 4286 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346076"></a><a name="PRINTER"></a>printer</h3></div></div></div><a class="indexterm" name="id346077"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346105"></a> 4287 4288 printer name (S) 4289 </h3></div></div></div><a class="indexterm" name="id346106"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3542 4290 This parameter specifies the name of the printer to which print jobs spooled through a printable service 3543 4291 will be sent. … … 3546 4294 does not have its own printer name specified. 3547 4295 </p><p> 3548 The default value of the <a class=" indexterm" name="id321277"></a>printer namemay be <code class="literal">lp</code> on many4296 The default value of the <a class="link" href="smb.conf.5.html#PRINTERNAME">printer name</a> may be <code class="literal">lp</code> on many 3549 4297 systems. 3550 4298 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">none</code> … … 3552 4300 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 3553 4301 </em></span> 3554 </p></dd><dt><span class="term"><a name="PRINTING"></a>printing (S)</span></dt><dd><p>This parameters controls how printer status information is 4302 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346189"></a> 4303 4304 printing (S) 4305 </h3></div></div></div><a class="indexterm" name="id346190"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 3555 4306 interpreted on your system. It also affects the default values for 3556 4307 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 3561 4312 <code class="constant">QNX</code>, <code class="constant">SOFTQ</code>, 3562 4313 and <code class="constant">CUPS</code>.</p><p>To see what the defaults are for the other print 3563 commands when using the various options use the <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> program.</p><p>This option can be set on a per printer basis. Please be4314 commands when using the various options use the <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> program.</p><p>This option can be set on a per printer basis. Please be 3564 4315 aware however, that you must place any of the various printing 3565 4316 commands (e.g. print command, lpq command, etc...) after defining 3566 4317 the value for the <em class="parameter"><code>printing</code></em> option since it will 3567 reset the printing commands to default values.</p><p>See also the discussion in the <a href="#PRINTERSSECT" title="The [printers] section"> 3568 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="PRINTJOBUSERNAME"></a>printjob username (S)</span></dt><dd><p>This parameter specifies which user information will be 4318 reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section"> 4319 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346318"></a> 4320 4321 printjob username (S) 4322 </h3></div></div></div><a class="indexterm" name="id346319"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 3569 4323 passed to the printing system. Usually, the username is sent, 3570 4324 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 3572 4326 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 3573 4327 </em></span> 3574 </p></dd><dt><span class="term"><a name="PRIVATEDIR"></a>private dir (G)</span></dt><dd><p>This parameters defines the directory 4328 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346376"></a> 4329 4330 private dir (G) 4331 </h3></div></div></div><a class="indexterm" name="id346377"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 3575 4332 smbd will use for storing such files as <code class="filename">smbpasswd</code> 3576 4333 and <code class="filename">secrets.tdb</code>. 3577 4334 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 3578 4335 </em></span> 3579 </p></dd><dt><span class="term"><a name="PROFILEACLS"></a>profile acls (S)</span></dt><dd><p> 4336 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346429"></a> 4337 4338 profile acls (S) 4339 </h3></div></div></div><a class="indexterm" name="id346430"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3580 4340 This boolean parameter was added to fix the problems that people have been 3581 4341 having with storing user profiles on Samba shares from Windows 2000 or … … 3605 4365 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 3606 4366 </em></span> 3607 </p></dd><dt><span class="term"><a name="QUEUEPAUSECOMMAND"></a>queuepause command (S)</span></dt><dd><p>This parameter specifies the command to be 4367 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346489"></a> 4368 4369 queuepause command (S) 4370 </h3></div></div></div><a class="indexterm" name="id346490"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3608 4371 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 3609 4372 a printer name as its only parameter and stops the printer queue, … … 3616 4379 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 3617 4380 </em></span> 3618 </p></dd><dt><span class="term"><a name="QUEUERESUMECOMMAND"></a>queueresume command (S)</span></dt><dd><p>This parameter specifies the command to be 4381 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346559"></a> 4382 4383 queueresume command (S) 4384 </h3></div></div></div><a class="indexterm" name="id346560"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3619 4385 executed on the server host in order to resume the printer queue. It 3620 4386 is the command to undo the behavior that is caused by the 3621 previous parameter (<a class=" indexterm" name="id321707"></a>queuepause command).</p><p>This command should be a program or script which takes4387 previous parameter (<a class="link" href="smb.conf.5.html#QUEUEPAUSECOMMAND">queuepause command</a>).</p><p>This command should be a program or script which takes 3622 4388 a printer name as its only parameter and resumes the printer queue, 3623 4389 such that queued jobs are resubmitted to the printer.</p><p>This command is not supported by Windows for Workgroups, … … 3631 4397 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 3632 4398 </em></span> 3633 </p></dd><dt><span class="term"><a name="READBMPX"></a>read bmpx (G)</span></dt><dd><p>This boolean parameter controls whether 3634 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will support the "Read 4399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346651"></a> 4400 4401 read bmpx (G) 4402 </h3></div></div></div><a class="indexterm" name="id346652"></a><a name="READBMPX"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 4403 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will support the "Read 3635 4404 Block Multiplex" SMB. This is now rarely used and defaults to 3636 4405 <code class="constant">no</code>. You should never need to set this 3637 4406 parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read bmpx</code></em> = <code class="literal">no</code> 3638 4407 </em></span> 3639 </p></dd><dt><span class="term"><a name="READLIST"></a>read list (S)</span></dt><dd><p> 4408 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346704"></a> 4409 4410 read list (S) 4411 </h3></div></div></div><a class="indexterm" name="id346705"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 3640 4412 This is a list of users that are given read-only access to a service. If the connecting user is in this list 3641 then they will not be given write access, no matter what the <a class=" indexterm" name="id321844"></a>read onlyoption is set3642 to. The list can include group names using the syntax described in the <a class=" indexterm" name="id321852"></a>invalid users4413 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set 4414 to. The list can include group names using the syntax described in the <a class="link" href="smb.conf.5.html#INVALIDUSERS">invalid users</a> 3643 4415 parameter. 3644 </p><p>This parameter will not work with the <a class=" indexterm" name="id321862"></a>security = sharein4416 </p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in 3645 4417 Samba 3.0. This is by design.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal"></code> 3646 4418 </em></span> 3647 4419 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 3648 4420 </em></span> 3649 </p></dd><dt><span class="term"><a name="READONLY"></a>read only (S)</span></dt><dd><p>An inverted synonym is <a class="indexterm" name="id321924"></a>writeable.</p><p>If this parameter is <code class="constant">yes</code>, then users 4421 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346798"></a> 4422 4423 read only (S) 4424 </h3></div></div></div><a class="indexterm" name="id346799"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 3650 4425 of a service may not create or modify files in the service's 3651 4426 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 3653 4428 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 3654 4429 </em></span> 3655 </p></dd><dt><span class="term"><a name="READRAW"></a>read raw (G)</span></dt><dd><p>This parameter controls whether or not the server 4430 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346871"></a> 4431 4432 read raw (G) 4433 </h3></div></div></div><a class="indexterm" name="id346872"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 3656 4434 will support the raw read SMB requests when transferring data 3657 4435 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 3662 4440 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 3663 4441 </em></span> 3664 </p></dd><dt><span class="term"><a name="REALM"></a>realm (G)</span></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4442 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346926"></a> 4443 4444 realm (G) 4445 </h3></div></div></div><a class="indexterm" name="id346927"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 3665 4446 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 3666 4447 is usually set to the DNS name of the kerberos server. … … 3669 4450 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 3670 4451 </em></span> 3671 </p></dd><dt><span class="term"><a name="REMOTEANNOUNCE"></a>remote announce (G)</span></dt><dd><p> 3672 This option allows you to setup <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself 4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id346989"></a> 4453 4454 remote announce (G) 4455 </h3></div></div></div><a class="indexterm" name="id346990"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4456 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself 3673 4457 to arbitrary IP addresses with an arbitrary workgroup name. 3674 4458 </p><p> … … 3683 4467 the above line would cause <code class="literal">nmbd</code> to announce itself 3684 4468 to the two given IP addresses using the given workgroup names. If you leave out the 3685 workgroup name then the one given in the <a class=" indexterm" name="id322141"></a>workgroupparameter4469 workgroup name then the one given in the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> parameter 3686 4470 is used instead. 3687 4471 </p><p> … … 3693 4477 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 3694 4478 </em></span> 3695 </p></dd><dt><span class="term"><a name="REMOTEBROWSESYNC"></a>remote browse sync (G)</span></dt><dd><p> 3696 This option allows you to setup <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347085"></a> 4480 4481 remote browse sync (G) 4482 </h3></div></div></div><a class="indexterm" name="id347086"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4483 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 3697 4484 synchronization of browse lists with the master browser of a Samba 3698 4485 server that is on a remote segment. This option will allow you to … … 3720 4507 is in fact the browse master on its segment. 3721 4508 </p><p> 3722 The <a class=" indexterm" name="id322243"></a>remote browse syncmay be used on networks4509 The <a class="link" href="smb.conf.5.html#REMOTEBROWSESYNC">remote browse sync</a> may be used on networks 3723 4510 where there is no WINS server, and may be used on disjoint networks where 3724 4511 each network has its own WINS server. 3725 4512 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 3726 4513 </em></span> 3727 </p></dd><dt><span class="term"><a name="RENAMEUSERSCRIPT"></a>rename user script (G)</span></dt><dd><p> 3728 This is the full pathname to a script that will be run as root by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4514 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347185"></a> 4515 4516 rename user script (G) 4517 </h3></div></div></div><a class="indexterm" name="id347186"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4518 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 3729 4519 </p><p> 3730 4520 When a user with admin authority or SeAddUserPrivilege rights renames a user (e.g.: from the NT4 User Manager … … 3743 4533 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 3744 4534 </em></span> 3745 </p></dd><dt><span class="term"><a name="RESETONZEROVC"></a>reset on zero vc (G)</span></dt><dd><p> 4535 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347264"></a> 4536 4537 reset on zero vc (G) 4538 </h3></div></div></div><a class="indexterm" name="id347265"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 3746 4539 This boolean option controls whether an incoming session setup 3747 4540 should kill other connections coming from the same IP. This matches … … 3762 4555 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 3763 4556 </em></span> 3764 </p></dd><dt><span class="term"><a name="RESTRICTANONYMOUS"></a>restrict anonymous (G)</span></dt><dd><p>The setting of this parameter determines whether user and 4557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347310"></a> 4558 4559 restrict anonymous (G) 4560 </h3></div></div></div><a class="indexterm" name="id347311"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 3765 4561 group list information is returned for an anonymous connection. 3766 4562 and mirrors the effects of the … … 3782 4578 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 3783 4579 The security advantage of using restrict anonymous = 2 is removed 3784 by setting <a class=" indexterm" name="id322431"></a>guest ok = yeson any share.4580 by setting <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> on any share. 3785 4581 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 3786 4582 </em></span> 3787 </p></dd><dt><span class="term"><a name="ROOT"></a>root</span></dt><dd><p>This parameter is a synonym for root directory.</p></dd><dt><span class="term"><a name="ROOTDIR"></a>root dir</span></dt><dd><p>This parameter is a synonym for root directory.</p></dd><dt><span class="term"><a name="ROOTDIRECTORY"></a>root directory (G)</span></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4583 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347384"></a><a name="ROOT"></a>root</h3></div></div></div><a class="indexterm" name="id347385"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347415"></a><a name="ROOTDIR"></a>root dir</h3></div></div></div><a class="indexterm" name="id347416"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347444"></a> 4584 4585 root directory (G) 4586 </h3></div></div></div><a class="indexterm" name="id347446"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 3788 4587 Change its root directory) to this directory on startup. This is 3789 4588 not strictly necessary for secure operation. Even without it the … … 3792 4591 parts of the filesystem, or attempts to use ".." in file names 3793 4592 to access other directories (depending on the setting of the 3794 <a class=" indexterm" name="id322529"></a>wide smbconfoptionsparameter).4593 <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter). 3795 4594 </p><p>Adding a <em class="parameter"><code>root directory</code></em> entry other 3796 4595 than "/" adds an extra level of security, but at a price. It … … 3808 4607 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 3809 4608 </em></span> 3810 </p></dd><dt><span class="term"><a name="ROOTPOSTEXEC"></a>root postexec (S)</span></dt><dd><p> 4609 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347557"></a> 4610 4611 root postexec (S) 4612 </h3></div></div></div><a class="indexterm" name="id347558"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 3811 4613 This is the same as the <em class="parameter"><code>postexec</code></em> 3812 4614 parameter except that the command is run as root. This is useful for … … 3814 4616 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 3815 4617 </em></span> 3816 </p></dd><dt><span class="term"><a name="ROOTPREEXEC"></a>root preexec (S)</span></dt><dd><p> 4618 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347604"></a> 4619 4620 root preexec close (S) 4621 </h3></div></div></div><a class="indexterm" name="id347605"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 4622 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 4623 </em></span> 4624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347652"></a> 4625 4626 root preexec (S) 4627 </h3></div></div></div><a class="indexterm" name="id347653"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 3817 4628 This is the same as the <em class="parameter"><code>preexec</code></em> 3818 4629 parameter except that the command is run as root. This is useful for … … 3820 4631 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 3821 4632 </em></span> 3822 </p></dd><dt><span class="term"><a name="ROOTPREEXECCLOSE"></a>root preexec close (S)</span></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 3823 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 3824 </em></span> 3825 </p></dd><dt><span class="term"><a name="SECURITY"></a>security (G)</span></dt><dd><p>This option affects how clients respond to 4633 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347698"></a> 4634 4635 security mask (S) 4636 </h3></div></div></div><a class="indexterm" name="id347699"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 4637 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 4638 UNIX permission on a file using the native NT security dialog box. 4639 </p><p> 4640 This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting 4641 any bits not in this mask. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCESECURITYMODE">force security mode</a>, which works in a manner similar to this one but uses a logical OR instead of an AND. 4642 </p><p> 4643 Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the 4644 file permissions regardless of the previous status of this bits on the file. 4645 </p><p> 4646 If not set explicitly this parameter is 0777, allowing a user to set all the user/group/world permissions on a file. 4647 </p><p><span class="emphasis"><em> 4648 Note</em></span> that users who can access the Samba server through other means can easily bypass this 4649 restriction, so it is primarily useful for standalone "appliance" systems. Administrators of 4650 most normal systems will probably want to leave it set to <code class="constant">0777</code>. 4651 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0777</code> 4652 </em></span> 4653 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 4654 </em></span> 4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id347793"></a> 4656 4657 security (G) 4658 </h3></div></div></div><a class="indexterm" name="id347794"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 3826 4659 Samba and is one of the most important settings in the <code class="filename"> 3827 4660 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to 3828 protocol negotiations with <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to turn share level security on or off. Clients decide4661 protocol negotiations with <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to turn share level security on or off. Clients decide 3829 4662 based on this bit whether (and how) to transfer user and password 3830 4663 information to the server.</p><p>The default is <code class="literal">security = user</code>, as this is … … 3847 4680 is commonly used for a shared printer server. It is more difficult 3848 4681 to setup guest shares with <code class="literal">security = user</code>, see 3849 the <a class=" indexterm" name="id322862"></a>map to guestparameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em>4682 the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a>parameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em> 3850 4683 hybrid mode</em></span> where it is offers both user and share 3851 level security under different <a class=" indexterm" name="id322883"></a>NetBIOS aliases. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server they4684 level security under different <a class="link" href="smb.conf.5.html#NETBIOSALIASES">NetBIOS aliases</a>. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server they 3852 4685 need not log onto the server with a valid username and password before 3853 4686 attempting to connect to a shared resource (although modern clients … … 3862 4695 techniques to determine the correct UNIX user to use on behalf 3863 4696 of the client.</p><p>A list of possible UNIX usernames to match with the given 3864 client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class=" indexterm" name="id322959"></a>guest onlyparameter is set, then all the other3865 stages are missed and only the <a class=" indexterm" name="id322966"></a>guest accountusername is checked.4697 client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY">guest only</a> parameter is set, then all the other 4698 stages are missed and only the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a> username is checked. 3866 4699 </p></li><li><p>Is a username is sent with the share connection 3867 request, then this username (after mapping - see <a class=" indexterm" name="id322981"></a>username map),4700 request, then this username (after mapping - see <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a>), 3868 4701 is added as a potential username. 3869 4702 </p></li><li><p>If the client did a previous <span class="emphasis"><em>logon … … 3874 4707 </p></li><li><p>The NetBIOS name of the client is added to 3875 4708 the list as a potential username. 3876 </p></li><li><p>Any users on the <a class=" indexterm" name="id323021"></a>userlist are added as potential usernames.4709 </p></li><li><p>Any users on the <a class="link" href="smb.conf.5.html#USER">user</a> list are added as potential usernames. 3877 4710 </p></li></ul></div><p>If the <em class="parameter"><code>guest only</code></em> parameter is 3878 4711 not set, then this list is then tried with the supplied password. … … 3883 4716 guest user will be used, otherwise access is denied.</p><p>Note that it can be <span class="emphasis"><em>very</em></span> confusing 3884 4717 in share-level security as to which UNIX username will eventually 3885 be used in granting access.</p><p>See also the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">4718 be used in granting access.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"> 3886 4719 NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSUSER"></a><span class="emphasis"><em>SECURITY = USER</em></span></p><p>This is the default security setting in Samba 3.0. 3887 4720 With user-level security a client must first "log-on" with a 3888 valid username and password (which can be mapped using the <a class=" indexterm" name="id323090"></a>username map3889 parameter). Encrypted passwords (see the <a class=" indexterm" name="id323098"></a>encrypted passwordsparameter) can also3890 be used in this security mode. Parameters such as <a class=" indexterm" name="id323106"></a>user and <a class="indexterm" name="id323113"></a>guest onlyif set are then applied and4721 valid username and password (which can be mapped using the <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a> 4722 parameter). Encrypted passwords (see the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter) can also 4723 be used in this security mode. Parameters such as <a class="link" href="smb.conf.5.html#USER">user</a> and <a class="link" href="smb.conf.5.html#GUESTONLY">guest only</a> if set are then applied and 3891 4724 may change the UNIX user to use on this connection, but only after 3892 4725 the user has been successfully authenticated.</p><p><span class="emphasis"><em>Note</em></span> that the name of the resource being … … 3894 4727 the server has successfully authenticated the client. This is why 3895 4728 guest shares don't work in user level security without allowing 3896 the server to automatically map unknown users into the <a class=" indexterm" name="id323132"></a>guest account.3897 See the <a class=" indexterm" name="id323140"></a>map to guest parameter for details on doing this.</p><p>See also the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSDOMAIN"></a><span class="emphasis"><em>SECURITY = DOMAIN</em></span></p><p>This mode will only work correctly if <ahref="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a> has been used to add this3898 machine into a Windows NT Domain. It expects the <a class=" indexterm" name="id323178"></a>encrypted passwords4729 the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>. 4730 See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSDOMAIN"></a><span class="emphasis"><em>SECURITY = DOMAIN</em></span></p><p>This mode will only work correctly if <a class="citerefentry" href="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a> has been used to add this 4731 machine into a Windows NT Domain. It expects the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> 3899 4732 parameter to be set to <code class="constant">yes</code>. In this 3900 4733 mode Samba will try to validate the username/password by passing … … 3910 4743 the server has successfully authenticated the client. This is why 3911 4744 guest shares don't work in user level security without allowing 3912 the server to automatically map unknown users into the <a class=" indexterm" name="id323228"></a>guest account.3913 See the <a class=" indexterm" name="id323235"></a>map to guest parameter for details on doing this.</p><p>See also the section <ahref="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">3914 NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class=" indexterm" name="id323256"></a>password serverparameter and3915 the <a class=" indexterm" name="id323264"></a>encrypted passwordsparameter.</p><p><a name="SECURITYEQUALSSERVER"></a><span class="emphasis"><em>SECURITY = SERVER</em></span></p><p>4745 the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>. 4746 See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"> 4747 NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> parameter and 4748 the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSSERVER"></a><span class="emphasis"><em>SECURITY = SERVER</em></span></p><p> 3916 4749 In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an 3917 4750 NT box. If this fails it will revert to <code class="literal">security = user</code>. It expects the 3918 <a class=" indexterm" name="id323290"></a>encrypted passwordsparameter to be set to <code class="constant">yes</code>, unless the remote4751 <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter to be set to <code class="constant">yes</code>, unless the remote 3919 4752 server does not support them. However note that if encrypted passwords have been negotiated then Samba cannot 3920 4753 revert back to checking the UNIX password file, it must have a valid <code class="filename">smbpasswd</code> file to check users against. See the chapter about the User Database in … … 3936 4769 the server has successfully authenticated the client. This is why 3937 4770 guest shares don't work in user level security without allowing 3938 the server to automatically map unknown users into the <a class=" indexterm" name="id323348"></a>guest account.3939 See the <a class=" indexterm" name="id323355"></a>map to guest parameter for details on doing this.</p><p>See also the section <ahref="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">3940 NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class=" indexterm" name="id323376"></a>password serverparameter and the3941 <a class=" indexterm" name="id323383"></a>encrypted passwordsparameter.</p><p><a name="SECURITYEQUALSADS"></a><span class="emphasis"><em>SECURITY = ADS</em></span></p><p>In this mode, Samba will act as a domain member in an ADS realm. To operate4771 the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>. 4772 See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"> 4773 NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> parameter and the 4774 <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSADS"></a><span class="emphasis"><em>SECURITY = ADS</em></span></p><p>In this mode, Samba will act as a domain member in an ADS realm. To operate 3942 4775 in this mode, the machine running Samba will need to have Kerberos installed 3943 4776 and configured and Samba will need to be joined to the ADS realm using the … … 3947 4780 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 3948 4781 </em></span> 3949 </p></dd><dt><span class="term"><a name="SECURITYMASK"></a>security mask (S)</span></dt><dd><p> 3950 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating the 3951 UNIX permission on a file using the native NT security dialog box. 3952 </p><p> 3953 This parameter is applied as a mask (AND'ed with) to the changed permission bits, thus preventing any bits not 3954 in this mask from being modified. Make sure not to mix up this parameter with <a class="indexterm" name="id323475"></a>force security mode, which works in a manner similar to this one but uses a logical OR instead of an AND. 3955 </p><p> 3956 Essentially, zero bits in this mask may be treated as a set of bits the user is not allowed to change. 3957 </p><p> 3958 If not set explicitly this parameter is 0777, allowing a user to modify all the user/group/world permissions on a file. 3959 </p><p><span class="emphasis"><em> 3960 Note</em></span> that users who can access the Samba server through other means can easily bypass this 3961 restriction, so it is primarily useful for standalone "appliance" systems. Administrators of 3962 most normal systems will probably want to leave it set to <code class="constant">0777</code>. 3963 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0777</code> 3964 </em></span> 3965 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 3966 </em></span> 3967 </p></dd><dt><span class="term"><a name="SERVERSCHANNEL"></a>server schannel (G)</span></dt><dd><p> 4782 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348581"></a> 4783 4784 server schannel (G) 4785 </h3></div></div></div><a class="indexterm" name="id348582"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3968 4786 This controls whether the server offers or even demands the use of the netlogon schannel. 3969 <a class=" indexterm" name="id323559"></a>server schannel = no does not offer the schannel, <a class="indexterm" name="id323566"></a>server schannel = auto offers the schannel but does not enforce it, and <a class="indexterm" name="id323574"></a>server schannel = yesdenies access if the client is not able to speak netlogon schannel.4787 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. 3970 4788 This is only the case for Windows NT4 before SP4. 3971 4789 </p><p> … … 3976 4794 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 3977 4795 </em></span> 3978 </p></dd><dt><span class="term"><a name="SERVERSIGNING"></a>server signing (G)</span></dt><dd><p>This controls whether the server offers or requires 4796 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348689"></a> 4797 4798 server signing (G) 4799 </h3></div></div></div><a class="indexterm" name="id348690"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires 3979 4800 the client it talks to to use SMB signing. Possible values 3980 4801 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 3984 4805 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 3985 4806 </em></span> 3986 </p></dd><dt><span class="term"><a name="SERVERSTRING"></a>server string (G)</span></dt><dd><p>This controls what string will show up in the printer comment box in print 4807 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348746"></a> 4808 4809 server string (G) 4810 </h3></div></div></div><a class="indexterm" name="id348747"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 3987 4811 manager and next to the IPC connection in <code class="literal">net view</code>. It 3988 4812 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 3993 4817 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 3994 4818 </em></span> 3995 </p></dd><dt><span class="term"><a name="SETDIRECTORY"></a>set directory (S)</span></dt><dd><p> 4819 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348834"></a> 4820 4821 set directory (S) 4822 </h3></div></div></div><a class="indexterm" name="id348835"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3996 4823 If <code class="literal">set directory = no</code>, then users of the 3997 4824 service may not use the setdir command to change directory. … … 4002 4829 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 4003 4830 </em></span> 4004 </p></dd><dt><span class="term"><a name="SETPRIMARYGROUPSCRIPT"></a>set primary group script (G)</span></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 4831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348891"></a> 4832 4833 set primary group script (G) 4834 </h3></div></div></div><a class="indexterm" name="id348892"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 4005 4835 primary group in addition to the auxiliary groups. This script 4006 4836 sets the primary group in the unix userdatase when an … … 4014 4844 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 4015 4845 </em></span> 4016 </p></dd><dt><span class="term"><a name="SETQUOTACOMMAND"></a>set quota command (G)</span></dt><dd><p>The <code class="literal">set quota command</code> should only be used 4846 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id348968"></a> 4847 4848 set quota command (G) 4849 </h3></div></div></div><a class="indexterm" name="id348969"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 4017 4850 whenever there is no operating system API available from the OS that 4018 4851 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 4020 4853 was found in the system. Most packages are configured with these options already.</p><p>This parameter should specify the path to a script that 4021 4854 can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>1 - quota type 4022 </p><div class="itemizedlist"><ul type="circle"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div><p> 4023 </p></li><li><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li><p>4 - block softlimit</p></li><li><p>5 - block hardlimit</p></li><li><p>6 - inode softlimit</p></li><li><p>7 - inode hardlimit</p></li><li><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code> 4855 </p><div class="itemizedlist"><ul type="circle"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div></li><li><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li><p>4 - block softlimit</p></li><li><p>5 - block hardlimit</p></li><li><p>6 - inode softlimit</p></li><li><p>7 - inode hardlimit</p></li><li><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code> 4024 4856 </em></span> 4025 4857 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 4026 4858 </em></span> 4027 </p></dd><dt><span class="term"><a name="SHAREMODES"></a>share modes (S)</span></dt><dd><p>This enables or disables the honoring of 4859 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349122"></a> 4860 4861 share modes (S) 4862 </h3></div></div></div><a class="indexterm" name="id349123"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 4028 4863 the <em class="parameter"><code>share modes</code></em> during a file open. These 4029 4864 modes are used by clients to gain exclusive read or write access … … 4038 4873 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 4039 4874 </em></span> 4040 </p></dd><dt><span class="term"><a name="SHORTPRESERVECASE"></a>short preserve case (S)</span></dt><dd><p> 4875 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349210"></a> 4876 4877 short preserve case (S) 4878 </h3></div></div></div><a class="indexterm" name="id349211"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4041 4879 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 4042 suitable length, are created upper case, or if they are forced to be the <a class=" indexterm" name="id324165"></a>default case.4043 This option can be use with <a class=" indexterm" name="id324172"></a>preserve case = yesto permit long filenames4880 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. 4881 This option can be use with <a class="link" href="smb.conf.5.html#PRESERVECASE">preserve case = yes</a> to permit long filenames 4044 4882 to retain their case, while short names are lowered. 4045 </p><p>See the section on <a href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 4046 </em></span> 4047 </p></dd><dt><span class="term"><a name="SHOWADDPRINTERWIZARD"></a>show add printer wizard (G)</span></dt><dd><p>With the introduction of MS-RPC based printing support 4883 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 4884 </em></span> 4885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349284"></a> 4886 4887 show add printer wizard (G) 4888 </h3></div></div></div><a class="indexterm" name="id349285"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 4048 4889 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 4049 4890 appear on Samba hosts in the share listing. Normally this folder will … … 4063 4904 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 4064 4905 </em></span> 4065 </p></dd><dt><span class="term"><a name="SHUTDOWNSCRIPT"></a>shutdown script (G)</span></dt><dd><p>This a full path name to a script called by 4066 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 4906 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349357"></a> 4907 4908 shutdown script (G) 4909 </h3></div></div></div><a class="indexterm" name="id349358"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 4910 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 4067 4911 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 4068 4912 right, this command will be run as user.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%z</code></em> will be substituted with the … … 4088 4932 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 4089 4933 </em></span> 4090 </p></dd><dt><span class="term"><a name="SMBPASSWDFILE"></a>smb passwd file (G)</span></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 4934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349502"></a> 4935 4936 smb passwd file (G) 4937 </h3></div></div></div><a class="indexterm" name="id349503"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 4091 4938 default the path to the smbpasswd file is compiled into Samba.</p><p> 4092 4939 An example of use is: … … 4096 4943 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 4097 4944 </em></span> 4098 </p></dd><dt><span class="term"><a name="SMBPORTS"></a>smb ports (G)</span></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 4099 </em></span> 4100 </p></dd><dt><span class="term"><a name="SOCKETADDRESS"></a>socket address (G)</span></dt><dd><p>This option allows you to control what 4945 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349554"></a> 4946 4947 smb ports (G) 4948 </h3></div></div></div><a class="indexterm" name="id349555"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 4949 </em></span> 4950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349595"></a> 4951 4952 socket address (G) 4953 </h3></div></div></div><a class="indexterm" name="id349596"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 4101 4954 address Samba will listen for connections on. This is used to 4102 4955 support multiple virtual interfaces on the one server, each … … 4106 4959 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 4107 4960 </em></span> 4108 </p></dd><dt><span class="term"><a name="SOCKETOPTIONS"></a>socket options (G)</span></dt><dd><p>This option allows you to set socket options 4961 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349657"></a> 4962 4963 socket options (G) 4964 </h3></div></div></div><a class="indexterm" name="id349658"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 4109 4965 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 4110 4966 of the operating systems which allow the connection to be … … 4119 4975 either incorrectly typed it or you need to add an include file 4120 4976 to includes.h for your OS. If the latter is the case please 4121 send the patch to <a href="mailto:samba-technical@samba.org" target="_top">4977 send the patch to <a class="ulink" href="mailto:samba-technical@samba.org" target="_top"> 4122 4978 samba-technical@samba.org</a>.</p><p>Any of the supported socket options may be combined 4123 4979 in any way you like, as long as your OS allows it.</p><p>This is the list of socket options currently settable … … 4134 4990 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 4135 4991 </em></span> 4136 </p></dd><dt><span class="term"><a name="STATCACHE"></a>stat cache (G)</span></dt><dd><p>This parameter determines if <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 4992 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349850"></a> 4993 4994 stat cache (G) 4995 </h3></div></div></div><a class="indexterm" name="id349851"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 4137 4996 speed up case insensitive name mappings. You should never need 4138 4997 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 4139 4998 </em></span> 4140 </p></dd><dt><span class="term"><a name="STOREDOSATTRIBUTES"></a>store dos attributes (S)</span></dt><dd><p> 4999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id349899"></a> 5000 5001 store dos attributes (S) 5002 </h3></div></div></div><a class="indexterm" name="id349900"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4141 5003 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 4142 5004 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such 4143 as occurs with <a class=" indexterm" name="id324831"></a>map hidden and <a class="indexterm" name="id324838"></a>map readonly). When set, DOS5005 as occurs with <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY">map readonly</a>). When set, DOS 4144 5006 attributes will be stored onto an extended attribute in the UNIX filesystem, associated with the file or 4145 directory. For no other mapping to occur as a fall-back, the parameters <a class=" indexterm" name="id324846"></a>map hidden,4146 <a class=" indexterm" name="id324854"></a>map system, <a class="indexterm" name="id324861"></a>map archive and <a class="indexterm" name="id324868"></a>map readonlymust be set to off. This parameter writes the DOS attributes as a string into the extended5007 directory. For no other mapping to occur as a fall-back, the parameters <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a>, 5008 <a class="link" href="smb.conf.5.html#MAPSYSTEM">map system</a>, <a class="link" href="smb.conf.5.html#MAPARCHIVE">map archive</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY">map readonly</a> must be set to off. This parameter writes the DOS attributes as a string into the extended 4147 5009 attribute named "user.DOSATTRIB". This extended attribute is explicitly hidden from smbd clients requesting an 4148 5010 EA list. On Linux the filesystem must have been mounted with the mount option user_xattr in order for … … 4150 5012 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 4151 5013 </em></span> 4152 </p></dd><dt><span class="term"><a name="STRICTALLOCATE"></a>strict allocate (S)</span></dt><dd><p>This is a boolean that controls the handling of 5014 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350009"></a> 5015 5016 strict allocate (S) 5017 </h3></div></div></div><a class="indexterm" name="id350010"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 4153 5018 disk space allocation in the server. When this is set to <code class="constant">yes</code> 4154 5019 the server will change from UNIX behaviour of not committing real … … 4162 5027 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 4163 5028 </em></span> 4164 </p></dd><dt><span class="term"><a name="STRICTLOCKING"></a>strict locking (S)</span></dt><dd><p> 5029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350073"></a> 5030 5031 strict locking (S) 5032 </h3></div></div></div><a class="indexterm" name="id350074"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4165 5033 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 4166 5034 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 4178 5046 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 4179 5047 </em></span> 4180 </p></dd><dt><span class="term"><a name="STRICTSYNC"></a>strict sync (S)</span></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5048 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350145"></a> 5049 5050 strict sync (S) 5051 </h3></div></div></div><a class="indexterm" name="id350146"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 4181 5052 shell) seem to confuse flushing buffer contents to disk with doing 4182 5053 a sync to disk. Under UNIX, a sync call forces the process to be … … 4185 5056 This is very slow and should only be done rarely. Setting this 4186 5057 parameter to <code class="constant">no</code> (the default) means that 4187 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> ignores the Windows5058 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> ignores the Windows 4188 5059 applications requests for a sync call. There is only a possibility 4189 5060 of losing data if the operating system itself that Samba is running … … 4192 5063 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 4193 5064 </em></span> 4194 </p></dd><dt><span class="term"><a name="SVCCTLLIST"></a>svcctl list (G)</span></dt><dd><p>This option defines a list of init scripts that smbd 5065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350206"></a> 5066 5067 svcctl list (G) 5068 </h3></div></div></div><a class="indexterm" name="id350207"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 4195 5069 will use for starting and stopping Unix services via the Win32 4196 5070 ServiceControl API. This allows Windows administrators to … … 4205 5079 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 4206 5080 </em></span> 4207 </p></dd><dt><span class="term"><a name="SYNCALWAYS"></a>sync always (S)</span></dt><dd><p>This is a boolean parameter that controls 5081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350287"></a> 5082 5083 sync always (S) 5084 </h3></div></div></div><a class="indexterm" name="id350288"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 4208 5085 whether writes will always be written to stable storage before 4209 5086 the write call returns. If this is <code class="constant">no</code> then the server will be … … 4216 5093 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 4217 5094 </em></span> 4218 </p></dd><dt><span class="term"><a name="SYSLOG"></a>syslog (G)</span></dt><dd><p> 5095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350353"></a> 5096 5097 syslog only (G) 5098 </h3></div></div></div><a class="indexterm" name="id350354"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5099 If this parameter is set then Samba debug messages are logged into the system 5100 syslog only, and not to the debug log files. There still will be some 5101 logging to log.[sn]mbd even if <span class="emphasis"><em>syslog only</em></span> is enabled. 5102 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5103 </em></span> 5104 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350399"></a> 5105 5106 syslog (G) 5107 </h3></div></div></div><a class="indexterm" name="id350400"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 4219 5108 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 4220 5109 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 4223 5112 </p><p> 4224 5113 This parameter sets the threshold for sending messages to syslog. Only messages with debug 4225 level less than this value will be sent to syslog. 5114 level less than this value will be sent to syslog. There still will be some 5115 logging to log.[sn]mbd even if <span class="emphasis"><em>syslog only</em></span> is enabled. 4226 5116 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 4227 5117 </em></span> 4228 </p></dd><dt><span class="term"><a name="SYSLOGONLY"></a>syslog only (G)</span></dt><dd><p> 4229 If this parameter is set then Samba debug messages are logged into the system 4230 syslog only, and not to the debug log files. 4231 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 4232 </em></span> 4233 </p></dd><dt><span class="term"><a name="TEMPLATEHOMEDIR"></a>template homedir (G)</span></dt><dd><p>When filling out the user information for a Windows NT 4234 user, the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5118 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350465"></a> 5119 5120 template homedir (G) 5121 </h3></div></div></div><a class="indexterm" name="id350466"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5122 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 4235 5123 parameter to fill in the home directory for that user. If the 4236 5124 string <em class="parameter"><code>%D</code></em> is present it … … 4239 5127 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 4240 5128 </em></span> 4241 </p></dd><dt><span class="term"><a name="TEMPLATESHELL"></a>template shell (G)</span></dt><dd><p>When filling out the user information for a Windows NT 4242 user, the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 4243 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="TIMEOFFSET"></a>time offset (G)</span></dt><dd><p>This parameter is a setting in minutes to add 5129 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350528"></a> 5130 5131 template shell (G) 5132 </h3></div></div></div><a class="indexterm" name="id350529"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5133 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5134 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350564"></a> 5135 5136 time offset (G) 5137 </h3></div></div></div><a class="indexterm" name="id350565"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 4244 5138 to the normal GMT to local time conversion. This is useful if 4245 5139 you are serving a lot of PCs that have incorrect daylight … … 4248 5142 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 4249 5143 </em></span> 4250 </p></dd><dt><span class="term"><a name="TIMESERVER"></a>time server (G)</span></dt><dd><p>This parameter determines if <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350623"></a> 5145 5146 time server (G) 5147 </h3></div></div></div><a class="indexterm" name="id350624"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 4251 5148 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 4252 5149 </em></span> 4253 </p></dd><dt><span class="term"><a name="UNIXCHARSET"></a>unix charset (G)</span></dt><dd><p>Specifies the charset the unix machine 5150 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350672"></a> 5151 5152 unix charset (G) 5153 </h3></div></div></div><a class="indexterm" name="id350674"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 4254 5154 Samba runs on uses. Samba needs to know this in order to be able to 4255 5155 convert text to the charsets other SMB clients use. … … 4260 5160 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 4261 5161 </em></span> 4262 </p></dd><dt><span class="term"><a name="UNIXEXTENSIONS"></a>unix extensions (G)</span></dt><dd><p>This boolean parameter controls whether Samba 5162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350736"></a> 5163 5164 unix extensions (G) 5165 </h3></div></div></div><a class="indexterm" name="id350737"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 4263 5166 implments the CIFS UNIX extensions, as defined by HP. 4264 5167 These extensions enable Samba to better serve UNIX CIFS clients … … 4267 5170 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 4268 5171 </em></span> 4269 </p></dd><dt><span class="term"><a name="UNIXPASSWORDSYNC"></a>unix password sync (G)</span></dt><dd><p>This boolean parameter controls whether Samba 5172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350779"></a> 5173 5174 unix password sync (G) 5175 </h3></div></div></div><a class="indexterm" name="id350780"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 4270 5176 attempts to synchronize the UNIX password with the SMB password 4271 5177 when the encrypted SMB password in the smbpasswd file is changed. … … 4276 5182 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 4277 5183 </em></span> 4278 </p></dd><dt><span class="term"><a name="UPDATEENCRYPTED"></a>update encrypted (G)</span></dt><dd><p> 5184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350836"></a> 5185 5186 update encrypted (G) 5187 </h3></div></div></div><a class="indexterm" name="id350837"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 4279 5188 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 4280 5189 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to … … 4286 5195 in the smbpasswd file this parameter should be set to <code class="constant">no</code>. 4287 5196 </p><p> 4288 In order for this parameter to be operative the <a class=" indexterm" name="id325719"></a>encrypt passwordsparameter must4289 be set to <code class="constant">no</code>. The default value of <a class=" indexterm" name="id325730"></a>encrypt passwords = Yes. Note: This must be set to <code class="constant">no</code> for this <a class="indexterm" name="id325741"></a>update encryptedto work.5197 In order for this parameter to be operative the <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords</a> parameter must 5198 be set to <code class="constant">no</code>. The default value of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords = Yes</a>. Note: This must be set to <code class="constant">no</code> for this <a class="link" href="smb.conf.5.html#UPDATEENCRYPTED">update encrypted</a> to work. 4290 5199 </p><p> 4291 5200 Note that even when this parameter is set a user authenticating to <code class="literal">smbd</code> … … 4294 5203 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 4295 5204 </em></span> 4296 </p></dd><dt><span class="term"><a name="USECLIENTDRIVER"></a>use client driver (S)</span></dt><dd><p>This parameter applies only to Windows NT/2000 5205 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id350941"></a> 5206 5207 use client driver (S) 5208 </h3></div></div></div><a class="indexterm" name="id350942"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 4297 5209 clients. It has no effect on Windows 95/98/ME clients. When 4298 5210 serving a printer to Windows NT/2000 clients without first installing … … 4319 5231 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 4320 5232 </em></span> 4321 </p></dd><dt><span class="term"><a name="USEKERBEROSKEYTAB"></a>use kerberos keytab (G)</span></dt><dd><p> 5233 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351010"></a> 5234 5235 use kerberos keytab (G) 5236 </h3></div></div></div><a class="indexterm" name="id351011"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 4322 5237 Specifies whether Samba should attempt to maintain service principals in the systems 4323 5238 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 4331 5246 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 4332 5247 </em></span> 4333 </p></dd><dt><span class="term"><a name="USEMMAP"></a>use mmap (G)</span></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5248 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351074"></a> 5249 5250 use mmap (G) 5251 </h3></div></div></div><a class="indexterm" name="id351075"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 4334 5252 depend on mmap working correctly on the running system. Samba requires a coherent 4335 5253 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 4340 5258 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 4341 5259 </em></span> 4342 </p></dd><dt><span class="term"><a name="USER"></a>user</span></dt><dd><p>This parameter is a synonym for username.</p></dd><dt><span class="term"><a name="USERS"></a>users</span></dt><dd><p>This parameter is a synonym for username.</p></dd><dt><span class="term"><a name="USERNAME"></a>username (S)</span></dt><dd><p>Multiple users may be specified in a comma-delimited 5260 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351122"></a> 5261 5262 username level (G) 5263 </h3></div></div></div><a class="indexterm" name="id351123"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5264 the real UNIX username, as many DOS clients send an all-uppercase 5265 username. By default Samba tries all lowercase, followed by the 5266 username with the first letter capitalized, and fails if the 5267 username is not found on the UNIX machine.</p><p>If this parameter is set to non-zero the behavior changes. 5268 This parameter is a number that specifies the number of uppercase 5269 combinations to try while trying to determine the UNIX user name. The 5270 higher the number the more combinations will be tried, but the slower 5271 the discovery of usernames will be. Use this parameter when you have 5272 strange usernames on your UNIX machine, such as <code class="constant">AstrangeUser 5273 </code>.</p><p>This parameter is needed only on UNIX systems that have case 5274 sensitive usernames.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">0</code> 5275 </em></span> 5276 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5277 </em></span> 5278 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351196"></a> 5279 5280 username map script (G) 5281 </h3></div></div></div><a class="indexterm" name="id351197"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5282 <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a> parameter. This parameter 5283 specifies and external program or script that must accept a single 5284 command line option (the username transmitted in the authentication 5285 request) and return a line line on standard output (the name to which 5286 the account should mapped). In this way, it is possible to store 5287 username map tables in an LDAP or NIS directory services. 5288 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal"></code> 5289 </em></span> 5290 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5291 </em></span> 5292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351267"></a> 5293 5294 username map (G) 5295 </h3></div></div></div><a class="indexterm" name="id351268"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5296 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5297 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows 5298 machines to those that the UNIX box uses. The other is to map multiple users to a single username so that they 5299 can more easily share files. 5300 </p><p> 5301 Please note that for user or share mode security, the username map is applied prior to validating the user 5302 credentials. Domain member servers (domain or ads) apply the username map after the user has been 5303 successfully authenticated by the domain controller and require fully qualified enties in the map table (e.g. 5304 biddle = <code class="literal">DOMAIN\foo</code>). 5305 </p><p> 5306 The map file is parsed line by line. Each line should contain a single UNIX username on the left then a '=' 5307 followed by a list of usernames on the right. The list of usernames on the right may contain names of the form 5308 @group in which case they will match any UNIX username in that group. The special client name '*' is a 5309 wildcard and matches any name. Each line of the map file may be up to 1023 characters long. 5310 </p><p> 5311 The file is processed on each line by taking the supplied username and comparing it with each username on the 5312 right hand side of the '=' signs. If the supplied name matches any of the names on the right hand side then it 5313 is replaced with the name on the left. Processing then continues with the next line. 5314 </p><p> 5315 If any line begins with a '#' or a ';' then it is ignored. 5316 </p><p> 5317 If any line begins with an '!' then the processing will stop after that line if a mapping was done by the 5318 line. Otherwise mapping continues with every line being processed. Using '!' is most useful when you have a 5319 wildcard mapping line later in the file. 5320 </p><p> 5321 For example to map from the name <code class="constant">admin</code> or <code class="constant">administrator</code> to the UNIX 5322 name <code class="constant"> root</code> you would use: 5323 </p><pre class="programlisting"> 5324 <code class="literal">root = admin administrator</code> 5325 </pre><p> 5326 Or to map anyone in the UNIX group <code class="constant">system</code> to the UNIX name <code class="constant">sys</code> you would use: 5327 </p><pre class="programlisting"> 5328 <code class="literal">sys = @system</code> 5329 </pre><p> 5330 </p><p> 5331 You can have as many mappings as you like in a username map file. 5332 </p><p> 5333 If your system supports the NIS NETGROUP option then the netgroup database is checked before the <code class="filename">/etc/group </code> database for matching groups. 5334 </p><p> 5335 You can map Windows usernames that have spaces in them by using double quotes around the name. For example: 5336 </p><pre class="programlisting"> 5337 <code class="literal">tridge = "Andrew Tridgell"</code> 5338 </pre><p> 5339 would map the windows username "Andrew Tridgell" to the unix username "tridge". 5340 </p><p> 5341 The following example would map mary and fred to the unix user sys, and map the rest to guest. Note the use of the 5342 '!' to tell Samba to stop processing if it gets a match on that line: 5343 </p><pre class="programlisting"> 5344 !sys = mary fred 5345 guest = * 5346 </pre><p> 5347 </p><p> 5348 Note that the remapping is applied to all occurrences of usernames. Thus if you connect to \\server\fred and 5349 <code class="constant">fred</code> is remapped to <code class="constant">mary</code> then you will actually be connecting to 5350 \\server\mary and will need to supply a password suitable for <code class="constant">mary</code> not 5351 <code class="constant">fred</code>. The only exception to this is the username passed to the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> (if you have one). The password server will receive whatever username the client 5352 supplies without modification. 5353 </p><p> 5354 Also note that no reverse mapping is done. The main effect this has is with printing. Users who have been 5355 mapped may have trouble deleting print jobs as PrintManager under WfWg will think they don't own the print 5356 job. 5357 </p><p> 5358 Samba versions prior to 3.0.8 would only support reading the fully qualified username 5359 (e.g.: <code class="literal">DOMAIN\user</code>) from 5360 the username map when performing a kerberos login from a client. However, when looking up a map entry for a 5361 user authenticated by NTLM[SSP], only the login name would be used for matches. This resulted in inconsistent 5362 behavior sometimes even on the same server. 5363 </p><p> 5364 The following functionality is obeyed in version 3.0.8 and later: 5365 </p><p> 5366 When performing local authentication, the username map is applied to the login name before attempting to authenticate 5367 the connection. 5368 </p><p> 5369 When relying upon a external domain controller for validating authentication requests, smbd will apply the username map 5370 to the fully qualified username (i.e. <code class="literal">DOMAIN\user</code>) only after the user has been successfully authenticated. 5371 </p><p> 5372 An example of use is: 5373 </p><pre class="programlisting"> 5374 username map = /usr/local/samba/lib/users.map 5375 </pre><p> 5376 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username map</code></em> = <code class="literal"> 5377 # no username map</code> 5378 </em></span> 5379 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351509"></a><a name="USER"></a>user</h3></div></div></div><a class="indexterm" name="id351510"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351540"></a><a name="USERS"></a>users</h3></div></div></div><a class="indexterm" name="id351541"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351570"></a> 5380 5381 username (S) 5382 </h3></div></div></div><a class="indexterm" name="id351571"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 4343 5383 list, in which case the supplied password will be tested against 4344 5384 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 4359 5399 telnet session. The daemon runs as the user that they log in as, 4360 5400 so they cannot do anything that user cannot do.</p><p>To restrict a service to a particular set of users you 4361 can use the <a class=" indexterm" name="id326066"></a>valid usersparameter.</p><p>If any of the usernames begin with a '@' then the name5401 can use the <a class="link" href="smb.conf.5.html#VALIDUSERS">valid users</a> parameter.</p><p>If any of the usernames begin with a '@' then the name 4362 5402 will be looked up first in the NIS netgroups list (if Samba 4363 5403 is compiled with netgroup support), followed by a lookup in … … 4370 5410 of all users in the netgroup group of that name.</p><p>Note that searching though a groups database can take 4371 5411 quite some time, and some clients may time out during the 4372 search.</p><p>See the section <a href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT5412 search.</p><p>See the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT 4373 5413 USERNAME/PASSWORD VALIDATION</a> for more information on how 4374 5414 this parameter determines access to the services.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal"> … … 4378 5418 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 4379 5419 </em></span> 4380 </p></dd><dt><span class="term"><a name="USERNAMELEVEL"></a>username level (G)</span></dt><dd><p>This option helps Samba to try and 'guess' at 4381 the real UNIX username, as many DOS clients send an all-uppercase 4382 username. By default Samba tries all lowercase, followed by the 4383 username with the first letter capitalized, and fails if the 4384 username is not found on the UNIX machine.</p><p>If this parameter is set to non-zero the behavior changes. 4385 This parameter is a number that specifies the number of uppercase 4386 combinations to try while trying to determine the UNIX user name. The 4387 higher the number the more combinations will be tried, but the slower 4388 the discovery of usernames will be. Use this parameter when you have 4389 strange usernames on your UNIX machine, such as <code class="constant">AstrangeUser 4390 </code>.</p><p>This parameter is needed only on UNIX systems that have case 4391 sensitive usernames.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">0</code> 4392 </em></span> 4393 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 4394 </em></span> 4395 </p></dd><dt><span class="term"><a name="USERNAMEMAP"></a>username map (G)</span></dt><dd><p> 4396 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 4397 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows 4398 machines to those that the UNIX box uses. The other is to map multiple users to a single username so that they 4399 can more easily share files. 4400 </p><p> 4401 Please note that for user or share mode security, the username map is applied prior to validating the user 4402 credentials. Domain member servers (domain or ads) apply the username map after the user has been 4403 successfully authenticated by the domain controller and require fully qualified enties in the map table (e.g. 4404 biddle = DOMAIN\foo). 4405 </p><p> 4406 The map file is parsed line by line. Each line should contain a single UNIX username on the left then a '=' 4407 followed by a list of usernames on the right. The list of usernames on the right may contain names of the form 4408 @group in which case they will match any UNIX username in that group. The special client name '*' is a 4409 wildcard and matches any name. Each line of the map file may be up to 1023 characters long. 4410 </p><p> 4411 The file is processed on each line by taking the supplied username and comparing it with each username on the 4412 right hand side of the '=' signs. If the supplied name matches any of the names on the right hand side then it 4413 is replaced with the name on the left. Processing then continues with the next line. 4414 </p><p> 4415 If any line begins with a '#' or a ';' then it is ignored. 4416 </p><p> 4417 If any line begins with an '!' then the processing will stop after that line if a mapping was done by the 4418 line. Otherwise mapping continues with every line being processed. Using '!' is most useful when you have a 4419 wildcard mapping line later in the file. 4420 </p><p> 4421 For example to map from the name <code class="constant">admin</code> or <code class="constant">administrator</code> to the UNIX 4422 name <code class="constant"> root</code> you would use: 4423 </p><pre class="programlisting"> 4424 <code class="literal">root = admin administrator</code> 4425 </pre><p> 4426 Or to map anyone in the UNIX group <code class="constant">system</code> to the UNIX name <code class="constant">sys</code> you would use: 4427 </p><pre class="programlisting"> 4428 <code class="literal">sys = @system</code> 4429 </pre><p> 4430 </p><p> 4431 You can have as many mappings as you like in a username map file. 4432 </p><p> 4433 If your system supports the NIS NETGROUP option then the netgroup database is checked before the <code class="filename">/etc/group </code> database for matching groups. 4434 </p><p> 4435 You can map Windows usernames that have spaces in them by using double quotes around the name. For example: 4436 </p><pre class="programlisting"> 4437 <code class="literal">tridge = "Andrew Tridgell"</code> 4438 </pre><p> 4439 would map the windows username "Andrew Tridgell" to the unix username "tridge". 4440 </p><p> 4441 The following example would map mary and fred to the unix user sys, and map the rest to guest. Note the use of the 4442 '!' to tell Samba to stop processing if it gets a match on that line: 4443 </p><pre class="programlisting"> 4444 !sys = mary fred 4445 guest = * 4446 </pre><p> 4447 </p><p> 4448 Note that the remapping is applied to all occurrences of usernames. Thus if you connect to \\server\fred and 4449 <code class="constant">fred</code> is remapped to <code class="constant">mary</code> then you will actually be connecting to 4450 \\server\mary and will need to supply a password suitable for <code class="constant">mary</code> not 4451 <code class="constant">fred</code>. The only exception to this is the username passed to the <a class="indexterm" name="id326373"></a>password server (if you have one). The password server will receive whatever username the client 4452 supplies without modification. 4453 </p><p> 4454 Also note that no reverse mapping is done. The main effect this has is with printing. Users who have been 4455 mapped may have trouble deleting print jobs as PrintManager under WfWg will think they don't own the print 4456 job. 4457 </p><p> 4458 Samba versions prior to 3.0.8 would only support reading the fully qualified username (e.g.: DOMAIN\user) from 4459 the username map when performing a kerberos login from a client. However, when looking up a map entry for a 4460 user authenticated by NTLM[SSP], only the login name would be used for matches. This resulted in inconsistent 4461 behavior sometimes even on the same server. 4462 </p><p> 4463 The following functionality is obeyed in version 3.0.8 and later: 4464 </p><p> 4465 When performing local authentication, the username map is applied to the login name before attempting to authenticate 4466 the connection. 4467 </p><p> 4468 When relying upon a external domain controller for validating authentication requests, smbd will apply the username map 4469 to the fully qualified username (i.e. DOMAIN\user) only after the user has been successfully authenticated. 4470 </p><p> 4471 An example of use is: 4472 </p><pre class="programlisting"> 4473 username map = /usr/local/samba/lib/users.map 4474 </pre><p> 4475 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username map</code></em> = <code class="literal"> 4476 # no username map</code> 4477 </em></span> 4478 </p></dd><dt><span class="term"><a name="USERNAMEMAPSCRIPT"></a>username map script (G)</span></dt><dd><p>This script is a mutually exclusive alternative to the 4479 <a class="indexterm" name="id326456"></a>username map parameter. This parameter 4480 specifies and external program or script that must accept a single 4481 command line option (the username transmitted in the authentication 4482 request) and return a line line on standard output (the name to which 4483 the account should mapped). In this way, it is possible to store 4484 username map tables in an LDAP or NIS directory services. 4485 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal"></code> 4486 </em></span> 4487 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 4488 </em></span> 4489 </p></dd><dt><span class="term"><a name="USERSHAREALLOWGUESTS"></a>usershare allow guests (G)</span></dt><dd><p>This parameter controls whether user defined shares are allowed 5420 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351716"></a> 5421 5422 usershare allow guests (G) 5423 </h3></div></div></div><a class="indexterm" name="id351717"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 4490 5424 to be accessed by non-authenticated users or not. It is the equivalent 4491 5425 of allowing people who can create a share the option of setting … … 4494 5428 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 4495 5429 </em></span> 4496 </p></dd><dt><span class="term"><a name="USERSHAREMAXSHARES"></a>usershare max shares (G)</span></dt><dd><p>This parameter specifies the number of user defined shares 5430 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351765"></a> 5431 5432 usershare max shares (G) 5433 </h3></div></div></div><a class="indexterm" name="id351766"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 4497 5434 that are allowed to be created by users belonging to the group owning the 4498 5435 usershare directory. If set to zero (the default) user defined shares are ignored. 4499 5436 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 4500 5437 </em></span> 4501 </p></dd><dt><span class="term"><a name="USERSHAREOWNERONLY"></a>usershare owner only (G)</span></dt><dd><p>This parameter controls whether the pathname exported by 5438 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351807"></a> 5439 5440 usershare owner only (G) 5441 </h3></div></div></div><a class="indexterm" name="id351808"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 4502 5442 a user defined shares must be owned by the user creating the 4503 5443 user defined share or not. If set to True (the default) then … … 4509 5449 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 4510 5450 </em></span> 4511 </p></dd><dt><span class="term"><a name="USERSHAREPATH"></a>usershare path (G)</span></dt><dd><p>This parameter specifies the absolute path of the directory on the 5451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351851"></a> 5452 5453 usershare path (G) 5454 </h3></div></div></div><a class="indexterm" name="id351852"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 4512 5455 filesystem used to store the user defined share definition files. 4513 5456 This directory must be owned by root, and have no access for … … 4530 5473 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 4531 5474 </em></span> 4532 </p></dd><dt><span class="term"><a name="USERSHAREPREFIXALLOWLIST"></a>usershare prefix allow list (G)</span></dt><dd><p>This parameter specifies a list of absolute pathnames 5475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351915"></a> 5476 5477 usershare prefix allow list (G) 5478 </h3></div></div></div><a class="indexterm" name="id351916"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 4533 5479 the root of which are allowed to be exported by user defined share definitions. 4534 5480 If the pathname exported doesn't start with one of the strings in this … … 4545 5491 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 4546 5492 </em></span> 4547 </p></dd><dt><span class="term"><a name="USERSHAREPREFIXDENYLIST"></a>usershare prefix deny list (G)</span></dt><dd><p>This parameter specifies a list of absolute pathnames 5493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id351982"></a> 5494 5495 usershare prefix deny list (G) 5496 </h3></div></div></div><a class="indexterm" name="id351983"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 4548 5497 the root of which are NOT allowed to be exported by user defined share definitions. 4549 5498 If the pathname exported starts with one of the strings in this … … 4561 5510 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 4562 5511 </em></span> 4563 </p></dd><dt><span class="term"><a name="USERSHARETEMPLATESHARE"></a>usershare template share (G)</span></dt><dd><p>User defined shares only have limited possible parameters 5512 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352053"></a> 5513 5514 usershare template share (G) 5515 </h3></div></div></div><a class="indexterm" name="id352054"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 4564 5516 such as path, guest ok etc. This parameter allows usershares to 4565 5517 "cloned" from an existing share. If "usershare template share" … … 4576 5528 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 4577 5529 </em></span> 4578 </p></dd><dt><span class="term"><a name="USESENDFILE"></a>use sendfile (S)</span></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5530 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352120"></a> 5531 5532 use sendfile (S) 5533 </h3></div></div></div><a class="indexterm" name="id352121"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 4579 5534 system call is supported by the underlying operating system, then some SMB read calls 4580 5535 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 4585 5540 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 4586 5541 </em></span> 4587 </p></dd><dt><span class="term"><a name="USESPNEGO"></a>use spnego (G)</span></dt><dd><p>This variable controls controls whether samba will try 5542 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352172"></a> 5543 5544 use spnego (G) 5545 </h3></div></div></div><a class="indexterm" name="id352173"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 4588 5546 to use Simple and Protected NEGOciation (as specified by rfc2478) with 4589 5547 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 4593 5551 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 4594 5552 </em></span> 4595 </p></dd><dt><span class="term"><a name="UTMP"></a>utmp (G)</span></dt><dd><p> 4596 This boolean parameter is only available if Samba has been configured and compiled 4597 with the option <code class="literal">--with-utmp</code>. If set to 4598 <code class="constant">yes</code> then Samba will attempt to add utmp or utmpx records 4599 (depending on the UNIX system) whenever a connection is made to a Samba server. 4600 Sites may use this to record the user connecting to a Samba share. 4601 </p><p> 4602 Due to the requirements of the utmp record, we are required to create a unique 4603 identifier for the incoming user. Enabling this option creates an n^2 algorithm 4604 to find this number. This may impede performance on large installations. 4605 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 4606 </em></span> 4607 </p></dd><dt><span class="term"><a name="UTMPDIRECTORY"></a>utmp directory (G)</span></dt><dd><p>This parameter is only available if Samba has 5553 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352218"></a> 5554 5555 utmp directory (G) 5556 </h3></div></div></div><a class="indexterm" name="id352219"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 4608 5557 been configured and compiled with the option <code class="literal"> 4609 5558 --with-utmp</code>. It specifies a directory pathname that is … … 4617 5566 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 4618 5567 </em></span> 4619 </p></dd><dt><span class="term"><a name="-VALID"></a>-valid (S)</span></dt><dd><p> This parameter indicates whether a share is 4620 valid and thus can be used. When this parameter is set to false, 4621 the share will be in no way visible nor accessible. 4622 </p><p> 4623 This option should not be 4624 used by regular users but might be of help to developers. 4625 Samba uses this option internally to mark shares as deleted. 4626 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 4627 </em></span> 4628 </p></dd><dt><span class="term"><a name="VALIDUSERS"></a>valid users (S)</span></dt><dd><p> 5568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352292"></a> 5569 5570 utmp (G) 5571 </h3></div></div></div><a class="indexterm" name="id352293"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5572 This boolean parameter is only available if Samba has been configured and compiled 5573 with the option <code class="literal">--with-utmp</code>. If set to 5574 <code class="constant">yes</code> then Samba will attempt to add utmp or utmpx records 5575 (depending on the UNIX system) whenever a connection is made to a Samba server. 5576 Sites may use this to record the user connecting to a Samba share. 5577 </p><p> 5578 Due to the requirements of the utmp record, we are required to create a unique 5579 identifier for the incoming user. Enabling this option creates an n^2 algorithm 5580 to find this number. This may impede performance on large installations. 5581 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 5582 </em></span> 5583 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352349"></a> 5584 5585 valid users (S) 5586 </h3></div></div></div><a class="indexterm" name="id352350"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4629 5587 This is a list of users that should be allowed to login to this service. Names starting with 4630 5588 '@', '+' and '&' are interpreted using the same rules as described in the … … 4642 5600 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 4643 5601 </em></span> 4644 </p></dd><dt><span class="term"><a name="VETOFILES"></a>veto files (S)</span></dt><dd><p> 5602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352436"></a> 5603 5604 -valid (S) 5605 </h3></div></div></div><a class="indexterm" name="id352437"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5606 valid and thus can be used. When this parameter is set to false, 5607 the share will be in no way visible nor accessible. 5608 </p><p> 5609 This option should not be 5610 used by regular users but might be of help to developers. 5611 Samba uses this option internally to mark shares as deleted. 5612 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 5613 </em></span> 5614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352481"></a> 5615 5616 veto files (S) 5617 </h3></div></div></div><a class="indexterm" name="id352482"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4645 5618 This is a list of files and directories that are neither visible nor accessible. Each entry in 4646 5619 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 4650 5623 unix directory separator '/'. 4651 5624 </p><p> 4652 Note that the <a class=" indexterm" name="id327272"></a>case sensitiveoption is applicable in vetoing files.5625 Note that the <a class="link" href="smb.conf.5.html#CASESENSITIVE">case sensitive</a> option is applicable in vetoing files. 4653 5626 </p><p> 4654 5627 One feature of the veto files parameter that it is important to be aware of is Samba's behaviour when 4655 5628 trying to delete a directory. If a directory that is to be deleted contains nothing but veto files this 4656 deletion will <span class="emphasis"><em>fail</em></span> unless you also set the <a class=" indexterm" name="id327288"></a>delete veto files5629 deletion will <span class="emphasis"><em>fail</em></span> unless you also set the <a class="link" href="smb.conf.5.html#DELETEVETOFILES">delete veto files</a> 4657 5630 parameter to <em class="parameter"><code>yes</code></em>. 4658 5631 </p><p> … … 4673 5646 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 4674 5647 </em></span> 4675 </p></dd><dt><span class="term"><a name="VETOOPLOCKFILES"></a>veto oplock files (S)</span></dt><dd><p> 4676 This parameter is only valid when the <a class="indexterm" name="id327357"></a>oplocks 5648 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352588"></a> 5649 5650 veto oplock files (S) 5651 </h3></div></div></div><a class="indexterm" name="id352589"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5652 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 4677 5653 parameter is turned on for a share. It allows the Samba administrator 4678 5654 to selectively turn off the granting of oplocks on selected files that 4679 5655 match a wildcarded list, similar to the wildcarded list used in the 4680 <a class=" indexterm" name="id327366"></a>veto filesparameter.5656 <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a> parameter. 4681 5657 </p><p> 4682 5658 You might want to do this on files that you know will be heavily contended … … 4694 5670 # No files are vetoed for oplock grants</code> 4695 5671 </em></span> 4696 </p></dd><dt><span class="term"><a name="VFSOBJECT"></a>vfs object</span></dt><dd><p>This parameter is a synonym for vfs objects.</p></dd><dt><span class="term"><a name="VFSOBJECTS"></a>vfs objects (S)</span></dt><dd><p>This parameter specifies the backend names which 5672 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352674"></a><a name="VFSOBJECT"></a>vfs object</h3></div></div></div><a class="indexterm" name="id352675"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352704"></a> 5673 5674 vfs objects (S) 5675 </h3></div></div></div><a class="indexterm" name="id352705"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 4697 5676 are used for Samba VFS I/O operations. By default, normal 4698 5677 disk I/O operations are used but these can be overloaded … … 4701 5680 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 4702 5681 </em></span> 4703 </p></dd><dt><span class="term"><a name="VOLUME"></a>volume (S)</span></dt><dd><p>This allows you to override the volume label 5682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352762"></a> 5683 5684 volume (S) 5685 </h3></div></div></div><a class="indexterm" name="id352763"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 4704 5686 returned for a share. Useful for CDROMs with installation programs 4705 5687 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 4706 5688 # the name of the share</code> 4707 5689 </em></span> 4708 </p></dd><dt><span class="term"><a name="WIDELINKS"></a>wide links (S)</span></dt><dd><p>This parameter controls whether or not links 5690 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352804"></a> 5691 5692 wide links (S) 5693 </h3></div></div></div><a class="indexterm" name="id352805"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 4709 5694 in the UNIX file system may be followed by the server. Links 4710 5695 that point to areas within the directory tree exported by the … … 4714 5699 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 4715 5700 </em></span> 4716 </p></dd><dt><span class="term"><a name="WINBINDCACHETIME"></a>winbind cache time (G)</span></dt><dd><p>This parameter specifies the number of 4717 seconds the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 5701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352852"></a> 5702 5703 winbind cache time (G) 5704 </h3></div></div></div><a class="indexterm" name="id352853"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 5705 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 4718 5706 user and group information before querying a Windows NT server 4719 5707 again.</p><p> 4720 5708 This does not apply to authentication requests, these are always 4721 evaluated in real time unless the <a class=" indexterm" name="id327609"></a>winbind offline logonoption has been enabled.5709 evaluated in real time unless the <a class="link" href="smb.conf.5.html#WINBINDOFFLINELOGON">winbind offline logon</a> option has been enabled. 4722 5710 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 4723 5711 </em></span> 4724 </p></dd><dt><span class="term"><a name="WINBINDENUMGROUPS"></a>winbind enum groups (G)</span></dt><dd><p>On large installations using <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 5712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id352918"></a> 5713 5714 winbind enum groups (G) 5715 </h3></div></div></div><a class="indexterm" name="id352919"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 4725 5716 the enumeration of groups through the <code class="literal">setgrent()</code>, 4726 5717 <code class="literal">getgrent()</code> and … … 4730 5721 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 4731 5722 </em></span> 4732 </p></dd><dt><span class="term"><a name="WINBINDENUMUSERS"></a>winbind enum users (G)</span></dt><dd><p>On large installations using <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 5723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353006"></a> 5724 5725 winbind enum users (G) 5726 </h3></div></div></div><a class="indexterm" name="id353007"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 4733 5727 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 4734 5728 <code class="literal">getpwent()</code> and … … 4742 5736 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 4743 5737 </em></span> 4744 </p></dd><dt><span class="term"><a name="WINBINDEXPANDGROUPS"></a>winbind expand groups (G)</span></dt><dd><p>This option controls the maximum depth that winbindd 4745 will traverse when flattening nested group memberships 4746 of Windows domain groups. This is different from the 4747 <a class="indexterm" name="id327830"></a>winbind nested groups option 4748 which implements the Windows NT4 model of local group 4749 nesting. The "winbind expand groups" 4750 parameter specifically applies to the membership of 4751 domain groups.</p><p>Be aware that a high value for this parameter can 4752 result in system slowdown as the main parent winbindd daemon 4753 must perform the group unrolling and will be unable to answer 4754 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 4755 </em></span> 4756 </p></dd><dt><span class="term"><a name="WINBINDNESTEDGROUPS"></a>winbind nested groups (G)</span></dt><dd><p>If set to yes, this parameter activates the support for nested 5738 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353095"></a> 5739 5740 winbind nested groups (G) 5741 </h3></div></div></div><a class="indexterm" name="id353096"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 4757 5742 groups. Nested groups are also called local groups or 4758 5743 aliases. They work like their counterparts in Windows: Nested … … 4762 5747 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 4763 5748 </em></span> 4764 </p></dd><dt><span class="term"><a name="WINBINDNORMALIZENAMES"></a>winbind normalize names (G)</span></dt><dd><p>This parameter controls whether winbindd will replace 5749 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353140"></a> 5750 5751 winbind normalize names (G) 5752 </h3></div></div></div><a class="indexterm" name="id353141"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 4765 5753 whitespace in user and group names with an underscore (_) character. 4766 5754 For example, whether the name "Space Kadet" should be … … 4774 5762 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 4775 5763 </em></span> 4776 </p></dd><dt><span class="term"><a name="WINBINDNSSINFO"></a>winbind nss info (G)</span></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 5764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353202"></a> 5765 5766 winbind nss info (G) 5767 </h3></div></div></div><a class="indexterm" name="id353203"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 4777 5768 Service Information to construct a user's home directory and login shell. 4778 5769 Currently the following settings are available: … … 4781 5772 - The default, using the parameters of <em class="parameter"><code>template 4782 5773 shell</code></em> and <em class="parameter"><code>template homedir</code></em>) 4783 </p></li><li><p><em class="parameter"><code> sfu</code></em>5774 </p></li><li><p><em class="parameter"><code><sfu | rfc2307 ></code></em> 4784 5775 - When Samba is running in security = ads and your Active Directory 4785 5776 Domain Controller does support the Microsoft "Services for Unix" (SFU) 4786 5777 LDAP schema, winbind can retrieve the login shell and the home 4787 5778 directory attributes directly from your Directory Server. Note that 4788 retrieving UID and GID from your ADS-Server requires to use 4789 <em class="parameter"><code>idmap backend</code></em> = idmap_ad as well. 5779 retrieving UID and GID from your ADS-Server requires to 5780 use <em class="parameter"><code>idmap backend</code></em> = ad 5781 or <em class="parameter"><code>idmap config DOMAIN:backend</code></em> = ad 5782 as well. 4790 5783 </p></li></ul></div><p> 4791 5784 … … 4794 5787 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 4795 5788 </em></span> 4796 </p></dd><dt><span class="term"><a name="WINBINDOFFLINELOGON"></a>winbind offline logon (G)</span></dt><dd><p>This parameter is designed to control whether Winbind should 5789 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353314"></a> 5790 5791 winbind offline logon (G) 5792 </h3></div></div></div><a class="indexterm" name="id353315"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 4797 5793 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 4798 5794 module using Cached Credentials. If enabled, winbindd will store user credentials … … 4802 5798 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 4803 5799 </em></span> 4804 </p></dd><dt><span class="term"><a name="WINBINDREFRESHTICKETS"></a>winbind refresh tickets (G)</span></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 5800 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353380"></a> 5801 5802 winbind refresh tickets (G) 5803 </h3></div></div></div><a class="indexterm" name="id353381"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 4805 5804 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 4806 5805 … … 4809 5808 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 4810 5809 </em></span> 4811 </p></dd><dt><span class="term"><a name="WINBINDRPCONLY"></a>winbind rpc only (G)</span></dt><dd><p> 4812 Setting this parameter to <code class="literal">yes</code> forces 4813 winbindd to use RPC instead of LDAP to retrieve information from Domain 4814 Controllers. 4815 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 4816 </em></span> 4817 </p></dd><dt><span class="term"><a name="WINBINDSEPARATOR"></a>winbind separator (G)</span></dt><dd><p>This parameter allows an admin to define the character 5810 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353445"></a> 5811 5812 winbind separator (G) 5813 </h3></div></div></div><a class="indexterm" name="id353446"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 4818 5814 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 4819 5815 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 4826 5822 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 4827 5823 </em></span> 4828 </p></dd><dt><span class="term"><a name="WINBINDTRUSTEDDOMAINSONLY"></a>winbind trusted domains only (G)</span></dt><dd><p> 5824 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353527"></a> 5825 5826 winbind trusted domains only (G) 5827 </h3></div></div></div><a class="indexterm" name="id353528"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4829 5828 This parameter is designed to allow Samba servers that are members 4830 5829 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 4834 5833 </p><p> 4835 5834 This parameter is now deprecated in favor of the newer idmap_nss backend. 4836 Refer to the <a class=" indexterm" name="id328357"></a>idmap domainssmb.conf option and4837 the <a href="idmap_nss.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_nss</span>(8)</span></a> man page for more information.5835 Refer to the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> smb.conf option and 5836 the <a class="citerefentry" href="idmap_nss.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_nss</span>(8)</span></a> man page for more information. 4838 5837 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 4839 5838 </em></span> 4840 </p></dd><dt><span class="term"><a name="WINBINDUSEDEFAULTDOMAIN"></a>winbind use default domain (G)</span></dt><dd><p>This parameter specifies whether the 4841 <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 5839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353600"></a> 5840 5841 winbind use default domain (G) 5842 </h3></div></div></div><a class="indexterm" name="id353601"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 5843 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 4842 5844 without domain component in their username. Users without a domain 4843 5845 component are treated as is part of the winbindd server's own … … 4848 5850 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 4849 5851 </em></span> 4850 </p></dd><dt><span class="term"><a name="WINSHOOK"></a>wins hook (G)</span></dt><dd><p>When Samba is running as a WINS server this 5852 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353668"></a> 5853 5854 wins hook (G) 5855 </h3></div></div></div><a class="indexterm" name="id353670"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 4851 5856 allows you to call an external program for all changes to the 4852 5857 WINS database. The primary use for this option is to allow the … … 4869 5874 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 4870 5875 program <code class="literal">nsupdate</code> is provided in the examples 4871 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="WINSPROXY"></a>wins proxy (G)</span></dt><dd><p>This is a boolean that controls if <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 5876 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353763"></a> 5877 5878 wins proxy (G) 5879 </h3></div></div></div><a class="indexterm" name="id353764"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 4872 5880 queries on behalf of other hosts. You may need to set this 4873 5881 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 4874 5882 </em></span> 4875 </p></dd><dt><span class="term"><a name="WINSSERVER"></a>wins server (G)</span></dt><dd><p>This specifies the IP address (or DNS name: IP 4876 address for preference) of the WINS server that <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 5883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353816"></a> 5884 5885 wins server (G) 5886 </h3></div></div></div><a class="indexterm" name="id353817"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 5887 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 4877 5888 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a 4878 5889 multi-subnetted network.</p><p>If you want to work in multiple namespaces, you can … … 4892 5903 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 4893 5904 </em></span> 4894 </p></dd><dt><span class="term"><a name="WINSSUPPORT"></a>wins support (G)</span></dt><dd><p>This boolean controls if the <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 5905 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353919"></a> 5906 5907 wins support (G) 5908 </h3></div></div></div><a class="indexterm" name="id353920"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 4895 5909 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 4896 5910 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 4898 5912 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 4899 5913 </em></span> 4900 </p></dd><dt><span class="term"><a name="WORKGROUP"></a>workgroup (G)</span></dt><dd><p>This controls what workgroup your server will 5914 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id353985"></a> 5915 5916 workgroup (G) 5917 </h3></div></div></div><a class="indexterm" name="id353986"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 4901 5918 appear to be in when queried by clients. Note that this parameter 4902 5919 also controls the Domain name used with 4903 the <a class=" indexterm" name="id328788"></a>security = domain5920 the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> 4904 5921 setting.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">WORKGROUP</code> 4905 5922 </em></span> 4906 5923 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 4907 5924 </em></span> 4908 </p></dd><dt><span class="term"><a name="WRITABLE"></a>writable</span></dt><dd><p>This parameter is a synonym for writeable.</p></dd><dt><span class="term"><a name="WRITEABLE"></a>writeable (S)</span></dt><dd><p>Inverted synonym for <a class="indexterm" name="id328872"></a>read only.</p><p><span class="emphasis"><em>No default</em></span></p></dd><dt><span class="term"><a name="WRITECACHESIZE"></a>write cache size (S)</span></dt><dd><p>If this integer parameter is set to non-zero value, 5925 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354055"></a><a name="WRITABLE"></a>writable</h3></div></div></div><a class="indexterm" name="id354056"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354085"></a> 5926 5927 writeable (S) 5928 </h3></div></div></div><a class="indexterm" name="id354086"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354123"></a> 5929 5930 write cache size (S) 5931 </h3></div></div></div><a class="indexterm" name="id354124"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 4909 5932 Samba will create an in-memory cache for each oplocked file 4910 5933 (it does <span class="emphasis"><em>not</em></span> do this for … … 4924 5947 # for a 256k cache size per file</code> 4925 5948 </em></span> 4926 </p></dd><dt><span class="term"><a name="WRITELIST"></a>write list (S)</span></dt><dd><p> 5949 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354199"></a> 5950 5951 write list (S) 5952 </h3></div></div></div><a class="indexterm" name="id354200"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4927 5953 This is a list of users that are given read-write access to a service. If the 4928 5954 connecting user is in this list then they will be given write access, no matter 4929 what the <a class=" indexterm" name="id328980"></a>read onlyoption is set to. The list can5955 what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set to. The list can 4930 5956 include group names using the @group syntax. 4931 5957 </p><p> … … 4934 5960 </p><p> 4935 5961 By design, this parameter will not work with the 4936 <a class=" indexterm" name="id328995"></a>security = sharein Samba 3.0.5962 <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in Samba 3.0. 4937 5963 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal"></code> 4938 5964 </em></span> 4939 5965 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 4940 5966 </em></span> 4941 </p></dd><dt><span class="term"><a name="WRITERAW"></a>write raw (G)</span></dt><dd><p>This parameter controls whether or not the server 5967 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354286"></a> 5968 5969 write raw (G) 5970 </h3></div></div></div><a class="indexterm" name="id354287"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4942 5971 will support raw write SMB's when transferring data from clients. 4943 5972 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 4944 5973 </em></span> 4945 </p></dd><dt><span class="term"><a name="WTMPDIRECTORY"></a>wtmp directory (G)</span></dt><dd><p> 5974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id354328"></a> 5975 5976 wtmp directory (G) 5977 </h3></div></div></div><a class="indexterm" name="id354329"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4946 5978 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 4947 5979 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 4955 5987 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 4956 5988 </em></span> 4957 </p></dd></dl></div></div>< div class="refsect1" lang="en"><a name="id329153"></a><h2>WARNINGS</h2><p>5989 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id354406"></a><h2>WARNINGS</h2><p> 4958 5990 Although the configuration file permits service names to contain spaces, your client software may not. 4959 5991 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. 4960 5992 </p><p> 4961 5993 On a similar note, many clients - especially DOS clients - limit service names to eight characters. 4962 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> has no such5994 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> has no such 4963 5995 limitation, but attempts to connect from such clients will fail if they truncate the service names. For this 4964 5996 reason you should probably keep your service names down to eight characters in length. … … 4968 6000 care when designing these sections. In particular, ensure that the permissions on spool directories are 4969 6001 correct. 4970 </p></div><div class="refsect1" lang="en"><a name="id3 29196"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id329207"></a><h2>SEE ALSO</h2><p>4971 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id329286"></a><h2>AUTHOR</h2><p>6002 </p></div><div class="refsect1" lang="en"><a name="id354449"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id354460"></a><h2>SEE ALSO</h2><p> 6003 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id354539"></a><h2>AUTHOR</h2><p> 4972 6004 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 4973 6005 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. 4974 6006 </p><p> 4975 6007 The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another 4976 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">6008 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 4977 6009 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 release by Jeremy Allison. The conversion 4978 6010 to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done by -
branches/samba-3.0/docs/htmldocs/manpages/smbcacls.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcacls</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcacls.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcacls — Set or get ACLs on an NT file or directory names</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcacls</code> {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]</p></div></div><div class="refsect1" lang="en"><a name="id259605"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcacls</code> program manipulates NT Access Control2 Lists (ACLs) on SMB file shares. </p></div><div class="refsect1" lang="en"><a name="id2 59382"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcacls</code> program.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcacls</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcacls.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcacls — Set or get ACLs on an NT file or directory names</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcacls</code> {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]</p></div></div><div class="refsect1" lang="en"><a name="id282786"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcacls</code> program manipulates NT Access Control 2 Lists (ACLs) on SMB file shares. </p></div><div class="refsect1" lang="en"><a name="id283369"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcacls</code> program. 3 3 The format of ACLs is described in the section ACL FORMAT </p><div class="variablelist"><dl><dt><span class="term">-a acls</span></dt><dd><p>Add the ACLs specified to the ACL list. Existing 4 4 access control entries are unchanged. </p></dd><dt><span class="term">-M acls</span></dt><dd><p>Modify the mask value (permissions) for the ACLs … … 13 13 specified service. The username may be of the form "username" in 14 14 which case the user is prompted to enter in a password and the 15 workgroup specified in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file is15 workgroup specified in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file is 16 16 used, or "username%password" or "DOMAIN\username%password" and the 17 17 password and workgroup names are used as provided. </p></dd><dt><span class="term">-C name</span></dt><dd><p>The owner of a file or directory can be changed … … 29 29 the arguments. 30 30 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 31 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 32 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 33 configuration details required by the server. The 34 information in this file includes server-specific 35 information such as what printcap file to use, as well 36 as descriptions of all the services that the server is 37 to provide. See <code class="filename">smb.conf</code> for more information. 38 The default configuration file name is determined at 39 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 40 from 0 to 10. The default value if this parameter is 41 not specified is zero.</p><p>The higher this value, the more detail will be 31 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 32 from 0 to 10. The default value if this parameter is 33 not specified is 0.</p><p>The higher this value, the more detail will be 42 34 logged to the log files about the activities of the 43 35 server. At level 0, only critical errors and serious … … 49 41 use only by developers and generate HUGE amounts of log 50 42 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 51 override the <a class="indexterm" name="id260163"></a> parameter 52 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 43 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 44 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 45 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 46 configuration details required by the server. The 47 information in this file includes server-specific 48 information such as what printcap file to use, as well 49 as descriptions of all the services that the server is 50 to provide. See <code class="filename">smb.conf</code> for more information. 51 The default configuration file name is determined at 52 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 53 53 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 54 54 log.smbd, etc...). The log file is never removed by the client. 55 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60196"></a><h2>ACL FORMAT</h2><p>The format of an ACL is one or more ACL entries separated by55 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283081"></a><h2>ACL FORMAT</h2><p>The format of an ACL is one or more ACL entries separated by 56 56 either commas or newlines. An ACL entry is one of the following: </p><pre class="programlisting"> 57 57 REVISION:<revision number> … … 79 79 permissions</p></li><li><p><span class="emphasis"><em>CHANGE</em></span> - Equivalent to 'RXWD' permissions 80 80 </p></li><li><p><span class="emphasis"><em>FULL</em></span> - Equivalent to 'RWXDPO' 81 permissions</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 00566"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcacls</code> program sets the exit status81 permissions</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id324687"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcacls</code> program sets the exit status 82 82 depending on the success or otherwise of the operations performed. 83 83 The exit status may be one of the following values. </p><p>If the operation succeeded, smbcacls returns and exit … … 85 85 or there was an error getting or setting the ACLs, an exit status 86 86 of 1 is returned. If there was an error parsing any command line 87 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" lang="en"><a name="id3 00595"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300605"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities87 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" lang="en"><a name="id324714"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324724"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 88 88 were created by Andrew Tridgell. Samba is now developed 89 89 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/smbclient.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbclient</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbclient.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbclient — ftp-like client to access SMB/CIFS resources2 on servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbclient</code> [-b <buffer size>] [-d debuglevel] [- L <netbios name>] [-U username] [-I destinationIP] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-k] [-P] [-c <command>]</p></div><div class="cmdsynopsis"><p><code class="literal">smbclient</code> {servicename} [password] [-b <buffer size>] [-d debuglevel] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l logdir] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan] [-k]</p></div></div><div class="refsect1" lang="en"><a name="id260125"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbclient</code> is a client that can1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbclient</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbclient.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbclient — ftp-like client to access SMB/CIFS resources 2 on servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbclient</code> [-b <buffer size>] [-d debuglevel] [-e] [-L <netbios name>] [-U username] [-I destinationIP] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-k] [-P] [-c <command>]</p></div><div class="cmdsynopsis"><p><code class="literal">smbclient</code> {servicename} [password] [-b <buffer size>] [-d debuglevel] [-e] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l log-basename] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan] [-k]</p></div></div><div class="refsect1" lang="en"><a name="id283022"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbclient</code> is a client that can 3 3 'talk' to an SMB/CIFS server. It offers an interface 4 similar to that of the ftp program (see <a href="ftp.1.html"><span class="citerefentry"><span class="refentrytitle">ftp</span>(1)</span></a>).4 similar to that of the ftp program (see <a class="citerefentry" href="ftp.1.html"><span class="citerefentry"><span class="refentrytitle">ftp</span>(1)</span></a>). 5 5 Operations include things like getting files from the server 6 6 to the local machine, putting files from the local machine to 7 7 the server, retrieving directory information from the server 8 and so on. </p></div><div class="refsect1" lang="en"><a name="id2 60162"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">servicename</span></dt><dd><p>servicename is the name of the service8 and so on. </p></div><div class="refsect1" lang="en"><a name="id283058"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">servicename</span></dt><dd><p>servicename is the name of the service 9 9 you want to use on the server. A service name takes the form 10 10 <code class="filename">//server/service</code> where <em class="parameter"><code>server … … 21 21 the <em class="parameter"><code>-R</code></em> parameter to <code class="literal">smbclient</code> or 22 22 using the name resolve order parameter in 23 the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file,23 the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file, 24 24 allowing an administrator to change the order and methods 25 25 by which server names are looked up. </p></dd><dt><span class="term">password</span></dt><dd><p>The password required to access the specified … … 44 44 address in the Samba lmhosts file. If the line in lmhosts has 45 45 no name type attached to the NetBIOS name (see 46 the <a href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details) then46 the <a class="citerefentry" href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details) then 47 47 any name type matches for lookup.</p></li><li><p><code class="constant">host</code>: Do a standard host 48 48 name to IP address resolution, using the system <code class="filename">/etc/hosts … … 61 61 methods as it depends on the target host being on a locally 62 62 connected subnet.</p></li></ul></div><p>If this parameter is not set then the name resolve order 63 defined in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file parameter63 defined in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file parameter 64 64 (name resolve order) will be used. </p><p>The default order is lmhosts, host, wins, bcast and without 65 65 this parameter or any entry in the <em class="parameter"><code>name resolve order 66 </code></em> parameter of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file the name resolution66 </code></em> parameter of the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file the name resolution 67 67 methods will be attempted in this order. </p></dd><dt><span class="term">-M NetBIOS name</span></dt><dd><p>This options allows you to send messages, using 68 68 the "WinPopup" protocol, to another computer. Once a connection is … … 74 74 is over 1600 bytes, as this is the limit of the protocol. 75 75 </p><p> 76 One useful trick is to cat the message through <code class="literal">smbclient</code>. For example: 77 </p><pre class="programlisting"> 78 <code class="literal">cat mymessage.txt | smbclient -M FRED </code> 79 </pre><p> 80 will send the message in the file <code class="filename">mymessage.txt</code> to the machine FRED. 76 One useful trick is to pipe the message through <code class="literal">smbclient</code>. 77 For example: smbclient -M FRED < mymessage.txt will send the 78 message in the file <code class="filename">mymessage.txt</code> to the 79 machine FRED. 81 80 </p><p>You may also find the <em class="parameter"><code>-U</code></em> and 82 81 <em class="parameter"><code>-I</code></em> options useful, as they allow you to 83 control the FROM and TO parts of the message. </p><p>See the <em class="parameter"><code>message command</code></em> parameter in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> for a description of how to handle incoming82 control the FROM and TO parts of the message. </p><p>See the <em class="parameter"><code>message command</code></em> parameter in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> for a description of how to handle incoming 84 83 WinPopup messages in Samba. </p><p><span class="emphasis"><em>Note</em></span>: Copy WinPopup into the startup group 85 84 on your WfWg PCs if you want them to always be able to receive … … 120 119 is 65520 bytes. Setting this value smaller (to 1200 bytes) has been 121 120 observed to speed up file transfers to and from a Win9x server. 122 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 123 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 124 configuration details required by the server. The 125 information in this file includes server-specific 126 information such as what printcap file to use, as well 127 as descriptions of all the services that the server is 128 to provide. See <code class="filename">smb.conf</code> for more information. 129 The default configuration file name is determined at 130 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 131 from 0 to 10. The default value if this parameter is 132 not specified is zero.</p><p>The higher this value, the more detail will be 121 </p></dd><dt><span class="term">-e</span></dt><dd><p>This command line parameter requires the remote 122 server support the UNIX extensions. Request that the connection be 123 encrypted. This is new for Samba 3.2 and will only work with Samba 124 3.2 or above servers. Negotiates SMB encryption using GSSAPI. Uses 125 the given credentials for the encryption negotiaion (either kerberos 126 or NTLMv1/v2 if given domain/username/password triple. Fails the 127 connection if encryption cannot be negotiated. 128 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 129 from 0 to 10. The default value if this parameter is 130 not specified is 1.</p><p>The higher this value, the more detail will be 133 131 logged to the log files about the activities of the 134 132 server. At level 0, only critical errors and serious … … 140 138 use only by developers and generate HUGE amounts of log 141 139 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 142 override the <a class="indexterm" name="id300929"></a> parameter 143 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 140 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 141 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 142 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 143 configuration details required by the server. The 144 information in this file includes server-specific 145 information such as what printcap file to use, as well 146 as descriptions of all the services that the server is 147 to provide. See <code class="filename">smb.conf</code> for more information. 148 The default configuration file name is determined at 149 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 144 150 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 145 151 log.smbd, etc...). The log file is never removed by the client. … … 177 183 it in directly. </p></dd><dt><span class="term">-n <primary NetBIOS name></span></dt><dd><p>This option allows you to override 178 184 the NetBIOS name that Samba uses for itself. This is identical 179 to setting the <a class=" indexterm" name="id301083"></a> parameter in the <code class="filename">smb.conf</code> file.185 to setting the <a class="link" href="smb.conf.5.html#NETBIOSNAME">netbios name</a> parameter in the <code class="filename">smb.conf</code> file. 180 186 However, a command 181 187 line setting will take precedence over settings in … … 262 268 commands to be executed instead of prompting from stdin. <em class="parameter"><code> 263 269 -N</code></em> is implied by <em class="parameter"><code>-c</code></em>.</p><p>This is particularly useful in scripts and for printing stdin 264 to the server, e.g. <code class="literal">-c 'print -'</code>. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 01528"></a><h2>OPERATIONS</h2><p>Once the client is running, the user is presented with270 to the server, e.g. <code class="literal">-c 'print -'</code>. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id325619"></a><h2>OPERATIONS</h2><p>Once the client is running, the user is presented with 265 271 a prompt : </p><p><code class="prompt">smb:\> </code></p><p>The backslash ("\\") indicates the current working directory 266 272 on the server, and will change if the current working directory … … 278 284 performed by issuing a request to the server. Thus the behavior may 279 285 vary from server to server, depending on how the server was implemented. 280 </p><p>The commands available are given here in alphabetical order. </p><div class="variablelist"><dl><dt><span class="term">? [command]</span></dt><dd><p>If <em class="replaceable"><code>command</code></em> is specified, the ? command will display 281 a brief informative message about the specified command. If no 286 </p><p>The commands available are given here in alphabetical order. </p><div class="variablelist"><dl><dt><span class="term">? [command]</span></dt><dd><p>If <em class="replaceable"><code>command</code></em> is specified, the ? command will display 287 a brief informative message about the specified command. If no 282 288 command is specified, a list of available commands will 283 be displayed. </p></dd><dt><span class="term">! [shell command]</span></dt><dd><p>If <em class="replaceable"><code>shell command</code></em> is specified, the ! 284 command will execute a shell locally and run the specified shell 285 command. If no command is specified, a local shell will be run. 289 be displayed. </p></dd><dt><span class="term">! [shell command]</span></dt><dd><p>If <em class="replaceable"><code>shell command</code></em> is specified, the ! 290 command will execute a shell locally and run the specified shell 291 command. If no command is specified, a local shell will be run. 292 </p></dd><dt><span class="term">allinfo file</span></dt><dd><p>The client will request that the server return 293 all known information about a file or directory (including streams). 286 294 </p></dd><dt><span class="term">altname file</span></dt><dd><p>The client will request that the server return 287 295 the "alternate" name (the 8.3 name) for a file or directory. 296 </p></dd><dt><span class="term">archive <number></span></dt><dd><p>Sets the archive level when operating on files. 297 0 means ignore the archive bit, 1 means only operate on files with this bit set, 298 2 means only operate on files with this bit set and reset it after operation, 299 3 means operate on all files and reset it after operation. The default is 0. 300 </p></dd><dt><span class="term">blocksize <number></span></dt><dd><p>Sets the blocksize parameter for a tar operation. The default is 20. 301 Causes tar file to be written out in blocksize*TBLOCK (normally 512 byte) units. 302 </p></dd><dt><span class="term">cancel jobid0 [jobid1] ... [jobidN]</span></dt><dd><p>The client will request that the server cancel 303 the printjobs identified by the given numeric print job ids. 288 304 </p></dd><dt><span class="term">case_sensitive</span></dt><dd><p>Toggles the setting of the flag in SMB packets that 289 305 tells the server to treat filenames as case sensitive. Set to OFF by … … 291 307 currently affects Samba 3.0.5 and above file servers with the case sensitive 292 308 parameter set to auto in the smb.conf. 293 </p></dd><dt><span class="term">cancel jobid0 [jobid1] ... [jobidN]</span></dt><dd><p>The client will request that the server cancel 294 the printjobs identified by the given numeric print job ids. 295 </p></dd><dt><span class="term">chmod file mode in octal</span></dt><dd><p>This command depends on the server supporting the CIFS 309 </p></dd><dt><span class="term">cd <directory name></span></dt><dd><p>If "directory name" is specified, the current 310 working directory on the server will be changed to the directory 311 specified. This operation will fail if for any reason the specified 312 directory is inaccessible. </p><p>If no directory name is specified, the current working 313 directory on the server will be reported. </p></dd><dt><span class="term">chmod file mode in octal</span></dt><dd><p>This command depends on the server supporting the CIFS 296 314 UNIX extensions and will fail if the server does not. The client requests that the server 297 315 change the UNIX permissions to the given octal mode, in standard UNIX format. … … 301 319 currently no way to remotely look up the UNIX uid and gid values for a given name. 302 320 This may be addressed in future versions of the CIFS UNIX extensions. 303 </p></dd><dt><span class="term">cd [directory name]</span></dt><dd><p>If "directory name" is specified, the current 304 working directory on the server will be changed to the directory 305 specified. This operation will fail if for any reason the specified 306 directory is inaccessible. </p><p>If no directory name is specified, the current working 307 directory on the server will be reported. </p></dd><dt><span class="term">del <mask></span></dt><dd><p>The client will request that the server attempt 308 to delete all files matching <em class="replaceable"><code>mask</code></em> from the current working 309 directory on the server. </p></dd><dt><span class="term">dir <mask></span></dt><dd><p>A list of the files matching <em class="replaceable"><code>mask</code></em> in the current 310 working directory on the server will be retrieved from the server 311 and displayed. </p></dd><dt><span class="term">exit</span></dt><dd><p>Terminate the connection with the server and exit 312 from the program. </p></dd><dt><span class="term">get <remote file name> [local file name]</span></dt><dd><p>Copy the file called <code class="filename">remote file name</code> from 313 the server to the machine running the client. If specified, name 314 the local copy <code class="filename">local file name</code>. Note that all transfers in 315 <code class="literal">smbclient</code> are binary. See also the 316 lowercase command. </p></dd><dt><span class="term">help [command]</span></dt><dd><p>See the ? command above. </p></dd><dt><span class="term">lcd [directory name]</span></dt><dd><p>If <em class="replaceable"><code>directory name</code></em> is specified, the current 317 working directory on the local machine will be changed to 318 the directory specified. This operation will fail if for any 319 reason the specified directory is inaccessible. </p><p>If no directory name is specified, the name of the 320 current working directory on the local machine will be reported. 321 </p></dd><dt><span class="term">close <fileid></span></dt><dd><p>Closes a file explicitly opened by the open command. Used for 322 internal Samba testing purposes. 323 </p></dd><dt><span class="term">del <mask></span></dt><dd><p>The client will request that the server attempt 324 to delete all files matching <em class="replaceable"><code>mask</code></em> from the current working 325 directory on the server. </p></dd><dt><span class="term">dir <mask></span></dt><dd><p>A list of the files matching <em class="replaceable"><code>mask</code></em> in the current 326 working directory on the server will be retrieved from the server 327 and displayed. </p></dd><dt><span class="term">du <filename></span></dt><dd><p>Does a directory listing and then prints out the current disk useage and free space on a share. 328 </p></dd><dt><span class="term">echo <number> <data></span></dt><dd><p>Does an SMBecho request to ping the server. Used for internal Samba testing purposes. 329 </p></dd><dt><span class="term">exit</span></dt><dd><p>Terminate the connection with the server and exit 330 from the program. </p></dd><dt><span class="term">get <remote file name> [local file name]</span></dt><dd><p>Copy the file called <code class="filename">remote file name</code> from 331 the server to the machine running the client. If specified, name 332 the local copy <code class="filename">local file name</code>. Note that all transfers in 333 <code class="literal">smbclient</code> are binary. See also the 334 lowercase command. </p></dd><dt><span class="term">getfacl <filename></span></dt><dd><p>Requires the server support the UNIX extensions. Requests and prints 335 the POSIX ACL on a file. 336 </p></dd><dt><span class="term">hardlink <src> <dest<</span></dt><dd><p>Creates a hardlink on the server using Windows CIFS semantics. 337 the POSIX ACL on a file. 338 </p></dd><dt><span class="term">help [command]</span></dt><dd><p>See the ? command above. </p></dd><dt><span class="term">history</span></dt><dd><p>Displays the command history.</p></dd><dt><span class="term">iosize <bytes></span></dt><dd><p>When sending or receiving files, smbclient uses an 339 internal memory buffer by default of size 64512 bytes. This command 340 allows this size to be set to any range between 16384 (0x4000) bytes 341 and 16776960 (0xFFFF00) bytes. Larger sizes may mean more efficient 342 data transfer as smbclient will try and use the most efficient 343 read and write calls for the connected server. 344 </p></dd><dt><span class="term">lcd [directory name]</span></dt><dd><p>If <em class="replaceable"><code>directory name</code></em> is specified, the current 345 working directory on the local machine will be changed to 346 the directory specified. This operation will fail if for any 347 reason the specified directory is inaccessible. </p><p>If no directory name is specified, the name of the 348 current working directory on the local machine will be reported. 321 349 </p></dd><dt><span class="term">link target linkname</span></dt><dd><p>This command depends on the server supporting the CIFS 322 350 UNIX extensions and will fail if the server does not. The client requests that the server 323 351 create a hard link between the linkname and target files. The linkname file 324 352 must not exist. 325 </p></dd><dt><span class="term">lowercase</span></dt><dd><p>Toggle lowercasing of filenames for the get and 326 mget commands. </p><p>When lowercasing is toggled ON, local filenames are converted 353 </p></dd><dt><span class="term">listconnect</span></dt><dd><p>Show the current connections held for DFS purposes. 354 </p></dd><dt><span class="term">lock <filenum> <r|w> <hex-start> <hex-len></span></dt><dd><p>This command depends on the server supporting the CIFS 355 UNIX extensions and will fail if the server does not. Tries to set a POSIX 356 fcntl lock of the given type on the given range. Used for internal Samba testing purposes. 357 </p></dd><dt><span class="term">logon <username> <password></span></dt><dd><p>Establishes a new vuid for this session by logging on again. 358 Replaces the current vuid. Prints out the new vuid. Used for internal Samba testing purposes. 359 </p></dd><dt><span class="term">lowercase</span></dt><dd><p>Toggle lowercasing of filenames for the get and 360 mget commands. 361 </p><p>When lowercasing is toggled ON, local filenames are converted 327 362 to lowercase when using the get and mget commands. This is 328 often useful when copying (say) MSDOS files from a server, because 329 lowercase filenames are the norm on UNIX systems. </p></dd><dt><span class="term">ls <mask></span></dt><dd><p>See the dir command above. </p></dd><dt><span class="term">mask <mask></span></dt><dd><p>This command allows the user to set up a mask 330 which will be used during recursive operation of the mget and 331 mput commands. </p><p>The masks specified to the mget and mput commands act as 332 filters for directories rather than files when recursion is 333 toggled ON. </p><p>The mask specified with the mask command is necessary 363 often useful when copying (say) MSDOS files from a server, because 364 lowercase filenames are the norm on UNIX systems. </p></dd><dt><span class="term">ls <mask></span></dt><dd><p>See the dir command above. </p></dd><dt><span class="term">mask <mask></span></dt><dd><p>This command allows the user to set up a mask 365 which will be used during recursive operation of the mget and 366 mput commands. </p><p>The masks specified to the mget and mput commands act as 367 filters for directories rather than files when recursion is 368 toggled ON. </p><p>The mask specified with the mask command is necessary 334 369 to filter files within those directories. For example, if the 335 mask specified in an mget command is "source*" and the mask 336 specified with the mask command is "*.c" and recursion is 337 toggled ON, the mget command will retrieve all files matching 338 "*.c" in all directories below and including all directories 339 matching "source*" in the current working directory. </p><p>Note that the value for mask defaults to blank (equivalent 340 to "*") and remains so until the mask command is used to change it. 341 It retains the most recently specified value indefinitely. To 342 avoid unexpected results it would be wise to change the value of 343 mask back to "*" after using the mget or mput commands. </p></dd><dt><span class="term">md <directory name></span></dt><dd><p>See the mkdir command. </p></dd><dt><span class="term">mget <mask></span></dt><dd><p>Copy all files matching <em class="replaceable"><code>mask</code></em> from the server to 344 the machine running the client. </p><p>Note that <em class="replaceable"><code>mask</code></em> is interpreted differently during recursive 345 operation and non-recursive operation - refer to the recurse and 346 mask commands for more information. Note that all transfers in 347 <code class="literal">smbclient</code> are binary. See also the lowercase command. </p></dd><dt><span class="term">mkdir <directory name></span></dt><dd><p>Create a new directory on the server (user access 348 privileges permitting) with the specified name. </p></dd><dt><span class="term">mput <mask></span></dt><dd><p>Copy all files matching <em class="replaceable"><code>mask</code></em> in the current working 349 directory on the local machine to the current working directory on 350 the server. </p><p>Note that <em class="replaceable"><code>mask</code></em> is interpreted differently during recursive 351 operation and non-recursive operation - refer to the recurse and mask 352 commands for more information. Note that all transfers in <code class="literal">smbclient</code> 353 are binary. </p></dd><dt><span class="term">print <file name></span></dt><dd><p>Print the specified file from the local machine 354 through a printable service on the server. </p></dd><dt><span class="term">prompt</span></dt><dd><p>Toggle prompting for filenames during operation 355 of the mget and mput commands. </p><p>When toggled ON, the user will be prompted to confirm 356 the transfer of each file during these commands. When toggled 357 OFF, all specified files will be transferred without prompting. 358 </p></dd><dt><span class="term">put <local file name> [remote file name]</span></dt><dd><p>Copy the file called <code class="filename">local file name</code> from the 370 mask specified in an mget command is "source*" and the mask 371 specified with the mask command is "*.c" and recursion is 372 toggled ON, the mget command will retrieve all files matching 373 "*.c" in all directories below and including all directories 374 matching "source*" in the current working directory. </p><p>Note that the value for mask defaults to blank (equivalent 375 to "*") and remains so until the mask command is used to change it. 376 It retains the most recently specified value indefinitely. To 377 avoid unexpected results it would be wise to change the value of 378 mask back to "*" after using the mget or mput commands. </p></dd><dt><span class="term">md <directory name></span></dt><dd><p>See the mkdir command. </p></dd><dt><span class="term">mget <mask></span></dt><dd><p>Copy all files matching <em class="replaceable"><code>mask</code></em> from the server to 379 the machine running the client. </p><p>Note that <em class="replaceable"><code>mask</code></em> is interpreted differently during recursive 380 operation and non-recursive operation - refer to the recurse and 381 mask commands for more information. Note that all transfers in 382 <code class="literal">smbclient</code> are binary. See also the lowercase command. </p></dd><dt><span class="term">mkdir <directory name></span></dt><dd><p>Create a new directory on the server (user access 383 privileges permitting) with the specified name. </p></dd><dt><span class="term">more <file name></span></dt><dd><p>Fetch a remote file and view it with the contents 384 of your PAGER environment variable. 385 </p></dd><dt><span class="term">mput <mask></span></dt><dd><p>Copy all files matching <em class="replaceable"><code>mask</code></em> in the current working 386 directory on the local machine to the current working directory on 387 the server. </p><p>Note that <em class="replaceable"><code>mask</code></em> is interpreted differently during recursive 388 operation and non-recursive operation - refer to the recurse and mask 389 commands for more information. Note that all transfers in <code class="literal">smbclient</code> 390 are binary. </p></dd><dt><span class="term">posix</span></dt><dd><p>Query the remote server to see if it supports the CIFS UNIX 391 extensions and prints out the list of capabilities supported. If so, turn 392 on POSIX pathname processing and large file read/writes (if available),. 393 </p></dd><dt><span class="term">posix_encrypt <domain> <username> <password></span></dt><dd><p>This command depends on the server supporting the CIFS 394 UNIX extensions and will fail if the server does not. Attempt to negotiate 395 SMB encryption on this connection. If smbclient connected with kerberos 396 credentials (-k) the arguments to this command are ignored and the kerberos 397 credentials are used to negotiate GSSAPI signing and sealing instead. See 398 also the -e option to smbclient to force encryption on initial connection. 399 This command is new with Samba 3.2. 400 </p></dd><dt><span class="term">posix_open <filename> <octal mode></span></dt><dd><p>This command depends on the server supporting the CIFS 401 UNIX extensions and will fail if the server does not. Opens a remote file 402 using the CIFS UNIX extensions and prints a fileid. Used for internal Samba 403 testing purposes. 404 </p></dd><dt><span class="term">posix_mkdir <directoryname> <octal mode></span></dt><dd><p>This command depends on the server supporting the CIFS 405 UNIX extensions and will fail if the server does not. Creates a remote directory 406 using the CIFS UNIX extensions with the given mode. 407 </p></dd><dt><span class="term">posix_rmdir <directoryname></span></dt><dd><p>This command depends on the server supporting the CIFS 408 UNIX extensions and will fail if the server does not. Deletes a remote directory 409 using the CIFS UNIX extensions. 410 </p></dd><dt><span class="term">posix_unlink <filename></span></dt><dd><p>This command depends on the server supporting the CIFS 411 UNIX extensions and will fail if the server does not. Deletes a remote file 412 using the CIFS UNIX extensions. 413 </p></dd><dt><span class="term">print <file name></span></dt><dd><p>Print the specified file from the local machine 414 through a printable service on the server. </p></dd><dt><span class="term">prompt</span></dt><dd><p>Toggle prompting for filenames during operation 415 of the mget and mput commands. </p><p>When toggled ON, the user will be prompted to confirm 416 the transfer of each file during these commands. When toggled 417 OFF, all specified files will be transferred without prompting. 418 </p></dd><dt><span class="term">put <local file name> [remote file name]</span></dt><dd><p>Copy the file called <code class="filename">local file name</code> from the 359 419 machine running the client to the server. If specified, 360 name the remote copy <code class="filename">remote file name</code>. Note that all transfers 361 in <code class="literal">smbclient</code> are binary. See also the lowercase command. 362 </p></dd><dt><span class="term">queue</span></dt><dd><p>Displays the print queue, showing the job id, 363 name, size and current status. </p></dd><dt><span class="term">quit</span></dt><dd><p>See the exit command. </p></dd><dt><span class="term">rd <directory name></span></dt><dd><p>See the rmdir command. </p></dd><dt><span class="term">recurse</span></dt><dd><p>Toggle directory recursion for the commands mget 364 and mput. </p><p>When toggled ON, these commands will process all directories 420 name the remote copy <code class="filename">remote file name</code>. Note that all transfers 421 in <code class="literal">smbclient</code> are binary. See also the lowercase command. 422 </p></dd><dt><span class="term">queue</span></dt><dd><p>Displays the print queue, showing the job id, 423 name, size and current status. </p></dd><dt><span class="term">quit</span></dt><dd><p>See the exit command. </p></dd><dt><span class="term">rd <directory name></span></dt><dd><p>See the rmdir command. </p></dd><dt><span class="term">recurse</span></dt><dd><p>Toggle directory recursion for the commands mget 424 and mput. </p><p>When toggled ON, these commands will process all directories 365 425 in the source directory (i.e., the directory they are copying 366 from ) and will recurse into any that match the mask specified 367 to the command. Only files that match the mask specified using 368 the mask command will be retrieved. See also the mask command. 369 </p><p>When recursion is toggled OFF, only files from the current 370 working directory on the source machine that match the mask specified 371 to the mget or mput commands will be copied, and any mask specified 372 using the mask command will be ignored. </p></dd><dt><span class="term">rm <mask></span></dt><dd><p>Remove all files matching <em class="replaceable"><code>mask</code></em> from the current 373 working directory on the server. </p></dd><dt><span class="term">rmdir <directory name></span></dt><dd><p>Remove the specified directory (user access 374 privileges permitting) from the server. </p></dd><dt><span class="term">setmode <filename> <perm=[+|\-]rsha></span></dt><dd><p>A version of the DOS attrib command to set 375 file permissions. For example: </p><p><code class="literal">setmode myfile +r </code></p><p>would make myfile read only. </p></dd><dt><span class="term">stat file</span></dt><dd><p>This command depends on the server supporting the CIFS 426 from ) and will recurse into any that match the mask specified 427 to the command. Only files that match the mask specified using 428 the mask command will be retrieved. See also the mask command. 429 </p><p>When recursion is toggled OFF, only files from the current 430 working directory on the source machine that match the mask specified 431 to the mget or mput commands will be copied, and any mask specified 432 using the mask command will be ignored. </p></dd><dt><span class="term">rm <mask></span></dt><dd><p>Remove all files matching <em class="replaceable"><code>mask</code></em> from the current 433 working directory on the server. </p></dd><dt><span class="term">rmdir <directory name></span></dt><dd><p>Remove the specified directory (user access 434 privileges permitting) from the server. </p></dd><dt><span class="term">setmode <filename> <perm=[+|\-]rsha></span></dt><dd><p>A version of the DOS attrib command to set 435 file permissions. For example: </p><p><code class="literal">setmode myfile +r </code></p><p>would make myfile read only. </p></dd><dt><span class="term">showconnect</span></dt><dd><p>Show the currently active connection held for DFS purposes. 436 </p></dd><dt><span class="term">stat file</span></dt><dd><p>This command depends on the server supporting the CIFS 376 437 UNIX extensions and will fail if the server does not. The client requests the 377 438 UNIX basic info level and prints out the same info that the Linux stat command … … 383 444 UNIX extensions and will fail if the server does not. The client requests that the server 384 445 create a symbolic hard link between the target and linkname files. The linkname file 385 must not exist. Note that the server will not create a link to any path that lies 446 must not exist. Note that the server will not create a link to any path that lies 386 447 outside the currently connected share. This is enforced by the Samba server. 387 448 </p></dd><dt><span class="term">tar <c|x>[IXbgNa]</span></dt><dd><p>Performs a tar operation - see the <em class="parameter"><code>-T 388 </code></em> command line option above. Behavior may be affected 389 by the tarmode command (see below). Using g (incremental) and N 390 (newer) will affect tarmode settings. Note that using the "-" option 391 with tar x may not work - use the command line option instead. 392 </p></dd><dt><span class="term">blocksize <blocksize></span></dt><dd><p>Blocksize. Must be followed by a valid (greater 393 than zero) blocksize. Causes tar file to be written out in 394 <em class="replaceable"><code>blocksize</code></em>*TBLOCK (usually 512 byte) blocks. </p></dd><dt><span class="term">tarmode <full|inc|reset|noreset></span></dt><dd><p>Changes tar's behavior with regard to archive 395 bits. In full mode, tar will back up everything regardless of the 396 archive bit setting (this is the default mode). In incremental mode, 397 tar will only back up files with the archive bit set. In reset mode, 398 tar will reset the archive bit on all files it backs up (implies 399 read/write share). </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id302201"></a><h2>NOTES</h2><p>Some servers are fussy about the case of supplied usernames, 400 passwords, share names (AKA service names) and machine names. 401 If you fail to connect try giving all parameters in uppercase. 402 </p><p>It is often necessary to use the -n option when connecting 403 to some types of servers. For example OS/2 LanManager insists 404 on a valid NetBIOS name being used, so you need to supply a valid 449 </code></em> command line option above. Behavior may be affected 450 by the tarmode command (see below). Using g (incremental) and N 451 (newer) will affect tarmode settings. Note that using the "-" option 452 with tar x may not work - use the command line option instead. 453 </p></dd><dt><span class="term">blocksize <blocksize></span></dt><dd><p>Blocksize. Must be followed by a valid (greater 454 than zero) blocksize. Causes tar file to be written out in 455 <em class="replaceable"><code>blocksize</code></em>*TBLOCK (usually 512 byte) blocks. </p></dd><dt><span class="term">tarmode <full|inc|reset|noreset></span></dt><dd><p>Changes tar's behavior with regard to archive 456 bits. In full mode, tar will back up everything regardless of the 457 archive bit setting (this is the default mode). In incremental mode, 458 tar will only back up files with the archive bit set. In reset mode, 459 tar will reset the archive bit on all files it backs up (implies 460 read/write share). </p></dd><dt><span class="term">unlock <filenum> <hex-start> <hex-len></span></dt><dd><p>This command depends on the server supporting the CIFS 461 UNIX extensions and will fail if the server does not. Tries to unlock a POSIX 462 fcntl lock on the given range. Used for internal Samba testing purposes. 463 </p></dd><dt><span class="term">volume</span></dt><dd><p>Prints the current volume name of the share. 464 </p></dd><dt><span class="term">vuid <number></span></dt><dd><p>Changes the currently used vuid in the protocol to 465 the given arbitrary number. Without an argument prints out the current 466 vuid being used. Used for internal Samba testing purposes. 467 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id326556"></a><h2>NOTES</h2><p>Some servers are fussy about the case of supplied usernames, 468 passwords, share names (AKA service names) and machine names. 469 If you fail to connect try giving all parameters in uppercase. 470 </p><p>It is often necessary to use the -n option when connecting 471 to some types of servers. For example OS/2 LanManager insists 472 on a valid NetBIOS name being used, so you need to supply a valid 405 473 name that would be known to the server.</p><p>smbclient supports long file names where the server 406 supports the LANMAN2 protocol or above. </p></div><div class="refsect1" lang="en"><a name="id3 02222"></a><h2>ENVIRONMENT VARIABLES</h2><p>The variable <code class="envar">USER</code> may contain the474 supports the LANMAN2 protocol or above. </p></div><div class="refsect1" lang="en"><a name="id326576"></a><h2>ENVIRONMENT VARIABLES</h2><p>The variable <code class="envar">USER</code> may contain the 407 475 username of the person using the client. This information is 408 476 used only if the protocol level is high enough to support … … 414 482 to instead of connecting to a server. This functionality is primarily 415 483 intended as a development aid, and works best when using a LMHOSTS 416 file</p></div><div class="refsect1" lang="en"><a name="id3 02255"></a><h2>INSTALLATION</h2><p>The location of the client program is a matter for484 file</p></div><div class="refsect1" lang="en"><a name="id326607"></a><h2>INSTALLATION</h2><p>The location of the client program is a matter for 417 485 individual system administrators. The following are thus 418 486 suggestions only. </p><p>It is recommended that the smbclient software be installed … … 423 491 setuid or setgid! </p><p>The client log files should be put in a directory readable 424 492 and writeable only by the user. </p><p>To test the client, you will need to know the name of a 425 running SMB/CIFS server. It is possible to run <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> as an ordinary user - running that server as a daemon493 running SMB/CIFS server. It is possible to run <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> as an ordinary user - running that server as a daemon 426 494 on a user-accessible port (typically any port number over 1024) 427 would provide a suitable test server. </p></div><div class="refsect1" lang="en"><a name="id3 02304"></a><h2>DIAGNOSTICS</h2><p>Most diagnostics issued by the client are logged in a495 would provide a suitable test server. </p></div><div class="refsect1" lang="en"><a name="id326654"></a><h2>DIAGNOSTICS</h2><p>Most diagnostics issued by the client are logged in a 428 496 specified log file. The log file name is specified at compile time, 429 497 but may be overridden on the command line. </p><p>The number and nature of diagnostics available depends 430 498 on the debug level used by the client. If you have problems, 431 set the debug level to 3 and peruse the log files. </p></div><div class="refsect1" lang="en"><a name="id3 02321"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id302331"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities499 set the debug level to 3 and peruse the log files. </p></div><div class="refsect1" lang="en"><a name="id326670"></a><h2>VERSION</h2><p>This man page is correct for version 3.2 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id326681"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 432 500 were created by Andrew Tridgell. Samba is now developed 433 501 by the Samba Team as an Open Source project similar 434 502 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 435 503 The man page sources were converted to YODL format (another 436 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">504 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 437 505 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 438 506 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbcontrol.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcontrol</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcontrol.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcontrol — send messages to smbd, nmbd or winbindd processes</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcontrol</code> [-i] [-s]</p></div><div class="cmdsynopsis"><p><code class="literal">smbcontrol</code> [destination] [message-type] [parameter]</p></div></div><div class="refsect1" lang="en"><a name="id259554"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbcontrol</code> is a very small program, which2 sends messages to a <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, a <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, or a <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon running on the system.</p></div><div class="refsect1" lang="en"><a name="id259604"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcontrol</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcontrol.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcontrol — send messages to smbd, nmbd or winbindd processes</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcontrol</code> [-i] [-s]</p></div><div class="cmdsynopsis"><p><code class="literal">smbcontrol</code> [destination] [message-type] [parameter]</p></div></div><div class="refsect1" lang="en"><a name="id282735"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbcontrol</code> is a very small program, which 2 sends messages to a <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, a <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, or a <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon running on the system.</p></div><div class="refsect1" lang="en"><a name="id282785"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 3 3 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 4 4 configuration details required by the server. The … … 17 17 to only that process.</p></dd><dt><span class="term">message-type</span></dt><dd><p>Type of message to send. See 18 18 the section <code class="constant">MESSAGE-TYPES</code> for details. 19 </p></dd><dt><span class="term">parameters</span></dt><dd><p>any parameters required for the message-type</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60399"></a><h2>MESSAGE-TYPES</h2><p>Available message types are:</p><div class="variablelist"><dl><dt><span class="term">close-share</span></dt><dd><p>Order smbd to close the client19 </p></dd><dt><span class="term">parameters</span></dt><dd><p>any parameters required for the message-type</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282922"></a><h2>MESSAGE-TYPES</h2><p>Available message types are:</p><div class="variablelist"><dl><dt><span class="term">close-share</span></dt><dd><p>Order smbd to close the client 20 20 connections to the named share. Note that this doesn't affect client 21 21 connections to any other shares. This message-type takes an argument of the … … 60 60 sent to smbd.</p></dd><dt><span class="term">reload-config</span></dt><dd><p>Force daemon to reload smb.conf configuration file. Can be sent 61 61 to <code class="constant">smbd</code>, <code class="constant">nmbd</code>, or <code class="constant">winbindd</code>. 62 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00588"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of63 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00598"></a><h2>SEE ALSO</h2><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> and <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id300623"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities62 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324598"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 63 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324608"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id324632"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 64 64 were created by Andrew Tridgell. Samba is now developed 65 65 by the Samba Team as an Open Source project similar 66 66 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 67 67 The man page sources were converted to YODL format (another 68 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">68 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 69 69 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 70 70 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbcquotas.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcquotas</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcquotas.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcquotas — Set or get QUOTAs of NTFS 5 shares</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcquotas</code> {//server/share} [-u user] [-L] [-F] [-S QUOTA_SET_COMMAND] [-n] [-t] [-v] [-d debuglevel] [-s configfile] [-l logdir] [-V] [-U username] [-N] [-k] [-A]</p></div></div><div class="refsect1" lang="en"><a name="id259376"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcquotas</code> program manipulates NT Quotas on SMB file shares. </p></div><div class="refsect1" lang="en"><a name="id259404"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcquotas</code> program. </p><div class="variablelist"><dl><dt><span class="term">-u user</span></dt><dd><p> Specifies the user of whom the quotas are get or set.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbcquotas</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbcquotas.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbcquotas — Set or get QUOTAs of NTFS 5 shares</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbcquotas</code> {//server/share} [-u user] [-L] [-F] [-S QUOTA_SET_COMMAND] [-n] [-t] [-v] [-d debuglevel] [-s configfile] [-l logdir] [-V] [-U username] [-N] [-k] [-A]</p></div></div><div class="refsect1" lang="en"><a name="id283364"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">smbcquotas</code> program manipulates NT Quotas on SMB file shares. </p></div><div class="refsect1" lang="en"><a name="id283392"></a><h2>OPTIONS</h2><p>The following options are available to the <code class="literal">smbcquotas</code> program. </p><div class="variablelist"><dl><dt><span class="term">-u user</span></dt><dd><p> Specifies the user of whom the quotas are get or set. 2 2 By default the current user's username will be used.</p></dd><dt><span class="term">-L</span></dt><dd><p>Lists all quota records of the share.</p></dd><dt><span class="term">-F</span></dt><dd><p>Show the share quota status and default limits.</p></dd><dt><span class="term">-S QUOTA_SET_COMMAND</span></dt><dd><p>This command sets/modifies quotas for a user or on the share, 3 3 depending on the QUOTA_SET_COMMAND parameter which is described later.</p></dd><dt><span class="term">-n</span></dt><dd><p>This option displays all QUOTA information in numeric … … 8 8 Be verbose. 9 9 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 10 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 11 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 12 configuration details required by the server. The 13 information in this file includes server-specific 14 information such as what printcap file to use, as well 15 as descriptions of all the services that the server is 16 to provide. See <code class="filename">smb.conf</code> for more information. 17 The default configuration file name is determined at 18 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 19 from 0 to 10. The default value if this parameter is 20 not specified is zero.</p><p>The higher this value, the more detail will be 10 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 11 from 0 to 10. The default value if this parameter is 12 not specified is 0.</p><p>The higher this value, the more detail will be 21 13 logged to the log files about the activities of the 22 14 server. At level 0, only critical errors and serious … … 28 20 use only by developers and generate HUGE amounts of log 29 21 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 30 override the <a class="indexterm" name="id260127"></a> parameter 31 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 22 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 23 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 24 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 25 configuration details required by the server. The 26 information in this file includes server-specific 27 information such as what printcap file to use, as well 28 as descriptions of all the services that the server is 29 to provide. See <code class="filename">smb.conf</code> for more information. 30 The default configuration file name is determined at 31 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 32 32 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 33 33 log.smbd, etc...). The log file is never removed by the client. … … 63 63 via the <code class="literal">ps</code> command. To be safe always allow 64 64 <code class="literal">rpcclient</code> to prompt for a password and type 65 it in directly. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00493"></a><h2>QUOTA_SET_COMAND</h2><p>The format of an the QUOTA_SET_COMMAND is an operation65 it in directly. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324615"></a><h2>QUOTA_SET_COMAND</h2><p>The format of an the QUOTA_SET_COMMAND is an operation 66 66 name followed by a set of parameters specific to that operation. 67 67 </p><p>To set user quotas for the user specified by -u or for the … … 75 75 </p><p><strong class="userinput"><code> 76 76 FSQFLAGS:QUOTA_ENABLED/DENY_DISK/LOG_SOFTLIMIT/LOG_HARD_LIMIT 77 </code></strong></p><p>All limits are specified as a number of bytes.</p></div><div class="refsect1" lang="en"><a name="id3 00541"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcquotas</code> program sets the exit status77 </code></strong></p><p>All limits are specified as a number of bytes.</p></div><div class="refsect1" lang="en"><a name="id324659"></a><h2>EXIT STATUS</h2><p>The <code class="literal">smbcquotas</code> program sets the exit status 78 78 depending on the success or otherwise of the operations performed. 79 79 The exit status may be one of the following values. </p><p>If the operation succeeded, smbcquotas returns an exit … … 81 81 or when there was an error getting or setting the quota(s), an exit status 82 82 of 1 is returned. If there was an error parsing any command line 83 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" lang="en"><a name="id3 00570"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300580"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities83 arguments, an exit status of 2 is returned. </p></div><div class="refsect1" lang="en"><a name="id324687"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324696"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 84 84 were created by Andrew Tridgell. Samba is now developed 85 85 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/smbd.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbd</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbd — server to provide SMB/CIFS services to clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbd</code> [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d <debug level>] [-l <log directory>] [-p <port number(s)>] [-P <profiling level>] [-O <socket option>] [-s <configuration file>]</p></div></div><div class="refsect1" lang="en"><a name="id259605"></a><h2>DESCRIPTION</h2><p>This program is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbd</code> is the server daemon that1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbd — server to provide SMB/CIFS services to clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbd</code> [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d <debug level>] [-l <log directory>] [-p <port number(s)>] [-P <profiling level>] [-O <socket option>] [-s <configuration file>]</p></div></div><div class="refsect1" lang="en"><a name="id282811"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbd</code> is the server daemon that 2 2 provides filesharing and printing services to Windows clients. 3 3 The server provides filespace and printer services to … … 9 9 server can provide is given in the man page for the 10 10 configuration file controlling the attributes of those 11 services (see <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. This man page will not describe the11 services (see <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. This man page will not describe the 12 12 services, but will concentrate on the administrative aspects 13 13 of running the server.</p><p>Please note that there are significant security 14 implications to running this server, and the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> manual page should be regarded as mandatory reading before14 implications to running this server, and the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> manual page should be regarded as mandatory reading before 15 15 proceeding with installation.</p><p>A session is created whenever a client requests one. 16 16 Each client gets a copy of the server for each session. This … … 22 22 the configuration file will not affect connections to any service 23 23 that is already established. Either the user will have to 24 disconnect from the service, or <code class="literal">smbd</code> killed and restarted.</p></div><div class="refsect1" lang="en"><a name="id2 59430"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes24 disconnect from the service, or <code class="literal">smbd</code> killed and restarted.</p></div><div class="refsect1" lang="en"><a name="id283420"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes 25 25 the server to operate as a daemon. That is, it detaches 26 26 itself and runs in the background, fielding requests … … 49 49 output, as if the <code class="literal">-S</code> parameter had been 50 50 given. 51 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 52 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 53 configuration details required by the server. The 54 information in this file includes server-specific 55 information such as what printcap file to use, as well 56 as descriptions of all the services that the server is 57 to provide. See <code class="filename">smb.conf</code> for more information. 58 The default configuration file name is determined at 59 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 60 from 0 to 10. The default value if this parameter is 61 not specified is zero.</p><p>The higher this value, the more detail will be 51 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 52 from 0 to 10. The default value if this parameter is 53 not specified is 0.</p><p>The higher this value, the more detail will be 62 54 logged to the log files about the activities of the 63 55 server. At level 0, only critical errors and serious … … 69 61 use only by developers and generate HUGE amounts of log 70 62 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 71 override the <a class="indexterm" name="id260163"></a> parameter 72 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 63 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 64 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 65 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 66 configuration details required by the server. The 67 information in this file includes server-specific 68 information such as what printcap file to use, as well 69 as descriptions of all the services that the server is 70 to provide. See <code class="filename">smb.conf</code> for more information. 71 The default configuration file name is determined at 72 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 73 73 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 74 74 log.smbd, etc...). The log file is never removed by the client. … … 77 77 Samba was built.</p></dd><dt><span class="term">-p|--port<port number(s)></span></dt><dd><p><em class="replaceable"><code>port number(s)</code></em> is a 78 78 space or comma-separated list of TCP ports smbd should listen on. 79 The default value is taken from the <a class=" indexterm" name="id300451"></a>portsparameter in <code class="filename">smb.conf</code></p><p>The default ports are 139 (used for SMB over NetBIOS over TCP)79 The default value is taken from the <a class="link" href="smb.conf.5.html#PORTS">ports</a> parameter in <code class="filename">smb.conf</code></p><p>The default ports are 139 (used for SMB over NetBIOS over TCP) 80 80 and port 445 (used for plain SMB over TCP). 81 81 </p></dd><dt><span class="term">-P|--profiling-level<profiling level></span></dt><dd><p><em class="replaceable"><code>profiling level</code></em> is a … … 83 83 0 turns off profiling, 1 turns on counter profiling only, 84 84 2 turns on complete profiling, and 3 resets all profiling data. 85 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00484"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>If the server is to be run by the85 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324629"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>If the server is to be run by the 86 86 <code class="literal">inetd</code> meta-daemon, this file 87 87 must contain suitable startup information for the … … 94 94 must contain a mapping of service name (e.g., netbios-ssn) 95 95 to service port (e.g., 139) and protocol type (e.g., tcp). 96 </p></dd><dt><span class="term"><code class="filename">/usr/local/samba/lib/smb.conf</code></span></dt><dd><p>This is the default location of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file. Other common places that systems96 </p></dd><dt><span class="term"><code class="filename">/usr/local/samba/lib/smb.conf</code></span></dt><dd><p>This is the default location of the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file. Other common places that systems 97 97 install this file are <code class="filename">/usr/samba/lib/smb.conf</code> 98 98 and <code class="filename">/etc/samba/smb.conf</code>.</p><p>This file describes all the services the server 99 is to make available to clients. See <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> for more information.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id300604"></a><h2>LIMITATIONS</h2><p>On some systems <code class="literal">smbd</code> cannot change uid back99 is to make available to clients. See <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> for more information.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324741"></a><h2>LIMITATIONS</h2><p>On some systems <code class="literal">smbd</code> cannot change uid back 100 100 to root after a setuid() call. Such systems are called 101 101 trapdoor uid systems. If you have such a system, … … 103 103 two different users at once. Attempts to connect the 104 104 second user will result in access denied or 105 similar.</p></div><div class="refsect1" lang="en"><a name="id3 00622"></a><h2>ENVIRONMENT VARIABLES</h2><div class="variablelist"><dl><dt><span class="term"><code class="envar">PRINTER</code></span></dt><dd><p>If no printer name is specified to105 similar.</p></div><div class="refsect1" lang="en"><a name="id324758"></a><h2>ENVIRONMENT VARIABLES</h2><div class="variablelist"><dl><dt><span class="term"><code class="envar">PRINTER</code></span></dt><dd><p>If no printer name is specified to 106 106 printable services, most systems will use the value of 107 107 this variable (or <code class="constant">lp</code> if this variable is 108 108 not defined) as the name of the printer to use. This 109 is not specific to the server, however.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00650"></a><h2>PAM INTERACTION</h2><p>Samba uses PAM for authentication (when presented with a plaintext109 is not specific to the server, however.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324785"></a><h2>PAM INTERACTION</h2><p>Samba uses PAM for authentication (when presented with a plaintext 110 110 password), for account checking (is this account disabled?) and for 111 111 session management. The degree too which samba supports PAM is restricted 112 by the limitations of the SMB protocol and the <a class=" indexterm" name="id300660"></a>obey pam restrictions <ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> paramater. When this is set, the following restrictions apply:112 by the limitations of the SMB protocol and the <a class="link" href="smb.conf.5.html#OBEYPAMRESTRICTIONS">obey pam restrictions</a> <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> paramater. When this is set, the following restrictions apply: 113 113 </p><div class="itemizedlist"><ul type="disc"><li><p><span class="emphasis"><em>Account Validation</em></span>: All accesses to a 114 114 samba server are checked … … 120 120 Note also that some older pam configuration files may need a line 121 121 added for session support. 122 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 00698"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of123 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00709"></a><h2>DIAGNOSTICS</h2><p>Most diagnostics issued by the server are logged122 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id324832"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 123 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324841"></a><h2>DIAGNOSTICS</h2><p>Most diagnostics issued by the server are logged 124 124 in a specified log file. The log file name is specified 125 125 at compile time, but may be overridden on the command line.</p><p>The number and nature of diagnostics available depends … … 130 130 diagnostic. At this stage your best bet is still to grep the 131 131 source code and inspect the conditions that gave rise to the 132 diagnostics you are seeing.</p></div><div class="refsect1" lang="en"><a name="id3 00731"></a><h2>TDB FILES</h2><p>Samba stores it's data in several TDB (Trivial Database) files, usually located in <code class="filename">/var/lib/samba</code>.</p><p>132 diagnostics you are seeing.</p></div><div class="refsect1" lang="en"><a name="id324864"></a><h2>TDB FILES</h2><p>Samba stores it's data in several TDB (Trivial Database) files, usually located in <code class="filename">/var/lib/samba</code>.</p><p> 133 133 (*) information persistent across restarts (but not 134 134 necessarily important to backup). 135 </p><div class="variablelist"><dl><dt><span class="term">account_policy.tdb*</span></dt><dd><p>NT account policy settings such as pw expiration, etc...</p></dd><dt><span class="term">brlock.tdb</span></dt><dd><p>byte range locks</p></dd><dt><span class="term">browse.dat</span></dt><dd><p>browse lists</p></dd><dt><span class="term">connections.tdb</span></dt><dd><p>share connections (used to enforce max connections, etc...)</p></dd><dt><span class="term">gencache.tdb</span></dt><dd><p>generic caching db</p></dd><dt><span class="term">group_mapping.tdb*</span></dt><dd><p>group mapping information</p></dd><dt><span class="term">locking.tdb</span></dt><dd><p>share modes & oplocks</p></dd><dt><span class="term">login_cache.tdb*</span></dt><dd><p>bad pw attempts</p></dd><dt><span class="term">messages.tdb</span></dt><dd><p>Samba messaging system</p></dd><dt><span class="term">netsamlogon_cache.tdb*</span></dt><dd><p>cache of user net_info_3 struct from net_samlogon() request (as a domain member)</p></dd><dt><span class="term">ntdrivers.tdb*</span></dt><dd><p>installed printer drivers</p></dd><dt><span class="term">ntforms.tdb*</span></dt><dd><p>installed printer forms</p></dd><dt><span class="term">ntprinters.tdb*</span></dt><dd><p>installed printer information</p></dd><dt><span class="term">printing/</span></dt><dd><p>directory containing tdb per print queue of cached lpq output</p></dd><dt><span class="term">registry.tdb</span></dt><dd><p>Windows registry skeleton (connect via regedit.exe)</p></dd><dt><span class="term">sessionid.tdb</span></dt><dd><p>session information (e.g. support for 'utmp = yes')</p></dd><dt><span class="term">share_info.tdb*</span></dt><dd><p>share acls</p></dd><dt><span class="term">winbindd_cache.tdb</span></dt><dd><p>winbindd's cache of user lists, etc...</p></dd><dt><span class="term">winbindd_idmap.tdb*</span></dt><dd><p>winbindd's local idmap db</p></dd><dt><span class="term">wins.dat*</span></dt><dd><p>wins database when 'wins support = yes'</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00963"></a><h2>SIGNALS</h2><p>Sending the <code class="literal">smbd</code> a SIGHUP will cause it to135 </p><div class="variablelist"><dl><dt><span class="term">account_policy.tdb*</span></dt><dd><p>NT account policy settings such as pw expiration, etc...</p></dd><dt><span class="term">brlock.tdb</span></dt><dd><p>byte range locks</p></dd><dt><span class="term">browse.dat</span></dt><dd><p>browse lists</p></dd><dt><span class="term">connections.tdb</span></dt><dd><p>share connections (used to enforce max connections, etc...)</p></dd><dt><span class="term">gencache.tdb</span></dt><dd><p>generic caching db</p></dd><dt><span class="term">group_mapping.tdb*</span></dt><dd><p>group mapping information</p></dd><dt><span class="term">locking.tdb</span></dt><dd><p>share modes & oplocks</p></dd><dt><span class="term">login_cache.tdb*</span></dt><dd><p>bad pw attempts</p></dd><dt><span class="term">messages.tdb</span></dt><dd><p>Samba messaging system</p></dd><dt><span class="term">netsamlogon_cache.tdb*</span></dt><dd><p>cache of user net_info_3 struct from net_samlogon() request (as a domain member)</p></dd><dt><span class="term">ntdrivers.tdb*</span></dt><dd><p>installed printer drivers</p></dd><dt><span class="term">ntforms.tdb*</span></dt><dd><p>installed printer forms</p></dd><dt><span class="term">ntprinters.tdb*</span></dt><dd><p>installed printer information</p></dd><dt><span class="term">printing/</span></dt><dd><p>directory containing tdb per print queue of cached lpq output</p></dd><dt><span class="term">registry.tdb</span></dt><dd><p>Windows registry skeleton (connect via regedit.exe)</p></dd><dt><span class="term">sessionid.tdb</span></dt><dd><p>session information (e.g. support for 'utmp = yes')</p></dd><dt><span class="term">share_info.tdb*</span></dt><dd><p>share acls</p></dd><dt><span class="term">winbindd_cache.tdb</span></dt><dd><p>winbindd's cache of user lists, etc...</p></dd><dt><span class="term">winbindd_idmap.tdb*</span></dt><dd><p>winbindd's local idmap db</p></dd><dt><span class="term">wins.dat*</span></dt><dd><p>wins database when 'wins support = yes'</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id325083"></a><h2>SIGNALS</h2><p>Sending the <code class="literal">smbd</code> a SIGHUP will cause it to 136 136 reload its <code class="filename">smb.conf</code> configuration 137 137 file within a short period of time.</p><p>To shut down a user's <code class="literal">smbd</code> process it is recommended … … 141 141 an <code class="literal">smbd</code> is to send it a SIGTERM (-15) signal and wait for 142 142 it to die on its own.</p><p>The debug log level of <code class="literal">smbd</code> may be raised 143 or lowered using <a href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a> program (SIGUSR[1|2] signals are no longer143 or lowered using <a class="citerefentry" href="smbcontrol.1.html"><span class="citerefentry"><span class="refentrytitle">smbcontrol</span>(1)</span></a> program (SIGUSR[1|2] signals are no longer 144 144 used since Samba 2.2). This is to allow transient problems to be diagnosed, 145 145 whilst still running at a normally low log level.</p><p>Note that as the signal handlers send a debug write, … … 148 148 issuing them. It is possible to make the signal handlers safe 149 149 by un-blocking the signals before the select call and re-blocking 150 them after, however this would affect performance.</p></div><div class="refsect1" lang="en"><a name="id3 01049"></a><h2>SEE ALSO</h2><p><a href="hosts_access.5.html"><span class="citerefentry"><span class="refentrytitle">hosts_access</span>(5)</span></a>, <a href="inetd.8.html"><span class="citerefentry"><span class="refentrytitle">inetd</span>(8)</span></a>, <a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <ahref="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>, and the150 them after, however this would affect performance.</p></div><div class="refsect1" lang="en"><a name="id325161"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="hosts_access.5.html"><span class="citerefentry"><span class="refentrytitle">hosts_access</span>(5)</span></a>, <a class="citerefentry" href="inetd.8.html"><span class="citerefentry"><span class="refentrytitle">inetd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>, and the 151 151 Internet RFC's <code class="filename">rfc1001.txt</code>, <code class="filename">rfc1002.txt</code>. 152 152 In addition the CIFS (formerly SMB) specification is available 153 as a link from the Web page <a href="http://samba.org/cifs/" target="_top">154 http://samba.org/cifs/</a>.</p></div><div class="refsect1" lang="en"><a name="id3 01133"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities153 as a link from the Web page <a class="ulink" href="http://samba.org/cifs/" target="_top"> 154 http://samba.org/cifs/</a>.</p></div><div class="refsect1" lang="en"><a name="id325240"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 155 155 were created by Andrew Tridgell. Samba is now developed 156 156 by the Samba Team as an Open Source project similar 157 157 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 158 158 The man page sources were converted to YODL format (another 159 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">159 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 160 160 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 161 161 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbget.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbget</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbget.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbget — wget-like utility for download files over SMB</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbget</code> [-a, --guest] [-r, --resume] [-R, --recursive] [-u, --username=STRING] [-p, --password=STRING] [-w, --workgroup=STRING] [-n, --nonprompt] [-d, --debuglevel=INT] [-D, --dots] [-P, --keep-permissions] [-o, --outputfile] [-f, --rcfile] [-q, --quiet] [-v, --verbose] [-b, --blocksize] [-?, --help] [--usage] {smb://host/share/path/to/file} [smb://url2/] [...]</p></div></div><div class="refsect1" lang="en"><a name="id259410"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbget is a simple utility with wget-like semantics, that can download files from SMB servers. You can specify the files you would like to download on the command-line.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbget</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbget.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbget — wget-like utility for download files over SMB</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbget</code> [-a, --guest] [-r, --resume] [-R, --recursive] [-u, --username=STRING] [-p, --password=STRING] [-w, --workgroup=STRING] [-n, --nonprompt] [-d, --debuglevel=INT] [-D, --dots] [-P, --keep-permissions] [-o, --outputfile] [-f, --rcfile] [-q, --quiet] [-v, --verbose] [-b, --blocksize] [-?, --help] [--usage] {smb://host/share/path/to/file} [smb://url2/] [...]</p></div></div><div class="refsect1" lang="en"><a name="id283397"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbget is a simple utility with wget-like semantics, that can download files from SMB servers. You can specify the files you would like to download on the command-line. 2 2 </p><p> 3 3 The files should be in the smb-URL standard, e.g. use smb://host/share/file 4 4 for the UNC path <span class="emphasis"><em>\\\\HOST\\SHARE\\file</em></span>. 5 </p></div><div class="refsect1" lang="en"><a name="id2 60356"></a><h2>OPTIONS</h2><dt><span class="term">-a, --guest</span></dt><dd><p>Work as user guest</p></dd><dt><span class="term">-r, --resume</span></dt><dd><p>Automatically resume aborted files</p></dd><dt><span class="term">-R, --recursive</span></dt><dd><p>Recursively download files</p></dd><dt><span class="term">-u, --username=STRING</span></dt><dd><p>Username to use</p></dd><dt><span class="term">-p, --password=STRING</span></dt><dd><p>Password to use</p></dd><dt><span class="term">-w, --workgroup=STRING</span></dt><dd><p>Workgroup to use (optional)</p></dd><dt><span class="term">-n, --nonprompt</span></dt><dd><p>Don't ask anything (non-interactive)</p></dd><dt><span class="term">-d, --debuglevel=INT</span></dt><dd><p>Debuglevel to use</p></dd><dt><span class="term">-D, --dots</span></dt><dd><p>Show dots as progress indication</p></dd><dt><span class="term">-P, --keep-permissions</span></dt><dd><p>Set same permissions on local file as are set on remote file.</p></dd><dt><span class="term">-o, --outputfile</span></dt><dd><p>Write the file that is being download to the specified file. Can not be used together with -R.</p></dd><dt><span class="term">-f, --rcfile</span></dt><dd><p>Use specified rcfile. This will be loaded in the order it was specified - e.g. if you specify any options before this one, they might get overriden by the contents of the rcfile.</p></dd><dt><span class="term">-q, --quiet</span></dt><dd><p>Be quiet</p></dd><dt><span class="term">-v, --verbose</span></dt><dd><p>Be verbose</p></dd><dt><span class="term">-b, --blocksize</span></dt><dd><p>Number of bytes to download in a block. Defaults to 64000.</p></dd><dt><span class="term">-?, --help</span></dt><dd><p>Show help message</p></dd><dt><span class="term">--usage</span></dt><dd><p>Display brief usage message</p></dd></div><div class="refsect1" lang="en"><a name="id260196"></a><h2>SMB URLS</h2><p> SMB URL's should be specified in the following format:</p><pre class="programlisting">5 </p></div><div class="refsect1" lang="en"><a name="id283428"></a><h2>OPTIONS</h2><dt><span class="term">-a, --guest</span></dt><dd><p>Work as user guest</p></dd><dt><span class="term">-r, --resume</span></dt><dd><p>Automatically resume aborted files</p></dd><dt><span class="term">-R, --recursive</span></dt><dd><p>Recursively download files</p></dd><dt><span class="term">-u, --username=STRING</span></dt><dd><p>Username to use</p></dd><dt><span class="term">-p, --password=STRING</span></dt><dd><p>Password to use</p></dd><dt><span class="term">-w, --workgroup=STRING</span></dt><dd><p>Workgroup to use (optional)</p></dd><dt><span class="term">-n, --nonprompt</span></dt><dd><p>Don't ask anything (non-interactive)</p></dd><dt><span class="term">-d, --debuglevel=INT</span></dt><dd><p>Debuglevel to use</p></dd><dt><span class="term">-D, --dots</span></dt><dd><p>Show dots as progress indication</p></dd><dt><span class="term">-P, --keep-permissions</span></dt><dd><p>Set same permissions on local file as are set on remote file.</p></dd><dt><span class="term">-o, --outputfile</span></dt><dd><p>Write the file that is being download to the specified file. Can not be used together with -R.</p></dd><dt><span class="term">-f, --rcfile</span></dt><dd><p>Use specified rcfile. This will be loaded in the order it was specified - e.g. if you specify any options before this one, they might get overriden by the contents of the rcfile.</p></dd><dt><span class="term">-q, --quiet</span></dt><dd><p>Be quiet</p></dd><dt><span class="term">-v, --verbose</span></dt><dd><p>Be verbose</p></dd><dt><span class="term">-b, --blocksize</span></dt><dd><p>Number of bytes to download in a block. Defaults to 64000.</p></dd><dt><span class="term">-?, --help</span></dt><dd><p>Show help message</p></dd><dt><span class="term">--usage</span></dt><dd><p>Display brief usage message</p></dd></div><div class="refsect1" lang="en"><a name="id283078"></a><h2>SMB URLS</h2><p> SMB URL's should be specified in the following format:</p><pre class="programlisting"> 6 6 smb://[[[domain;]user[:password@]]server[/share[/path[/file]]]] 7 7 </pre><pre class="programlisting"> … … 9 9 </pre><pre class="programlisting"> 10 10 smb://name/ means, if <em class="replaceable"><code>name</code></em> is a workgroup, all the servers in this workgroup, or if <em class="replaceable"><code>name</code></em> is a server, all the shares on this server. 11 </pre></div><div class="refsect1" lang="en"><a name="id3 00455"></a><h2>EXAMPLES</h2><pre class="programlisting">11 </pre></div><div class="refsect1" lang="en"><a name="id324476"></a><h2>EXAMPLES</h2><pre class="programlisting"> 12 12 # Recursively download 'src' directory 13 13 smbget -R smb://rhonwyn/jelmer/src … … 18 18 # Backup my data on rhonwyn 19 19 smbget -Rr smb://rhonwyn/ 20 </pre></div><div class="refsect1" lang="en"><a name="id3 00469"></a><h2>BUGS</h2><p>Permission denied is returned in some cases where the cause of the error is unknown20 </pre></div><div class="refsect1" lang="en"><a name="id324490"></a><h2>BUGS</h2><p>Permission denied is returned in some cases where the cause of the error is unknown 21 21 (such as an illegally formatted smb:// url or trying to get a directory without -R 22 turned on).</p></div><div class="refsect1" lang="en"><a name="id3 00480"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of23 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00490"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities22 turned on).</p></div><div class="refsect1" lang="en"><a name="id324502"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 23 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324511"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 24 24 were created by Andrew Tridgell. Samba is now developed 25 25 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/smbgetrc.5.html
r39 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbgetrc</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbgetrc.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbgetrc — configuration file for smbget</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">smbgetrc</code></p></div><div class="refsect1" lang="en"><a name="id291815"></a><h2>DESCRIPTION</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbgetrc</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbgetrc.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbgetrc — configuration file for smbget</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">smbgetrc</code></p></div><div class="refsect1" lang="en"><a name="id315548"></a><h2>DESCRIPTION</h2><p> 2 2 This manual page documents the format and options of the <span class="emphasis"><em>smbgetrc</em></span> 3 file. This is the configuration file used by the <a href="smbget.1.html"><span class="citerefentry"><span class="refentrytitle">smbget</span>(1)</span></a>3 file. This is the configuration file used by the <a class="citerefentry" href="smbget.1.html"><span class="citerefentry"><span class="refentrytitle">smbget</span>(1)</span></a> 4 4 utility. The file contains of key-value pairs, one pair on each line. The key 5 5 and value should be separated by a space. 6 6 </p><p>By default, smbget reads its configuration from <span class="emphasis"><em>$HOME/.smbgetrc</em></span>, though 7 other locations can be specified using the command-line options.</p></div><div class="refsect1" lang="en"><a name="id2 59314"></a><h2>OPTIONS</h2><p>7 other locations can be specified using the command-line options.</p></div><div class="refsect1" lang="en"><a name="id283754"></a><h2>OPTIONS</h2><p> 8 8 The following keys can be set: 9 9 </p><div class="variablelist"><dl><dt><span class="term">resume on|off</span></dt><dd><p> 10 10 Whether aborted downloads should be automatically resumed. 11 11 </p></dd><dt><span class="term">recursive on|off</span></dt><dd><p>Whether directories should be downloaded recursively</p></dd><dt><span class="term">username <em class="replaceable"><code>name</code></em></span></dt><dd><p>Username to use when logging in to the remote server. Use an empty string for anonymous access. 12 </p></dd><dt><span class="term">password <em class="replaceable"><code>pass</code></em></span></dt><dd><p>Password to use when logging in.</p></dd><dt><span class="term">workgroup <em class="replaceable"><code>wg</code></em></span></dt><dd><p>Workgroup to use when logging in</p></dd><dt><span class="term">nonprompt on|off</span></dt><dd><p>Turns off asking for username and password. Useful for scripts.</p></dd><dt><span class="term">debuglevel <em class="replaceable"><code>int</code></em></span></dt><dd><p>(Samba) debuglevel to run at. Useful for tracking down protocol level problems.</p></dd><dt><span class="term">dots on|off</span></dt><dd><p>Whether a single dot should be printed for each block that has been downloaded, instead of the default progress indicator.</p></dd><dt><span class="term">blocksize <em class="replaceable"><code>int</code></em></span></dt><dd><p>Number of bytes to put in a block. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59398"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of13 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2 59408"></a><h2>SEE ALSO</h2><p><a href="smbget.1.html"><span class="citerefentry"><span class="refentrytitle">smbget</span>(1)</span></a> and <ahref="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>.14 </p></div><div class="refsect1" lang="en"><a name="id2 59433"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities12 </p></dd><dt><span class="term">password <em class="replaceable"><code>pass</code></em></span></dt><dd><p>Password to use when logging in.</p></dd><dt><span class="term">workgroup <em class="replaceable"><code>wg</code></em></span></dt><dd><p>Workgroup to use when logging in</p></dd><dt><span class="term">nonprompt on|off</span></dt><dd><p>Turns off asking for username and password. Useful for scripts.</p></dd><dt><span class="term">debuglevel <em class="replaceable"><code>int</code></em></span></dt><dd><p>(Samba) debuglevel to run at. Useful for tracking down protocol level problems.</p></dd><dt><span class="term">dots on|off</span></dt><dd><p>Whether a single dot should be printed for each block that has been downloaded, instead of the default progress indicator.</p></dd><dt><span class="term">blocksize <em class="replaceable"><code>int</code></em></span></dt><dd><p>Number of bytes to put in a block. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283384"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 13 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id283394"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbget.1.html"><span class="citerefentry"><span class="refentrytitle">smbget</span>(1)</span></a> and <a class="citerefentry" href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>. 14 </p></div><div class="refsect1" lang="en"><a name="id283418"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 15 15 were created by Andrew Tridgell. Samba is now developed 16 16 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/smbmnt.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbmnt</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbmnt.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbmnt — helper utility for mounting SMB filesystems</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbmnt</code> {mount-point} [-s <share>] [-r] [-u <uid>] [-g <gid>] [-f <mask>] [-d <mask>] [-o <options>] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id259574"></a><h2>DESCRIPTION</h2><p><code class="literal">smbmnt</code> is a helper application used1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbmnt</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbmnt.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbmnt — helper utility for mounting SMB filesystems</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbmnt</code> {mount-point} [-s <share>] [-r] [-u <uid>] [-g <gid>] [-f <mask>] [-d <mask>] [-o <options>] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id282739"></a><h2>DESCRIPTION</h2><p><code class="literal">smbmnt</code> is a helper application used 2 2 by the smbmount program to do the actual mounting of SMB shares. 3 3 <code class="literal">smbmnt</code> can be installed setuid root if you want 4 4 normal users to be able to mount their SMB shares.</p><p>A setuid smbmnt will only allow mounts on directories owned 5 5 by the user, and that the user has write permission on.</p><p>The <code class="literal">smbmnt</code> program is normally invoked 6 by <a href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a>. It should not be invoked directly by users. </p><p>smbmount searches the normal PATH for smbmnt. You must ensure7 that the smbmnt version in your path matches the smbmount used.</p></div><div class="refsect1" lang="en"><a name="id2 59373"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>mount the filesystem read-only6 by <a class="citerefentry" href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a>. It should not be invoked directly by users. </p><p>smbmount searches the normal PATH for smbmnt. You must ensure 7 that the smbmnt version in your path matches the smbmount used.</p></div><div class="refsect1" lang="en"><a name="id282787"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>mount the filesystem read-only 8 8 </p></dd><dt><span class="term">-u uid</span></dt><dd><p>specify the uid that the files will 9 9 be owned by </p></dd><dt><span class="term">-g gid</span></dt><dd><p>specify the gid that the files will be … … 14 14 command is run on a 2.4 or higher Linux kernel. 15 15 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 16 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60376"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield16 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282882"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield 17 17 and others.</p><p>The current maintainer of smbfs and the userspace 18 18 tools <code class="literal">smbmount</code>, <code class="literal">smbumount</code>, 19 and <code class="literal">smbmnt</code> is <a href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>.20 The <a href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a>19 and <code class="literal">smbmnt</code> is <a class="ulink" href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>. 20 The <a class="ulink" href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a> 21 21 is the preferred place to ask questions regarding these programs. 22 22 </p><p>The conversion of this manpage for Samba 2.2 was performed -
branches/samba-3.0/docs/htmldocs/manpages/smbmount.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbmount</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbmount.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbmount — mount an smbfs filesystem</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbmount</code> {service} {mount-point} [-o options]</p></div></div><div class="refsect1" lang="en"><a name="id259314"></a><h2>DESCRIPTION</h2><p><code class="literal">smbmount</code> mounts a Linux SMB filesystem. It1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbmount</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbmount.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbmount — mount an smbfs filesystem</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbmount</code> {service} {mount-point} [-o options]</p></div></div><div class="refsect1" lang="en"><a name="id283736"></a><h2>DESCRIPTION</h2><p><code class="literal">smbmount</code> mounts a Linux SMB filesystem. It 2 2 is usually invoked as <code class="literal">mount.smbfs</code> by 3 the <a href="mount.8.html"><span class="citerefentry"><span class="refentrytitle">mount</span>(8)</span></a> command when using the3 the <a class="citerefentry" href="mount.8.html"><span class="citerefentry"><span class="refentrytitle">mount</span>(8)</span></a> command when using the 4 4 "-t smbfs" option. This command only works in Linux, and the kernel must 5 5 support the smbfs filesystem.</p><p>WARNING: <code class="literal">smbmount</code> is deprecated and not … … 14 14 typically this output will end up in <code class="filename">log.smbmount</code>. The <code class="literal"> 15 15 smbmount</code> process may also be called mount.smbfs.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> <code class="literal">smbmount</code> 16 calls <a href="smbmnt.8.html"><span class="citerefentry"><span class="refentrytitle">smbmnt</span>(8)</span></a> to do the actual mount. You16 calls <a class="citerefentry" href="smbmnt.8.html"><span class="citerefentry"><span class="refentrytitle">smbmnt</span>(8)</span></a> to do the actual mount. You 17 17 must make sure that <code class="literal">smbmnt</code> is in the path so 18 that it can be found. </p></div></div><div class="refsect1" lang="en"><a name="id2 59386"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">username=<arg></span></dt><dd><p>18 that it can be found. </p></div></div><div class="refsect1" lang="en"><a name="id283356"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">username=<arg></span></dt><dd><p> 19 19 specifies the username to connect as. If this is not given, then the environment variable <code class="envar"> USER</code> 20 20 is used. This option can also take the form "user%password" or "user/workgroup" or "user/workgroup%password" … … 31 31 The format of the file is: 32 32 </p><pre class="programlisting"> 33 username = <value>34 password = <value>33 username=value 34 password=value 35 35 </pre><p>This is preferred over having passwords in plaintext in a 36 36 shared file, such as <code class="filename">/etc/fstab</code>. Be sure to protect any … … 54 54 start with is 4. If set too high there will be a lot of 55 55 output, possibly hiding the useful output.</p></dd><dt><span class="term">ip=<arg></span></dt><dd><p>Sets the destination host or IP address. 56 </p></dd><dt><span class="term">workgroup=<arg></span></dt><dd><p>Sets the workgroup on the destination </p></dd><dt><span class="term">sockopt=<arg></span></dt><dd><p>Sets the TCP socket options. See the <a href="smb.conf.5.html#SOCKETOPTIONS" target="_top"><ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></a> <em class="parameter"><code>socket options</code></em> option.56 </p></dd><dt><span class="term">workgroup=<arg></span></dt><dd><p>Sets the workgroup on the destination </p></dd><dt><span class="term">sockopt=<arg></span></dt><dd><p>Sets the TCP socket options. See the <a class="ulink" href="smb.conf.5.html#SOCKETOPTIONS" target="_top"><a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></a> <em class="parameter"><code>socket options</code></em> option. 57 57 </p></dd><dt><span class="term">scope=<arg></span></dt><dd><p>Sets the NetBIOS scope </p></dd><dt><span class="term">guest</span></dt><dd><p>Don't prompt for a password </p></dd><dt><span class="term">ro</span></dt><dd><p>mount read-only </p></dd><dt><span class="term">rw</span></dt><dd><p>mount read-write </p></dd><dt><span class="term">iocharset=<arg></span></dt><dd><p> 58 58 sets the charset used by the Linux side for codepage … … 74 74 in many cases. 75 75 (Note: only kernel 2.4.2 or later) 76 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00480"></a><h2>ENVIRONMENT VARIABLES</h2><p>The variable <code class="envar">USER</code> may contain the username of the76 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324483"></a><h2>ENVIRONMENT VARIABLES</h2><p>The variable <code class="envar">USER</code> may contain the username of the 77 77 person using the client. This information is used only if the 78 78 protocol level is high enough to support session-level … … 83 83 passwords.</p><p>The variable <code class="envar">PASSWD_FILE</code> may contain the pathname 84 84 of a file to read the password from. A single line of input is 85 read and used as the password.</p></div><div class="refsect1" lang="en"><a name="id3 00512"></a><h2>OTHER COMMANDS</h2><p>85 read and used as the password.</p></div><div class="refsect1" lang="en"><a name="id324513"></a><h2>OTHER COMMANDS</h2><p> 86 86 File systems that have been mounted using the <code class="literal">smbmount</code> 87 87 can be unmounted using the <code class="literal">smbumount</code> or the UNIX system 88 88 <code class="literal">umount</code> command. 89 </p></div><div class="refsect1" lang="en"><a name="id3 00541"></a><h2>BUGS</h2><p>Passwords and other options containing , can not be handled.89 </p></div><div class="refsect1" lang="en"><a name="id324538"></a><h2>BUGS</h2><p>Passwords and other options containing , can not be handled. 90 90 For passwords an alternative way of passing them is in a credentials 91 91 file or in the PASSWD environment.</p><p>The credentials file does not handle usernames or passwords with … … 98 98 to try the latest version first. So please try doing that first, 99 99 and always include which versions you use of relevant software 100 when reporting bugs (minimum: samba, kernel, distribution)</p></div><div class="refsect1" lang="en"><a name="id3 00575"></a><h2>SEE ALSO</h2><p>Documentation/filesystems/smbfs.txt in the linux kernel101 source tree may contain additional options and information.</p><p>FreeBSD also has a smbfs, but it is not related to smbmount</p><p>For Solaris, HP-UX and others you may want to look at <a href="smbsh.1.html"><span class="citerefentry"><span class="refentrytitle">smbsh</span>(1)</span></a> or at other solutions, such as102 Sharity or perhaps replacing the SMB server with a NFS server.</p></div><div class="refsect1" lang="en"><a name="id3 00602"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield100 when reporting bugs (minimum: samba, kernel, distribution)</p></div><div class="refsect1" lang="en"><a name="id324573"></a><h2>SEE ALSO</h2><p>Documentation/filesystems/smbfs.txt in the linux kernel 101 source tree may contain additional options and information.</p><p>FreeBSD also has a smbfs, but it is not related to smbmount</p><p>For Solaris, HP-UX and others you may want to look at <a class="citerefentry" href="smbsh.1.html"><span class="citerefentry"><span class="refentrytitle">smbsh</span>(1)</span></a> or at other solutions, such as 102 Sharity or perhaps replacing the SMB server with a NFS server.</p></div><div class="refsect1" lang="en"><a name="id324598"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield 103 103 and others.</p><p>The current maintainer of smbfs and the userspace 104 104 tools <code class="literal">smbmount</code>, <code class="literal">smbumount</code>, 105 and <code class="literal">smbmnt</code> is <a href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>.106 The <a href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a>105 and <code class="literal">smbmnt</code> is <a class="ulink" href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>. 106 The <a class="ulink" href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a> 107 107 is the preferred place to ask questions regarding these programs. 108 108 </p><p>The conversion of this manpage for Samba 2.2 was performed -
branches/samba-3.0/docs/htmldocs/manpages/smbpasswd.5.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbpasswd</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbpasswd.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbpasswd — The Samba encrypted password file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">smbpasswd</code></p></div><div class="refsect1" lang="en"><a name="id291815"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbpasswd is the Samba encrypted password file. It contains1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbpasswd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbpasswd.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbpasswd — The Samba encrypted password file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">smbpasswd</code></p></div><div class="refsect1" lang="en"><a name="id315548"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbpasswd is the Samba encrypted password file. It contains 2 2 the username, Unix user id and the SMB hashed passwords of the 3 3 user, as well as account flag information and the time the 4 4 password was last changed. This file format has been evolving with 5 Samba and has had several different formats in the past. </p></div><div class="refsect1" lang="en"><a name="id2 59311"></a><h2>FILE FORMAT</h2><p>The format of the smbpasswd file used by Samba 2.25 Samba and has had several different formats in the past. </p></div><div class="refsect1" lang="en"><a name="id283750"></a><h2>FILE FORMAT</h2><p>The format of the smbpasswd file used by Samba 2.2 6 6 is very similar to the familiar Unix <code class="filename">passwd(5)</code> 7 7 file. It is an ASCII file containing one line for each user. Each field … … 65 65 will only allow users to log on with no password if the <em class="parameter"><code> 66 66 null passwords</code></em> parameter is set in the 67 <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> config file. </p></li><li><p><span class="emphasis"><em>D</em></span> - This means the account67 <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> config file. </p></li><li><p><span class="emphasis"><em>D</em></span> - This means the account 68 68 is disabled and no SMB/CIFS logins will be allowed for this user. </p></li><li><p><span class="emphasis"><em>X</em></span> - This means the password 69 69 does not expire. </p></li><li><p><span class="emphasis"><em>W</em></span> - This means this account … … 77 77 "Last Change Time") followed by a numeric encoding of the UNIX time 78 78 in seconds since the epoch (1970) that the last change was made. 79 </p></dd></dl></div><p>All other colon separated fields are ignored at this time.</p></div><div class="refsect1" lang="en"><a name="id2 60410"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of80 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2 60421"></a><h2>SEE ALSO</h2><p><a href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <ahref="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>, and79 </p></dd></dl></div><p>All other colon separated fields are ignored at this time.</p></div><div class="refsect1" lang="en"><a name="id282932"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 80 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id282942"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>, and 81 81 the Internet RFC1321 for details on the MD4 algorithm. 82 </p></div><div class="refsect1" lang="en"><a name="id2 60088"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities82 </p></div><div class="refsect1" lang="en"><a name="id282967"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 83 83 were created by Andrew Tridgell. Samba is now developed 84 84 by the Samba Team as an Open Source project similar 85 85 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 86 86 The man page sources were converted to YODL format (another 87 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">87 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 88 88 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 89 89 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbpasswd.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbpasswd</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbpasswd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbpasswd — change a user's SMB password</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbpasswd</code> [-a] [-c <config file>] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-W] [-i] [-L] [username]</p></div></div><div class="refsect1" lang="en"><a name="id259391"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The smbpasswd program has several different1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbpasswd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbpasswd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbpasswd — change a user's SMB password</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbpasswd</code> [-a] [-c <config file>] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-W] [-i] [-L] [username]</p></div></div><div class="refsect1" lang="en"><a name="id283379"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The smbpasswd program has several different 2 2 functions, depending on whether it is run by the <span class="emphasis"><em>root</em></span> user 3 3 or not. When run as a normal user it allows the user to change … … 9 9 however in that it is not <span class="emphasis"><em>setuid root</em></span> but works in 10 10 a client-server mode and communicates with a 11 locally running <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>. As a consequence in order for this to11 locally running <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>. As a consequence in order for this to 12 12 succeed the smbd daemon must be running on the local machine. On a 13 13 UNIX machine the encrypted SMB passwords are usually stored in 14 the <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> file. </p><p>When run by an ordinary user with no options, smbpasswd14 the <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> file. </p><p>When run by an ordinary user with no options, smbpasswd 15 15 will prompt them for their old SMB password and then ask them 16 16 for their new password twice, to ensure that the new password … … 26 26 smbpasswd</code> accesses the local smbpasswd file 27 27 directly, thus enabling changes to be made even if smbd is not 28 running. </p></div><div class="refsect1" lang="en"><a name="id2 60409"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a</span></dt><dd><p>28 running. </p></div><div class="refsect1" lang="en"><a name="id282931"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a</span></dt><dd><p> 29 29 This option specifies that the username following should be added to the local smbpasswd file, with the new 30 30 password typed (type <Enter> for the old password). This option is ignored if the username following … … 47 47 will fail. </p><p>If the smbpasswd file is in the 'old' format (pre-Samba 2.0 48 48 format) there is no space in the user's password entry to write 49 this information and the command will FAIL. See <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for details on the 'old' and new password file formats.49 this information and the command will FAIL. See <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for details on the 'old' and new password file formats. 50 50 </p><p>This option is only available when running smbpasswd as 51 51 root.</p></dd><dt><span class="term">-e</span></dt><dd><p>This option specifies that the username following … … 55 55 the user will be able to authenticate via SMB once again. </p><p>If the smbpasswd file is in the 'old' format, then <code class="literal"> 56 56 smbpasswd</code> will FAIL to enable the account. 57 See <a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for57 See <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for 58 58 details on the 'old' and new password file formats. </p><p>This option is only available when running smbpasswd as root. 59 59 </p></dd><dt><span class="term">-D debuglevel</span></dt><dd><p><em class="replaceable"><code>debuglevel</code></em> is an integer … … 95 95 cause names to be resolved as follows: </p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">lmhosts</code>: Lookup an IP 96 96 address in the Samba lmhosts file. If the line in lmhosts has 97 no name type attached to the NetBIOS name (see the <a href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details) then97 no name type attached to the NetBIOS name (see the <a class="citerefentry" href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details) then 98 98 any name type matches for lookup.</p></li><li><p><code class="constant">host</code>: Do a standard host 99 99 name to IP address resolution, using the system <code class="filename">/etc/hosts … … 111 111 reliable of the name resolution methods as it depends on the 112 112 target host being on a locally connected subnet.</p></li></ul></div><p>The default order is <code class="literal">lmhosts, host, wins, bcast</code> 113 and without this parameter or any entry in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file the name resolution methods will113 and without this parameter or any entry in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file the name resolution methods will 114 114 be attempted in this order. </p></dd><dt><span class="term">-m</span></dt><dd><p>This option tells smbpasswd that the account 115 115 being changed is a MACHINE account. Currently this is used … … 129 129 has been compiled with LDAP support. The <em class="parameter"><code>-w</code></em> 130 130 switch is used to specify the password to be used with the 131 <a class=" indexterm" name="id300725"></a>ldap admin dn. Note that the password is stored in131 <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>. Note that the password is stored in 132 132 the <code class="filename">secrets.tdb</code> and is keyed off 133 133 of the admin's DN. This means that if the value of <em class="parameter"><code>ldap … … 139 139 has been compiled with LDAP support. The <em class="parameter"><code>-W</code></em> 140 140 switch is used to specify the password to be used with the 141 <a class=" indexterm" name="id300773"></a>ldap admin dn. Note that the password is stored in141 <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>. Note that the password is stored in 142 142 the <code class="filename">secrets.tdb</code> and is keyed off 143 143 of the admin's DN. This means that if the value of <em class="parameter"><code>ldap … … 152 152 can specify this parameter as only root has the permission needed 153 153 to modify attributes directly in the local smbpasswd file. 154 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00843"></a><h2>NOTES</h2><p>Since <code class="literal">smbpasswd</code> works in client-server154 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324951"></a><h2>NOTES</h2><p>Since <code class="literal">smbpasswd</code> works in client-server 155 155 mode communicating with a local smbd for a non-root user then 156 156 the smbd daemon must be running for this to work. A common problem … … 158 158 smbd</code> running on the local machine by specifying either <em class="parameter"><code>allow 159 159 hosts</code></em> or <em class="parameter"><code>deny hosts</code></em> entry in 160 the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and neglecting to160 the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and neglecting to 161 161 allow "localhost" access to the smbd. </p><p>In addition, the smbpasswd command is only useful if Samba 162 has been set up to use encrypted passwords. </p></div><div class="refsect1" lang="en"><a name="id3 00892"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300902"></a><h2>SEE ALSO</h2><p><a href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id300927"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities162 has been set up to use encrypted passwords. </p></div><div class="refsect1" lang="en"><a name="id324996"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id325006"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>, <a class="citerefentry" href="Samba.7.html"><span class="citerefentry"><span class="refentrytitle">Samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id325030"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 163 163 were created by Andrew Tridgell. Samba is now developed 164 164 by the Samba Team as an Open Source project similar 165 165 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 166 166 The man page sources were converted to YODL format (another 167 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">167 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 168 168 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 169 169 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbsh.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbsh</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbsh.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbsh — Allows access to remote SMB shares2 using UNIX commands</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbsh</code> [-W workgroup] [-U username] [-P prefix] [-R <name resolve order>] [-d <debug level>] [-l logdir] [-L libdir]</p></div></div><div class="refsect1" lang="en"><a name="id2 59559"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbsh</code> allows you to access an NT filesystem1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbsh</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbsh.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbsh — Allows access to remote SMB shares 2 using UNIX commands</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbsh</code> [-W workgroup] [-U username] [-P prefix] [-R <name resolve order>] [-d <debug level>] [-l logdir] [-L libdir]</p></div></div><div class="refsect1" lang="en"><a name="id282765"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbsh</code> allows you to access an NT filesystem 3 3 using UNIX commands such as <code class="literal">ls</code>, <code class="literal"> 4 4 egrep</code>, and <code class="literal">rcp</code>. You must use a 5 5 shell that is dynamically linked in order for <code class="literal">smbsh</code> 6 to work correctly.</p></div><div class="refsect1" lang="en"><a name="id2 59359"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-W WORKGROUP</span></dt><dd><p>Override the default workgroup specified in the7 workgroup parameter of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file6 to work correctly.</p></div><div class="refsect1" lang="en"><a name="id282815"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-W WORKGROUP</span></dt><dd><p>Override the default workgroup specified in the 7 workgroup parameter of the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file 8 8 for this session. This may be needed to connect to some 9 9 servers. </p></dd><dt><span class="term">-U username[%pass]</span></dt><dd><p>Sets the SMB username or username and password. … … 23 23 The default configuration file name is determined at 24 24 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 25 from 0 to 10. 26 not specified is zero.</p><p>The higher this value, the more detail will be25 from 0 to 10. The default value if this parameter is 26 not specified is 0.</p><p>The higher this value, the more detail will be 27 27 logged to the log files about the activities of the 28 28 server. At level 0, only critical errors and serious … … 34 34 use only by developers and generate HUGE amounts of log 35 35 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 36 override the <a class=" indexterm" name="id260377"></a> parameter36 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 37 37 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-R <name resolve order></span></dt><dd><p>This option is used to determine what naming 38 38 services and in what order to resolve … … 43 43 line in lmhosts has no name type attached to the 44 44 NetBIOS name 45 (see the <a href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details)45 (see the <a class="citerefentry" href="lmhosts.5.html"><span class="citerefentry"><span class="refentrytitle">lmhosts</span>(5)</span></a> for details) 46 46 then any name type matches for lookup. 47 47 </p></li><li><p><code class="constant">host</code>: … … 67 67 </p></li></ul></div><p>If this parameter is not set then the name resolve order 68 68 defined in the <code class="filename">smb.conf</code> file parameter 69 (<a class=" indexterm" name="id260127"></a>) will be used.69 (<a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a>) will be used. 70 70 </p><p>The default order is lmhosts, host, wins, bcast. Without 71 this parameter or any entry in the <a class=" indexterm" name="id260137"></a> parameter of the <code class="filename">smb.conf</code> file, the name71 this parameter or any entry in the <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a> parameter of the <code class="filename">smb.conf</code> file, the name 72 72 resolution methods will be attempted in this order. </p></dd><dt><span class="term">-L libdir</span></dt><dd><p>This parameter specifies the location of the 73 73 shared libraries used by <code class="literal">smbsh</code>. The default 74 74 value is specified at compile time. 75 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 260170"></a><h2>EXAMPLES</h2><p>To use the <code class="literal">smbsh</code> command, execute <code class="literal">75 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324538"></a><h2>EXAMPLES</h2><p>To use the <code class="literal">smbsh</code> command, execute <code class="literal"> 76 76 smbsh</code> from the prompt and enter the username and password 77 77 that authenticates you to the machine running the Windows NT … … 90 90 names for that machine. You could then, for example, use the <code class="literal"> 91 91 cd</code> command to change directories, <code class="literal">vi</code> to 92 edit files, and <code class="literal">rcp</code> to copy files.</p></div><div class="refsect1" lang="en"><a name="id3 00498"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300508"></a><h2>BUGS</h2><p><code class="literal">smbsh</code> works by intercepting the standard92 edit files, and <code class="literal">rcp</code> to copy files.</p></div><div class="refsect1" lang="en"><a name="id324634"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324644"></a><h2>BUGS</h2><p><code class="literal">smbsh</code> works by intercepting the standard 93 93 libc calls with the dynamically loaded versions in <code class="filename"> 94 94 smbwrapper.o</code>. Not all calls have been "wrapped", so … … 97 97 use of <code class="literal">smbsh</code>'s functionality. Most versions 98 98 of UNIX have a <code class="literal">file</code> command that will 99 describe how a program was linked.</p></div><div class="refsect1" lang="en"><a name="id3 00553"></a><h2>SEE ALSO</h2><p><a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id300576"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities99 describe how a program was linked.</p></div><div class="refsect1" lang="en"><a name="id324684"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id324707"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 100 100 were created by Andrew Tridgell. Samba is now developed 101 101 by the Samba Team as an Open Source project similar 102 102 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 103 103 The man page sources were converted to YODL format (another 104 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">104 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 105 105 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 106 106 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbspool.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbspool</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbspool.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbspool — send a print file to an SMB printer</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbspool</code> {job} {user} {title} {copies} {options} [filename]</p></div></div><div class="refsect1" lang="en"><a name="id259551"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbspool is a very small print spooling program that1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbspool</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbspool.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbspool — send a print file to an SMB printer</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbspool</code> {job} {user} {title} {copies} {options} [filename]</p></div></div><div class="refsect1" lang="en"><a name="id282733"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>smbspool is a very small print spooling program that 2 2 sends a print file to an SMB printer. The command-line arguments 3 3 are position-dependent for compatibility with the Common UNIX … … 11 11 pass the URI in argv[0], while shell scripts must set the 12 12 <code class="envar">DEVICE_URI</code> environment variable prior to 13 running smbspool.</p></div><div class="refsect1" lang="en"><a name="id2 59383"></a><h2>OPTIONS</h2><div class="itemizedlist"><ul type="disc"><li><p>The job argument (argv[1]) contains the13 running smbspool.</p></div><div class="refsect1" lang="en"><a name="id283370"></a><h2>OPTIONS</h2><div class="itemizedlist"><ul type="disc"><li><p>The job argument (argv[1]) contains the 14 14 job ID number and is presently not used by smbspool. 15 15 </p></li><li><p>The user argument (argv[2]) contains the … … 24 24 not used by smbspool.</p></li><li><p>The filename argument (argv[6]) contains the 25 25 name of the file to print. If this argument is not specified 26 then the print file is read from the standard input.</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id2 59427"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id259437"></a><h2>SEE ALSO</h2><p><a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id260378"></a><h2>AUTHOR</h2><p><code class="literal">smbspool</code> was written by Michael Sweet26 then the print file is read from the standard input.</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id283414"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id283424"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id282899"></a><h2>AUTHOR</h2><p><code class="literal">smbspool</code> was written by Michael Sweet 27 27 at Easy Software Products.</p><p>The original Samba software and related utilities 28 28 were created by Andrew Tridgell. Samba is now developed … … 30 30 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 31 31 The man page sources were converted to YODL format (another 32 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">32 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 33 33 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 34 34 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbstatus.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbstatus</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbstatus.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbstatus — report on current Samba connections</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbstatus</code> [-P] [-b] [-d <debug level>] [-v] [-L] [-B] [-p] [-S] [-s <configuration file>] [-u <username>]</p></div></div><div class="refsect1" lang="en"><a name="id259581"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbstatus</code> is a very simple program to2 list the current Samba connections.</p></div><div class="refsect1" lang="en"><a name="id2 59607"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-P|--profile</span></dt><dd><p>If samba has been compiled with the1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbstatus</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbstatus.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbstatus — report on current Samba connections</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbstatus</code> [-P] [-b] [-d <debug level>] [-v] [-L] [-B] [-p] [-S] [-s <configuration file>] [-u <username>]</p></div></div><div class="refsect1" lang="en"><a name="id282762"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbstatus</code> is a very simple program to 2 list the current Samba connections.</p></div><div class="refsect1" lang="en"><a name="id282788"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-P|--profile</span></dt><dd><p>If samba has been compiled with the 3 3 profiling option, print only the contents of the profiling 4 shared memory area.</p></dd><dt><span class="term">-b|--brief</span></dt><dd><p>gives brief output.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 5 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 6 configuration details required by the server. The 7 information in this file includes server-specific 8 information such as what printcap file to use, as well 9 as descriptions of all the services that the server is 10 to provide. See <code class="filename">smb.conf</code> for more information. 11 The default configuration file name is determined at 12 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 13 from 0 to 10. The default value if this parameter is 14 not specified is zero.</p><p>The higher this value, the more detail will be 4 shared memory area.</p></dd><dt><span class="term">-b|--brief</span></dt><dd><p>gives brief output.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 5 from 0 to 10. The default value if this parameter is 6 not specified is 0.</p><p>The higher this value, the more detail will be 15 7 logged to the log files about the activities of the 16 8 server. At level 0, only critical errors and serious … … 22 14 use only by developers and generate HUGE amounts of log 23 15 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 24 override the <a class="indexterm" name="id260363"></a> parameter 25 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 16 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 17 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 18 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 19 configuration details required by the server. The 20 information in this file includes server-specific 21 information such as what printcap file to use, as well 22 as descriptions of all the services that the server is 23 to provide. See <code class="filename">smb.conf</code> for more information. 24 The default configuration file name is determined at 25 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 26 26 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 27 27 log.smbd, etc...). The log file is never removed by the client. 28 28 </p></dd><dt><span class="term">-v|--verbose</span></dt><dd><p>gives verbose output.</p></dd><dt><span class="term">-L|--locks</span></dt><dd><p>causes smbstatus to only list locks.</p></dd><dt><span class="term">-B|--byterange</span></dt><dd><p>causes smbstatus to include byte range locks. 29 </p></dd><dt><span class="term">-p|--processes</span></dt><dd><p>print a list of <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes and exit.29 </p></dd><dt><span class="term">-p|--processes</span></dt><dd><p>print a list of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes and exit. 30 30 Useful for scripting.</p></dd><dt><span class="term">-S|--shares</span></dt><dd><p>causes smbstatus to only list shares.</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 31 </p></dd><dt><span class="term">-u|--user=<username></span></dt><dd><p>selects information relevant to <em class="parameter"><code>username</code></em> only.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 260132"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of32 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id 260142"></a><h2>SEE ALSO</h2><p><a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id260167"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities31 </p></dd><dt><span class="term">-u|--user=<username></span></dt><dd><p>selects information relevant to <em class="parameter"><code>username</code></em> only.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324482"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 32 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324491"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id324515"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 33 33 were created by Andrew Tridgell. Samba is now developed 34 34 by the Samba Team as an Open Source project similar 35 35 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 36 36 The man page sources were converted to YODL format (another 37 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">37 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 38 38 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 39 39 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbtar.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbtar</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbtar.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbtar — shell script for backing up SMB/CIFS shares2 directly to UNIX tape drives</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbtar</code> [-r] [-i] [-a] [-v] {-s server} [-p password] [-x services] [-X] [-N filename] [-b blocksize] [-d directory] [-l loglevel] [-u user] [-t tape] {filenames}</p></div></div><div class="refsect1" lang="en"><a name="id2 59370"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbtar</code> is a very small shell script on top3 of <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a> which dumps SMB shares directly to tape.</p></div><div class="refsect1" lang="en"><a name="id259404"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s server</span></dt><dd><p>The SMB/CIFS server that the share resides1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbtar</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbtar.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbtar — shell script for backing up SMB/CIFS shares 2 directly to UNIX tape drives</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbtar</code> [-r] [-i] [-a] [-v] {-s server} [-p password] [-x services] [-X] [-N filename] [-b blocksize] [-d directory] [-l loglevel] [-u user] [-t tape] {filenames}</p></div></div><div class="refsect1" lang="en"><a name="id283357"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbtar</code> is a very small shell script on top 3 of <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a> which dumps SMB shares directly to tape.</p></div><div class="refsect1" lang="en"><a name="id283391"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s server</span></dt><dd><p>The SMB/CIFS server that the share resides 4 4 upon.</p></dd><dt><span class="term">-x service</span></dt><dd><p>The share name on the server to connect to. 5 5 The default is "backup".</p></dd><dt><span class="term">-X</span></dt><dd><p>Exclude mode. Exclude filenames... from tar … … 18 18 after each file is read. </p></dd><dt><span class="term">-r</span></dt><dd><p>Restore. Files are restored to the share 19 19 from the tar file. </p></dd><dt><span class="term">-l log level</span></dt><dd><p>Log (debug) level. Corresponds to the 20 <em class="parameter"><code>-d</code></em> flag of <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id260167"></a><h2>ENVIRONMENT VARIABLES</h2><p>The <em class="parameter"><code>$TAPE</code></em> variable specifies the20 <em class="parameter"><code>-d</code></em> flag of <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283046"></a><h2>ENVIRONMENT VARIABLES</h2><p>The <em class="parameter"><code>$TAPE</code></em> variable specifies the 21 21 default tape device to write to. May be overridden 22 with the -t option. </p></div><div class="refsect1" lang="en"><a name="id2 60184"></a><h2>BUGS</h2><p>The <code class="literal">smbtar</code> script has different23 options from ordinary tar and from smbclient's tar command. </p></div><div class="refsect1" lang="en"><a name="id2 60200"></a><h2>CAVEATS</h2><p>Sites that are more careful about security may not like22 with the -t option. </p></div><div class="refsect1" lang="en"><a name="id283063"></a><h2>BUGS</h2><p>The <code class="literal">smbtar</code> script has different 23 options from ordinary tar and from smbclient's tar command. </p></div><div class="refsect1" lang="en"><a name="id283079"></a><h2>CAVEATS</h2><p>Sites that are more careful about security may not like 24 24 the way the script handles PC passwords. Backup and restore work 25 25 on entire shares; should work on file lists. smbtar works best 26 with GNU tar and may not work well with other versions. </p></div><div class="refsect1" lang="en"><a name="id2 60212"></a><h2>DIAGNOSTICS</h2><p>See the <span class="emphasis"><em>DIAGNOSTICS</em></span> section for the <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a> command.</p></div><div class="refsect1" lang="en"><a name="id300456"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of27 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00466"></a><h2>SEE ALSO</h2><p><a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id300499"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities26 with GNU tar and may not work well with other versions. </p></div><div class="refsect1" lang="en"><a name="id283091"></a><h2>DIAGNOSTICS</h2><p>See the <span class="emphasis"><em>DIAGNOSTICS</em></span> section for the <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a> command.</p></div><div class="refsect1" lang="en"><a name="id324476"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 27 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324485"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id324517"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 28 28 were created by Andrew Tridgell. Samba is now developed 29 29 by the Samba Team as an Open Source project similar 30 to the way the Linux kernel is developed.</p><p><a href="mailto:poultenr@logica.co.uk" target="_top">Ricky Poulten</a>30 to the way the Linux kernel is developed.</p><p><a class="ulink" href="mailto:poultenr@logica.co.uk" target="_top">Ricky Poulten</a> 31 31 wrote the tar extension and this man page. The <code class="literal">smbtar</code> 32 script was heavily rewritten and improved by <a href="mailto:Martin.Kraemer@mch.sni.de" target="_top">Martin Kraemer</a>. Many32 script was heavily rewritten and improved by <a class="ulink" href="mailto:Martin.Kraemer@mch.sni.de" target="_top">Martin Kraemer</a>. Many 33 33 thanks to everyone who suggested extensions, improvements, bug 34 34 fixes, etc. The man page sources were converted to YODL format (another 35 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">35 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 36 36 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 37 37 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/smbtree.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbtree</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbtree.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbtree — A text based smb network browser2 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbtree</code> [-b] [-D] [-S]</p></div></div><div class="refsect1" lang="en"><a name="id2 59313"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbtree</code> is a smb browser program1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbtree</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbtree.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbtree — A text based smb network browser 2 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbtree</code> [-b] [-D] [-S]</p></div></div><div class="refsect1" lang="en"><a name="id283752"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">smbtree</code> is a smb browser program 3 3 in text mode. It is similar to the "Network Neighborhood" found 4 4 on Windows computers. It prints a tree with all 5 5 the known domains, the servers in those domains and 6 6 the shares on the servers. 7 </p></div><div class="refsect1" lang="en"><a name="id2 59555"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-b</span></dt><dd><p>Query network nodes by sending requests7 </p></div><div class="refsect1" lang="en"><a name="id282737"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-b</span></dt><dd><p>Query network nodes by sending requests 8 8 as broadcasts instead of querying the local master browser. 9 9 </p></dd><dt><span class="term">-D</span></dt><dd><p>Only print a list of all … … 12 12 all the domains and servers responding on broadcast or 13 13 known by the master browser. 14 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 15 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 16 configuration details required by the server. The 17 information in this file includes server-specific 18 information such as what printcap file to use, as well 19 as descriptions of all the services that the server is 20 to provide. See <code class="filename">smb.conf</code> for more information. 21 The default configuration file name is determined at 22 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 23 from 0 to 10. The default value if this parameter is 24 not specified is zero.</p><p>The higher this value, the more detail will be 14 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 15 from 0 to 10. The default value if this parameter is 16 not specified is 0.</p><p>The higher this value, the more detail will be 25 17 logged to the log files about the activities of the 26 18 server. At level 0, only critical errors and serious … … 32 24 use only by developers and generate HUGE amounts of log 33 25 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 34 override the <a class="indexterm" name="id259405"></a> parameter 35 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 26 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 27 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 28 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 29 configuration details required by the server. The 30 information in this file includes server-specific 31 information such as what printcap file to use, as well 32 as descriptions of all the services that the server is 33 to provide. See <code class="filename">smb.conf</code> for more information. 34 The default configuration file name is determined at 35 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 36 36 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 37 37 log.smbd, etc...). The log file is never removed by the client. … … 68 68 <code class="literal">rpcclient</code> to prompt for a password and type 69 69 it in directly. </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 70 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id 260117"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba71 suite.</p></div><div class="refsect1" lang="en"><a name="id 260127"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities70 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324469"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba 71 suite.</p></div><div class="refsect1" lang="en"><a name="id324479"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 72 72 were created by Andrew Tridgell. Samba is now developed 73 73 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/smbumount.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbumount</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbumount.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbumount — smbfs umount for normal users</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbumount</code> {mount-point}</p></div></div><div class="refsect1" lang="en"><a name="id259298"></a><h2>DESCRIPTION</h2><p>With this program, normal users can unmount smb-filesystems,1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smbumount</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smbumount.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smbumount — smbfs umount for normal users</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">smbumount</code> {mount-point}</p></div></div><div class="refsect1" lang="en"><a name="id315543"></a><h2>DESCRIPTION</h2><p>With this program, normal users can unmount smb-filesystems, 2 2 provided that it is suid root. <code class="literal">smbumount</code> has 3 3 been written to give normal Linux users more control over their … … 7 7 program works perfectly well.</p><p>WARNING: <code class="literal">smbumount</code> is deprecated and not 8 8 maintained any longer. <code class="literal">umount.cifs</code> 9 should be used instead of <code class="literal">smbumount</code>.</p></div><div class="refsect1" lang="en"><a name="id2 59553"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">mount-point</span></dt><dd><p>The directory to unmount.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id259575"></a><h2>SEE ALSO</h2><p><a href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id259590"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield9 should be used instead of <code class="literal">smbumount</code>.</p></div><div class="refsect1" lang="en"><a name="id283761"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">mount-point</span></dt><dd><p>The directory to unmount.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282739"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smbmount.8.html"><span class="citerefentry"><span class="refentrytitle">smbmount</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id282755"></a><h2>AUTHOR</h2><p>Volker Lendecke, Andrew Tridgell, Michael H. Warfield 10 10 and others.</p><p>The current maintainer of smbfs and the userspace 11 11 tools <code class="literal">smbmount</code>, <code class="literal">smbumount</code>, 12 and <code class="literal">smbmnt</code> is <a href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>.13 The <a href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a>12 and <code class="literal">smbmnt</code> is <a class="ulink" href="mailto:urban@teststation.com" target="_top">Urban Widmark</a>. 13 The <a class="ulink" href="mailto:samba@samba.org" target="_top">SAMBA Mailing list</a> 14 14 is the preferred place to ask questions regarding these programs. 15 15 </p><p>The conversion of this manpage for Samba 2.2 was performed -
branches/samba-3.0/docs/htmldocs/manpages/swat.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>swat</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="swat.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>swat — Samba Web Administration Tool</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">swat</code> [-s <smb config file>] [-a] [-P]</p></div></div><div class="refsect1" lang="en"><a name="id259313"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">swat</code> allows a Samba administrator to2 configure the complex <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file via a Web browser. In addition,1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>swat</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="swat.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>swat — Samba Web Administration Tool</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">swat</code> [-s <smb config file>] [-a] [-P]</p></div></div><div class="refsect1" lang="en"><a name="id283767"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">swat</code> allows a Samba administrator to 2 configure the complex <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file via a Web browser. In addition, 3 3 a <code class="literal">swat</code> configuration page has help links 4 4 to all the configurable options in the <code class="filename">smb.conf</code> file allowing an 5 administrator to easily look up the effects of any change. </p><p><code class="literal">swat</code> is run from <code class="literal">inetd</code> </p></div><div class="refsect1" lang="en"><a name="id2 59587"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s smb configuration file</span></dt><dd><p>The default configuration file path is5 administrator to easily look up the effects of any change. </p><p><code class="literal">swat</code> is run from <code class="literal">inetd</code> </p></div><div class="refsect1" lang="en"><a name="id282794"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s smb configuration file</span></dt><dd><p>The default configuration file path is 6 6 determined at compile time. The file specified contains 7 the configuration details required by the <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> server. This is the file7 the configuration details required by the <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> server. This is the file 8 8 that <code class="literal">swat</code> will modify. 9 9 The information in this file includes server-specific … … 17 17 management page. <code class="literal">swat</code> can then be used to change 18 18 user passwords without users seeing the "View" and "Status" menu 19 buttons.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 20 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 21 configuration details required by the server. The 22 information in this file includes server-specific 23 information such as what printcap file to use, as well 24 as descriptions of all the services that the server is 25 to provide. See <code class="filename">smb.conf</code> for more information. 26 The default configuration file name is determined at 27 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 28 from 0 to 10. The default value if this parameter is 29 not specified is zero.</p><p>The higher this value, the more detail will be 19 buttons.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 20 from 0 to 10. The default value if this parameter is 21 not specified is 0.</p><p>The higher this value, the more detail will be 30 22 logged to the log files about the activities of the 31 23 server. At level 0, only critical errors and serious … … 37 29 use only by developers and generate HUGE amounts of log 38 30 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 39 override the <a class="indexterm" name="id260399"></a> parameter 40 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 31 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 32 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 33 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 34 configuration details required by the server. The 35 information in this file includes server-specific 36 information such as what printcap file to use, as well 37 as descriptions of all the services that the server is 38 to provide. See <code class="filename">smb.conf</code> for more information. 39 The default configuration file name is determined at 40 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 41 41 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 42 42 log.smbd, etc...). The log file is never removed by the client. 43 43 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 44 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60085"></a><h2>INSTALLATION</h2><p>Swat is included as binary package with most distributions. The44 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283106"></a><h2>INSTALLATION</h2><p>Swat is included as binary package with most distributions. The 45 45 package manager in this case takes care of the installation and 46 46 configuration. This section is only for those who have compiled … … 49 49 </code> to install the <code class="literal">swat</code> binary 50 50 and the various help files and images. A default install would put 51 these in: </p><div class="itemizedlist"><ul type="disc"><li><p>/usr/local/samba/sbin/swat</p></li><li><p>/usr/local/samba/swat/images/*</p></li><li><p>/usr/local/samba/swat/help/*</p></li></ul></div><div class="refsect2" lang="en"><a name="id 260129"></a><h3>Inetd Installation</h3><p>You need to edit your <code class="filename">/etc/inetd.conf51 these in: </p><div class="itemizedlist"><ul type="disc"><li><p>/usr/local/samba/sbin/swat</p></li><li><p>/usr/local/samba/swat/images/*</p></li><li><p>/usr/local/samba/swat/help/*</p></li></ul></div><div class="refsect2" lang="en"><a name="id324495"></a><h3>Inetd Installation</h3><p>You need to edit your <code class="filename">/etc/inetd.conf 52 52 </code> and <code class="filename">/etc/services</code> 53 53 to enable SWAT to be launched via <code class="literal">inetd</code>.</p><p>In <code class="filename">/etc/services</code> you need to … … 63 63 and <code class="filename">/etc/inetd.conf</code> you need to send a 64 64 HUP signal to inetd. To do this use <code class="literal">kill -1 PID 65 </code> where PID is the process ID of the inetd daemon. </p></div></div><div class="refsect1" lang="en"><a name="id3 00455"></a><h2>LAUNCHING</h2><p>To launch SWAT just run your favorite web browser and65 </code> where PID is the process ID of the inetd daemon. </p></div></div><div class="refsect1" lang="en"><a name="id324590"></a><h2>LAUNCHING</h2><p>To launch SWAT just run your favorite web browser and 66 66 point it at "http://localhost:901/".</p><p>Note that you can attach to SWAT from any IP connected 67 67 machine but connecting from a remote machine leaves your 68 68 connection open to password sniffing as passwords will be sent 69 in the clear over the wire. </p></div><div class="refsect1" lang="en"><a name="id3 00471"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>This file must contain suitable startup69 in the clear over the wire. </p></div><div class="refsect1" lang="en"><a name="id324606"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/inetd.conf</code></span></dt><dd><p>This file must contain suitable startup 70 70 information for the meta-daemon.</p></dd><dt><span class="term"><code class="filename">/etc/services</code></span></dt><dd><p>This file must contain a mapping of service name 71 71 (e.g., swat) to service port (e.g., 901) and protocol type 72 (e.g., tcp). </p></dd><dt><span class="term"><code class="filename">/usr/local/samba/lib/smb.conf</code></span></dt><dd><p>This is the default location of the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file that swat edits. Other72 (e.g., tcp). </p></dd><dt><span class="term"><code class="filename">/usr/local/samba/lib/smb.conf</code></span></dt><dd><p>This is the default location of the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> server configuration file that swat edits. Other 73 73 common places that systems install this file are <code class="filename"> 74 74 /usr/samba/lib/smb.conf</code> and <code class="filename">/etc/smb.conf 75 75 </code>. This file describes all the services the server 76 is to make available to clients. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00549"></a><h2>WARNINGS</h2><p><code class="literal">swat</code> will rewrite your <ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. It will rearrange the entries and delete all76 is to make available to clients. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324679"></a><h2>WARNINGS</h2><p><code class="literal">swat</code> will rewrite your <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. It will rearrange the entries and delete all 77 77 comments, <em class="parameter"><code>include=</code></em> and <em class="parameter"><code>copy= 78 78 </code></em> options. If you have a carefully crafted <code class="filename"> 79 smb.conf</code> then back it up or don't use swat! </p></div><div class="refsect1" lang="en"><a name="id3 00592"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id300602"></a><h2>SEE ALSO</h2><p><code class="literal">inetd(5)</code>, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id300632"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities79 smb.conf</code> then back it up or don't use swat! </p></div><div class="refsect1" lang="en"><a name="id324718"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324728"></a><h2>SEE ALSO</h2><p><code class="literal">inetd(5)</code>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id324757"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 80 80 were created by Andrew Tridgell. Samba is now developed 81 81 by the Samba Team as an Open Source project similar 82 82 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 83 83 The man page sources were converted to YODL format (another 84 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">84 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 85 85 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 86 86 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/tdbbackup.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbbackup</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbbackup.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbbackup — tool for backing up and for validating the integrity of samba .tdb files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbbackup</code> [-s suffix] [-v] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id259313"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbbackup</code> is a tool that may be used to backup samba .tdb1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbbackup</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbbackup.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbbackup — tool for backing up and for validating the integrity of samba .tdb files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbbackup</code> [-s suffix] [-v] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id283752"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbbackup</code> is a tool that may be used to backup samba .tdb 2 2 files. This tool may also be used to verify the integrity of the .tdb files prior 3 3 to samba startup or during normal operation. If it finds file damage and it finds 4 4 a prior backup the backup file will be restored. 5 </p></div><div class="refsect1" lang="en"><a name="id2 59555"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h</span></dt><dd><p>5 </p></div><div class="refsect1" lang="en"><a name="id282737"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h</span></dt><dd><p> 6 6 Get help information. 7 7 </p></dd><dt><span class="term">-s suffix</span></dt><dd><p> … … 12 12 The <code class="literal">-v</code> will check the database for damages (currupt data) 13 13 which if detected causes the backup to be restored. 14 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59364"></a><h2>COMMANDS</h2><p><span class="emphasis"><em>GENERAL INFORMATION</em></span></p><p>14 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283351"></a><h2>COMMANDS</h2><p><span class="emphasis"><em>GENERAL INFORMATION</em></span></p><p> 15 15 The <code class="literal">tdbbackup</code> utility can safely be run at any time. It was designed so 16 16 that it can be used at any time to validate the integrity of tdb files, even during Samba … … 30 30 <code class="literal">*.tdb</code> located in the /usr/local/samba/var directory or on some 31 31 systems in the /var/cache or /var/lib/samba directories. 32 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id2 59437"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id260362"></a><h2>AUTHOR</h2><p>32 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id283424"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id282885"></a><h2>AUTHOR</h2><p> 33 33 The original Samba software and related utilities were created by Andrew Tridgell. 34 34 Samba is now developed by the Samba Team as an Open Source project similar to the way -
branches/samba-3.0/docs/htmldocs/manpages/tdbdump.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbdump</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbdump.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbdump — tool for printing the contents of a TDB file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbdump</code> {filename}</p></div></div><div class="refsect1" lang="en"><a name="id259298"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbdump</code> is a very simple utility that 'dumps' the1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbdump</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbdump.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbdump — tool for printing the contents of a TDB file</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbdump</code> {filename}</p></div></div><div class="refsect1" lang="en"><a name="id283737"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbdump</code> is a very simple utility that 'dumps' the 2 2 contents of a TDB (Trivial DataBase) file to standard output in a 3 3 human-readable format. 4 4 </p><p>This tool can be used when debugging problems with TDB files. It is 5 5 intended for those who are somewhat familiar with Samba internals. 6 </p></div><div class="refsect1" lang="en"><a name="id2 59544"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id259554"></a><h2>AUTHOR</h2><p>6 </p></div><div class="refsect1" lang="en"><a name="id282726"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id282736"></a><h2>AUTHOR</h2><p> 7 7 The original Samba software and related utilities were created by Andrew Tridgell. 8 8 Samba is now developed by the Samba Team as an Open Source project similar to the way -
branches/samba-3.0/docs/htmldocs/manpages/tdbtool.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbtool</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbtool.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbtool — manipulate the contents TDB files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbtool</code></p></div><div class="cmdsynopsis"><p><code class="literal">tdbtool</code>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>tdbtool</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="tdbtool.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>tdbtool — manipulate the contents TDB files</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">tdbtool</code></p></div><div class="cmdsynopsis"><p><code class="literal">tdbtool</code> 2 2 <em class="replaceable"><code>TDBFILE</code></em> 3 3 [ 4 4 <em class="replaceable"><code>COMMANDS</code></em> 5 ...]</p></div></div><div class="refsect1" lang="en"><a name="id2 59323"></a><h2>DESCRIPTION</h2><p>This tool is part of the6 <a href="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbtool</code> a tool for displaying and5 ...]</p></div></div><div class="refsect1" lang="en"><a name="id283764"></a><h2>DESCRIPTION</h2><p>This tool is part of the 6 <a class="citerefentry" href="samba.1.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(1)</span></a> suite.</p><p><code class="literal">tdbtool</code> a tool for displaying and 7 7 altering the contents of Samba TDB (Trivial DataBase) files. Each 8 8 of the commands listed below can be entered interactively or 9 provided on the command line.</p></div><div class="refsect1" lang="en"><a name="id2 59565"></a><h2>COMMANDS</h2><div class="variablelist"><dl><dt><span class="term"><code class="option">create</code>9 provided on the command line.</p></div><div class="refsect1" lang="en"><a name="id282748"></a><h2>COMMANDS</h2><div class="variablelist"><dl><dt><span class="term"><code class="option">create</code> 10 10 <em class="replaceable"><code>TDBFILE</code></em></span></dt><dd><p>Create a new database named 11 11 <em class="replaceable"><code>TDBFILE</code></em>. … … 57 57 <code class="option">quit</code> 58 58 </span></dt><dd><p>Exit <code class="literal">tdbtool</code>. 59 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60185"></a><h2>CAVEATS</h2><p>The contents of the Samba TDB files are private59 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283064"></a><h2>CAVEATS</h2><p>The contents of the Samba TDB files are private 60 60 to the implementation and should not be altered with 61 61 <code class="literal">tdbtool</code>. 62 </p></div><div class="refsect1" lang="en"><a name="id2 60202"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id260212"></a><h2>AUTHOR</h2><p> The original Samba software and related utilities were62 </p></div><div class="refsect1" lang="en"><a name="id283081"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id283090"></a><h2>AUTHOR</h2><p> The original Samba software and related utilities were 63 63 created by Andrew Tridgell. Samba is now developed by the 64 64 Samba Team as an Open Source project similar to the way the -
branches/samba-3.0/docs/htmldocs/manpages/testparm.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>testparm</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="testparm.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>testparm — check an smb.conf configuration file for2 internal correctness</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">testparm</code> [-s] [-h] [-v] [-L <servername>] [-t <encoding>] {config filename} [hostname hostIP]</p></div></div><div class="refsect1" lang="en"><a name="id2 59558"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">testparm</code> is a very simple test program3 to check an <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> configuration file for1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>testparm</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="testparm.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>testparm — check an smb.conf configuration file for 2 internal correctness</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">testparm</code> [-s] [-h] [-v] [-L <servername>] [-t <encoding>] {config filename} [hostname hostIP]</p></div></div><div class="refsect1" lang="en"><a name="id282739"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">testparm</code> is a very simple test program 3 to check an <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> configuration file for 4 4 internal correctness. If this program reports no problems, you 5 5 can use the configuration file with confidence that <code class="literal">smbd … … 12 12 smb.conf</code> file it returns an exit code of 1 to the calling 13 13 program, else it returns an exit code of 0. This allows shell scripts 14 to test the output from <code class="literal">testparm</code>.</p></div><div class="refsect1" lang="en"><a name="id2 59384"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s</span></dt><dd><p>Without this option, <code class="literal">testparm</code>14 to test the output from <code class="literal">testparm</code>.</p></div><div class="refsect1" lang="en"><a name="id283371"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-s</span></dt><dd><p>Without this option, <code class="literal">testparm</code> 15 15 will prompt for a carriage return after printing the service 16 16 names and before dumping the service definitions.</p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. … … 19 19 This is useful for testing include files specified with the 20 20 %L macro. </p></dd><dt><span class="term">-v</span></dt><dd><p>If this option is specified, testparm 21 will also output all options that were not used in <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> and are thus set to their defaults.</p></dd><dt><span class="term">-t encoding</span></dt><dd><p>21 will also output all options that were not used in <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> and are thus set to their defaults.</p></dd><dt><span class="term">-t encoding</span></dt><dd><p> 22 22 Output data in specified encoding. 23 23 </p></dd><dt><span class="term">--parameter-name parametername</span></dt><dd><p> … … 32 32 </p></dd><dt><span class="term">configfilename</span></dt><dd><p>This is the name of the configuration file 33 33 to check. If this parameter is not present then the 34 default <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file will be checked.34 default <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file will be checked. 35 35 </p></dd><dt><span class="term">hostname</span></dt><dd><p>If this parameter and the following are 36 36 specified, then <code class="literal">testparm</code> will examine the <em class="parameter"><code>hosts 37 37 allow</code></em> and <em class="parameter"><code>hosts deny</code></em> 38 parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file to38 parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file to 39 39 determine if the hostname with this IP address would be 40 40 allowed access to the <code class="literal">smbd</code> server. If … … 42 42 be supplied.</p></dd><dt><span class="term">hostIP</span></dt><dd><p>This is the IP address of the host specified 43 43 in the previous parameter. This address must be supplied 44 if the hostname parameter is supplied. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60139"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><ahref="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></span></dt><dd><p>This is usually the name of the configuration45 file used by <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.46 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60174"></a><h2>DIAGNOSTICS</h2><p>The program will issue a message saying whether the44 if the hostname parameter is supplied. </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283020"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a></span></dt><dd><p>This is usually the name of the configuration 45 file used by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>. 46 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283054"></a><h2>DIAGNOSTICS</h2><p>The program will issue a message saying whether the 47 47 configuration file loaded OK or not. This message may be preceded by 48 48 errors and warnings if the file did not load. If the file was 49 49 loaded OK, the program then dumps all known service details 50 to stdout. </p></div><div class="refsect1" lang="en"><a name="id2 60186"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of51 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2 60197"></a><h2>SEE ALSO</h2><p><a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id300446"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities50 to stdout. </p></div><div class="refsect1" lang="en"><a name="id283066"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 51 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id283077"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id324465"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 52 52 were created by Andrew Tridgell. Samba is now developed 53 53 by the Samba Team as an Open Source project similar 54 54 to the way the Linux kernel is developed.</p><p>The original Samba man pages were written by Karl Auer. 55 55 The man page sources were converted to YODL format (another 56 excellent piece of Open Source software, available at <a href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top">56 excellent piece of Open Source software, available at <a class="ulink" href="ftp://ftp.icce.rug.nl/pub/unix/" target="_top"> 57 57 ftp://ftp.icce.rug.nl/pub/unix/</a>) and updated for the Samba 2.0 58 58 release by Jeremy Allison. The conversion to DocBook for -
branches/samba-3.0/docs/htmldocs/manpages/umount.cifs.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>umount.cifs</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="umount.cifs.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>umount.cifs — for normal, non-root users, to unmount their own Common Internet File System (CIFS) mounts</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">umount.cifs</code> {mount-point} [-nVvhfle]</p></div></div><div class="refsect1" lang="en"><a name="id259307"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>umount.cifs unmounts a Linux CIFS filesystem. It can be invoked1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>umount.cifs</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="umount.cifs.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>umount.cifs — for normal, non-root users, to unmount their own Common Internet File System (CIFS) mounts</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">umount.cifs</code> {mount-point} [-nVvhfle]</p></div></div><div class="refsect1" lang="en"><a name="id283746"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>umount.cifs unmounts a Linux CIFS filesystem. It can be invoked 2 2 indirectly by the 3 <a href="umount.8.html"><span class="citerefentry"><span class="refentrytitle">umount</span>(8)</span></a> command3 <a class="citerefentry" href="umount.8.html"><span class="citerefentry"><span class="refentrytitle">umount</span>(8)</span></a> command 4 4 when umount.cifs is in /sbin directory, unless you specify the "-i" option to umount. Specifying -i to umount avoids execution of umount helpers such as umount.cifs. The umount.cifs command only works in Linux, and the kernel must 5 5 support the cifs filesystem. The CIFS protocol is the successor to the … … 12 12 setuid root (or equivalently update the /etc/permissions file) to allow non-root users to umount shares to directories for which they have write permission. The umount.cifs utility is typically 13 13 not needed if unmounts need only be performed by root users, or if user mounts and unmounts 14 can rely on specifying explicit entries in /etc/fstab See</p><p><a href="fstab.5.html"><span class="citerefentry"><span class="refentrytitle">fstab</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id259573"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">--verbose</span></dt><dd><p>print additional debugging information</p></dd><dt><span class="term">--no-mtab</span></dt><dd><p>Do not update the mtab even if unmount completes successfully (/proc/mounts will still display the correct information)</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id259606"></a><h2>NOTES</h2><p>This command is normally intended to be installed setuid (since root users can already run unmount). An alternative to using umount.cifs is to add specfic entries for the user mounts that you wish a particular user or users to mount and unmount to /etc/fstab</p></div><div class="refsect1" lang="en"><a name="id259370"></a><h2>CONFIGURATION</h2><p>14 can rely on specifying explicit entries in /etc/fstab See</p><p><a class="citerefentry" href="fstab.5.html"><span class="citerefentry"><span class="refentrytitle">fstab</span>(5)</span></a></p></div><div class="refsect1" lang="en"><a name="id282755"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">--verbose</span></dt><dd><p>print additional debugging information</p></dd><dt><span class="term">--no-mtab</span></dt><dd><p>Do not update the mtab even if unmount completes successfully (/proc/mounts will still display the correct information)</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282788"></a><h2>NOTES</h2><p>This command is normally intended to be installed setuid (since root users can already run unmount). An alternative to using umount.cifs is to add specfic entries for the user mounts that you wish a particular user or users to mount and unmount to /etc/fstab</p></div><div class="refsect1" lang="en"><a name="id283357"></a><h2>CONFIGURATION</h2><p> 15 15 The primary mechanism for making configuration changes and for reading 16 16 debug information for the cifs vfs is via the Linux /proc filesystem. … … 18 18 configuration files and pseudo files which can display debug information. 19 19 For more information see the kernel file <code class="filename">fs/cifs/README</code>. 20 </p></div><div class="refsect1" lang="en"><a name="id2 59393"></a><h2>BUGS</h2><p>At this time umount.cifs does not lock the mount table using the same lock as the umount utility does, so do not attempt to do multiple unmounts from different processes (and in particular unmounts of a cifs mount and another type of filesystem mount at the same time).20 </p></div><div class="refsect1" lang="en"><a name="id283380"></a><h2>BUGS</h2><p>At this time umount.cifs does not lock the mount table using the same lock as the umount utility does, so do not attempt to do multiple unmounts from different processes (and in particular unmounts of a cifs mount and another type of filesystem mount at the same time). 21 21 </p><p>If the same mount point is mounted multiple times by cifs, umount.cifs will remove all of the matching entries from the mount table (although umount.cifs will actually only unmount the last one), rather than only removing the last matching entry in /etc/mtab. The pseudofile /proc/mounts will display correct information though, and the lack of an entry in /etc/mtab does not prevent subsequent unmounts.</p><p> 22 22 Note that the typical response to a bug report is a suggestion … … 25 25 when reporting bugs (minimum: umount.cifs (try umount.cifs -V), kernel (see /proc/version) and 26 26 server type you are trying to contact. 27 </p></div><div class="refsect1" lang="en"><a name="id2 59418"></a><h2>VERSION</h2><p>This man page is correct for version 1.34 of28 the cifs vfs filesystem (roughly Linux kernel 2.6.12).</p></div><div class="refsect1" lang="en"><a name="id2 59428"></a><h2>SEE ALSO</h2><p>27 </p></div><div class="refsect1" lang="en"><a name="id283405"></a><h2>VERSION</h2><p>This man page is correct for version 1.34 of 28 the cifs vfs filesystem (roughly Linux kernel 2.6.12).</p></div><div class="refsect1" lang="en"><a name="id283415"></a><h2>SEE ALSO</h2><p> 29 29 Documentation/filesystems/cifs.txt and fs/cifs/README in the linux kernel 30 30 source tree may contain additional options and information. 31 </p><p><a href="mount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">mount.cifs</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id260364"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax was loosely based on the umount utility and the manpage was loosely based on that of mount.cifs.8. The man page was created by Steve French</p><p>The maintainer of the Linux cifs vfs and the userspace32 tool <span class="emphasis"><em>umount.cifs</em></span> is <a href="mailto:sfrench@samba.org" target="_top">Steve French</a>.33 The <a href="mailto:linux-cifs-client@lists.samba.org" target="_top">Linux CIFS Mailing list</a>31 </p><p><a class="citerefentry" href="mount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">mount.cifs</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id282885"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax was loosely based on the umount utility and the manpage was loosely based on that of mount.cifs.8. The man page was created by Steve French</p><p>The maintainer of the Linux cifs vfs and the userspace 32 tool <span class="emphasis"><em>umount.cifs</em></span> is <a class="ulink" href="mailto:sfrench@samba.org" target="_top">Steve French</a>. 33 The <a class="ulink" href="mailto:linux-cifs-client@lists.samba.org" target="_top">Linux CIFS Mailing list</a> 34 34 is the preferred place to ask questions regarding these programs. 35 35 </p></div></div></body></html> -
branches/samba-3.0/docs/htmldocs/manpages/vfs_audit.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_audit</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_audit — record selected Samba VFS operations in the system log</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = audit</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_audit</code> VFS module records selected1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_audit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_audit — record selected Samba VFS operations in the system log</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = audit</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_audit</code> VFS module records selected 3 3 client operations to the system log using 4 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p>The following Samba VFS operations are recorded:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>connect</td></tr><tr><td>disconnect</td></tr><tr><td>opendir</td></tr><tr><td>mkdir</td></tr><tr><td>rmdir</td></tr><tr><td>open</td></tr><tr><td>close</td></tr><tr><td>rename</td></tr><tr><td>unlink</td></tr><tr><td>chmod</td></tr><tr><td>fchmod</td></tr><tr><td>chmod_acl</td></tr><tr><td>fchmod_acl</td></tr></table><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id259596"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">audit:facility = FACILITY</span></dt><dd><p>Log messages to the named5 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> facility.4 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p>The following Samba VFS operations are recorded:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>connect</td></tr><tr><td>disconnect</td></tr><tr><td>opendir</td></tr><tr><td>mkdir</td></tr><tr><td>rmdir</td></tr><tr><td>open</td></tr><tr><td>close</td></tr><tr><td>rename</td></tr><tr><td>unlink</td></tr><tr><td>chmod</td></tr><tr><td>fchmod</td></tr><tr><td>chmod_acl</td></tr><tr><td>fchmod_acl</td></tr></table><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282779"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">audit:facility = FACILITY</span></dt><dd><p>Log messages to the named 5 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> facility. 6 6 7 7 </p></dd><dt><span class="term">audit:priority = PRIORITY</span></dt><dd><p>Log messages with the named 8 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority.9 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59400"></a><h2>EXAMPLES</h2><p>Log operations on all shares using the LOCAL1 facility8 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority. 9 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283389"></a><h2>EXAMPLES</h2><p>Log operations on all shares using the LOCAL1 facility 10 10 and NOTICE priority:</p><pre class="programlisting"> 11 11 <em class="parameter"><code>[global]</code></em> 12 <a class=" indexterm" name="id259419"></a>vfs objects = audit13 <a class=" indexterm" name="id259426"></a>audit:facility = LOCAL114 <a class=" indexterm" name="id259433"></a>audit:priority = NOTICE15 </pre></div><div class="refsect1" lang="en"><a name="id2 60358"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.16 </p></div><div class="refsect1" lang="en"><a name="id2 60368"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities12 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = audit</a> 13 <a class="link" href="smb.conf.5.html#AUDIT:FACILITY">audit:facility = LOCAL1</a> 14 <a class="link" href="smb.conf.5.html#AUDIT:PRIORITY">audit:priority = NOTICE</a> 15 </pre></div><div class="refsect1" lang="en"><a name="id282994"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 16 </p></div><div class="refsect1" lang="en"><a name="id283004"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 17 17 were created by Andrew Tridgell. Samba is now developed 18 18 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_cacheprime.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_cacheprime</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_cacheprime.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_cacheprime — prime the kernel file data cache</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = cacheprime</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_cacheprime</code> VFS module reads chunks1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_cacheprime</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_cacheprime.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_cacheprime — prime the kernel file data cache</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = cacheprime</code></p></div></div><div class="refsect1" lang="en"><a name="id283730"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_cacheprime</code> VFS module reads chunks 3 3 of file data near the range requested by clients in order to 4 4 make sure the data is present in the kernel file data cache at … … 8 8 on boundaries that are a multiple of this size. Each range of 9 9 the file data is primed at most once during the time the client 10 has the file open. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59549"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">cacheprime:rsize = BYTES</span></dt><dd><p>The number of bytes with which to prime11 the kernel data cache.</p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59606"></a><h2>EXAMPLES</h2><p>For a hypothetical disk array, it is necessary to ensure10 has the file open. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282732"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">cacheprime:rsize = BYTES</span></dt><dd><p>The number of bytes with which to prime 11 the kernel data cache.</p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282788"></a><h2>EXAMPLES</h2><p>For a hypothetical disk array, it is necessary to ensure 12 12 that all read operations are of size 1 megabyte (1048576 bytes), 13 13 and aligned on 1 megabyte boundaries: 14 14 </p><pre class="programlisting"> 15 15 <em class="parameter"><code>[hypothetical]</code></em> 16 <a class=" indexterm" name="id259376"></a>vfs objects = cacheprime17 <a class=" indexterm" name="id259384"></a>cacheprime:rsize = 1M18 </pre></div><div class="refsect1" lang="en"><a name="id2 59393"></a><h2>CAVEATS</h2><p><code class="literal">cacheprime</code> is not a a substitute for16 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = cacheprime</a> 17 <a class="link" href="smb.conf.5.html#CACHEPRIME:RSIZE">cacheprime:rsize = 1M</a> 18 </pre></div><div class="refsect1" lang="en"><a name="id283387"></a><h2>CAVEATS</h2><p><code class="literal">cacheprime</code> is not a a substitute for 19 19 a general-purpose readahead mechanism. It is intended for use 20 20 only in very specific environments where disk operations must 21 21 be aligned and sized to known values (as much as that is possible). 22 </p></div><div class="refsect1" lang="en"><a name="id2 59409"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.23 </p></div><div class="refsect1" lang="en"><a name="id2 59419"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities22 </p></div><div class="refsect1" lang="en"><a name="id283403"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 23 </p></div><div class="refsect1" lang="en"><a name="id283413"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 24 24 were created by Andrew Tridgell. Samba is now developed 25 25 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_cap.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_cap</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_cap.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_cap — CAP encode filenames</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = cap</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>CAP (Columbia Appletalk Protocol) encoding is a1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_cap</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_cap.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_cap — CAP encode filenames</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = cap</code></p></div></div><div class="refsect1" lang="en"><a name="id283730"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>CAP (Columbia Appletalk Protocol) encoding is a 3 3 technique for representing non-ASCII filenames in ASCII. The 4 4 <code class="literal">vfs_cap</code> VFS module translates filenames to and 5 5 from CAP format, allowing users to name files in their native 6 6 encoding. </p><p>CAP encoding is most commonly 7 used in Japanese language environments. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59542"></a><h2>EXAMPLES</h2><p>On a system using GNU libiconv, use CAP encoding to support7 used in Japanese language environments. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283766"></a><h2>EXAMPLES</h2><p>On a system using GNU libiconv, use CAP encoding to support 8 8 users in the Shift_JIS locale:</p><pre class="programlisting"> 9 9 <em class="parameter"><code>[global]</code></em> 10 <a class=" indexterm" name="id259561"></a>dos charset = CP93211 <a class=" indexterm" name="id259568"></a>dos charset = CP93212 <a class=" indexterm" name="id259576"></a>vfs objects = cap13 </pre></div><div class="refsect1" lang="en"><a name="id2 59585"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.14 </p></div><div class="refsect1" lang="en"><a name="id2 59595"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities10 <a class="link" href="smb.conf.5.html#DOSCHARSET">dos charset = CP932</a> 11 <a class="link" href="smb.conf.5.html#DOSCHARSET">dos charset = CP932</a> 12 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = cap</a> 13 </pre></div><div class="refsect1" lang="en"><a name="id282775"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 14 </p></div><div class="refsect1" lang="en"><a name="id282784"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 15 15 were created by Andrew Tridgell. Samba is now developed 16 16 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_catia.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_catia</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_catia.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_catia — translate illegal characters in Catia filenames</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = catia</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The Catia CAD package commonly creates filenames that1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_catia</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_catia.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_catia — translate illegal characters in Catia filenames</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = catia</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The Catia CAD package commonly creates filenames that 3 3 use characters that are illegal in CIFS filenames. The 4 4 <code class="literal">vfs_catia</code> VFS module implements a fixed character 5 5 mapping so that these files can be shared with CIFS clients. 6 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59323"></a><h2>EXAMPLES</h2><p>Map Catia filenames on the [CAD] share:</p><pre class="programlisting">6 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283762"></a><h2>EXAMPLES</h2><p>Map Catia filenames on the [CAD] share:</p><pre class="programlisting"> 7 7 <em class="parameter"><code>[CAD]</code></em> 8 <a class=" indexterm" name="id259556"></a>path = /data/cad9 <a class=" indexterm" name="id259563"></a>vfs objects = catia10 </pre></div><div class="refsect1" lang="en"><a name="id2 59572"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.11 </p></div><div class="refsect1" lang="en"><a name="id2 59582"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities8 <a class="link" href="smb.conf.5.html#PATH">path = /data/cad</a> 9 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = catia</a> 10 </pre></div><div class="refsect1" lang="en"><a name="id282761"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 11 </p></div><div class="refsect1" lang="en"><a name="id282770"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 12 12 were created by Andrew Tridgell. Samba is now developed 13 13 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_commit.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_commit</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_commit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_commit — flush dirty data at specified intervals</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = commit</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_commit</code> VFS module keeps track of1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_commit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_commit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_commit — flush dirty data at specified intervals</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = commit</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_commit</code> VFS module keeps track of 3 3 the amount of data written to a file and synchronizes it to 4 4 disk when a specified amount accumulates. … … 8 8 commit:dthresh value. Secondly, write performance can be 9 9 improved on some systems by flushing file data early and at 10 regular intervals.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59549"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">commit:dthresh = BYTES</span></dt><dd><p>Synchronize file data each time the specified10 regular intervals.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282728"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">commit:dthresh = BYTES</span></dt><dd><p>Synchronize file data each time the specified 11 11 number of bytes has been written. 12 </p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59605"></a><h2>EXAMPLES</h2><p>Synchronize the file data on the [precious] share after12 </p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282784"></a><h2>EXAMPLES</h2><p>Synchronize the file data on the [precious] share after 13 13 every 512 kilobytes (524288 bytes) of data is written:</p><pre class="programlisting"> 14 14 <em class="parameter"><code>[precious]</code></em> 15 <a class=" indexterm" name="id259372"></a>path = /data/precious16 <a class=" indexterm" name="id259380"></a>vfs objects = commit17 <a class=" indexterm" name="id259387"></a>commit:dthresh = 512K18 </pre></div><div class="refsect1" lang="en"><a name="id2 59396"></a><h2>CAVEATS</h2><p>On some systems, the data synchronization performed by15 <a class="link" href="smb.conf.5.html#PATH">path = /data/precious</a> 16 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = commit</a> 17 <a class="link" href="smb.conf.5.html#COMMIT:DTHRESH">commit:dthresh = 512K</a> 18 </pre></div><div class="refsect1" lang="en"><a name="id283394"></a><h2>CAVEATS</h2><p>On some systems, the data synchronization performed by 19 19 <code class="literal">commit</code> may reduce performance. 20 </p></div><div class="refsect1" lang="en"><a name="id2 59412"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.21 </p></div><div class="refsect1" lang="en"><a name="id2 59422"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities20 </p></div><div class="refsect1" lang="en"><a name="id283410"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 21 </p></div><div class="refsect1" lang="en"><a name="id283420"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 22 22 were created by Andrew Tridgell. Samba is now developed 23 23 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_default_quota.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_default_quota</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_default_quota.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_default_quota — store default quota records for Windows clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = default_quota</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_default_quota</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_default_quota.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_default_quota — store default quota records for Windows clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = default_quota</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> 3 3 suite.</p><p>Many common quota implementations only store 4 4 quotas for users and groups, but do not store a default quota. The … … 10 10 the default quota to the quota record of a user. By default the 11 11 root user is taken because quota limits for root are typically 12 not enforced.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59548"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">default_quota:uid = UID</span></dt><dd><p>UID specifies the user ID of the quota record where the12 not enforced.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282729"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">default_quota:uid = UID</span></dt><dd><p>UID specifies the user ID of the quota record where the 13 13 default user quota values are stored. 14 14 </p></dd><dt><span class="term">default_quota:gid = GID</span></dt><dd><p>GID specifies the group ID of the quota record where the … … 22 22 be reported as having a quota of NO_LIMIT. Otherwise, 23 23 the stored values will be reported. 24 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59366"></a><h2>EXAMPLES</h2><p>Store the default quota record in the quota record for24 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id283353"></a><h2>EXAMPLES</h2><p>Store the default quota record in the quota record for 25 25 the user with ID 65535 and report that user as having no quota 26 26 limits:</p><pre class="programlisting"> 27 27 <em class="parameter"><code>[global]</code></em> 28 <a class=" indexterm" name="id259387"></a>vfs objects = default_quota29 <a class=" indexterm" name="id259394"></a>default_quota:uid = 6553530 <a class=" indexterm" name="id259401"></a>default_quota:uid nolimit = yes31 </pre></div><div class="refsect1" lang="en"><a name="id2 59410"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.32 </p></div><div class="refsect1" lang="en"><a name="id2 59420"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities28 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = default_quota</a> 29 <a class="link" href="smb.conf.5.html#DEFAULT_QUOTA:UID">default_quota:uid = 65535</a> 30 <a class="link" href="smb.conf.5.html#DEFAULT_QUOTA:UIDNOLIMIT">default_quota:uid nolimit = yes</a> 31 </pre></div><div class="refsect1" lang="en"><a name="id283407"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 32 </p></div><div class="refsect1" lang="en"><a name="id283417"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 33 33 were created by Andrew Tridgell. Samba is now developed 34 34 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_extd_audit.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_extd_audit</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_extd_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_extd_audit — record selected Samba VFS operations</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = extd_audit</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">extd_audit</code> VFS module records selected1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_extd_audit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_extd_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_extd_audit — record selected Samba VFS operations</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = extd_audit</code></p></div></div><div class="refsect1" lang="en"><a name="id283730"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">extd_audit</code> VFS module records selected 3 3 client operations to both the 4 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log and4 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log and 5 5 system log (using 6 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>).</p><p>Other than logging to the7 <a href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log,8 <code class="literal">vfs_extd_audit</code> is identical to 9 <a href="vfs_audit.8.html"><span class="citerefentry"><span class="refentrytitle">vfs_audit</span>(8)</span></a>.10 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59578"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.11 </p></div><div class="refsect1" lang="en"><a name="id2 59588"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities6 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>).</p><p>Other than logging to the 7 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log, 8 <code class="literal">vfs_extd_audit</code> is identical to 9 <a class="citerefentry" href="vfs_audit.8.html"><span class="citerefentry"><span class="refentrytitle">vfs_audit</span>(8)</span></a>. 10 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282759"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 11 </p></div><div class="refsect1" lang="en"><a name="id282769"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 12 12 were created by Andrew Tridgell. Samba is now developed 13 13 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_fake_perms.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_fake_perms</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_fake_perms.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_fake_perms — enable read only Roaming Profiles</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = fake_perms</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_fake_perms</code> VFS module was created1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_fake_perms</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_fake_perms.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_fake_perms — enable read only Roaming Profiles</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = fake_perms</code></p></div></div><div class="refsect1" lang="en"><a name="id283730"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_fake_perms</code> VFS module was created 3 3 to allow Roaming Profile files and directories to be set (on 4 4 the Samba server under UNIX) as read only. This module will, … … 7 7 the client even though the files will never be overwritten as 8 8 the client logs out or shuts down. 9 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59540"></a><h2>EXAMPLES</h2><pre class="programlisting">9 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283765"></a><h2>EXAMPLES</h2><pre class="programlisting"> 10 10 <em class="parameter"><code>[Profiles]</code></em> 11 <a class=" indexterm" name="id259556"></a>path = /profiles12 <a class=" indexterm" name="id259563"></a>vfs objects = fake_perms13 </pre></div><div class="refsect1" lang="en"><a name="id2 59573"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.14 </p></div><div class="refsect1" lang="en"><a name="id2 59582"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities11 <a class="link" href="smb.conf.5.html#PATH">path = /profiles</a> 12 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = fake_perms</a> 13 </pre></div><div class="refsect1" lang="en"><a name="id282760"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 14 </p></div><div class="refsect1" lang="en"><a name="id282770"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 15 15 were created by Andrew Tridgell. Samba is now developed 16 16 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_full_audit.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_full_audit</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_full_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_full_audit — record Samba VFS operations in the system log</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = full_audit</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_full_audit</code> VFS module records selected1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_full_audit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_full_audit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_full_audit — record Samba VFS operations in the system log</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = full_audit</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_full_audit</code> VFS module records selected 3 3 client operations to the system log using 4 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p><code class="literal">vfs_full_audit</code> is able to record the4 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a>.</p><p><code class="literal">vfs_full_audit</code> is able to record the 5 5 complete set of Samba VFS operations:</p><table class="simplelist" border="0" summary="Simple list"><tr><td>aio_cancel</td></tr><tr><td>aio_error</td></tr><tr><td>aio_fsync</td></tr><tr><td>aio_read</td></tr><tr><td>aio_return</td></tr><tr><td>aio_suspend</td></tr><tr><td>aio_write</td></tr><tr><td>chdir</td></tr><tr><td>chflags</td></tr><tr><td>chmod</td></tr><tr><td>chmod_acl</td></tr><tr><td>chown</td></tr><tr><td>close</td></tr><tr><td>closedir</td></tr><tr><td>connect</td></tr><tr><td>disconnect</td></tr><tr><td>disk_free</td></tr><tr><td>fchmod</td></tr><tr><td>fchmod_acl</td></tr><tr><td>fchown</td></tr><tr><td>fget_nt_acl</td></tr><tr><td>fgetxattr</td></tr><tr><td>flistxattr</td></tr><tr><td>fremovexattr</td></tr><tr><td>fset_nt_acl</td></tr><tr><td>fsetxattr</td></tr><tr><td>fstat</td></tr><tr><td>fsync</td></tr><tr><td>ftruncate</td></tr><tr><td>get_nt_acl</td></tr><tr><td>get_quota</td></tr><tr><td>get_shadow_copy_data</td></tr><tr><td>getlock</td></tr><tr><td>getwd</td></tr><tr><td>getxattr</td></tr><tr><td>kernel_flock</td></tr><tr><td>lgetxattr</td></tr><tr><td>link</td></tr><tr><td>linux_setlease</td></tr><tr><td>listxattr</td></tr><tr><td>llistxattr</td></tr><tr><td>lock</td></tr><tr><td>lremovexattr</td></tr><tr><td>lseek</td></tr><tr><td>lsetxattr</td></tr><tr><td>lstat</td></tr><tr><td>mkdir</td></tr><tr><td>mknod</td></tr><tr><td>open</td></tr><tr><td>opendir</td></tr><tr><td>pread</td></tr><tr><td>pwrite</td></tr><tr><td>read</td></tr><tr><td>readdir</td></tr><tr><td>readlink</td></tr><tr><td>realpath</td></tr><tr><td>removexattr</td></tr><tr><td>rename</td></tr><tr><td>rewinddir</td></tr><tr><td>rmdir</td></tr><tr><td>seekdir</td></tr><tr><td>sendfile</td></tr><tr><td>set_nt_acl</td></tr><tr><td>set_quota</td></tr><tr><td>setxattr</td></tr><tr><td>stat</td></tr><tr><td>statvfs</td></tr><tr><td>symlink</td></tr><tr><td>sys_acl_add_perm</td></tr><tr><td>sys_acl_clear_perms</td></tr><tr><td>sys_acl_create_entry</td></tr><tr><td>sys_acl_delete_def_file</td></tr><tr><td>sys_acl_free_acl</td></tr><tr><td>sys_acl_free_qualifier</td></tr><tr><td>sys_acl_free_text</td></tr><tr><td>sys_acl_get_entry</td></tr><tr><td>sys_acl_get_fd</td></tr><tr><td>sys_acl_get_file</td></tr><tr><td>sys_acl_get_perm</td></tr><tr><td>sys_acl_get_permset</td></tr><tr><td>sys_acl_get_qualifier</td></tr><tr><td>sys_acl_get_tag_type</td></tr><tr><td>sys_acl_init</td></tr><tr><td>sys_acl_set_fd</td></tr><tr><td>sys_acl_set_file</td></tr><tr><td>sys_acl_set_permset</td></tr><tr><td>sys_acl_set_qualifier</td></tr><tr><td>sys_acl_set_tag_type</td></tr><tr><td>sys_acl_to_text</td></tr><tr><td>sys_acl_valid</td></tr><tr><td>telldir</td></tr><tr><td>unlink</td></tr><tr><td>utime</td></tr><tr><td>write</td></tr></table><p>In addition to these operations, 6 6 <code class="literal">vfs_full_audit</code> recognizes the special operation … … 11 11 format is: </p><pre class="programlisting"> 12 12 smbd_audit: PREFIX|OPERATION|RESULT|FILE 13 </pre><p>The record fields are:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">PREFIX</code> - the result of the full_audit:prefix string after variable substitutions</p></li><li><p><code class="literal">OPERATION</code> - the name of the VFS operation</p></li><li><p><code class="literal">RESULT</code> - whether the operation succeeded or failed</p></li><li><p><code class="literal">FILE</code> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id3 00478"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is13 </pre><p>The record fields are:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">PREFIX</code> - the result of the full_audit:prefix string after variable substitutions</p></li><li><p><code class="literal">OPERATION</code> - the name of the VFS operation</p></li><li><p><code class="literal">RESULT</code> - whether the operation succeeded or failed</p></li><li><p><code class="literal">FILE</code> - the name of the file or directory the operation was performed on</p></li></ul></div><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id324497"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">vfs_full_audit:prefix = STRING</span></dt><dd><p>Prepend audit messages with STRING. STRING is 14 14 processed for standard substitution variables listed in 15 <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. The default15 <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>. The default 16 16 prefix is "%u|%I". </p></dd><dt><span class="term">vfs_full_audit:success = LIST</span></dt><dd><p>LIST is a list of VFS operations that should be 17 17 recorded if they succeed. Operations are specified using … … 21 21 the names listed above. 22 22 </p></dd><dt><span class="term">full_audit:facility = FACILITY</span></dt><dd><p>Log messages to the named 23 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> facility.23 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> facility. 24 24 25 25 </p></dd><dt><span class="term">full_audit:priority = PRIORITY</span></dt><dd><p>Log messages with the named 26 <a href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority.27 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00582"></a><h2>EXAMPLES</h2><p>Log file and directory open operations on the [records]26 <a class="citerefentry" href="syslog.3.html"><span class="citerefentry"><span class="refentrytitle">syslog</span>(3)</span></a> priority. 27 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324597"></a><h2>EXAMPLES</h2><p>Log file and directory open operations on the [records] 28 28 share using the LOCAL7 facility and ALERT priority, including 29 29 the username and IP address:</p><pre class="programlisting"> 30 30 <em class="parameter"><code>[records]</code></em> 31 <a class=" indexterm" name="id300603"></a>path = /data/records32 <a class=" indexterm" name="id300610"></a>vfs objects = full_audit33 <a class=" indexterm" name="id300617"></a>full_audit:prefix = %u|%I34 <a class=" indexterm" name="id300624"></a>full_audit:success = open opendir35 <a class=" indexterm" name="id300631"></a>full_audit:failure = all36 <a class=" indexterm" name="id300638"></a>full_audit:facility = LOCAL737 <a class=" indexterm" name="id300646"></a>full_audit:priority = ALERT38 </pre></div><div class="refsect1" lang="en"><a name="id3 00655"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.39 </p></div><div class="refsect1" lang="en"><a name="id3 00666"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities31 <a class="link" href="smb.conf.5.html#PATH">path = /data/records</a> 32 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = full_audit</a> 33 <a class="link" href="smb.conf.5.html#FULL_AUDIT:PREFIX">full_audit:prefix = %u|%I</a> 34 <a class="link" href="smb.conf.5.html#FULL_AUDIT:SUCCESS">full_audit:success = open opendir</a> 35 <a class="link" href="smb.conf.5.html#FULL_AUDIT:FAILURE">full_audit:failure = all</a> 36 <a class="link" href="smb.conf.5.html#FULL_AUDIT:FACILITY">full_audit:facility = LOCAL7</a> 37 <a class="link" href="smb.conf.5.html#FULL_AUDIT:PRIORITY">full_audit:priority = ALERT</a> 38 </pre></div><div class="refsect1" lang="en"><a name="id324772"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 39 </p></div><div class="refsect1" lang="en"><a name="id324782"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 40 40 were created by Andrew Tridgell. Samba is now developed 41 41 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_netatalk.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_netatalk</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_netatalk.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_netatalk — hide .AppleDouble files from CIFS clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = netatalk</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_netatalk</code> VFS module dynamically1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_netatalk</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_netatalk.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_netatalk — hide .AppleDouble files from CIFS clients</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = netatalk</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_netatalk</code> VFS module dynamically 3 3 hides .AppleDouble files, preventing spurious errors on some 4 4 CIFS clients. .AppleDouble files may be created by historic 5 implementations of AFP (Apple Filing Protocol) on servers. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59323"></a><h2>EXAMPLES</h2><p>Hide .AppleDouble files on the [data] share:</p><pre class="programlisting">5 implementations of AFP (Apple Filing Protocol) on servers. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283762"></a><h2>EXAMPLES</h2><p>Hide .AppleDouble files on the [data] share:</p><pre class="programlisting"> 6 6 <em class="parameter"><code>[data]</code></em> 7 <a class=" indexterm" name="id259556"></a>vfs objects = netatalk8 </pre></div><div class="refsect1" lang="en"><a name="id2 59565"></a><h2>CAVEATS</h2><p>This module is largely historic and unlikely to be of use7 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = netatalk</a> 8 </pre></div><div class="refsect1" lang="en"><a name="id282750"></a><h2>CAVEATS</h2><p>This module is largely historic and unlikely to be of use 9 9 in modern networks since current Apple systems are able to mount CIFS 10 10 shares natively. 11 </p></div><div class="refsect1" lang="en"><a name="id2 59577"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.12 </p></div><div class="refsect1" lang="en"><a name="id2 59586"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities11 </p></div><div class="refsect1" lang="en"><a name="id282761"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 12 </p></div><div class="refsect1" lang="en"><a name="id282770"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 13 13 were created by Andrew Tridgell. Samba is now developed 14 14 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_prealloc.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_prealloc</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_prealloc.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_prealloc — preallocate matching files to a predetermined size</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = prealloc</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_prealloc</code> VFS module preallocates1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_prealloc</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_prealloc.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_prealloc — preallocate matching files to a predetermined size</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = prealloc</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_prealloc</code> VFS module preallocates 3 3 files to a specified size each time a new file is created. This 4 4 is useful in environments where files are of a predetermined 5 5 size will be written to a disk subsystem where extending file 6 allocations is expensive. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59323"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">prealloc:EXT = BYTES</span></dt><dd><p>Preallocate all files with the extension EXT to6 allocations is expensive. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283763"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">prealloc:EXT = BYTES</span></dt><dd><p>Preallocate all files with the extension EXT to 7 7 the size specified by BYTES. 8 </p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59594"></a><h2>EXAMPLES</h2><p>A process writes TIFF files to a Samba share, and the8 </p><p>The following suffixes may be applied to BYTES:</p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">K</code> - BYTES is a number of kilobytes</p></li><li><p><code class="literal">M</code> - BYTES is a number of megabytes</p></li><li><p><code class="literal">G</code> - BYTES is a number of gigabytes</p></li></ul></div></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282776"></a><h2>EXAMPLES</h2><p>A process writes TIFF files to a Samba share, and the 9 9 is known these files will almost always be around 4 megabytes 10 10 (4194304 bytes): </p><pre class="programlisting"> 11 11 <em class="parameter"><code>[frames]</code></em> 12 <a class=" indexterm" name="id259364"></a>path = /data/frames13 <a class=" indexterm" name="id259371"></a>vfs objects = prealloc14 <a class=" indexterm" name="id259378"></a>prealloc:tiff = 4M15 </pre></div><div class="refsect1" lang="en"><a name="id2 59387"></a><h2>CAVEATS</h2><p><code class="literal">vfs_prealloc</code> is not supported on all12 <a class="link" href="smb.conf.5.html#PATH">path = /data/frames</a> 13 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = prealloc</a> 14 <a class="link" href="smb.conf.5.html#PREALLOC:TIFF">prealloc:tiff = 4M</a> 15 </pre></div><div class="refsect1" lang="en"><a name="id283386"></a><h2>CAVEATS</h2><p><code class="literal">vfs_prealloc</code> is not supported on all 16 16 platforms and filesystems. Currently only XFS filesystems on 17 17 Linux and IRIX are supported. 18 </p></div><div class="refsect1" lang="en"><a name="id2 59403"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.19 </p></div><div class="refsect1" lang="en"><a name="id2 59413"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities18 </p></div><div class="refsect1" lang="en"><a name="id283401"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 19 </p></div><div class="refsect1" lang="en"><a name="id283411"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 20 20 were created by Andrew Tridgell. Samba is now developed 21 21 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_readonly.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_readonly</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_readonly.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_readonly — make a Samba share read only for a specified time period</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = readonly</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_readonly</code> VFS module marks a share1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_readonly</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_readonly.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_readonly — make a Samba share read only for a specified time period</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = readonly</code></p></div></div><div class="refsect1" lang="en"><a name="id315552"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_readonly</code> VFS module marks a share 3 3 as read only for all clients connecting within the configured 4 4 time period. Clients connecting during this time will be denied 5 5 write access to all files in the share, irrespective of ther 6 actual access privileges.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59323"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">readonly:period = BEGIN, END</span></dt><dd><p>Only mark the share as read only if the client6 actual access privileges.</p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283762"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">readonly:period = BEGIN, END</span></dt><dd><p>Only mark the share as read only if the client 7 7 connection was made between the times marked by the 8 8 BEGIN and END date specifiers. 9 9 The syntax of these date specifiers is the 10 10 same as that accepted by the -d option of GNU 11 <a href="date.1.html"><span class="citerefentry"><span class="refentrytitle">date</span>(1)</span></a>.12 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 59570"></a><h2>EXAMPLES</h2><p>Mark all shares read only:</p><pre class="programlisting">11 <a class="citerefentry" href="date.1.html"><span class="citerefentry"><span class="refentrytitle">date</span>(1)</span></a>. 12 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282752"></a><h2>EXAMPLES</h2><p>Mark all shares read only:</p><pre class="programlisting"> 13 13 <em class="parameter"><code>[global]</code></em> 14 <a class=" indexterm" name="id259590"></a>vfs objects = readonly14 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = readonly</a> 15 15 </pre><p>Mark the [backup] share as read only during business hours:</p><pre class="programlisting"> 16 16 <em class="parameter"><code>[backup]</code></em> 17 <a class=" indexterm" name="id259362"></a>path = /readonly18 <a class=" indexterm" name="id259369"></a>vfs objects = readonly19 <a class=" indexterm" name="id259376"></a>readonly:period = readonly:period = "today 9:00","today 17:00"20 </pre></div><div class="refsect1" lang="en"><a name="id2 59386"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.21 </p></div><div class="refsect1" lang="en"><a name="id2 59396"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities17 <a class="link" href="smb.conf.5.html#PATH">path = /readonly</a> 18 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = readonly</a> 19 <a class="link" href="smb.conf.5.html#READONLY:PERIOD">readonly:period = readonly:period = "today 9:00","today 17:00"</a> 20 </pre></div><div class="refsect1" lang="en"><a name="id283383"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 21 </p></div><div class="refsect1" lang="en"><a name="id283394"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 22 22 were created by Andrew Tridgell. Samba is now developed 23 23 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_recycle.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_recycle</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_recycle.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_recycle — Samba VFS recycle bin</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = recycle</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_recycle</code> intercepts file deletion1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_recycle</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_recycle.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_recycle — Samba VFS recycle bin</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = recycle</code></p></div></div><div class="refsect1" lang="en"><a name="id283730"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_recycle</code> intercepts file deletion 3 3 requests and moves the affected files to a temporary repository 4 4 rather than deleting them immediately. This gives the same effect … … 11 11 can recover files from the recycle bin. If the recycle:keeptree 12 12 option has been specified, deleted files will be found in a path 13 identical with that from which the file was deleted. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59546"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">recycle:repository = PATH</span></dt><dd><p>Path of the directory where deleted files should be moved.13 identical with that from which the file was deleted. </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id282727"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">recycle:repository = PATH</span></dt><dd><p>Path of the directory where deleted files should be moved. 14 14 </p><p>If this option is not set, the default path .recycle 15 15 is used. </p></dd><dt><span class="term">recycle:directory_mode = MODE</span></dt><dd><p>Set MODE to the octal mode the recycle repository … … 48 48 and ? are supported) for which no versioning should 49 49 be used. Only useful when recycle:versions is enabled. 50 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60403"></a><h2>EXAMPLES</h2><p>Log operations on all shares using the LOCAL1 facility50 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282925"></a><h2>EXAMPLES</h2><p>Log operations on all shares using the LOCAL1 facility 51 51 and NOTICE priority:</p><pre class="programlisting"> 52 52 <em class="parameter"><code>[global]</code></em> 53 <a class=" indexterm" name="id260422"></a>vfs objects = recycle54 <a class=" indexterm" name="id260429"></a>recycle:facility = LOCAL155 <a class=" indexterm" name="id260078"></a>recycle:priority = NOTICE56 </pre></div><div class="refsect1" lang="en"><a name="id2 60087"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.57 </p></div><div class="refsect1" lang="en"><a name="id2 60098"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities53 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = recycle</a> 54 <a class="link" href="smb.conf.5.html#RECYCLE:FACILITY">recycle:facility = LOCAL1</a> 55 <a class="link" href="smb.conf.5.html#RECYCLE:PRIORITY">recycle:priority = NOTICE</a> 56 </pre></div><div class="refsect1" lang="en"><a name="id283081"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 57 </p></div><div class="refsect1" lang="en"><a name="id283091"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 58 58 were created by Andrew Tridgell. Samba is now developed 59 59 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfs_shadow_copy.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_shadow_copy</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_shadow_copy.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_shadow_copy — Make a Samba share read only for a specified time period</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = shadow_copy</code></p></div></div><div class="refsect1" lang="en"><a name="id291819"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the2 <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_shadow_copy</code> VFS module functionality1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfs_shadow_copy</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfs_shadow_copy.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfs_shadow_copy — Make a Samba share read only for a specified time period</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfs objects = shadow_copy</code></p></div></div><div class="refsect1" lang="en"><a name="id315551"></a><h2>DESCRIPTION</h2><p>This VFS module is part of the 2 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">vfs_shadow_copy</code> VFS module functionality 3 3 that is similar to Microsoft Shadow Copy services. When setup properly, 4 4 this module allows Microsoft Shadow Copy clients to browse 5 5 "shadow copies" on Samba shares. 6 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id2 59322"></a><h2>CONFIGURATION</h2><p><code class="literal">vfs_shadow_copy</code> relies on a filesystem6 </p><p>This module is stackable.</p></div><div class="refsect1" lang="en"><a name="id283762"></a><h2>CONFIGURATION</h2><p><code class="literal">vfs_shadow_copy</code> relies on a filesystem 7 7 snapshot implementation. Many common filesystems have native 8 8 support for this. … … 13 13 where: 14 14 </p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">YYYY</code> is the 4 digit year</p></li><li><p><code class="literal">MM</code> is the 2 digit month</p></li><li><p><code class="literal">DD</code> is the 2 digit day</p></li><li><p><code class="literal">hh</code> is the 2 digit hour</p></li><li><p><code class="literal">mm</code> is the 2 digit minute</p></li><li><p><code class="literal">ss</code> is the 2 digit second.</p></li></ul></div><p> 15 </p><p>The <code class="literal">vfs_shadow_copy</code> snapshot naming convention can be produced with the following 16 <a href="date.1.html"><span class="citerefentry"><span class="refentrytitle">date</span>(1)</span></a> command:15 </p><p>The <code class="literal">vfs_shadow_copy</code> snapshot naming convention can be produced with the following 16 <a class="citerefentry" href="date.1.html"><span class="citerefentry"><span class="refentrytitle">date</span>(1)</span></a> command: 17 17 </p><pre class="programlisting"> 18 18 TZ=GMT date +@GMT-%Y.%m.%d-%H.%M.%S 19 </pre></div><div class="refsect1" lang="en"><a name="id2 59396"></a><h2>EXAMPLES</h2><p>Add shadow copy support to user home directories:</p><pre class="programlisting">19 </pre></div><div class="refsect1" lang="en"><a name="id283383"></a><h2>EXAMPLES</h2><p>Add shadow copy support to user home directories:</p><pre class="programlisting"> 20 20 <em class="parameter"><code>[homes]</code></em> 21 <a class=" indexterm" name="id259415"></a>vfs objects = shadow_copy22 </pre></div><div class="refsect1" lang="en"><a name="id2 59424"></a><h2>CAVEATS</h2><p>This is not a backup, archival, or version control solution.21 <a class="link" href="smb.conf.5.html#VFSOBJECTS">vfs objects = shadow_copy</a> 22 </pre></div><div class="refsect1" lang="en"><a name="id283414"></a><h2>CAVEATS</h2><p>This is not a backup, archival, or version control solution. 23 23 </p><p>With Samba or Windows servers, 24 24 <code class="literal">vfs_shadow_copy</code> is designed to be an end-user … … 26 26 archival solutions and should in no way be considered as 27 27 such. Additionally, if you need version control, implement a 28 version control system.</p></div><div class="refsect1" lang="en"><a name="id2 60361"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite.29 </p></div><div class="refsect1" lang="en"><a name="id2 60371"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities28 version control system.</p></div><div class="refsect1" lang="en"><a name="id282988"></a><h2>VERSION</h2><p>This man page is correct for version 3.0.25 of the Samba suite. 29 </p></div><div class="refsect1" lang="en"><a name="id282998"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 30 30 were created by Andrew Tridgell. Samba is now developed 31 31 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/vfstest.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfstest</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfstest.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfstest — tool for testing samba VFS modules </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfstest</code> [-d debuglevel] [-c command] [-l logdir] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id259321"></a><h2>DESCRIPTION</h2><p>This tool is part of the <ahref="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">vfstest</code> is a small command line1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>vfstest</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="vfstest.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>vfstest — tool for testing samba VFS modules </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">vfstest</code> [-d debuglevel] [-c command] [-l logdir] [-h]</p></div></div><div class="refsect1" lang="en"><a name="id283760"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">vfstest</code> is a small command line 2 2 utility that has the ability to test dso samba VFS modules. It gives the 3 3 user the ability to call the various VFS functions manually and 4 4 supports cascaded VFS modules. 5 </p></div><div class="refsect1" lang="en"><a name="id2 59564"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-c|--command=command</span></dt><dd><p>Execute the specified (colon-separated) commands.5 </p></div><div class="refsect1" lang="en"><a name="id282745"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-c|--command=command</span></dt><dd><p>Execute the specified (colon-separated) commands. 6 6 See below for the commands that are available. 7 7 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. … … 9 9 <code class="constant">'.client'</code> will be appended. The log file is never removed 10 10 by the client. 11 </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 12 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 13 configuration details required by the server. The 14 information in this file includes server-specific 15 information such as what printcap file to use, as well 16 as descriptions of all the services that the server is 17 to provide. See <code class="filename">smb.conf</code> for more information. 18 The default configuration file name is determined at 19 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 20 from 0 to 10. The default value if this parameter is 21 not specified is zero.</p><p>The higher this value, the more detail will be 11 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 12 from 0 to 10. The default value if this parameter is 13 not specified is 0.</p><p>The higher this value, the more detail will be 22 14 logged to the log files about the activities of the 23 15 server. At level 0, only critical errors and serious … … 29 21 use only by developers and generate HUGE amounts of log 30 22 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 31 override the <a class="indexterm" name="id259419"></a> parameter 32 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 23 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 24 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 25 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 26 configuration details required by the server. The 27 information in this file includes server-specific 28 information such as what printcap file to use, as well 29 as descriptions of all the services that the server is 30 to provide. See <code class="filename">smb.conf</code> for more information. 31 The default configuration file name is determined at 32 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 33 33 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 34 34 log.smbd, etc...). The log file is never removed by the client. 35 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2 60367"></a><h2>COMMANDS</h2><p><span class="emphasis"><em>VFS COMMANDS</em></span></p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">load <module.so></code> - Load specified VFS module </p></li><li><p><code class="literal">populate <char> <size></code> - Populate a data buffer with the specified data35 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id282995"></a><h2>COMMANDS</h2><p><span class="emphasis"><em>VFS COMMANDS</em></span></p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">load <module.so></code> - Load specified VFS module </p></li><li><p><code class="literal">populate <char> <size></code> - Populate a data buffer with the specified data 36 36 </p></li><li><p><code class="literal">showdata [<offset> <len>]</code> - Show data currently in data buffer 37 </p></li><li><p><code class="literal">connect</code> - VFS connect()</p></li><li><p><code class="literal">disconnect</code> - VFS disconnect()</p></li><li><p><code class="literal">disk_free</code> - VFS disk_free()</p></li><li><p><code class="literal">opendir</code> - VFS opendir()</p></li><li><p><code class="literal">readdir</code> - VFS readdir()</p></li><li><p><code class="literal">mkdir</code> - VFS mkdir()</p></li><li><p><code class="literal">rmdir</code> - VFS rmdir()</p></li><li><p><code class="literal">closedir</code> - VFS closedir()</p></li><li><p><code class="literal">open</code> - VFS open()</p></li><li><p><code class="literal">close</code> - VFS close()</p></li><li><p><code class="literal">read</code> - VFS read()</p></li><li><p><code class="literal">write</code> - VFS write()</p></li><li><p><code class="literal">lseek</code> - VFS lseek()</p></li><li><p><code class="literal">rename</code> - VFS rename()</p></li><li><p><code class="literal">fsync</code> - VFS fsync()</p></li><li><p><code class="literal">stat</code> - VFS stat()</p></li><li><p><code class="literal">fstat</code> - VFS fstat()</p></li><li><p><code class="literal">lstat</code> - VFS lstat()</p></li><li><p><code class="literal">unlink</code> - VFS unlink()</p></li><li><p><code class="literal">chmod</code> - VFS chmod()</p></li><li><p><code class="literal">fchmod</code> - VFS fchmod()</p></li><li><p><code class="literal">chown</code> - VFS chown()</p></li><li><p><code class="literal">fchown</code> - VFS fchown()</p></li><li><p><code class="literal">chdir</code> - VFS chdir()</p></li><li><p><code class="literal">getwd</code> - VFS getwd()</p></li><li><p><code class="literal">utime</code> - VFS utime()</p></li><li><p><code class="literal">ftruncate</code> - VFS ftruncate()</p></li><li><p><code class="literal">lock</code> - VFS lock()</p></li><li><p><code class="literal">symlink</code> - VFS symlink()</p></li><li><p><code class="literal">readlink</code> - VFS readlink()</p></li><li><p><code class="literal">link</code> - VFS link()</p></li><li><p><code class="literal">mknod</code> - VFS mknod()</p></li><li><p><code class="literal">realpath</code> - VFS realpath()</p></li></ul></div><p><span class="emphasis"><em>GENERAL COMMANDS</em></span></p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">conf <smb.conf></code> - Load a different configuration file</p></li><li><p><code class="literal">help [<command>]</code> - Get list of commands or info about specified command</p></li><li><p><code class="literal">debuglevel <level></code> - Set debug level</p></li><li><p><code class="literal">freemem</code> - Free memory currently in use</p></li><li><p><code class="literal">exit</code> - Exit vfstest</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 00629"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba38 suite.</p></div><div class="refsect1" lang="en"><a name="id3 00639"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities37 </p></li><li><p><code class="literal">connect</code> - VFS connect()</p></li><li><p><code class="literal">disconnect</code> - VFS disconnect()</p></li><li><p><code class="literal">disk_free</code> - VFS disk_free()</p></li><li><p><code class="literal">opendir</code> - VFS opendir()</p></li><li><p><code class="literal">readdir</code> - VFS readdir()</p></li><li><p><code class="literal">mkdir</code> - VFS mkdir()</p></li><li><p><code class="literal">rmdir</code> - VFS rmdir()</p></li><li><p><code class="literal">closedir</code> - VFS closedir()</p></li><li><p><code class="literal">open</code> - VFS open()</p></li><li><p><code class="literal">close</code> - VFS close()</p></li><li><p><code class="literal">read</code> - VFS read()</p></li><li><p><code class="literal">write</code> - VFS write()</p></li><li><p><code class="literal">lseek</code> - VFS lseek()</p></li><li><p><code class="literal">rename</code> - VFS rename()</p></li><li><p><code class="literal">fsync</code> - VFS fsync()</p></li><li><p><code class="literal">stat</code> - VFS stat()</p></li><li><p><code class="literal">fstat</code> - VFS fstat()</p></li><li><p><code class="literal">lstat</code> - VFS lstat()</p></li><li><p><code class="literal">unlink</code> - VFS unlink()</p></li><li><p><code class="literal">chmod</code> - VFS chmod()</p></li><li><p><code class="literal">fchmod</code> - VFS fchmod()</p></li><li><p><code class="literal">chown</code> - VFS chown()</p></li><li><p><code class="literal">fchown</code> - VFS fchown()</p></li><li><p><code class="literal">chdir</code> - VFS chdir()</p></li><li><p><code class="literal">getwd</code> - VFS getwd()</p></li><li><p><code class="literal">utime</code> - VFS utime()</p></li><li><p><code class="literal">ftruncate</code> - VFS ftruncate()</p></li><li><p><code class="literal">lock</code> - VFS lock()</p></li><li><p><code class="literal">symlink</code> - VFS symlink()</p></li><li><p><code class="literal">readlink</code> - VFS readlink()</p></li><li><p><code class="literal">link</code> - VFS link()</p></li><li><p><code class="literal">mknod</code> - VFS mknod()</p></li><li><p><code class="literal">realpath</code> - VFS realpath()</p></li></ul></div><p><span class="emphasis"><em>GENERAL COMMANDS</em></span></p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">conf <smb.conf></code> - Load a different configuration file</p></li><li><p><code class="literal">help [<command>]</code> - Get list of commands or info about specified command</p></li><li><p><code class="literal">debuglevel <level></code> - Set debug level</p></li><li><p><code class="literal">freemem</code> - Free memory currently in use</p></li><li><p><code class="literal">exit</code> - Exit vfstest</p></li></ul></div></div><div class="refsect1" lang="en"><a name="id324732"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba 38 suite.</p></div><div class="refsect1" lang="en"><a name="id324741"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 39 39 were created by Andrew Tridgell. Samba is now developed 40 40 by the Samba Team as an Open Source project similar -
branches/samba-3.0/docs/htmldocs/manpages/wbinfo.1.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="wbinfo.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>wbinfo — Query information from winbind daemon</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">wbinfo</code> [-a user%password] [--all-domains] [--allocate-gid] [--allocate-uid] [-D domain] [--domain domain] [-g] [--getdcname domain] [--get-auth-user] [-G gid] [-h] [-i user] [-I ip] [-K user%password] [-m] [-n name] [-N netbios-name] [--own-domain] [-p] [-r user] [-s sid] [--separator] [--sequence] [--set-auth-user user%password] [-S sid] [-t] [-u] [--user-domgroups sid] [--user-sids sid] [-U uid] [-V] [-Y sid]</p></div></div><div class="refsect1" lang="en"><a name="id260416"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">wbinfo</code> program queries and returns information2 created and used by the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. </p><p>The <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be configured3 and running for the <code class="literal">wbinfo</code> program to be able 4 to return information.</p></div><div class="refsect1" lang="en"><a name="id2 60110"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a|--authenticate username%password</span></dt><dd><p>Attempt to authenticate a user via winbindd.1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>wbinfo</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="wbinfo.1"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>wbinfo — Query information from winbind daemon</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">wbinfo</code> [-a user%password] [--all-domains] [--allocate-gid] [--allocate-uid] [-D domain] [--domain domain] [-g] [--getdcname domain] [--get-auth-user] [-G gid] [-h] [-i user] [-I ip] [-K user%password] [-m] [-n name] [-N netbios-name] [--own-domain] [-p] [-r user] [-s sid] [--separator] [--sequence] [--set-auth-user user%password] [-S sid] [-t] [-u] [--uid-info uid] [--user-domgroups sid] [--user-sids sid] [-U uid] [-V] [-Y sid] [--verbose]</p></div></div><div class="refsect1" lang="en"><a name="id282953"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The <code class="literal">wbinfo</code> program queries and returns information 2 created and used by the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon. </p><p>The <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon must be configured 3 and running for the <code class="literal">wbinfo</code> program to be able 4 to return information.</p></div><div class="refsect1" lang="en"><a name="id283005"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-a|--authenticate username%password</span></dt><dd><p>Attempt to authenticate a user via winbindd. 5 5 This checks both authenticaion methods and reports its results. 6 6 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Do not be tempted to use this 7 7 functionality for authentication in third-party 8 applications. Instead use <a href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a>.</p></div></dd><dt><span class="term">--allocate-gid</span></dt><dd><p>Get a new GID out of idmap8 applications. Instead use <a class="citerefentry" href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a>.</p></div></dd><dt><span class="term">--allocate-gid</span></dt><dd><p>Get a new GID out of idmap 9 9 </p></dd><dt><span class="term">--allocate-uid</span></dt><dd><p>Get a new UID out of idmap 10 </p></dd><dt><span class="term">--all-domains</span></dt><dd><p>List all domains (trusted and 10 </p></dd><dt><span class="term">--all-domains</span></dt><dd><p>List all domains (trusted and 11 11 own domain). 12 12 </p></dd><dt><span class="term">--domain name</span></dt><dd><p>This parameter sets the domain on which any specified 13 13 operations will performed. If special domain name '.' is used to represent 14 the current domain to which winbindd belongs. Currently only the 14 the current domain to which winbindd belongs. Currently only the 15 15 <code class="option">--sequence</code>, 16 16 <code class="option">-u</code>, and <code class="option">-g</code> options honor this parameter. 17 17 </p></dd><dt><span class="term">-D|--domain-info domain</span></dt><dd><p>Show most of the info we have about the domain. 18 </p></dd><dt><span class="term">-g|--domain-groups</span></dt><dd><p>This option will list all groups available 19 in the Windows NT domain for which the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> daemon is operating in. Groups in all trusted domains20 will also be listed. Note that this operation does not assign 21 group ids to any groups that have not already been 22 seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by winbindd23 during session setup to a domain controller. Username 24 and password can be set using <code class="option">--set-auth-user</code>. 18 </p></dd><dt><span class="term">-g|--domain-groups</span></dt><dd><p>This option will list all groups available 19 in the Windows NT domain for which the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> daemon is operating in. Groups in all trusted domains 20 will also be listed. Note that this operation does not assign 21 group ids to any groups that have not already been 22 seen by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a>. </p></dd><dt><span class="term">--get-auth-user</span></dt><dd><p>Print username and password used by winbindd 23 during session setup to a domain controller. Username 24 and password can be set using <code class="option">--set-auth-user</code>. 25 25 Only available for root.</p></dd><dt><span class="term">--getdcname domain</span></dt><dd><p>Get the DC name for the specified domain. 26 </p></dd><dt><span class="term">-G|--gid-to-sid gid</span></dt><dd><p>Try to convert a UNIX group id to a Windows 27 NT SID. If the gid specified does not refer to one within 26 </p></dd><dt><span class="term">-G|--gid-to-sid gid</span></dt><dd><p>Try to convert a UNIX group id to a Windows 27 NT SID. If the gid specified does not refer to one within 28 28 the idmap gid range then the operation will fail. </p></dd><dt><span class="term">-i|--user-info user</span></dt><dd><p>Get user info. 29 </p></dd><dt><span class="term">-I|--WINS-by-ip ip</span></dt><dd><p>The <em class="parameter"><code>-I</code></em> option 30 queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to send a node status29 </p></dd><dt><span class="term">-I|--WINS-by-ip ip</span></dt><dd><p>The <em class="parameter"><code>-I</code></em> option 30 queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to send a node status 31 31 request to get the NetBIOS name associated with the IP address 32 32 specified by the <em class="parameter"><code>ip</code></em> parameter. 33 </p></dd><dt><span class="term">-K|--krb5auth username%password</span></dt><dd><p>Attempt to authenticate a user via Kerberos. 34 </p></dd><dt><span class="term">-m|--trusted-domains</span></dt><dd><p>Produce a list of domains trusted by the 35 Windows NT server <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts36 when resolving names. This list does not include the Windows 33 </p></dd><dt><span class="term">-K|--krb5auth username%password</span></dt><dd><p>Attempt to authenticate a user via Kerberos. 34 </p></dd><dt><span class="term">-m|--trusted-domains</span></dt><dd><p>Produce a list of domains trusted by the 35 Windows NT server <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> contacts 36 when resolving names. This list does not include the Windows 37 37 NT domain the server is a Primary Domain Controller for. 38 </p></dd><dt><span class="term">-n|--name-to-sid name</span></dt><dd><p>The <em class="parameter"><code>-n</code></em> option 39 queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> for the SID40 associated with the name specified. Domain names can be specified 41 before the user name by using the winbind separator character. 38 </p></dd><dt><span class="term">-n|--name-to-sid name</span></dt><dd><p>The <em class="parameter"><code>-n</code></em> option 39 queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> for the SID 40 associated with the name specified. Domain names can be specified 41 before the user name by using the winbind separator character. 42 42 For example CWDOM1/Administrator refers to the Administrator 43 user in the domain CWDOM1. If no domain is specified then the 44 domain used is the one specified in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> <em class="parameter"><code>workgroup45 </code></em> parameter. </p></dd><dt><span class="term">-N|--WINS-by-name name</span></dt><dd><p>The <em class="parameter"><code>-N</code></em> option 46 queries <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS43 user in the domain CWDOM1. If no domain is specified then the 44 domain used is the one specified in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> <em class="parameter"><code>workgroup 45 </code></em> parameter. </p></dd><dt><span class="term">-N|--WINS-by-name name</span></dt><dd><p>The <em class="parameter"><code>-N</code></em> option 46 queries <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> to query the WINS 47 47 server for the IP address associated with the NetBIOS name 48 48 specified by the <em class="parameter"><code>name</code></em> parameter. 49 49 </p></dd><dt><span class="term">--own-domain</span></dt><dd><p>List own domain. 50 </p></dd><dt><span class="term">-p|--ping</span></dt><dd><p>Check whether winbindd is still alive. 50 </p></dd><dt><span class="term">-p|--ping</span></dt><dd><p>Check whether winbindd is still alive. 51 51 Prints out either 'succeeded' or 'failed'. 52 52 </p></dd><dt><span class="term">-r|--user-groups username</span></dt><dd><p>Try to obtain the list of UNIX group ids … … 55 55 </p></dd><dt><span class="term">-s|--sid-to-name sid</span></dt><dd><p>Use <em class="parameter"><code>-s</code></em> to resolve 56 56 a SID to a name. This is the inverse of the <em class="parameter"><code>-n 57 </code></em> option above. SIDs must be specified as ASCII strings 57 </code></em> option above. SIDs must be specified as ASCII strings 58 58 in the traditional Microsoft format. For example, 59 59 S-1-5-21-1455342024-3071081365-2475485837-500. </p></dd><dt><span class="term">--separator</span></dt><dd><p>Get the active winbind separator. 60 </p></dd><dt><span class="term">--sequence</span></dt><dd><p>Show sequence numbers of 61 all known domains</p></dd><dt><span class="term">--set-auth-user username%password</span></dt><dd><p>Store username and password used by winbindd 60 </p></dd><dt><span class="term">--sequence</span></dt><dd><p>Show sequence numbers of 61 all known domains</p></dd><dt><span class="term">--set-auth-user username%password</span></dt><dd><p>Store username and password used by winbindd 62 62 during session setup to a domain controller. This enables 63 63 winbindd to operate in a Windows 2000 domain with Restrict 64 Anonymous turned on (a.k.a. Permissions compati able with64 Anonymous turned on (a.k.a. Permissions compatible with 65 65 Windows 2000 servers only). 66 </p></dd><dt><span class="term">-S|--sid-to-uid sid</span></dt><dd><p>Convert a SID to a UNIX user id. If the SID 67 does not correspond to a UNIX user mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">-t|--check-secret</span></dt><dd><p>Verify that the workstation trust account66 </p></dd><dt><span class="term">-S|--sid-to-uid sid</span></dt><dd><p>Convert a SID to a UNIX user id. If the SID 67 does not correspond to a UNIX user mapped by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then the operation will fail. </p></dd><dt><span class="term">-t|--check-secret</span></dt><dd><p>Verify that the workstation trust account 68 68 created when the Samba server is added to the Windows NT 69 domain is working. </p></dd><dt><span class="term">-u|--domain-users</span></dt><dd><p>This option will list all users available 70 in the Windows NT domain for which the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains 71 will also be listed. Note that this operation does not assign 72 user ids to any users that have not already been seen by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> 73 .</p></dd><dt><span class="term">--user-domgroups SID</span></dt><dd><p>Get user domain groups. 69 domain is working. </p></dd><dt><span class="term">-u|--domain-users</span></dt><dd><p>This option will list all users available 70 in the Windows NT domain for which the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is operating in. Users in all trusted domains 71 will also be listed. Note that this operation does not assign 72 user ids to any users that have not already been seen by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> 73 .</p></dd><dt><span class="term">--uid-info UID</span></dt><dd><p>Get user info for the user conencted to 74 user id UID.</p></dd><dt><span class="term">--user-domgroups SID</span></dt><dd><p>Get user domain groups. 74 75 </p></dd><dt><span class="term">--user-sids SID</span></dt><dd><p>Get user group SIDs for user. 75 </p></dd><dt><span class="term">-U|--uid-to-sid uid</span></dt><dd><p>Try to convert a UNIX user id to a Windows NT 76 </p></dd><dt><span class="term">-U|--uid-to-sid uid</span></dt><dd><p>Try to convert a UNIX user id to a Windows NT 76 77 SID. If the uid specified does not refer to one within 77 the idmap uid range then the operation will fail. </p></dd><dt><span class="term">-Y|--sid-to-gid sid</span></dt><dd><p>Convert a SID to a UNIX group id. If the SID 78 does not correspond to a UNIX group mapped by <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then 78 the idmap uid range then the operation will fail. </p></dd><dt><span class="term">--verbose</span></dt><dd><p> 79 Print additional information about the query 80 results. 81 </p></dd><dt><span class="term">-Y|--sid-to-gid sid</span></dt><dd><p>Convert a SID to a UNIX group id. If the SID 82 does not correspond to a UNIX group mapped by <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> then 79 83 the operation will fail. </p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 80 84 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 81 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00884"></a><h2>EXIT STATUS</h2><p>The wbinfo program returns 0 if the operation82 succeeded, or 1 if the operation failed. If the <a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is not working <code class="literal">wbinfo</code> will always return83 failure. </p></div><div class="refsect1" lang="en"><a name="id3 00910"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of84 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 00920"></a><h2>SEE ALSO</h2><p><a href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> and <a href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></p></div><div class="refsect1" lang="en"><a name="id300944"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities85 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324919"></a><h2>EXIT STATUS</h2><p>The wbinfo program returns 0 if the operation 86 succeeded, or 1 if the operation failed. If the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon is not working <code class="literal">wbinfo</code> will always return 87 failure. </p></div><div class="refsect1" lang="en"><a name="id324943"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 88 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id324953"></a><h2>SEE ALSO</h2><p><a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> and <a class="citerefentry" href="ntlm_auth.1.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(1)</span></a></p></div><div class="refsect1" lang="en"><a name="id324975"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 85 89 were created by Andrew Tridgell. Samba is now developed 86 by the Samba Team as an Open Source project similar 90 by the Samba Team as an Open Source project similar 87 91 to the way the Linux kernel is developed.</p><p><code class="literal">wbinfo</code> and <code class="literal">winbindd</code> 88 were written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done 92 were written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done 89 93 by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 90 94 3.0 was done by Alexander Bokovoy.</p></div></div></body></html> -
branches/samba-3.0/docs/htmldocs/manpages/winbindd.8.html
r44 r134 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href=" samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.71.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [- F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id259558"></a><h2>DESCRIPTION</h2><p>This program is part of the <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>winbindd</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="winbindd.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>winbindd — Name Service Switch daemon for resolving names 2 from NT servers</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">winbindd</code> [-D] [-F] [-S] [-i] [-Y] [-d <debug level>] [-s <smb config file>] [-n]</p></div></div><div class="refsect1" lang="en"><a name="id282746"></a><h2>DESCRIPTION</h2><p>This program is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p><code class="literal">winbindd</code> is a daemon that provides 3 3 a number of services to the Name Service Switch capability found 4 in most modern C libraries, to arbit ary applications via PAM4 in most modern C libraries, to arbitrary applications via PAM 5 5 and <code class="literal">ntlm_auth</code> and to Samba itself.</p><p>Even if winbind is not used for nsswitch, it still provides a 6 6 service to <code class="literal">smbd</code>, <code class="literal">ntlm_auth</code> 7 7 and the <code class="literal">pam_winbind.so</code> PAM module, by managing connections to 8 8 domain controllers. In this configuraiton the 9 <a class=" indexterm" name="id259361"></a>idmap uidand10 <a class=" indexterm" name="id259368"></a>idmap gid11 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 12 and system information to be obtained from different databases 13 services such as NIS or DNS. The exact behaviour can be configured 14 throught the <code class="filename">/etc/nsswitch.conf</code> file. 15 Users and groups are allocated as they are resolved to a range 16 of user and group ids specified by the administrator of the 17 Samba system.</p><p>The service provided by <code class="literal">winbindd</code> is called `winbind' and 18 can be used to resolve user and group information from a 9 <a class="link" href="smb.conf.5.html#IDMAPUID">idmap uid</a> and 10 <a class="link" href="smb.conf.5.html#IDMAPGID">idmap gid</a> 11 parameters are not required. (This is known as `netlogon proxy only mode'.)</p><p> The Name Service Switch allows user 12 and system information to be obtained from different databases 13 services such as NIS or DNS. The exact behaviour can be configured 14 throught the <code class="filename">/etc/nsswitch.conf</code> file. 15 Users and groups are allocated as they are resolved to a range 16 of user and group ids specified by the administrator of the 17 Samba system.</p><p>The service provided by <code class="literal">winbindd</code> is called `winbind' and 18 can be used to resolve user and group information from a 19 19 Windows NT server. The service can also provide authentication 20 20 services via an associated PAM module. </p><p> … … 22 22 <em class="parameter"><code>auth</code></em>, <em class="parameter"><code>account</code></em> 23 23 and <em class="parameter"><code>password</code></em> 24 module-types. It should be noted that the 24 module-types. It should be noted that the 25 25 <em class="parameter"><code>account</code></em> module simply performs a getpwnam() to verify that 26 26 the system can obtain a uid for the user, as the domain … … 28 28 <code class="filename">libnss_winbind</code> library has been correctly 29 29 installed, or an alternate source of names configured, this should always succeed. 30 </p><p>The following nsswitch databases are implemented by 31 the winbindd service: </p><div class="variablelist"><dl><dt><span class="term">hosts</span></dt><dd><p>This feature is only available on IRIX. 32 User information traditionally stored in 33 the <code class="filename">hosts(5)</code> file and used by 30 </p><p>The following nsswitch databases are implemented by 31 the winbindd service: </p><div class="variablelist"><dl><dt><span class="term">-D</span></dt><dd><p>If specified, this parameter causes 32 the server to operate as a daemon. That is, it detaches 33 itself and runs in the background on the appropriate port. 34 This switch is assumed if <code class="literal">winbindd</code> is 35 executed on the command line of a shell. 36 </p></dd><dt><span class="term">hosts</span></dt><dd><p>This feature is only available on IRIX. 37 User information traditionally stored in 38 the <code class="filename">hosts(5)</code> file and used by 34 39 <code class="literal">gethostbyname(3)</code> functions. Names are 35 40 resolved through the WINS server or by broadcast. 36 </p></dd><dt><span class="term">passwd</span></dt><dd><p>User information traditionally stored in 37 the <code class="filename">passwd(5)</code> file and used by 38 <code class="literal">getpwent(3)</code> functions. </p></dd><dt><span class="term">group</span></dt><dd><p>Group information traditionally stored in 39 the <code class="filename">group(5)</code> file and used by 41 </p></dd><dt><span class="term">passwd</span></dt><dd><p>User information traditionally stored in 42 the <code class="filename">passwd(5)</code> file and used by 43 <code class="literal">getpwent(3)</code> functions. </p></dd><dt><span class="term">group</span></dt><dd><p>Group information traditionally stored in 44 the <code class="filename">group(5)</code> file and used by 40 45 <code class="literal">getgrent(3)</code> functions. </p></dd></dl></div><p>For example, the following simple configuration in the 41 <code class="filename">/etc/nsswitch.conf</code> file can be used to initially 46 <code class="filename">/etc/nsswitch.conf</code> file can be used to initially 42 47 resolve user and group information from <code class="filename">/etc/passwd 43 </code> and <code class="filename">/etc/group</code> and then from the 48 </code> and <code class="filename">/etc/group</code> and then from the 44 49 Windows NT server. 45 50 </p><pre class="programlisting"> … … 53 58 WINS server.</p><pre class="programlisting"> 54 59 hosts: files wins 55 </pre></div><div class="refsect1" lang="en"><a name="id 260125"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes60 </pre></div><div class="refsect1" lang="en"><a name="id324498"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-F</span></dt><dd><p>If specified, this parameter causes 56 61 the main <code class="literal">winbindd</code> process to not daemonize, 57 62 i.e. double-fork and disassociate with the terminal. … … 65 70 </p></dd><dt><span class="term">-S</span></dt><dd><p>If specified, this parameter causes 66 71 <code class="literal">winbindd</code> to log to standard output rather 67 than a file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 68 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 69 configuration details required by the server. The 70 information in this file includes server-specific 71 information such as what printcap file to use, as well 72 as descriptions of all the services that the server is 73 to provide. See <code class="filename">smb.conf</code> for more information. 74 The default configuration file name is determined at 75 compile time.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 76 from 0 to 10. The default value if this parameter is 77 not specified is zero.</p><p>The higher this value, the more detail will be 72 than a file.</p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 73 from 0 to 10. The default value if this parameter is 74 not specified is 0.</p><p>The higher this value, the more detail will be 78 75 logged to the log files about the activities of the 79 76 server. At level 0, only critical errors and serious … … 85 82 use only by developers and generate HUGE amounts of log 86 83 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 87 override the <a class="indexterm" name="id300475"></a> parameter 88 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-l|--logfile=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 84 override the <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a> parameter 85 in the <code class="filename">smb.conf</code> file.</p></dd><dt><span class="term">-V</span></dt><dd><p>Prints the program version number. 86 </p></dd><dt><span class="term">-s <configuration file></span></dt><dd><p>The file specified contains the 87 configuration details required by the server. The 88 information in this file includes server-specific 89 information such as what printcap file to use, as well 90 as descriptions of all the services that the server is 91 to provide. See <code class="filename">smb.conf</code> for more information. 92 The default configuration file name is determined at 93 compile time.</p></dd><dt><span class="term">-l|--log-basename=logdirectory</span></dt><dd><p>Base directory name for log/debug files. The extension 89 94 <code class="constant">".progname"</code> will be appended (e.g. log.smbclient, 90 95 log.smbd, etc...). The log file is never removed by the client. 91 96 </p></dd><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 92 </p></dd><dt><span class="term">-i</span></dt><dd><p>Tells <code class="literal">winbindd</code> to not 93 become a daemon and detach from the current terminal. This 94 option is used by developers when interactive debugging 97 </p></dd><dt><span class="term">-i</span></dt><dd><p>Tells <code class="literal">winbindd</code> to not 98 become a daemon and detach from the current terminal. This 99 option is used by developers when interactive debugging 95 100 of <code class="literal">winbindd</code> is required. 96 101 <code class="literal">winbindd</code> also logs to standard output, 97 102 as if the <code class="literal">-S</code> parameter had been given. 98 </p></dd><dt><span class="term">-n</span></dt><dd><p>Disable caching. This means winbindd will 99 always have to wait for a response from the domain controller 100 before it can respond to a client and this thus makes things 101 slower. The results will however be more accurate, since 102 results from the cache might not be up-to-date. This 103 </p></dd><dt><span class="term">-n</span></dt><dd><p>Disable caching. This means winbindd will 104 always have to wait for a response from the domain controller 105 before it can respond to a client and this thus makes things 106 slower. The results will however be more accurate, since 107 results from the cache might not be up-to-date. This 103 108 might also temporarily hang winbindd if the DC doesn't respond. 104 </p></dd><dt><span class="term">-Y</span></dt><dd><p>Single daemon mode. This means winbindd will run 105 as a single process (the mode of operation in Samba 2.2). Winbindd's 106 default behavior is to launch a child process that is responsible for 109 </p></dd><dt><span class="term">-Y</span></dt><dd><p>Single daemon mode. This means winbindd will run 110 as a single process (the mode of operation in Samba 2.2). Winbindd's 111 default behavior is to launch a child process that is responsible for 107 112 updating expired cache entries. 108 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 00582"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned109 a security id (SID) which is globally unique when the 110 user or group is created. To convert the Windows NT user or group 111 into a unix user or group, a mapping between SIDs and unix user 113 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id324720"></a><h2>NAME AND ID RESOLUTION</h2><p>Users and groups on a Windows NT server are assigned 114 a security id (SID) which is globally unique when the 115 user or group is created. To convert the Windows NT user or group 116 into a unix user or group, a mapping between SIDs and unix user 112 117 and group ids is required. This is one of the jobs that <code class="literal"> 113 winbindd</code> performs. </p><p>As winbindd users and groups are resolved from a server, user 118 winbindd</code> performs. </p><p>As winbindd users and groups are resolved from a server, user 114 119 and group ids are allocated from a specified range. This 115 is done on a first come, first served basis, although all existing 116 users and groups will be mapped as soon as a client performs a user 117 or group enumeration command. The allocated unix ids are stored 118 in a database and will be remembered. </p><p>WARNING: The SID to unix id database is the only location 119 where the user and group mappings are stored by winbindd. If this 120 store is deleted or corrupted, there is no way for winbindd to 121 determine which user and group ids correspond to Windows NT user 122 and group rids. </p><p>See the <a class=" indexterm" name="id300614"></a> or the old <a class="indexterm" name="id300619"></a> parameters in120 is done on a first come, first served basis, although all existing 121 users and groups will be mapped as soon as a client performs a user 122 or group enumeration command. The allocated unix ids are stored 123 in a database and will be remembered. </p><p>WARNING: The SID to unix id database is the only location 124 where the user and group mappings are stored by winbindd. If this 125 store is deleted or corrupted, there is no way for winbindd to 126 determine which user and group ids correspond to Windows NT user 127 and group rids. </p><p>See the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> or the old <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> parameters in 123 128 <code class="filename">smb.conf</code> for options for sharing this 124 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id3 00634"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon125 is done through configuration parameters in the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the129 database, such as via LDAP.</p></div><div class="refsect1" lang="en"><a name="id324773"></a><h2>CONFIGURATION</h2><p>Configuration of the <code class="literal">winbindd</code> daemon 130 is done through configuration parameters in the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file. All parameters should be specified in the 126 131 [global] section of smb.conf. </p><div class="itemizedlist"><ul type="disc"><li><p> 127 <a class=" indexterm" name="id300664"></a>winbind separator</p></li><li><p>128 <a class=" indexterm" name="id300675"></a>idmap uid</p></li><li><p>129 <a class=" indexterm" name="id300687"></a>idmap gid</p></li><li><p>130 <a class=" indexterm" name="id300698"></a>idmap backend</p></li><li><p>131 <a class=" indexterm" name="id300709"></a>winbind cache time</p></li><li><p>132 <a class=" indexterm" name="id300721"></a>winbind enum users</p></li><li><p>133 <a class=" indexterm" name="id300732"></a>winbind enum groups</p></li><li><p>134 <a class=" indexterm" name="id300743"></a>template homedir</p></li><li><p>135 <a class=" indexterm" name="id300755"></a>template shell</p></li><li><p>136 <a class=" indexterm" name="id300766"></a>winbind use default domain</p></li><li><p>137 <a class=" indexterm" name="id300778"></a>winbind: rpc only132 <a class="link" href="smb.conf.5.html#WINBINDSEPARATOR">winbind separator</a></p></li><li><p> 133 <a class="link" href="smb.conf.5.html#IDMAPUID">idmap uid</a></p></li><li><p> 134 <a class="link" href="smb.conf.5.html#IDMAPGID">idmap gid</a></p></li><li><p> 135 <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a></p></li><li><p> 136 <a class="link" href="smb.conf.5.html#WINBINDCACHETIME">winbind cache time</a></p></li><li><p> 137 <a class="link" href="smb.conf.5.html#WINBINDENUMUSERS">winbind enum users</a></p></li><li><p> 138 <a class="link" href="smb.conf.5.html#WINBINDENUMGROUPS">winbind enum groups</a></p></li><li><p> 139 <a class="link" href="smb.conf.5.html#TEMPLATEHOMEDIR">template homedir</a></p></li><li><p> 140 <a class="link" href="smb.conf.5.html#TEMPLATESHELL">template shell</a></p></li><li><p> 141 <a class="link" href="smb.conf.5.html#WINBINDUSEDEFAULTDOMAIN">winbind use default domain</a></p></li><li><p> 142 <a class="link" href="smb.conf.5.html#WINBIND:RPCONLY">winbind: rpc only</a> 138 143 Setting this parameter forces winbindd to use RPC 139 144 instead of LDAP to retrieve information from Domain 140 145 Controllers. 141 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id3 00789"></a><h2>EXAMPLE SETUP</h2><p>142 To setup winbindd for user and group lookups plus 143 authentication from a domain controller use something like the 146 </p></li></ul></div></div><div class="refsect1" lang="en"><a name="id324918"></a><h2>EXAMPLE SETUP</h2><p> 147 To setup winbindd for user and group lookups plus 148 authentication from a domain controller use something like the 144 149 following setup. This was tested on an early Red Hat Linux box. 145 </p><p>In <code class="filename">/etc/nsswitch.conf</code> put the 150 </p><p>In <code class="filename">/etc/nsswitch.conf</code> put the 146 151 following: 147 152 </p><pre class="programlisting"> … … 163 168 </p></div><p>Note in particular the use of the <em class="parameter"><code>sufficient 164 169 </code></em> keyword and the <em class="parameter"><code>use_first_pass</code></em> keyword. </p><p>Now replace the account lines with this: </p><p><code class="literal">account required /lib/security/pam_winbind.so 165 </code></p><p>The next step is to join the domain. To do that use the 170 </code></p><p>The next step is to join the domain. To do that use the 166 171 <code class="literal">net</code> program like this: </p><p><code class="literal">net join -S PDC -U Administrator</code></p><p>The username after the <em class="parameter"><code>-U</code></em> can be any 167 172 Domain user that has administrator privileges on the machine. 168 Substitute the name or IP of your PDC for "PDC".</p><p>Next copy <code class="filename">libnss_winbind.so</code> to 173 Substitute the name or IP of your PDC for "PDC".</p><p>Next copy <code class="filename">libnss_winbind.so</code> to 169 174 <code class="filename">/lib</code> and <code class="filename">pam_winbind.so 170 175 </code> to <code class="filename">/lib/security</code>. A symbolic link needs to be … … 172 177 <code class="filename">/lib/libnss_winbind.so.2</code>. If you are using an 173 178 older version of glibc then the target of the link should be 174 <code class="filename">/lib/libnss_winbind.so.1</code>.</p><p>Finally, setup a <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the179 <code class="filename">/lib/libnss_winbind.so.1</code>.</p><p>Finally, setup a <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> containing directives like the 175 180 following: 176 181 </p><pre class="programlisting"> … … 185 190 security = domain 186 191 password server = * 187 </pre><p>Now start winbindd and you should find that your user and 188 group database is expanded to include your NT users and groups, 189 and that you can login to your unix box as a domain user, using 190 the DOMAIN+user syntax for the username. You may wish to use the 192 </pre><p>Now start winbindd and you should find that your user and 193 group database is expanded to include your NT users and groups, 194 and that you can login to your unix box as a domain user, using 195 the DOMAIN+user syntax for the username. You may wish to use the 191 196 commands <code class="literal">getent passwd</code> and <code class="literal">getent group 192 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id3 00980"></a><h2>NOTES</h2><p>The following notes are useful when configuring and193 running <code class="literal">winbindd</code>: </p><p><a href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine194 for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what 195 you are doing when modifying PAM configuration files. It is possible 196 to set up PAM such that you can no longer log into your system. </p><p>If more than one UNIX machine is running <code class="literal">winbindd</code>, 197 then in general the user and groups ids allocated by winbindd will not 198 be the same. The user and group ids will only be valid for the local 199 machine, unless a shared <a class=" indexterm" name="id301027"></a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping200 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id3 01040"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the201 <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and202 apply any parameter changes to the running 203 version of winbindd. This signal also clears any cached 204 user and group information. The list of other domains trusted 197 </code> to confirm the correct operation of winbindd.</p></div><div class="refsect1" lang="en"><a name="id325091"></a><h2>NOTES</h2><p>The following notes are useful when configuring and 198 running <code class="literal">winbindd</code>: </p><p><a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> must be running on the local machine 199 for <code class="literal">winbindd</code> to work. </p><p>PAM is really easy to misconfigure. Make sure you know what 200 you are doing when modifying PAM configuration files. It is possible 201 to set up PAM such that you can no longer log into your system. </p><p>If more than one UNIX machine is running <code class="literal">winbindd</code>, 202 then in general the user and groups ids allocated by winbindd will not 203 be the same. The user and group ids will only be valid for the local 204 machine, unless a shared <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> is configured.</p><p>If the the Windows NT SID to UNIX user and group id mapping 205 file is damaged or destroyed then the mappings will be lost. </p></div><div class="refsect1" lang="en"><a name="id325147"></a><h2>SIGNALS</h2><p>The following signals can be used to manipulate the 206 <code class="literal">winbindd</code> daemon. </p><div class="variablelist"><dl><dt><span class="term">SIGHUP</span></dt><dd><p>Reload the <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a> file and 207 apply any parameter changes to the running 208 version of winbindd. This signal also clears any cached 209 user and group information. The list of other domains trusted 205 210 by winbindd is also reloaded. </p></dd><dt><span class="term">SIGUSR2</span></dt><dd><p>The SIGUSR2 signal will cause <code class="literal"> 206 winbindd</code> to write status information to the winbind 207 log file.</p><p>Log files are stored in the filename specified by the 208 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 01102"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with209 the <code class="literal">winbindd</code> program. For security reasons, the 210 winbind client will only attempt to connect to the winbindd daemon 211 winbindd</code> to write status information to the winbind 212 log file.</p><p>Log files are stored in the filename specified by the 213 log file parameter.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id325205"></a><h2>FILES</h2><div class="variablelist"><dl><dt><span class="term"><code class="filename">/etc/nsswitch.conf(5)</code></span></dt><dd><p>Name service switch configuration file.</p></dd><dt><span class="term">/tmp/.winbindd/pipe</span></dt><dd><p>The UNIX pipe over which clients communicate with 214 the <code class="literal">winbindd</code> program. For security reasons, the 215 winbind client will only attempt to connect to the winbindd daemon 211 216 if both the <code class="filename">/tmp/.winbindd</code> directory 212 and <code class="filename">/tmp/.winbindd/pipe</code> file are owned by 213 root. </p></dd><dt><span class="term">$LOCKDIR/winbindd_privileged/pipe</span></dt><dd><p>The UNIX pipe over which 'privileged' clients 214 communicate with the <code class="literal">winbindd</code> program. For security 215 reasons, access to some winbindd functions - like those needed by 217 and <code class="filename">/tmp/.winbindd/pipe</code> file are owned by 218 root. </p></dd><dt><span class="term">$LOCKDIR/winbindd_privileged/pipe</span></dt><dd><p>The UNIX pipe over which 'privileged' clients 219 communicate with the <code class="literal">winbindd</code> program. For security 220 reasons, access to some winbindd functions - like those needed by 216 221 the <code class="literal">ntlm_auth</code> utility - is restricted. By default, 217 222 only users in the 'root' group will get this access, however the administrator 218 223 may change the group permissions on $LOCKDIR/winbindd_privileged to allow 219 224 programs like 'squid' to use ntlm_auth. 220 Note that the winbind client will only attempt to connect to the winbindd daemon 225 Note that the winbind client will only attempt to connect to the winbindd daemon 221 226 if both the <code class="filename">$LOCKDIR/winbindd_privileged</code> directory 222 and <code class="filename">$LOCKDIR/winbindd_privileged/pipe</code> file are owned by 227 and <code class="filename">$LOCKDIR/winbindd_privileged/pipe</code> file are owned by 223 228 root. </p></dd><dt><span class="term">/lib/libnss_winbind.so.X</span></dt><dd><p>Implementation of name service switch library. 224 </p></dd><dt><span class="term">$LOCKDIR/winbindd_idmap.tdb</span></dt><dd><p>Storage for the Windows NT rid to UNIX user/group 225 id mapping. The lock directory is specified when Samba is initially 229 </p></dd><dt><span class="term">$LOCKDIR/winbindd_idmap.tdb</span></dt><dd><p>Storage for the Windows NT rid to UNIX user/group 230 id mapping. The lock directory is specified when Samba is initially 226 231 compiled using the <em class="parameter"><code>--with-lockdir</code></em> option. 227 232 This directory is by default <code class="filename">/usr/local/samba/var/locks 228 233 </code>. </p></dd><dt><span class="term">$LOCKDIR/winbindd_cache.tdb</span></dt><dd><p>Storage for cached user and group information. 229 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id3 01246"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of230 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id3 01257"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id301314"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities234 </p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id325338"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of 235 the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id325349"></a><h2>SEE ALSO</h2><p><code class="filename">nsswitch.conf(5)</code>, <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="wbinfo.1.html"><span class="citerefentry"><span class="refentrytitle">wbinfo</span>(1)</span></a>, <a class="citerefentry" href="ntlm_auth.8.html"><span class="citerefentry"><span class="refentrytitle">ntlm_auth</span>(8)</span></a>, <a class="citerefentry" href="smb.conf.5.html"><span class="citerefentry"><span class="refentrytitle">smb.conf</span>(5)</span></a>, <a class="citerefentry" href="pam_winbind.8.html"><span class="citerefentry"><span class="refentrytitle">pam_winbind</span>(8)</span></a></p></div><div class="refsect1" lang="en"><a name="id325404"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 231 236 were created by Andrew Tridgell. Samba is now developed 232 by the Samba Team as an Open Source project similar 233 to the way the Linux kernel is developed.</p><p><code class="literal">wbinfo</code> and <code class="literal">winbindd</code> were 234 written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done 237 by the Samba Team as an Open Source project similar 238 to the way the Linux kernel is developed.</p><p><code class="literal">wbinfo</code> and <code class="literal">winbindd</code> were 239 written by Tim Potter.</p><p>The conversion to DocBook for Samba 2.2 was done 235 240 by Gerald Carter. The conversion to DocBook XML 4.2 for 236 241 Samba 3.0 was done by Alexander Bokovoy.</p></div></div></body></html>
Note:
See TracChangeset
for help on using the changeset viewer.