- Timestamp:
- May 20, 2009, 6:46:53 PM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.2.x/docs/htmldocs/manpages/smb.conf.5.html
r202 r204 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id25160 75"></a><h2>SYNOPSIS</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2516069"></a><h2>SYNOPSIS</h2><p> 2 2 The <code class="filename">smb.conf</code> file is a configuration file for the Samba suite. <code class="filename">smb.conf</code> contains runtime configuration information for the Samba programs. The 3 3 <code class="filename">smb.conf</code> file is designed to be configured and administered by the … … 27 27 which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved 28 28 in string values. Some items such as create masks are numeric. 29 </p></div><div class="refsect1" lang="en"><a name="id247922 4"></a><h2>SECTION DESCRIPTIONS</h2><p>29 </p></div><div class="refsect1" lang="en"><a name="id2479226"></a><h2>SECTION DESCRIPTIONS</h2><p> 30 30 Each section in the configuration file (except for the [global] section) describes a shared resource (known as 31 31 a “<span class="quote">share</span>”). The section name is the name of the shared resource and the parameters within the … … 70 70 <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> 71 71 </pre><p> 72 </p></div><div class="refsect1" lang="en"><a name="id247826 5"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2478271"></a><h3>The [global] section</h3><p>72 </p></div><div class="refsect1" lang="en"><a name="id2478266"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2478272"></a><h3>The [global] section</h3><p> 73 73 Parameters in this section apply to the server as a whole, or are defaults for sections that do not 74 74 specifically define certain items. See the notes under PARAMETERS for more information. … … 161 161 <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the 162 162 <code class="literal">printcap name</code> option for more details. 163 </p></div></div></div><div class="refsect1" lang="en"><a name="id247859 4"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete163 </p></div></div></div><div class="refsect1" lang="en"><a name="id2478595"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete 164 164 their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and 165 165 is controlled by a set of parameters in the [global] section of the smb.conf. … … 185 185 to the global 186 186 section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares 187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id252549 5"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2525490"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p> 188 188 Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>). Some parameters 189 189 are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal … … 197 197 find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred 198 198 synonym. 199 </p></div><div class="refsect1" lang="en"><a name="id25255 44"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>199 </p></div><div class="refsect1" lang="en"><a name="id2525539"></a><h2>VARIABLE SUBSTITUTIONS</h2><p> 200 200 Many of the strings that are settable in the config file can take substitutions. For example the option 201 201 “<span class="quote">path = /tmp/%u</span>” is interpreted as “<span class="quote">path = /tmp/john</span>” if the user connected with the … … 306 306 If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account 307 307 =</code> for the service, irrespective of the supplied password. 308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id252628 6"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2526282"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p> 309 309 Starting with Samba version 3.2.0, the capability to 310 310 store Samba configuration in the registry is available. … … 361 361 accessing the database file, circumventing the 362 362 server. 363 </p></div><div class="refsect1" lang="en"><a name="id25264 80"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526492"></a>363 </p></div><div class="refsect1" lang="en"><a name="id2526475"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526488"></a> 364 364 365 365 abort shutdown script (G) 366 </h3></div></div></div><a class="indexterm" name="id25264 93"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that366 </h3></div></div></div><a class="indexterm" name="id2526489"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 367 367 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 368 368 right, this command will be run as user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> … … 370 370 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> 371 371 </em></span> 372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25265 81"></a>372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526577"></a> 373 373 374 374 acl check permissions (S) 375 </h3></div></div></div><a class="indexterm" name="id25265 82"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"375 </h3></div></div></div><a class="indexterm" name="id2526578"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 376 376 from a Windows client. If a Windows client doesn't have permissions to delete a file then they 377 377 expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by … … 393 393 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code> 394 394 </em></span> 395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id247812 0"></a>395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478121"></a> 396 396 397 397 acl compatibility (S) 398 </h3></div></div></div><a class="indexterm" name="id247812 1"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should398 </h3></div></div></div><a class="indexterm" name="id2478122"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should 399 399 be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4, 400 400 <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>. … … 435 435 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code> 436 436 </em></span> 437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25269 83"></a>437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526979"></a> 438 438 439 439 acl map full control (S) 440 </h3></div></div></div><a class="indexterm" name="id252698 4"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>440 </h3></div></div></div><a class="indexterm" name="id2526980"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 441 441 This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 442 442 allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX … … 446 446 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code> 447 447 </em></span> 448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25270 40"></a>448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527035"></a> 449 449 450 450 add group script (G) 451 </h3></div></div></div><a class="indexterm" name="id25270 41"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>451 </h3></div></div></div><a class="indexterm" name="id2527036"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 452 452 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 453 453 will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful … … 459 459 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code> 460 460 </em></span> 461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25271 21"></a>461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527116"></a> 462 462 463 463 add machine script (G) 464 </h3></div></div></div><a class="indexterm" name="id25271 22"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>464 </h3></div></div></div><a class="indexterm" name="id2527117"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 465 465 This is the full pathname to a script that will be run by 466 466 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is … … 473 473 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code> 474 474 </em></span> 475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252720 9"></a>475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527204"></a> 476 476 477 477 add port command (G) 478 </h3></div></div></div><a class="indexterm" name="id25272 10"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports478 </h3></div></div></div><a class="indexterm" name="id2527205"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports 479 479 remotely using the Windows "Add Standard TCP/IP Port Wizard". 480 480 This option defines an external program to be executed when … … 485 485 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code> 486 486 </em></span> 487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252729 8"></a>487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527294"></a> 488 488 489 489 addprinter command (G) 490 </h3></div></div></div><a class="indexterm" name="id252729 9"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing490 </h3></div></div></div><a class="indexterm" name="id2527295"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing 491 491 support for Windows NT/2000 clients in Samba 2.2, The MS Add 492 492 Printer Wizard (APW) icon is now also available in the … … 519 519 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code> 520 520 </em></span> 521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527 503"></a>521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527499"></a> 522 522 523 523 add share command (G) 524 </h3></div></div></div><a class="indexterm" name="id252750 4"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>524 </h3></div></div></div><a class="indexterm" name="id2527500"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 525 525 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 526 526 Manager. The <em class="parameter"><code>add share command</code></em> is used to define an external program … … 549 549 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 550 550 </em></span> 551 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252770 8"></a>551 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527703"></a> 552 552 553 553 add user script (G) 554 </h3></div></div></div><a class="indexterm" name="id252770 9"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>554 </h3></div></div></div><a class="indexterm" name="id2527704"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 555 555 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by 556 556 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 587 587 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code> 588 588 </em></span> 589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25279 52"></a>589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527947"></a> 590 590 591 591 add user to group script (G) 592 </h3></div></div></div><a class="indexterm" name="id25279 53"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>592 </h3></div></div></div><a class="indexterm" name="id2527948"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 593 593 Full path to the script that will be called when a user is added to a group using the Windows NT domain administration 594 594 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 602 602 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code> 603 603 </em></span> 604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252804 6"></a>604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528042"></a> 605 605 606 606 administrative share (S) 607 </h3></div></div></div><a class="indexterm" name="id252804 7"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for607 </h3></div></div></div><a class="indexterm" name="id2528043"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for 608 608 a share, then the share will be an administrative share. The Administrative 609 609 Shares are the default network shares created by all Windows NT-based … … 612 612 information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code> 613 613 </em></span> 614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25281 13"></a>614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528108"></a> 615 615 616 616 admin users (S) 617 </h3></div></div></div><a class="indexterm" name="id25281 14"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted617 </h3></div></div></div><a class="indexterm" name="id2528109"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted 618 618 administrative privileges on the share. This means that they 619 619 will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in … … 624 624 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code> 625 625 </em></span> 626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25281 92"></a>626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528188"></a> 627 627 628 628 afs share (S) 629 </h3></div></div></div><a class="indexterm" name="id25281 94"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled629 </h3></div></div></div><a class="indexterm" name="id2528189"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled 630 630 for this share. If enabled, it assumes that the directory exported via 631 631 the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The … … 634 634 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code> 635 635 </em></span> 636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25282 43"></a>636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528239"></a> 637 637 638 638 afs username map (G) 639 </h3></div></div></div><a class="indexterm" name="id252824 4"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might639 </h3></div></div></div><a class="indexterm" name="id2528240"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might 640 640 want to hand-craft the usernames you are creating tokens for. 641 641 For example this is necessary if you have users from several domain … … 647 647 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code> 648 648 </em></span> 649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25283 11"></a>649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528306"></a> 650 650 651 651 aio read size (S) 652 </h3></div></div></div><a class="indexterm" name="id25283 12"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this652 </h3></div></div></div><a class="indexterm" name="id2528308"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 653 653 integer parameter is set to non-zero value, 654 654 Samba will read from file asynchronously when size of request is bigger … … 661 661 request size</code> 662 662 </em></span> 663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25284 10"></a>663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528406"></a> 664 664 665 665 aio write size (S) 666 </h3></div></div></div><a class="indexterm" name="id25284 12"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this666 </h3></div></div></div><a class="indexterm" name="id2528407"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 667 667 integer parameter is set to non-zero value, 668 668 Samba will write to file asynchronously when size of request is bigger … … 675 675 request size</code> 676 676 </em></span> 677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252850 8"></a>677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528504"></a> 678 678 679 679 algorithmic rid base (G) 680 </h3></div></div></div><a class="indexterm" name="id252850 9"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its680 </h3></div></div></div><a class="indexterm" name="id2528505"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its 681 681 algorithmic mapping from uids/gid to the RIDs needed to construct 682 682 NT Security Identifiers. … … 693 693 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code> 694 694 </em></span> 695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252858 5"></a>695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528580"></a> 696 696 697 697 allocation roundup size (S) 698 </h3></div></div></div><a class="indexterm" name="id252858 6"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the698 </h3></div></div></div><a class="indexterm" name="id2528581"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the 699 699 allocation size reported to Windows clients. The default 700 700 size of 1Mb generally results in improved Windows client … … 708 708 # (to disable roundups)</code> 709 709 </em></span> 710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252865 6"></a>710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528651"></a> 711 711 712 712 allow trusted domains (G) 713 </h3></div></div></div><a class="indexterm" name="id252865 7"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>713 </h3></div></div></div><a class="indexterm" name="id2528652"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 714 714 This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY">security</a> option is set to 715 715 <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. … … 726 726 can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code> 727 727 </em></span> 728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25287 34"></a>728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528729"></a> 729 729 730 730 announce as (G) 731 </h3></div></div></div><a class="indexterm" name="id252873 5"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse731 </h3></div></div></div><a class="indexterm" name="id2528730"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 732 732 list. By default this is set to Windows NT. The valid options 733 733 are : "NT Server" (which can also be written as "NT"), … … 741 741 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code> 742 742 </em></span> 743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252880 9"></a>743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528804"></a> 744 744 745 745 announce version (G) 746 </h3></div></div></div><a class="indexterm" name="id25288 10"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers746 </h3></div></div></div><a class="indexterm" name="id2528805"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers 747 747 that nmbd will use when announcing itself as a server. The default 748 748 is 4.9. Do not change this parameter unless you have a specific … … 751 751 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code> 752 752 </em></span> 753 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25288 71"></a>753 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528866"></a> 754 754 755 755 auth methods (G) 756 </h3></div></div></div><a class="indexterm" name="id25288 72"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>756 </h3></div></div></div><a class="indexterm" name="id2528867"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p> 757 757 This option allows the administrator to chose what authentication methods <code class="literal">smbd</code> 758 758 will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY">security</a>. … … 775 775 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code> 776 776 </em></span> 777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252898 7"></a>777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528982"></a> 778 778 779 779 available (S) 780 </h3></div></div></div><a class="indexterm" name="id252898 8"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If780 </h3></div></div></div><a class="indexterm" name="id2528984"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If 781 781 <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span> 782 782 attempts to connect to the service will fail. Such failures are 783 783 logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code> 784 784 </em></span> 785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252903 9"></a>785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529034"></a> 786 786 787 787 bind interfaces only (G) 788 </h3></div></div></div><a class="indexterm" name="id25290 40"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin788 </h3></div></div></div><a class="indexterm" name="id2529036"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin 789 789 to limit what interfaces on a machine will serve SMB requests. It 790 790 affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p> … … 827 827 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code> 828 828 </em></span> 829 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252941 7"></a>829 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529412"></a> 830 830 831 831 blocking locks (S) 832 </h3></div></div></div><a class="indexterm" name="id252941 8"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior832 </h3></div></div></div><a class="indexterm" name="id2529413"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior 833 833 of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 834 834 to obtain a byte range lock on a region of an open file, and the … … 841 841 cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code> 842 842 </em></span> 843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252948 5"></a>843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529481"></a> 844 844 845 845 block size (S) 846 </h3></div></div></div><a class="indexterm" name="id252948 6"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free846 </h3></div></div></div><a class="indexterm" name="id2529482"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 847 847 sizes. By default, this reports a disk block size of 1024 bytes. 848 848 </p><p>Changing this parameter may have some effect on the … … 858 858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code> 859 859 </em></span> 860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252956 8"></a>860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529564"></a> 861 861 862 862 <a name="BROWSABLE"></a>browsable 863 </h3></div></div></div><a class="indexterm" name="id252956 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529599"></a>863 </h3></div></div></div><a class="indexterm" name="id2529565"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529595"></a> 864 864 865 865 browseable (S) 866 </h3></div></div></div><a class="indexterm" name="id2529 600"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in866 </h3></div></div></div><a class="indexterm" name="id2529596"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in 867 867 the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code> 868 868 </em></span> 869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25296 41"></a>869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529636"></a> 870 870 871 871 browse list (G) 872 </h3></div></div></div><a class="indexterm" name="id25296 42"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to872 </h3></div></div></div><a class="indexterm" name="id2529638"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 873 873 a client doing a <code class="literal">NetServerEnum</code> call. Normally 874 874 set to <code class="constant">yes</code>. You should never need to change 875 875 this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code> 876 876 </em></span> 877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529 702"></a>877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529697"></a> 878 878 879 879 <a name="CASESIGNAMES"></a>casesignames 880 </h3></div></div></div><a class="indexterm" name="id2529 703"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529733"></a>880 </h3></div></div></div><a class="indexterm" name="id2529698"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529728"></a> 881 881 882 882 case sensitive (S) 883 </h3></div></div></div><a class="indexterm" name="id252973 4"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>884 </em></span> 885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252978 7"></a>883 </h3></div></div></div><a class="indexterm" name="id2529730"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 884 </em></span> 885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529782"></a> 886 886 887 887 change notify (S) 888 </h3></div></div></div><a class="indexterm" name="id252978 8"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply888 </h3></div></div></div><a class="indexterm" name="id2529783"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply 889 889 to a client's file change notify requests. 890 890 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code> 891 891 </em></span> 892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25298 33"></a>892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529829"></a> 893 893 894 894 change share command (G) 895 </h3></div></div></div><a class="indexterm" name="id252983 4"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>895 </h3></div></div></div><a class="indexterm" name="id2529830"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 896 896 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 897 897 Manager. The <em class="parameter"><code>change share command</code></em> is used to define an external … … 924 924 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 925 925 </em></span> 926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253002 9"></a>926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530025"></a> 927 927 928 928 check password script (G) 929 </h3></div></div></div><a class="indexterm" name="id25300 30"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password929 </h3></div></div></div><a class="indexterm" name="id2530026"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password 930 930 complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value 931 931 if the password is bad. … … 936 936 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">check password script = /usr/local/sbin/crackcheck</code> 937 937 </em></span> 938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253010 9"></a>938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530105"></a> 939 939 940 940 client lanman auth (G) 941 </h3></div></div></div><a class="indexterm" name="id25301 10"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client941 </h3></div></div></div><a class="indexterm" name="id2530106"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 942 942 tools will attempt to authenticate itself to servers using the 943 943 weaker LANMAN password hash. If disabled, only server which support NT … … 950 950 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code> 951 951 </em></span> 952 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25301 91"></a>952 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530187"></a> 953 953 954 954 client ldap sasl wrapping (G) 955 </h3></div></div></div><a class="indexterm" name="id25301 92"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>955 </h3></div></div></div><a class="indexterm" name="id2530188"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p> 956 956 The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING">client ldap sasl wrapping</a> defines whether 957 957 ldap traffic will be signed or signed and encrypted (sealed). … … 981 981 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code> 982 982 </em></span> 983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25303 21"></a>983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530316"></a> 984 984 985 985 client ntlmv2 auth (G) 986 </h3></div></div></div><a class="indexterm" name="id25303 22"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to986 </h3></div></div></div><a class="indexterm" name="id2530317"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 987 987 authenticate itself to servers using the NTLMv2 encrypted password 988 988 response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more … … 996 996 responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code> 997 997 </em></span> 998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253041 5"></a>998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530410"></a> 999 999 1000 1000 client plaintext auth (G) 1001 </h3></div></div></div><a class="indexterm" name="id253041 6"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext1001 </h3></div></div></div><a class="indexterm" name="id2530411"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext 1002 1002 password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code> 1003 1003 </em></span> 1004 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253045 8"></a>1004 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530453"></a> 1005 1005 1006 1006 client schannel (G) 1007 </h3></div></div></div><a class="indexterm" name="id253045 9"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>1007 </h3></div></div></div><a class="indexterm" name="id2530454"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 1008 1008 This controls whether the client offers or even demands the use of the netlogon schannel. 1009 1009 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = no</a> does not offer the schannel, … … 1015 1015 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code> 1016 1016 </em></span> 1017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253055 6"></a>1017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530551"></a> 1018 1018 1019 1019 client signing (G) 1020 </h3></div></div></div><a class="indexterm" name="id253055 7"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires1020 </h3></div></div></div><a class="indexterm" name="id2530552"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires 1021 1021 the server it talks to to use SMB signing. Possible values 1022 1022 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 1027 1027 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 1028 1028 </em></span> 1029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253061 7"></a>1029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530612"></a> 1030 1030 1031 1031 client use spnego (G) 1032 </h3></div></div></div><a class="indexterm" name="id253061 8"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try1032 </h3></div></div></div><a class="indexterm" name="id2530613"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 1033 1033 to use Simple and Protected NEGOciation (as specified by rfc2478) with 1034 1034 supporting servers (including WindowsXP, Windows2000 and Samba … … 1036 1036 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 1037 1037 </em></span> 1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25306 63"></a>1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530658"></a> 1039 1039 1040 1040 cluster addresses (G) 1041 </h3></div></div></div><a class="indexterm" name="id253066 4"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses1041 </h3></div></div></div><a class="indexterm" name="id2530660"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses 1042 1042 nmbd will register with a WINS server. These addresses are not 1043 1043 necessarily present on all nodes simultaneously, but they will … … 1048 1048 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code> 1049 1049 </em></span> 1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253072 5"></a>1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530720"></a> 1051 1051 1052 1052 clustering (G) 1053 </h3></div></div></div><a class="indexterm" name="id253072 6"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact1053 </h3></div></div></div><a class="indexterm" name="id2530722"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact 1054 1054 ctdb for accessing its tdb files and use ctdb as a backend 1055 1055 for its messaging backend. … … 1058 1058 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code> 1059 1059 </em></span> 1060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253077 9"></a>1060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530774"></a> 1061 1061 1062 1062 comment (S) 1063 </h3></div></div></div><a class="indexterm" name="id25307 80"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share1063 </h3></div></div></div><a class="indexterm" name="id2530775"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 1064 1064 when a client does a queries the server, either via the network 1065 1065 neighborhood or via <code class="literal">net view</code> to list what shares … … 1070 1070 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 1071 1071 </em></span> 1072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25308 62"></a>1072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530857"></a> 1073 1073 1074 1074 config backend (G) 1075 </h3></div></div></div><a class="indexterm" name="id25308 63"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>1075 </h3></div></div></div><a class="indexterm" name="id2530858"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1076 1076 This controls the backend for storing the configuration. 1077 1077 Possible values are <span class="emphasis"><em>file</em></span> (the default) … … 1091 1091 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code> 1092 1092 </em></span> 1093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25309 62"></a>1093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530958"></a> 1094 1094 1095 1095 config file (G) 1096 </h3></div></div></div><a class="indexterm" name="id25309 63"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file1096 </h3></div></div></div><a class="indexterm" name="id2530959"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file 1097 1097 to use, instead of the default (usually <code class="filename">smb.conf</code>). 1098 1098 There is a chicken and egg problem here as this option is set … … 1104 1104 clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code> 1105 1105 </em></span> 1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25310 32"></a>1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531027"></a> 1107 1107 1108 1108 copy (S) 1109 </h3></div></div></div><a class="indexterm" name="id25310 33"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service1109 </h3></div></div></div><a class="indexterm" name="id2531028"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service 1110 1110 entries. The specified service is simply duplicated under the 1111 1111 current service's name. Any parameters specified in the current … … 1117 1117 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code> 1118 1118 </em></span> 1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253109 9"></a>1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531094"></a> 1120 1120 1121 1121 <a name="CREATEMODE"></a>create mode 1122 </h3></div></div></div><a class="indexterm" name="id2531 100"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531131"></a>1122 </h3></div></div></div><a class="indexterm" name="id2531096"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531126"></a> 1123 1123 1124 1124 create mask (S) 1125 </h3></div></div></div><a class="indexterm" name="id25311 32"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>1125 </h3></div></div></div><a class="indexterm" name="id2531127"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 1126 1126 When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to 1127 1127 UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may … … 1144 1144 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 1145 1145 </em></span> 1146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253126 8"></a>1146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531264"></a> 1147 1147 1148 1148 csc policy (S) 1149 </h3></div></div></div><a class="indexterm" name="id25312 70"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>1149 </h3></div></div></div><a class="indexterm" name="id2531265"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 1150 1150 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 1151 1151 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 1159 1159 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code> 1160 1160 </em></span> 1161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25313 54"></a>1161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531349"></a> 1162 1162 1163 1163 ctdbd socket (G) 1164 </h3></div></div></div><a class="indexterm" name="id253135 5"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,1164 </h3></div></div></div><a class="indexterm" name="id2531350"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>, 1165 1165 you need to tell Samba where ctdbd listens on its unix domain 1166 1166 socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which … … 1170 1170 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code> 1171 1171 </em></span> 1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25314 20"></a>1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531415"></a> 1173 1173 1174 1174 cups options (S) 1175 </h3></div></div></div><a class="indexterm" name="id25314 21"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1175 </h3></div></div></div><a class="indexterm" name="id2531416"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1176 1176 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is 1177 1177 set to <code class="constant">cups</code>. Its value is a free form string of options … … 1195 1195 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code> 1196 1196 </em></span> 1197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253153 7"></a>1197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531533"></a> 1198 1198 1199 1199 cups server (G) 1200 </h3></div></div></div><a class="indexterm" name="id253153 8"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>1200 </h3></div></div></div><a class="indexterm" name="id2531534"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1201 1201 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">cups</code>. 1202 1202 </p><p> … … 1212 1212 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code> 1213 1213 </em></span> 1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253164 5"></a>1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531641"></a> 1215 1215 1216 1216 deadtime (G) 1217 </h3></div></div></div><a class="indexterm" name="id253164 6"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)1217 </h3></div></div></div><a class="indexterm" name="id2531642"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer) 1218 1218 represents the number of minutes of inactivity before a connection 1219 1219 is considered dead, and it is disconnected. The deadtime only takes … … 1227 1227 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code> 1228 1228 </em></span> 1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253172 7"></a>1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531722"></a> 1230 1230 1231 1231 debug class (G) 1232 </h3></div></div></div><a class="indexterm" name="id253172 8"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>1232 </h3></div></div></div><a class="indexterm" name="id2531723"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1233 1233 With this boolean parameter enabled, the debug class (DBGC_CLASS) 1234 1234 will be displayed in the debug header. … … 1238 1238 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code> 1239 1239 </em></span> 1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253178 6"></a>1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531781"></a> 1241 1241 1242 1242 debug hires timestamp (G) 1243 </h3></div></div></div><a class="indexterm" name="id253178 7"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1243 </h3></div></div></div><a class="indexterm" name="id2531782"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1244 1244 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 1245 1245 boolean parameter adds microsecond resolution to the timestamp message header when turned on. … … 1248 1248 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">no</code> 1249 1249 </em></span> 1250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253184 7"></a>1250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531842"></a> 1251 1251 1252 1252 debug pid (G) 1253 </h3></div></div></div><a class="indexterm" name="id253184 8"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>1253 </h3></div></div></div><a class="indexterm" name="id2531844"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1254 1254 When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 1255 1255 message. This boolean parameter is adds the process-id to the timestamp message headers in the … … 1259 1259 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code> 1260 1260 </em></span> 1261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253191 6"></a>1261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531911"></a> 1262 1262 1263 1263 debug prefix timestamp (G) 1264 </h3></div></div></div><a class="indexterm" name="id253191 7"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1264 </h3></div></div></div><a class="indexterm" name="id2531912"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1265 1265 With this option enabled, the timestamp message header is prefixed to the debug message without the 1266 1266 filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> … … 1270 1270 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 1271 1271 </em></span> 1272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253198 9"></a>1272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531984"></a> 1273 1273 1274 1274 <a name="TIMESTAMPLOGS"></a>timestamp logs 1275 </h3></div></div></div><a class="indexterm" name="id25319 90"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532021"></a>1275 </h3></div></div></div><a class="indexterm" name="id2531985"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532016"></a> 1276 1276 1277 1277 debug timestamp (G) 1278 </h3></div></div></div><a class="indexterm" name="id25320 22"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1278 </h3></div></div></div><a class="indexterm" name="id2532017"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1279 1279 Samba debug log messages are timestamped by default. If you are running at a high 1280 1280 <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a> these timestamps can be distracting. This … … 1282 1282 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 1283 1283 </em></span> 1284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253207 7"></a>1284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532072"></a> 1285 1285 1286 1286 debug uid (G) 1287 </h3></div></div></div><a class="indexterm" name="id253207 8"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>1287 </h3></div></div></div><a class="indexterm" name="id2532073"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1288 1288 Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the 1289 1289 current euid, egid, uid and gid to the timestamp message headers in the log file if turned on. … … 1292 1292 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 1293 1293 </em></span> 1294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253213 6"></a>1294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532132"></a> 1295 1295 1296 1296 default case (S) 1297 </h3></div></div></div><a class="indexterm" name="id253213 8"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.1297 </h3></div></div></div><a class="indexterm" name="id2532133"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. 1298 1298 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1299 1299 </em></span> 1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532 201"></a>1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532196"></a> 1301 1301 1302 1302 default devmode (S) 1303 </h3></div></div></div><a class="indexterm" name="id2532 202"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services.1303 </h3></div></div></div><a class="indexterm" name="id2532197"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services. 1304 1304 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 1305 1305 server has a Device Mode which defines things such as paper size and … … 1324 1324 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 1325 1325 </em></span> 1326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253229 8"></a>1326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532293"></a> 1327 1327 1328 1328 <a name="DEFAULT"></a>default 1329 </h3></div></div></div><a class="indexterm" name="id253229 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532330"></a>1329 </h3></div></div></div><a class="indexterm" name="id2532294"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532325"></a> 1330 1330 1331 1331 default service (G) 1332 </h3></div></div></div><a class="indexterm" name="id25323 31"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service1332 </h3></div></div></div><a class="indexterm" name="id2532326"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 1333 1333 which will be connected to if the service actually requested cannot 1334 1334 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 1344 1344 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code> 1345 1345 </em></span> 1346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25324 44"></a>1346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532439"></a> 1347 1347 1348 1348 defer sharing violations (G) 1349 </h3></div></div></div><a class="indexterm" name="id253244 5"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1349 </h3></div></div></div><a class="indexterm" name="id2532440"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1350 1350 Windows allows specifying how a file will be shared with 1351 1351 other processes when it is opened. Sharing violations occur when … … 1360 1360 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code> 1361 1361 </em></span> 1362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532 502"></a>1362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532498"></a> 1363 1363 1364 1364 delete group script (G) 1365 </h3></div></div></div><a class="indexterm" name="id2532 503"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1365 </h3></div></div></div><a class="indexterm" name="id2532499"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1366 1366 be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1367 1367 It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. … … 1369 1369 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code> 1370 1370 </em></span> 1371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25325 63"></a>1371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532559"></a> 1372 1372 1373 1373 deleteprinter command (G) 1374 </h3></div></div></div><a class="indexterm" name="id253256 4"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer1374 </h3></div></div></div><a class="indexterm" name="id2532560"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer 1375 1375 support for Windows NT/2000 clients in Samba 2.2, it is now 1376 1376 possible to delete a printer at run time by issuing the … … 1390 1390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1391 1391 </em></span> 1392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253271 5"></a>1392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532710"></a> 1393 1393 1394 1394 delete readonly (S) 1395 </h3></div></div></div><a class="indexterm" name="id253271 6"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted.1395 </h3></div></div></div><a class="indexterm" name="id2532712"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1396 1396 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1397 1397 as rcs, where UNIX file ownership prevents changing file 1398 1398 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1399 1399 </em></span> 1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253276 4"></a>1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532760"></a> 1401 1401 1402 1402 delete share command (G) 1403 </h3></div></div></div><a class="indexterm" name="id253276 6"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1403 </h3></div></div></div><a class="indexterm" name="id2532761"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1404 1404 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 1405 1405 Manager. The <em class="parameter"><code>delete share command</code></em> is used to define an external … … 1425 1425 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1426 1426 </em></span> 1427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253293 6"></a>1427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532931"></a> 1428 1428 1429 1429 delete user from group script (G) 1430 </h3></div></div></div><a class="indexterm" name="id253293 7"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when1430 </h3></div></div></div><a class="indexterm" name="id2532932"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1431 1431 a user is removed from a group using the Windows NT domain administration 1432 1432 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. … … 1437 1437 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code> 1438 1438 </em></span> 1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25330 21"></a>1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533016"></a> 1440 1440 1441 1441 delete user script (G) 1442 </h3></div></div></div><a class="indexterm" name="id25330 22"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1442 </h3></div></div></div><a class="indexterm" name="id2533017"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1443 1443 be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1444 1444 with remote RPC (NT) tools. … … 1449 1449 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1450 1450 </em></span> 1451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533 103"></a>1451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533099"></a> 1452 1452 1453 1453 delete veto files (S) 1454 </h3></div></div></div><a class="indexterm" name="id253310 4"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to1454 </h3></div></div></div><a class="indexterm" name="id2533100"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to 1455 1455 delete a directory that contains one or more vetoed directories 1456 1456 (see the <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a> … … 1466 1466 is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code> 1467 1467 </em></span> 1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533 201"></a>1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533196"></a> 1469 1469 1470 1470 dfree cache time (S) 1471 </h3></div></div></div><a class="indexterm" name="id2533 202"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>1471 </h3></div></div></div><a class="indexterm" name="id2533197"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 1472 1472 The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem 1473 1473 occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur … … 1482 1482 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code> 1483 1483 </em></span> 1484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25332 83"></a>1484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533279"></a> 1485 1485 1486 1486 dfree command (S) 1487 </h3></div></div></div><a class="indexterm" name="id253328 4"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1487 </h3></div></div></div><a class="indexterm" name="id2533280"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1488 1488 The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a 1489 1489 problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may … … 1523 1523 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code> 1524 1524 </em></span> 1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253341 6"></a>1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533411"></a> 1526 1526 1527 1527 <a name="DIRECTORYMODE"></a>directory mode 1528 </h3></div></div></div><a class="indexterm" name="id253341 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533448"></a>1528 </h3></div></div></div><a class="indexterm" name="id2533412"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533443"></a> 1529 1529 1530 1530 directory mask (S) 1531 </h3></div></div></div><a class="indexterm" name="id253344 9"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are1531 </h3></div></div></div><a class="indexterm" name="id2533444"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are 1532 1532 used when converting DOS modes to UNIX modes when creating UNIX 1533 1533 directories.</p><p>When a directory is created, the necessary permissions are … … 1547 1547 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1548 1548 </em></span> 1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253356 6"></a>1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533561"></a> 1550 1550 1551 1551 directory security mask (S) 1552 </h3></div></div></div><a class="indexterm" name="id253356 7"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits1552 </h3></div></div></div><a class="indexterm" name="id2533562"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1553 1553 will be set when a Windows NT client is manipulating the UNIX 1554 1554 permission on a directory using the native NT security dialog … … 1570 1570 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code> 1571 1571 </em></span> 1572 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253367 6"></a>1572 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533671"></a> 1573 1573 1574 1574 disable netbios (G) 1575 </h3></div></div></div><a class="indexterm" name="id253367 7"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support1575 </h3></div></div></div><a class="indexterm" name="id2533672"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support 1576 1576 in Samba. Netbios is the only available form of browsing in 1577 1577 all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to … … 1579 1579 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code> 1580 1580 </em></span> 1581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253372 5"></a>1581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533721"></a> 1582 1582 1583 1583 disable spoolss (G) 1584 </h3></div></div></div><a class="indexterm" name="id253372 6"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support1584 </h3></div></div></div><a class="indexterm" name="id2533722"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support 1585 1585 for the SPOOLSS set of MS-RPC's and will yield identical behavior 1586 1586 as Samba 2.0.x. Windows NT/2000 clients will downgrade to using … … 1594 1594 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code> 1595 1595 </em></span> 1596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25337 81"></a>1596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533776"></a> 1597 1597 1598 1598 display charset (G) 1599 </h3></div></div></div><a class="indexterm" name="id25337 82"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>1599 </h3></div></div></div><a class="indexterm" name="id2533777"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p> 1600 1600 Specifies the charset that samba will use to print messages to stdout and stderr. 1601 1601 The default value is "LOCALE", which means automatically set, depending on the … … 1606 1606 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1607 1607 </em></span> 1608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253385 7"></a>1608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533852"></a> 1609 1609 1610 1610 dmapi support (S) 1611 </h3></div></div></div><a class="indexterm" name="id253385 8"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to1611 </h3></div></div></div><a class="indexterm" name="id2533853"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1612 1612 determine whether a file is offline or not. This would typically 1613 1613 be used in conjunction with a hierarchical storage system that … … 1624 1624 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1625 1625 </em></span> 1626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25339 20"></a>1626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533915"></a> 1627 1627 1628 1628 dns proxy (G) 1629 </h3></div></div></div><a class="indexterm" name="id25339 21"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and1629 </h3></div></div></div><a class="indexterm" name="id2533916"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1630 1630 finding that a NetBIOS name has not been registered, should treat the 1631 1631 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1636 1636 action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code> 1637 1637 </em></span> 1638 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253398 8"></a>1638 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533984"></a> 1639 1639 1640 1640 domain logons (G) 1641 </h3></div></div></div><a class="indexterm" name="id25339 90"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1641 </h3></div></div></div><a class="indexterm" name="id2533985"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1642 1642 If set to <code class="constant">yes</code>, the Samba server will 1643 1643 provide the netlogon service for Windows 9X network logons for the … … 1649 1649 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code> 1650 1650 </em></span> 1651 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25340 50"></a>1651 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534045"></a> 1652 1652 1653 1653 domain master (G) 1654 </h3></div></div></div><a class="indexterm" name="id25340 51"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>1654 </h3></div></div></div><a class="indexterm" name="id2534046"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1655 1655 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1656 1656 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a … … 1678 1678 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1679 1679 </em></span> 1680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25342 80"></a>1680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534276"></a> 1681 1681 1682 1682 dont descend (S) 1683 </h3></div></div></div><a class="indexterm" name="id25342 81"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems1683 </h3></div></div></div><a class="indexterm" name="id2534277"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1684 1684 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1685 1685 of interest to clients or are infinitely deep (recursive). This … … 1692 1692 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1693 1693 </em></span> 1694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253436 5"></a>1694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534361"></a> 1695 1695 1696 1696 dos charset (G) 1697 </h3></div></div></div><a class="indexterm" name="id253436 6"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has1697 </h3></div></div></div><a class="indexterm" name="id2534362"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1698 1698 the same charset as they do. This option specifies which 1699 1699 charset Samba should talk to DOS clients. 1700 1700 </p><p>The default depends on which charsets you have installed. 1701 1701 Samba tries to use charset 850 but falls back to ASCII in 1702 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253440 9"></a>1702 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534405"></a> 1703 1703 1704 1704 dos filemode (S) 1705 </h3></div></div></div><a class="indexterm" name="id25344 10"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide1705 </h3></div></div></div><a class="indexterm" name="id2534406"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide 1706 1706 UNIX-like behavior where only the owner of a file/directory is 1707 1707 able to change the permissions on it. However, this behavior … … 1714 1714 file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1715 1715 </em></span> 1716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25344 60"></a>1716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534455"></a> 1717 1717 1718 1718 dos filetime resolution (S) 1719 </h3></div></div></div><a class="indexterm" name="id25344 61"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest1719 </h3></div></div></div><a class="indexterm" name="id2534456"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1720 1720 granularity on time resolution is two seconds. Setting this parameter 1721 1721 for a share causes Samba to round the reported time down to the … … 1732 1732 happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code> 1733 1733 </em></span> 1734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253452 8"></a>1734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534523"></a> 1735 1735 1736 1736 dos filetimes (S) 1737 </h3></div></div></div><a class="indexterm" name="id253452 9"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a1737 </h3></div></div></div><a class="indexterm" name="id2534524"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a 1738 1738 file they can change the timestamp on it. Under POSIX semantics, 1739 1739 only the owner of the file or root may change the timestamp. By … … 1749 1749 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1750 1750 </em></span> 1751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253459 9"></a>1751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534594"></a> 1752 1752 1753 1753 ea support (S) 1754 </h3></div></div></div><a class="indexterm" name="id2534 600"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended1754 </h3></div></div></div><a class="indexterm" name="id2534595"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1755 1755 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1756 1756 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1759 1759 extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code> 1760 1760 </em></span> 1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253465 6"></a>1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534651"></a> 1762 1762 1763 1763 enable asu support (G) 1764 </h3></div></div></div><a class="indexterm" name="id253465 7"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product1764 </h3></div></div></div><a class="indexterm" name="id2534652"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1765 1765 require some special accomodations such as creating a builting [ADMIN$] 1766 1766 share that only supports IPC connections. The has been the default … … 1770 1770 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1771 1771 </em></span> 1772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253470 5"></a>1772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534701"></a> 1773 1773 1774 1774 enable privileges (G) 1775 </h3></div></div></div><a class="indexterm" name="id253470 6"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>1775 </h3></div></div></div><a class="indexterm" name="id2534702"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1776 1776 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1777 1777 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1786 1786 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code> 1787 1787 </em></span> 1788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25347 71"></a>1788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534766"></a> 1789 1789 1790 1790 encrypt passwords (G) 1791 </h3></div></div></div><a class="indexterm" name="id25347 72"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords1791 </h3></div></div></div><a class="indexterm" name="id2534767"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords 1792 1792 will be negotiated with the client. Note that Windows NT 4.0 SP3 and 1793 1793 above and also Windows 98 will by default expect encrypted passwords … … 1812 1812 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1813 1813 </em></span> 1814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25348 83"></a>1814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534879"></a> 1815 1815 1816 1816 enhanced browsing (G) 1817 </h3></div></div></div><a class="indexterm" name="id253488 4"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to1817 </h3></div></div></div><a class="indexterm" name="id2534880"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1818 1818 cross-subnet browse propagation that have been added in Samba 1819 1819 but which are not standard in Microsoft implementations. … … 1828 1828 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> 1829 1829 </em></span> 1830 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253495 4"></a>1830 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534950"></a> 1831 1831 1832 1832 enumports command (G) 1833 </h3></div></div></div><a class="indexterm" name="id253495 5"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign1833 </h3></div></div></div><a class="indexterm" name="id2534951"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign 1834 1834 to UNIX hosts. Under Windows NT/2000 print servers, a port 1835 1835 is associated with a port monitor and generally takes the form of … … 1848 1848 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 1849 1849 </em></span> 1850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25350 44"></a>1850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535039"></a> 1851 1851 1852 1852 eventlog list (G) 1853 </h3></div></div></div><a class="indexterm" name="id253504 5"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will1853 </h3></div></div></div><a class="indexterm" name="id2535040"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 1854 1854 report to the Microsoft EventViewer utility. The listed 1855 1855 eventlogs will be associated with tdb file on disk in the … … 1864 1864 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 1865 1865 </em></span> 1866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25351 23"></a>1866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535118"></a> 1867 1867 1868 1868 fake directory create times (S) 1869 </h3></div></div></div><a class="indexterm" name="id253512 4"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create1869 </h3></div></div></div><a class="indexterm" name="id2535120"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create 1870 1870 time for all files and directories. This is not the same as the 1871 1871 ctime - status change time - that Unix keeps, so Samba by default … … 1889 1889 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 1890 1890 </em></span> 1891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535 203"></a>1891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535198"></a> 1892 1892 1893 1893 fake oplocks (S) 1894 </h3></div></div></div><a class="indexterm" name="id2535 204"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission1894 </h3></div></div></div><a class="indexterm" name="id2535199"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 1895 1895 from a server to locally cache file operations. If a server grants 1896 1896 an oplock (opportunistic lock) then the client is free to assume … … 1908 1908 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 1909 1909 </em></span> 1910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253529 5"></a>1910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535290"></a> 1911 1911 1912 1912 follow symlinks (S) 1913 </h3></div></div></div><a class="indexterm" name="id253529 6"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>1913 </h3></div></div></div><a class="indexterm" name="id2535291"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1914 1914 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1915 1915 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being … … 1921 1921 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 1922 1922 </em></span> 1923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25353 70"></a>1923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535365"></a> 1924 1924 1925 1925 force create mode (S) 1926 </h3></div></div></div><a class="indexterm" name="id2535371"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1927 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1928 file created by Samba. This is done by bitwise 'OR'ing these bits onto 1929 the mode bits of a file that is being created or having its 1930 permissions changed. The default for this parameter is (in octal) 1931 000. The modes in this parameter are bitwise 'OR'ed onto the file 1932 mode after the mask set in the <em class="parameter"><code>create mask</code></em> 1933 parameter is applied.</p><p>The example below would force all created files to have read and execute 1934 permissions set for 'group' and 'other' as well as the 1926 </h3></div></div></div><a class="indexterm" name="id2535366"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1927 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1928 file created by Samba. This is done by bitwise 'OR'ing these bits onto 1929 the mode bits of a file that is being created. The default for this parameter is (in octal) 1930 000. The modes in this parameter are bitwise 'OR'ed onto the file 1931 mode after the mask set in the <em class="parameter"><code>create mask</code></em> 1932 parameter is applied.</p><p>The example below would force all newly created files to have read and execute 1933 permissions set for 'group' and 'other' as well as the 1935 1934 read/write/execute bits set for the 'user'.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">000</code> 1936 1935 </em></span> 1937 1936 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code> 1938 1937 </em></span> 1939 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25354 51"></a>1938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535446"></a> 1940 1939 1941 1940 force directory mode (S) 1942 </h3></div></div></div><a class="indexterm" name="id25354 52"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1941 </h3></div></div></div><a class="indexterm" name="id2535447"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1943 1942 permissions that will <span class="emphasis"><em>always</em></span> be set on a directory 1944 1943 created by Samba. This is done by bitwise 'OR'ing these bits onto the … … 1953 1952 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 1954 1953 </em></span> 1955 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25355 32"></a>1954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535527"></a> 1956 1955 1957 1956 force directory security mode (S) 1958 </h3></div></div></div><a class="indexterm" name="id25355 34"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>1957 </h3></div></div></div><a class="indexterm" name="id2535528"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1959 1958 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 1960 1959 the UNIX permission on a directory using the native NT security dialog box. … … 1977 1976 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code> 1978 1977 </em></span> 1979 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253563 6"></a>1978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535631"></a> 1980 1979 1981 1980 <a name="GROUP"></a>group 1982 </h3></div></div></div><a class="indexterm" name="id253563 8"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535668"></a>1981 </h3></div></div></div><a class="indexterm" name="id2535632"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535663"></a> 1983 1982 1984 1983 force group (S) 1985 </h3></div></div></div><a class="indexterm" name="id25356 70"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be1984 </h3></div></div></div><a class="indexterm" name="id2535664"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be 1986 1985 assigned as the default primary group for all users connecting 1987 1986 to this service. This is useful for sharing files by ensuring … … 2007 2006 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code> 2008 2007 </em></span> 2009 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25357 84"></a>2008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535778"></a> 2010 2009 2011 2010 force printername (S) 2012 </h3></div></div></div><a class="indexterm" name="id25357 85"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),2011 </h3></div></div></div><a class="indexterm" name="id2535779"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later), 2013 2012 each printer in <code class="filename">smb.conf</code> has two 2014 2013 associated names which can be used by the client. The first … … 2033 2032 folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code> 2034 2033 </em></span> 2035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253587 5"></a>2034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535870"></a> 2036 2035 2037 2036 force security mode (S) 2038 </h3></div></div></div><a class="indexterm" name="id253587 6"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2037 </h3></div></div></div><a class="indexterm" name="id2535871"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2039 2038 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2040 2039 the UNIX permission on a file using the native NT security dialog box. … … 2056 2055 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code> 2057 2056 </em></span> 2058 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253597 7"></a>2057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535970"></a> 2059 2058 2060 2059 force unknown acl user (S) 2061 </h3></div></div></div><a class="indexterm" name="id253597 8"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>2060 </h3></div></div></div><a class="indexterm" name="id2535972"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2062 2061 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 2063 2062 representation of a user or group id) as the owner or group owner of the file will be silently … … 2073 2072 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code> 2074 2073 </em></span> 2075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253603 9"></a>2074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536033"></a> 2076 2075 2077 2076 force user (S) 2078 </h3></div></div></div><a class="indexterm" name="id25360 40"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be2077 </h3></div></div></div><a class="indexterm" name="id2536034"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be 2079 2078 assigned as the default user for all users connecting to this service. 2080 2079 This is useful for sharing files. You should also use it carefully … … 2090 2089 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code> 2091 2090 </em></span> 2092 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25361 20"></a>2091 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536109"></a> 2093 2092 2094 2093 fstype (S) 2095 </h3></div></div></div><a class="indexterm" name="id25361 22"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>2094 </h3></div></div></div><a class="indexterm" name="id2536110"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2096 2095 This parameter allows the administrator to configure the string that specifies the type of filesystem a share 2097 2096 is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 2103 2102 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code> 2104 2103 </em></span> 2105 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536 202"></a>2104 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536190"></a> 2106 2105 2107 2106 get quota command (G) 2108 </h3></div></div></div><a class="indexterm" name="id2536 203"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used2107 </h3></div></div></div><a class="indexterm" name="id2536191"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used 2109 2108 whenever there is no operating system API available from the OS that 2110 2109 samba can use.</p><p>This option is only available you have compiled Samba with the … … 2119 2118 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code> 2120 2119 </em></span> 2121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25363 88"></a>2120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536378"></a> 2122 2121 2123 2122 getwd cache (G) 2124 </h3></div></div></div><a class="indexterm" name="id25363 89"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a2123 </h3></div></div></div><a class="indexterm" name="id2536379"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a 2125 2124 caching algorithm will be used to reduce the time taken for getwd() 2126 2125 calls. This can have a significant impact on performance, especially 2127 2126 when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 2128 2127 </em></span> 2129 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25364 48"></a>2128 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536438"></a> 2130 2129 2131 2130 guest account (G) 2132 </h3></div></div></div><a class="indexterm" name="id25364 50"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access2131 </h3></div></div></div><a class="indexterm" name="id2536439"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 2133 2132 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> (see below). Whatever privileges this 2134 2133 user has will be available to any client connecting to the guest service. … … 2148 2147 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code> 2149 2148 </em></span> 2150 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25365 56"></a>2149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536546"></a> 2151 2150 2152 2151 <a name="PUBLIC"></a>public 2153 </h3></div></div></div><a class="indexterm" name="id25365 58"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536588"></a>2152 </h3></div></div></div><a class="indexterm" name="id2536547"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536577"></a> 2154 2153 2155 2154 guest ok (S) 2156 </h3></div></div></div><a class="indexterm" name="id25365 89"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2155 </h3></div></div></div><a class="indexterm" name="id2536578"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2157 2156 a service, then no password is required to connect to the service. 2158 2157 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p><p>This paramater nullifies the benifits of setting … … 2161 2160 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 2162 2161 </em></span> 2163 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25366 76"></a>2162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536665"></a> 2164 2163 2165 2164 <a name="ONLYGUEST"></a>only guest 2166 </h3></div></div></div><a class="indexterm" name="id25366 77"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536708"></a>2165 </h3></div></div></div><a class="indexterm" name="id2536666"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536697"></a> 2167 2166 2168 2167 guest only (S) 2169 </h3></div></div></div><a class="indexterm" name="id2536 709"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2168 </h3></div></div></div><a class="indexterm" name="id2536698"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2170 2169 a service, then only guest connections to the service are permitted. 2171 2170 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option. 2172 2171 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 2173 2172 </em></span> 2174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25367 80"></a>2173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536770"></a> 2175 2174 2176 2175 hide dot files (S) 2177 </h3></div></div></div><a class="indexterm" name="id25367 81"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether2176 </h3></div></div></div><a class="indexterm" name="id2536771"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 2178 2177 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 2179 2178 </em></span> 2180 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25368 23"></a>2179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536812"></a> 2181 2180 2182 2181 hide files (S) 2183 </h3></div></div></div><a class="indexterm" name="id25368 24"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not2182 </h3></div></div></div><a class="indexterm" name="id2536813"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 2184 2183 visible but are accessible. The DOS 'hidden' attribute is applied 2185 2184 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 2203 2202 # no file are hidden</code> 2204 2203 </em></span> 2205 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25369 11"></a>2204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536901"></a> 2206 2205 2207 2206 hide special files (S) 2208 </h3></div></div></div><a class="indexterm" name="id25369 12"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2207 </h3></div></div></div><a class="indexterm" name="id2536902"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2209 2208 This parameter prevents clients from seeing special files such as sockets, devices and 2210 2209 fifo's in directory listings. 2211 2210 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 2212 2211 </em></span> 2213 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25369 54"></a>2212 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536943"></a> 2214 2213 2215 2214 hide unreadable (S) 2216 </h3></div></div></div><a class="indexterm" name="id25369 55"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the2215 </h3></div></div></div><a class="indexterm" name="id2536944"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the 2217 2216 existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code> 2218 2217 </em></span> 2219 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25369 97"></a>2218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536986"></a> 2220 2219 2221 2220 hide unwriteable files (S) 2222 </h3></div></div></div><a class="indexterm" name="id25369 98"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2221 </h3></div></div></div><a class="indexterm" name="id2536987"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2223 2222 This parameter prevents clients from seeing the existance of files that cannot be written to. 2224 2223 Defaults to off. Note that unwriteable directories are shown as usual. 2225 2224 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code> 2226 2225 </em></span> 2227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25370 41"></a>2226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537030"></a> 2228 2227 2229 2228 homedir map (G) 2230 </h3></div></div></div><a class="indexterm" name="id25370 42"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>2229 </h3></div></div></div><a class="indexterm" name="id2537031"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2231 2230 If <a class="link" href="smb.conf.5.html#NISHOMEDIR">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 2232 2231 then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. … … 2243 2242 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 2244 2243 </em></span> 2245 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25371 53"></a>2244 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537143"></a> 2246 2245 2247 2246 host msdfs (G) 2248 </h3></div></div></div><a class="indexterm" name="id25371 54"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>2247 </h3></div></div></div><a class="indexterm" name="id2537144"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2249 2248 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 2250 2249 Dfs trees hosted on the server. … … 2254 2253 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 2255 2254 </em></span> 2256 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25372 18"></a>2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537207"></a> 2257 2256 2258 2257 hostname lookups (G) 2259 </h3></div></div></div><a class="indexterm" name="id25372 19"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)2258 </h3></div></div></div><a class="indexterm" name="id2537208"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 2260 2259 hostname lookups or use the ip addresses instead. An example place 2261 2260 where hostname lookups are currently used is when checking … … 2265 2264 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code> 2266 2265 </em></span> 2267 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25372 91"></a>2266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537280"></a> 2268 2267 2269 2268 <a name="ALLOWHOSTS"></a>allow hosts 2270 </h3></div></div></div><a class="indexterm" name="id25372 92"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537323"></a>2269 </h3></div></div></div><a class="indexterm" name="id2537281"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537312"></a> 2271 2270 2272 2271 hosts allow (S) 2273 </h3></div></div></div><a class="indexterm" name="id25373 24"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited2272 </h3></div></div></div><a class="indexterm" name="id2537313"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 2274 2273 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 2275 2274 apply to all services, regardless of whether the individual … … 2291 2290 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 2292 2291 </em></span> 2293 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25375 24"></a>2292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537514"></a> 2294 2293 2295 2294 <a name="DENYHOSTS"></a>deny hosts 2296 </h3></div></div></div><a class="indexterm" name="id25375 26"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537556"></a>2295 </h3></div></div></div><a class="indexterm" name="id2537515"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537545"></a> 2297 2296 2298 2297 hosts deny (S) 2299 </h3></div></div></div><a class="indexterm" name="id25375 57"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>2298 </h3></div></div></div><a class="indexterm" name="id2537546"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 2300 2299 - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to 2301 2300 services unless the specific services have their own lists to override … … 2311 2310 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code> 2312 2311 </em></span> 2313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25376 58"></a>2312 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537647"></a> 2314 2313 2315 2314 idmap alloc backend (G) 2316 </h3></div></div></div><a class="indexterm" name="id25376 59"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2315 </h3></div></div></div><a class="indexterm" name="id2537648"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2317 2316 The idmap alloc backend provides a plugin interface for Winbind to use 2318 2317 when allocating Unix uids/gids for Windows SIDs. This option is … … 2326 2325 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 2327 2326 </em></span> 2328 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25377 55"></a>2327 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537745"></a> 2329 2328 2330 2329 idmap alloc config (G) 2331 </h3></div></div></div><a class="indexterm" name="id25377 56"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2330 </h3></div></div></div><a class="indexterm" name="id2537746"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2332 2331 The idmap alloc config prefix provides a means of managing settings 2333 2332 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc backend</a> 2334 2333 parameter. Refer to the man page for each idmap plugin regarding 2335 2334 specific configuration details. 2336 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537 800"></a>2335 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537789"></a> 2337 2336 2338 2337 idmap backend (G) 2339 </h3></div></div></div><a class="indexterm" name="id2537 801"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2338 </h3></div></div></div><a class="indexterm" name="id2537790"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2340 2339 The idmap backend provides a plugin interface for Winbind to use 2341 2340 varying backends to store SID/uid/gid mapping tables. This … … 2350 2349 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code> 2351 2350 </em></span> 2352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25378 95"></a>2351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537884"></a> 2353 2352 2354 2353 idmap cache time (G) 2355 </h3></div></div></div><a class="indexterm" name="id25378 96"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2354 </h3></div></div></div><a class="indexterm" name="id2537885"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2356 2355 idmap interface will cache positive SID/uid/gid query results. 2357 2356 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">900</code> 2358 2357 </em></span> 2359 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25379 38"></a>2358 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537927"></a> 2360 2359 2361 2360 idmap config (G) 2362 </h3></div></div></div><a class="indexterm" name="id25379 39"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2361 </h3></div></div></div><a class="indexterm" name="id2537928"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2363 2362 The idmap config prefix provides a means of managing each domain 2364 2363 defined by the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> option using Samba's … … 2393 2392 idmap config TRUSTEDDOMAINS:default = yes 2394 2393 idmap config TRUSTEDDOMAINS:range = 1000 - 9999 2395 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25380 74"></a>2394 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538063"></a> 2396 2395 2397 2396 idmap domains (G) 2398 </h3></div></div></div><a class="indexterm" name="id25380 75"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>2397 </h3></div></div></div><a class="indexterm" name="id2538064"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2399 2398 The idmap domains option defines a list of Windows domains which will each 2400 2399 have a separately configured backend for managing Winbind's SID/uid/gid … … 2409 2408 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap domains</code></em> = <code class="literal">default AD CORP</code> 2410 2409 </em></span> 2411 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25381 59"></a>2410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538148"></a> 2412 2411 2413 2412 <a name="WINBINDGID"></a>winbind gid 2414 </h3></div></div></div><a class="indexterm" name="id25381 60"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538191"></a>2413 </h3></div></div></div><a class="indexterm" name="id2538149"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538179"></a> 2415 2414 2416 2415 idmap gid (G) 2417 </h3></div></div></div><a class="indexterm" name="id25381 92"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids2416 </h3></div></div></div><a class="indexterm" name="id2538180"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 2418 2417 that are allocated for the purpose of mapping UNX groups to NT group 2419 2418 SIDs. This range of group ids should have no … … 2424 2423 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code> 2425 2424 </em></span> 2426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25382 88"></a>2425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538278"></a> 2427 2426 2428 2427 idmap negative cache time (G) 2429 </h3></div></div></div><a class="indexterm" name="id25382 90"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2428 </h3></div></div></div><a class="indexterm" name="id2538279"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2430 2429 idmap interface will cache negative SID/uid/gid query results. 2431 2430 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code> 2432 2431 </em></span> 2433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25383 32"></a>2432 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538321"></a> 2434 2433 2435 2434 <a name="WINBINDUID"></a>winbind uid 2436 </h3></div></div></div><a class="indexterm" name="id25383 33"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538364"></a>2435 </h3></div></div></div><a class="indexterm" name="id2538322"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538353"></a> 2437 2436 2438 2437 idmap uid (G) 2439 </h3></div></div></div><a class="indexterm" name="id25383 65"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>2438 </h3></div></div></div><a class="indexterm" name="id2538354"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 2440 2439 The idmap uid parameter specifies the range of user ids that are 2441 2440 allocated for use in mapping UNIX users to NT user SIDs. This … … 2446 2445 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 2447 2446 </em></span> 2448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25384 61"></a>2447 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538450"></a> 2449 2448 2450 2449 include (G) 2451 </h3></div></div></div><a class="indexterm" name="id25384 62"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>2450 </h3></div></div></div><a class="indexterm" name="id2538451"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2452 2451 This allows you to include one config file inside another. The file is included literally, as though typed 2453 2452 in place. … … 2467 2466 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 2468 2467 </em></span> 2469 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25385 62"></a>2468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538551"></a> 2470 2469 2471 2470 inherit acls (S) 2472 </h3></div></div></div><a class="indexterm" name="id25385 63"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls2471 </h3></div></div></div><a class="indexterm" name="id2538552"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 2473 2472 exist on parent directories, they are always honored when creating a 2474 2473 new file or subdirectory in these parent directories. The default … … 2478 2477 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 2479 2478 </em></span> 2480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538 609"></a>2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538598"></a> 2481 2480 2482 2481 inherit owner (S) 2483 </h3></div></div></div><a class="indexterm" name="id2538 610"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories2482 </h3></div></div></div><a class="indexterm" name="id2538599"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 2484 2483 is normally governed by effective uid of the connected user. 2485 2484 This option allows the Samba administrator to specify that … … 2490 2489 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 2491 2490 </em></span> 2492 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25386 62"></a>2491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538651"></a> 2493 2492 2494 2493 inherit permissions (S) 2495 </h3></div></div></div><a class="indexterm" name="id25386 63"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>2494 </h3></div></div></div><a class="indexterm" name="id2538652"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2496 2495 The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>, 2497 2496 <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> but the boolean inherit permissions parameter overrides this. … … 2505 2504 share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code> 2506 2505 </em></span> 2507 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538 809"></a>2506 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538799"></a> 2508 2507 2509 2508 interfaces (G) 2510 </h3></div></div></div><a class="indexterm" name="id25388 10"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default2509 </h3></div></div></div><a class="indexterm" name="id2538800"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default 2511 2510 network interfaces list that Samba will use for browsing, name 2512 2511 registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query … … 2532 2531 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code> 2533 2532 </em></span> 2534 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25389 26"></a>2533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538915"></a> 2535 2534 2536 2535 invalid users (S) 2537 </h3></div></div></div><a class="indexterm" name="id25389 27"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed2536 </h3></div></div></div><a class="indexterm" name="id2538916"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed 2538 2537 to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span> 2539 2538 check to absolutely ensure an improper setting does not breach … … 2555 2554 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 2556 2555 </em></span> 2557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25390 40"></a>2556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539029"></a> 2558 2557 2559 2558 iprint server (G) 2560 </h3></div></div></div><a class="indexterm" name="id25390 41"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>2559 </h3></div></div></div><a class="indexterm" name="id2539030"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2561 2560 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">iprint</code>. 2562 2561 </p><p> … … 2567 2566 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code> 2568 2567 </em></span> 2569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25391 26"></a>2568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539115"></a> 2570 2569 2571 2570 keepalive (G) 2572 </h3></div></div></div><a class="indexterm" name="id25391 27"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents2571 </h3></div></div></div><a class="indexterm" name="id2539116"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents 2573 2572 the number of seconds between <em class="parameter"><code>keepalive</code></em> 2574 2573 packets. If this parameter is zero, no keepalive packets will be … … 2580 2579 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 2581 2580 </em></span> 2582 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25392 13"></a>2581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539202"></a> 2583 2582 2584 2583 kernel change notify (S) 2585 </h3></div></div></div><a class="indexterm" name="id25392 14"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the2584 </h3></div></div></div><a class="indexterm" name="id2539203"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 2586 2585 kernel for change notifications in directories so that 2587 2586 SMB clients can refresh whenever the data on the server changes. … … 2590 2589 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 2591 2590 </em></span> 2592 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25392 62"></a>2591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539252"></a> 2593 2592 2594 2593 kernel oplocks (G) 2595 </h3></div></div></div><a class="indexterm" name="id25392 63"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a>2594 </h3></div></div></div><a class="indexterm" name="id2539253"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 2596 2595 (currently only IRIX and the Linux 2.4 kernel), this parameter 2597 2596 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks … … 2603 2602 You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code> 2604 2603 </em></span> 2605 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25393 50"></a>2604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539339"></a> 2606 2605 2607 2606 lanman auth (G) 2608 </h3></div></div></div><a class="indexterm" name="id25393 51"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to2607 </h3></div></div></div><a class="indexterm" name="id2539340"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 2609 2608 authenticate users or permit password changes 2610 2609 using the LANMAN password hash. If disabled, only clients which support NT … … 2623 2622 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code> 2624 2623 </em></span> 2625 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25394 43"></a>2624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539432"></a> 2626 2625 2627 2626 large readwrite (G) 2628 </h3></div></div></div><a class="indexterm" name="id25394 44"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not2627 </h3></div></div></div><a class="indexterm" name="id2539433"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2629 2628 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2630 2629 streaming read and write varient SMB requests introduced with … … 2635 2634 tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code> 2636 2635 </em></span> 2637 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25394 99"></a>2636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539488"></a> 2638 2637 2639 2638 ldap admin dn (G) 2640 </h3></div></div></div><a class="indexterm" name="id2539 500"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>2639 </h3></div></div></div><a class="indexterm" name="id2539489"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2641 2640 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> defines the Distinguished Name (DN) name used by Samba to contact 2642 2641 the ldap server when retreiving user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> is used … … 2646 2645 </p><p> 2647 2646 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>. 2648 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539 608"></a>2647 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539597"></a> 2649 2648 2650 2649 ldap connection timeout (G) 2651 </h3></div></div></div><a class="indexterm" name="id2539 609"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2650 </h3></div></div></div><a class="indexterm" name="id2539598"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2652 2651 This parameter tells the LDAP library calls which timeout in seconds 2653 2652 they should honor during initial connection establishments to LDAP servers. … … 2661 2660 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code> 2662 2661 </em></span> 2663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25396 73"></a>2662 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539662"></a> 2664 2663 2665 2664 ldap debug level (G) 2666 </h3></div></div></div><a class="indexterm" name="id25396 74"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>2665 </h3></div></div></div><a class="indexterm" name="id2539663"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2667 2666 This parameter controls the debug level of the LDAP library 2668 2667 calls. In the case of OpenLDAP, it is the same … … 2681 2680 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code> 2682 2681 </em></span> 2683 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25397 60"></a>2682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539750"></a> 2684 2683 2685 2684 ldap debug threshold (G) 2686 </h3></div></div></div><a class="indexterm" name="id25397 62"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>2685 </h3></div></div></div><a class="indexterm" name="id2539751"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2687 2686 This parameter controls the Samba debug level at which 2688 2687 the ldap library debug output is … … 2693 2692 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code> 2694 2693 </em></span> 2695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25398 28"></a>2694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539817"></a> 2696 2695 2697 2696 ldap delete dn (G) 2698 </h3></div></div></div><a class="indexterm" name="id25398 29"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete2697 </h3></div></div></div><a class="indexterm" name="id2539818"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete 2699 2698 operation in the ldapsam deletes the complete entry or only the attributes 2700 2699 specific to Samba. 2701 2700 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code> 2702 2701 </em></span> 2703 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25398 71"></a>2702 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539860"></a> 2704 2703 2705 2704 ldap group suffix (G) 2706 </h3></div></div></div><a class="indexterm" name="id25398 72"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is2705 </h3></div></div></div><a class="indexterm" name="id2539861"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is 2707 2706 used for groups when these are added to the LDAP directory. 2708 2707 If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2711 2710 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2712 2711 </em></span> 2713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25399 54"></a>2712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539944"></a> 2714 2713 2715 2714 ldap idmap suffix (G) 2716 </h3></div></div></div><a class="indexterm" name="id25399 56"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2715 </h3></div></div></div><a class="indexterm" name="id2539945"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2717 2716 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2718 2717 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix … … 2722 2721 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code> 2723 2722 </em></span> 2724 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25400 37"></a>2723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540026"></a> 2725 2724 2726 2725 ldap machine suffix (G) 2727 </h3></div></div></div><a class="indexterm" name="id25400 38"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2726 </h3></div></div></div><a class="indexterm" name="id2540027"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2728 2727 It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of 2729 2728 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2733 2732 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2734 2733 </em></span> 2735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25401 19"></a>2734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540108"></a> 2736 2735 2737 2736 ldap passwd sync (G) 2738 </h3></div></div></div><a class="indexterm" name="id25401 20"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>2737 </h3></div></div></div><a class="indexterm" name="id2540109"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2739 2738 This option is used to define whether or not Samba should sync the LDAP password with the NT 2740 2739 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password … … 2747 2746 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 2748 2747 </em></span> 2749 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25402 19"></a>2748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540208"></a> 2750 2749 2751 2750 ldap replication sleep (G) 2752 </h3></div></div></div><a class="indexterm" name="id25402 20"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>2751 </h3></div></div></div><a class="indexterm" name="id2540210"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2753 2752 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 2754 2753 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 2763 2762 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code> 2764 2763 </em></span> 2765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25402 83"></a>2764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540272"></a> 2766 2765 2767 2766 ldapsam:editposix (G) 2768 </h3></div></div></div><a class="indexterm" name="id25402 84"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2767 </h3></div></div></div><a class="indexterm" name="id2540273"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2769 2768 Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller 2770 2769 eliminating the need to set up custom scripts to add and manage the posix users and groups. This option … … 2844 2843 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code> 2845 2844 </em></span> 2846 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25404 20"></a>2845 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540409"></a> 2847 2846 2848 2847 ldapsam:trusted (G) 2849 </h3></div></div></div><a class="indexterm" name="id25404 22"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>2848 </h3></div></div></div><a class="indexterm" name="id2540410"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 2850 2849 By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to 2851 2850 access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group … … 2865 2864 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code> 2866 2865 </em></span> 2867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540 509"></a>2866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540498"></a> 2868 2867 2869 2868 ldap ssl (G) 2870 </h3></div></div></div><a class="indexterm" name="id2540 510"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should2869 </h3></div></div></div><a class="indexterm" name="id2540499"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 2871 2870 use SSL when connecting to the ldap server 2872 2871 This is <span class="emphasis"><em>NOT</em></span> related to … … 2882 2881 </li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start_tls</code> 2883 2882 </em></span> 2884 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25406 48"></a>2883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540637"></a> 2885 2884 2886 2885 ldap suffix (G) 2887 </h3></div></div></div><a class="indexterm" name="id25406 49"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>2886 </h3></div></div></div><a class="indexterm" name="id2540638"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 2888 2887 The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX">ldap user suffix</a>, 2889 2888 <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX">ldap machine suffix</a>, and the … … 2894 2893 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 2895 2894 </em></span> 2896 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25407 70"></a>2895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540760"></a> 2897 2896 2898 2897 ldap timeout (G) 2899 </h3></div></div></div><a class="indexterm" name="id25407 71"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2898 </h3></div></div></div><a class="indexterm" name="id2540761"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2900 2899 When Samba connects to an ldap server that server may be down or unreachable. To prevent Samba from hanging whilst 2901 2900 waiting for the connection this parameter specifies in seconds how long Samba should wait before failing the … … 2903 2902 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> 2904 2903 </em></span> 2905 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25408 17"></a>2904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540806"></a> 2906 2905 2907 2906 ldap user suffix (G) 2908 </h3></div></div></div><a class="indexterm" name="id25408 18"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2907 </h3></div></div></div><a class="indexterm" name="id2540807"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2909 2908 This parameter specifies where users are added to the tree. If this parameter is unset, 2910 2909 the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix … … 2914 2913 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 2915 2914 </em></span> 2916 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25408 98"></a>2915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540888"></a> 2917 2916 2918 2917 level2 oplocks (S) 2919 </h3></div></div></div><a class="indexterm" name="id2540 900"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports2918 </h3></div></div></div><a class="indexterm" name="id2540889"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports 2920 2919 level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients 2921 2920 that have an oplock on a file to downgrade from a read-write oplock … … 2937 2936 this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code> 2938 2937 </em></span> 2939 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254 1006"></a>2938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540995"></a> 2940 2939 2941 2940 lm announce (G) 2942 </h3></div></div></div><a class="indexterm" name="id254 1007"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce2941 </h3></div></div></div><a class="indexterm" name="id2540996"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 2943 2942 broadcasts that are needed by OS/2 clients in order for them to see 2944 2943 the Samba server in their browse list. This parameter can have three … … 2956 2955 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 2957 2956 </em></span> 2958 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25411 28"></a>2957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541117"></a> 2959 2958 2960 2959 lm interval (G) 2961 </h3></div></div></div><a class="indexterm" name="id25411 29"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce2960 </h3></div></div></div><a class="indexterm" name="id2541118"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 2962 2961 broadcasts needed by OS/2 clients (see the 2963 2962 <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a> parameter) then this … … 2969 2968 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code> 2970 2969 </em></span> 2971 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25412 12"></a>2970 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541201"></a> 2972 2971 2973 2972 load printers (G) 2974 </h3></div></div></div><a class="indexterm" name="id25412 13"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all2973 </h3></div></div></div><a class="indexterm" name="id2541202"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all 2975 2974 printers in the printcap will be loaded for browsing by default. 2976 2975 See the <a class="link" href="smb.conf.5.html#PRINTERS">printers</a> section for 2977 2976 more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code> 2978 2977 </em></span> 2979 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25412 68"></a>2978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541258"></a> 2980 2979 2981 2980 local master (G) 2982 </h3></div></div></div><a class="indexterm" name="id25412 69"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser2981 </h3></div></div></div><a class="indexterm" name="id2541259"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 2983 2982 on a subnet. If set to <code class="constant">no</code> then <code class="literal"> 2984 2983 nmbd</code> will not attempt to become a local master browser … … 2990 2989 master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code> 2991 2990 </em></span> 2992 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25413 69"></a>2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541358"></a> 2993 2992 2994 2993 <a name="LOCKDIR"></a>lock dir 2995 </h3></div></div></div><a class="indexterm" name="id25413 70"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541401"></a>2994 </h3></div></div></div><a class="indexterm" name="id2541359"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541390"></a> 2996 2995 2997 2996 lock directory (G) 2998 </h3></div></div></div><a class="indexterm" name="id2541 402"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock2997 </h3></div></div></div><a class="indexterm" name="id2541391"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock 2999 2998 files will be placed. The lock files are used to implement the 3000 2999 <a class="link" href="smb.conf.5.html#MAXCONNECTIONS">max connections</a> option. … … 3006 3005 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 3007 3006 </em></span> 3008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25414 79"></a>3007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541468"></a> 3009 3008 3010 3009 locking (S) 3011 </h3></div></div></div><a class="indexterm" name="id25414 80"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be3010 </h3></div></div></div><a class="indexterm" name="id2541470"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 3012 3011 performed by the server in response to lock requests from the 3013 3012 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 3019 3018 is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a 3020 3019 specific service, as lack of locking may result in data corruption. 3021 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25415 54"></a>3020 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541544"></a> 3022 3021 3023 3022 lock spin count (G) 3024 </h3></div></div></div><a class="indexterm" name="id25415 55"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.3023 </h3></div></div></div><a class="indexterm" name="id2541545"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 3025 3024 The functionality it contolled is now controlled by the parameter 3026 3025 <a class="link" href="smb.conf.5.html#LOCKSPINTIME">lock spin time</a>. 3027 3026 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 3028 3027 </em></span> 3029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25416 11"></a>3028 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541600"></a> 3030 3029 3031 3030 lock spin time (G) 3032 </h3></div></div></div><a class="indexterm" name="id25416 12"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should3031 </h3></div></div></div><a class="indexterm" name="id2541601"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should 3033 3032 keep waiting to see if a failed lock request can 3034 3033 be granted. This parameter has changed in default … … 3038 3037 to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code> 3039 3038 </em></span> 3040 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25416 70"></a>3039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541659"></a> 3041 3040 3042 3041 log file (G) 3043 </h3></div></div></div><a class="indexterm" name="id25416 71"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>3042 </h3></div></div></div><a class="indexterm" name="id2541660"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3044 3043 This option allows you to override the name of the Samba log file (also known as the debug file). 3045 3044 </p><p> … … 3047 3046 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 3048 3047 </em></span> 3049 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25417 22"></a>3048 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541711"></a> 3050 3049 3051 3050 <a name="DEBUGLEVEL"></a>debuglevel 3052 </h3></div></div></div><a class="indexterm" name="id25417 23"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541753"></a>3051 </h3></div></div></div><a class="indexterm" name="id2541712"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541742"></a> 3053 3052 3054 3053 log level (G) 3055 </h3></div></div></div><a class="indexterm" name="id25417 54"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>3054 </h3></div></div></div><a class="indexterm" name="id2541743"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3056 3055 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 3057 3056 <code class="filename">smb.conf</code> file. … … 3064 3063 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 3065 3064 </em></span> 3066 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25419 86"></a>3065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541975"></a> 3067 3066 3068 3067 logon drive (G) 3069 </h3></div></div></div><a class="indexterm" name="id25419 87"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3068 </h3></div></div></div><a class="indexterm" name="id2541976"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3070 3069 This parameter specifies the local path to which the home directory will be 3071 3070 connected (see <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a>) and is only used by NT … … 3077 3076 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 3078 3077 </em></span> 3079 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25420 60"></a>3078 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542049"></a> 3080 3079 3081 3080 logon home (G) 3082 </h3></div></div></div><a class="indexterm" name="id25420 61"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>3081 </h3></div></div></div><a class="indexterm" name="id2542050"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3083 3082 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 3084 3083 It allows you to do … … 3111 3110 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code> 3112 3111 </em></span> 3113 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25422 24"></a>3112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542214"></a> 3114 3113 3115 3114 logon path (G) 3116 </h3></div></div></div><a class="indexterm" name="id25422 26"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>3115 </h3></div></div></div><a class="indexterm" name="id2542215"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p> 3117 3116 This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are 3118 3117 stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming … … 3158 3157 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 3159 3158 </em></span> 3160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25423 93"></a>3159 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542382"></a> 3161 3160 3162 3161 logon script (G) 3163 </h3></div></div></div><a class="indexterm" name="id25423 94"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>3162 </h3></div></div></div><a class="indexterm" name="id2542383"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3164 3163 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 3165 3164 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 3192 3191 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 3193 3192 </em></span> 3194 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25425 63"></a>3193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542552"></a> 3195 3194 3196 3195 lppause command (S) 3197 </h3></div></div></div><a class="indexterm" name="id25425 64"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3196 </h3></div></div></div><a class="indexterm" name="id2542553"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3198 3197 executed on the server host in order to stop printing or spooling 3199 3198 a specific print job.</p><p>This command should be a program or script which takes … … 3219 3218 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 3220 3219 </em></span> 3221 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542 710"></a>3220 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542699"></a> 3222 3221 3223 3222 lpq cache time (G) 3224 </h3></div></div></div><a class="indexterm" name="id25427 11"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached3223 </h3></div></div></div><a class="indexterm" name="id2542700"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 3225 3224 for to prevent the <code class="literal">lpq</code> command being called too 3226 3225 often. A separate cache is kept for each variation of the <code class="literal"> … … 3235 3234 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 3236 3235 </em></span> 3237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25428 30"></a>3236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542819"></a> 3238 3237 3239 3238 lpq command (S) 3240 </h3></div></div></div><a class="indexterm" name="id25428 31"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3239 </h3></div></div></div><a class="indexterm" name="id2542820"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3241 3240 executed on the server host in order to obtain <code class="literal">lpq 3242 3241 </code>-style printer status information.</p><p>This command should be a program or script which … … 3260 3259 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 3261 3260 </em></span> 3262 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25429 56"></a>3261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542945"></a> 3263 3262 3264 3263 lpresume command (S) 3265 </h3></div></div></div><a class="indexterm" name="id25429 57"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3264 </h3></div></div></div><a class="indexterm" name="id2542946"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3266 3265 executed on the server host in order to restart or continue 3267 3266 printing or spooling a specific print job.</p><p>This command should be a program or script which takes … … 3276 3275 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3277 3276 </em></span> 3278 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543 108"></a>3277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543098"></a> 3279 3278 3280 3279 lprm command (S) 3281 </h3></div></div></div><a class="indexterm" name="id2543 109"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3280 </h3></div></div></div><a class="indexterm" name="id2543099"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3282 3281 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 3283 3282 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 3296 3295 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 3297 3296 </em></span> 3298 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25431 96"></a>3297 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543185"></a> 3299 3298 3300 3299 machine password timeout (G) 3301 </h3></div></div></div><a class="indexterm" name="id25431 97"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3300 </h3></div></div></div><a class="indexterm" name="id2543186"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3302 3301 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter) then periodically a running smbd process will try and change 3303 3302 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb … … 3309 3308 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 3310 3309 </em></span> 3311 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25432 83"></a>3310 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543272"></a> 3312 3311 3313 3312 magic output (S) 3314 </h3></div></div></div><a class="indexterm" name="id25432 84"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3313 </h3></div></div></div><a class="indexterm" name="id2543273"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3315 3314 This parameter specifies the name of a file which will contain output created by a magic script (see the 3316 3315 <a class="link" href="smb.conf.5.html#MAGICSCRIPT">magic script</a> parameter below). … … 3321 3320 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 3322 3321 </em></span> 3323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25433 67"></a>3322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543356"></a> 3324 3323 3325 3324 magic script (S) 3326 </h3></div></div></div><a class="indexterm" name="id25433 68"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,3325 </h3></div></div></div><a class="indexterm" name="id2543357"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 3327 3326 if opened, will be executed by the server when the file is closed. 3328 3327 This allows a UNIX script to be sent to the Samba host and … … 3340 3339 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 3341 3340 </em></span> 3342 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25434 72"></a>3341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543462"></a> 3343 3342 3344 3343 mangled names (S) 3345 </h3></div></div></div><a class="indexterm" name="id25434 74"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX3344 </h3></div></div></div><a class="indexterm" name="id2543463"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 3346 3345 should be mapped to DOS-compatible names ("mangled") and made visible, 3347 3346 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a> for … … 3368 3367 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 3369 3368 </em></span> 3370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543 609"></a>3369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543598"></a> 3371 3370 3372 3371 mangle prefix (G) 3373 </h3></div></div></div><a class="indexterm" name="id2543 610"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix3372 </h3></div></div></div><a class="indexterm" name="id2543599"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 3374 3373 characters from the original name used when generating 3375 3374 the mangled names. A larger value will give a weaker … … 3381 3380 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 3382 3381 </em></span> 3383 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25436 76"></a>3382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543665"></a> 3384 3383 3385 3384 mangling char (S) 3386 </h3></div></div></div><a class="indexterm" name="id25436 77"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as3385 </h3></div></div></div><a class="indexterm" name="id2543666"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3387 3386 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. The 3388 3387 default is a '~' but this may interfere with some software. Use this option to set … … 3391 3390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 3392 3391 </em></span> 3393 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25437 53"></a>3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543742"></a> 3394 3393 3395 3394 mangling method (G) 3396 </h3></div></div></div><a class="indexterm" name="id25437 54"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating3395 </h3></div></div></div><a class="indexterm" name="id2543743"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 3397 3396 the mangled names. Can take two different values, "hash" and 3398 3397 "hash2". "hash" is the algorithm that was used … … 3405 3404 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 3406 3405 </em></span> 3407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25438 20"></a>3406 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543809"></a> 3408 3407 3409 3408 map acl inherit (S) 3410 </h3></div></div></div><a class="indexterm" name="id25438 21"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'3409 </h3></div></div></div><a class="indexterm" name="id2543810"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3411 3410 access control entry flags stored in Windows ACLs into an extended attribute 3412 3411 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 3416 3415 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 3417 3416 </em></span> 3418 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25438 77"></a>3417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543866"></a> 3419 3418 3420 3419 map archive (S) 3421 </h3></div></div></div><a class="indexterm" name="id25438 78"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3420 </h3></div></div></div><a class="indexterm" name="id2543867"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3422 3421 This controls whether the DOS archive attribute 3423 3422 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 3432 3431 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 3433 3432 </em></span> 3434 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25439 52"></a>3433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543941"></a> 3435 3434 3436 3435 map hidden (S) 3437 </h3></div></div></div><a class="indexterm" name="id25439 53"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>3436 </h3></div></div></div><a class="indexterm" name="id2543942"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3438 3437 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 3439 3438 </p><p> … … 3441 3440 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> 3442 3441 for details. 3443 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254 4010"></a>3442 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543999"></a> 3444 3443 3445 3444 map read only (S) 3446 </h3></div></div></div><a class="indexterm" name="id25440 11"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>3445 </h3></div></div></div><a class="indexterm" name="id2544000"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3447 3446 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 3448 3447 </p><p> … … 3469 3468 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code> 3470 3469 </em></span> 3471 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254416 7"></a>3470 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544164"></a> 3472 3471 3473 3472 map system (S) 3474 </h3></div></div></div><a class="indexterm" name="id254416 8"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>3473 </h3></div></div></div><a class="indexterm" name="id2544165"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 3475 3474 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 3476 3475 </p><p> … … 3480 3479 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 3481 3480 </em></span> 3482 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254423 6"></a>3481 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544233"></a> 3483 3482 3484 3483 map to guest (G) 3485 </h3></div></div></div><a class="indexterm" name="id254423 7"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY =3484 </h3></div></div></div><a class="indexterm" name="id2544234"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY = 3486 3485 security</a> modes other than <em class="parameter"><code>security = share</code></em> 3487 3486 and <em class="parameter"><code>security = server</code></em> … … 3525 3524 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 3526 3525 </em></span> 3527 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254447 6"></a>3526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544473"></a> 3528 3527 3529 3528 max connections (S) 3530 </h3></div></div></div><a class="indexterm" name="id254447 7"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.3529 </h3></div></div></div><a class="indexterm" name="id2544474"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3531 3530 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 3532 3531 will be refused if this number of connections to the service are already open. A value … … 3536 3535 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 3537 3536 </em></span> 3538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25445 62"></a>3537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544559"></a> 3539 3538 3540 3539 max disk size (G) 3541 </h3></div></div></div><a class="indexterm" name="id254456 3"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit3540 </h3></div></div></div><a class="indexterm" name="id2544560"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 3542 3541 on the apparent size of disks. If you set this option to 100 3543 3542 then all shares will appear to be not larger than 100 MB in … … 3553 3552 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 3554 3553 </em></span> 3555 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254465 3"></a>3554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544650"></a> 3556 3555 3557 3556 max log size (G) 3558 </h3></div></div></div><a class="indexterm" name="id254465 4"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3557 </h3></div></div></div><a class="indexterm" name="id2544651"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3559 3558 This option (an integer in kilobytes) specifies the max size the log file should grow to. 3560 3559 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 3565 3564 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 3566 3565 </em></span> 3567 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254472 5"></a>3566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544722"></a> 3568 3567 3569 3568 max mux (G) 3570 </h3></div></div></div><a class="indexterm" name="id254472 6"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of3569 </h3></div></div></div><a class="indexterm" name="id2544723"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 3571 3570 outstanding simultaneous SMB operations that Samba tells the client 3572 3571 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 3573 3572 </em></span> 3574 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254476 8"></a>3573 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544765"></a> 3575 3574 3576 3575 max open files (G) 3577 </h3></div></div></div><a class="indexterm" name="id254476 9"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3576 </h3></div></div></div><a class="indexterm" name="id2544766"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3578 3577 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3579 3578 serving process may have open for a client at any one time. The … … 3583 3582 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code> 3584 3583 </em></span> 3585 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254482 8"></a>3584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544825"></a> 3586 3585 3587 3586 max print jobs (S) 3588 </h3></div></div></div><a class="indexterm" name="id254482 9"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3587 </h3></div></div></div><a class="indexterm" name="id2544826"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3589 3588 jobs allowable in a Samba printer queue at any given moment. 3590 3589 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. … … 3593 3592 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 3594 3593 </em></span> 3595 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254489 8"></a>3594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544895"></a> 3596 3595 3597 3596 <a name="PROTOCOL"></a>protocol 3598 </h3></div></div></div><a class="indexterm" name="id254489 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544931"></a>3597 </h3></div></div></div><a class="indexterm" name="id2544896"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544927"></a> 3599 3598 3600 3599 max protocol (G) 3601 </h3></div></div></div><a class="indexterm" name="id25449 32"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest3600 </h3></div></div></div><a class="indexterm" name="id2544928"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 3602 3601 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No 3603 3602 concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on … … 3611 3610 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 3612 3611 </em></span> 3613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254505 5"></a>3612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545052"></a> 3614 3613 3615 3614 max reported print jobs (S) 3616 </h3></div></div></div><a class="indexterm" name="id254505 6"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>3615 </h3></div></div></div><a class="indexterm" name="id2545053"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3617 3616 This parameter limits the maximum number of jobs displayed in a port monitor for 3618 3617 Samba printer queue at any given moment. If this number is exceeded, the excess … … 3623 3622 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 3624 3623 </em></span> 3625 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254511 9"></a>3624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545116"></a> 3626 3625 3627 3626 max smbd processes (G) 3628 </h3></div></div></div><a class="indexterm" name="id25451 20"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended3627 </h3></div></div></div><a class="indexterm" name="id2545117"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3629 3628 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 3630 3629 resources to handle more than this number of connections. Remember that under normal operating … … 3634 3633 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 3635 3634 </em></span> 3636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545 201"></a>3635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545197"></a> 3637 3636 3638 3637 max stat cache size (G) 3639 </h3></div></div></div><a class="indexterm" name="id2545 202"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any3638 </h3></div></div></div><a class="indexterm" name="id2545198"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3640 3639 <em class="parameter"><code>stat cache</code></em> being used 3641 3640 to speed up case insensitive name mappings. It represents … … 3648 3647 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 3649 3648 </em></span> 3650 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25452 70"></a>3649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545267"></a> 3651 3650 3652 3651 max ttl (G) 3653 </h3></div></div></div><a class="indexterm" name="id25452 72"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'3652 </h3></div></div></div><a class="indexterm" name="id2545268"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3654 3653 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 3655 3654 requesting a name using either a broadcast packet or from a WINS server. You should 3656 3655 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 3657 3656 </em></span> 3658 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254532 9"></a>3657 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545326"></a> 3659 3658 3660 3659 max wins ttl (G) 3661 </h3></div></div></div><a class="indexterm" name="id25453 30"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server3660 </h3></div></div></div><a class="indexterm" name="id2545327"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3662 3661 (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the maximum 3663 3662 'time to live' of NetBIOS names that <code class="literal">nmbd</code> … … 3665 3664 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 3666 3665 </em></span> 3667 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545 400"></a>3666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545397"></a> 3668 3667 3669 3668 max xmit (G) 3670 </h3></div></div></div><a class="indexterm" name="id2545 401"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size3669 </h3></div></div></div><a class="indexterm" name="id2545398"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 3671 3670 that will be negotiated by Samba. The default is 16644, which 3672 3671 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 3676 3675 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 3677 3676 </em></span> 3678 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254546 3"></a>3677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545460"></a> 3679 3678 3680 3679 message command (G) 3681 </h3></div></div></div><a class="indexterm" name="id254546 4"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the3680 </h3></div></div></div><a class="indexterm" name="id2545461"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 3682 3681 server receives a WinPopup style message.</p><p>This would normally be a command that would 3683 3682 deliver the message somehow. How this is to be done is … … 3718 3717 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 3719 3718 </em></span> 3720 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254567 3"></a>3719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545670"></a> 3721 3720 3722 3721 min print space (S) 3723 </h3></div></div></div><a class="indexterm" name="id254567 4"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk3722 </h3></div></div></div><a class="indexterm" name="id2545671"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 3724 3723 space that must be available before a user will be able to spool 3725 3724 a print job. It is specified in kilobytes. The default is 0, which … … 3728 3727 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 3729 3728 </em></span> 3730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254573 5"></a>3729 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545732"></a> 3731 3730 3732 3731 min protocol (G) 3733 </h3></div></div></div><a class="indexterm" name="id254573 6"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the3732 </h3></div></div></div><a class="indexterm" name="id2545733"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 3734 3733 lowest SMB protocol dialect than Samba will support. Please refer 3735 3734 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL">max protocol</a> … … 3743 3742 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 3744 3743 </em></span> 3745 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254583 3"></a>3744 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545830"></a> 3746 3745 3747 3746 min receivefile size (G) 3748 </h3></div></div></div><a class="indexterm" name="id254583 4"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming3747 </h3></div></div></div><a class="indexterm" name="id2545831"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming 3749 3748 SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will 3750 3749 be passed to any underlying kernel recvfile or splice system call (if there is no such … … 3755 3754 nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code> 3756 3755 </em></span> 3757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254590 2"></a>3756 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545900"></a> 3758 3757 3759 3758 min wins ttl (G) 3760 </h3></div></div></div><a class="indexterm" name="id254590 3"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>3759 </h3></div></div></div><a class="indexterm" name="id2545901"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 3761 3760 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the minimum 'time to live' 3762 3761 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in … … 3764 3763 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 3765 3764 </em></span> 3766 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254597 2"></a>3765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545970"></a> 3767 3766 3768 3767 msdfs proxy (S) 3769 </h3></div></div></div><a class="indexterm" name="id254597 4"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a3768 </h3></div></div></div><a class="indexterm" name="id2545971"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 3770 3769 stand-in for another CIFS share whose location is specified by 3771 3770 the value of the parameter. When clients attempt to connect to … … 3775 3774 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 3776 3775 </em></span> 3777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25460 51"></a>3776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546048"></a> 3778 3777 3779 3778 msdfs root (S) 3780 </h3></div></div></div><a class="indexterm" name="id25460 52"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the3779 </h3></div></div></div><a class="indexterm" name="id2546049"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 3781 3780 share as a Dfs root and allows clients to browse the 3782 3781 distributed file system tree rooted at the share directory. … … 3786 3785 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 3787 3786 </em></span> 3788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254610 6"></a>3787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546103"></a> 3789 3788 3790 3789 name cache timeout (G) 3791 </h3></div></div></div><a class="indexterm" name="id254610 7"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before3790 </h3></div></div></div><a class="indexterm" name="id2546104"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 3792 3791 entries in samba's hostname resolve cache time out. If 3793 3792 the timeout is set to 0. the caching is disabled. … … 3796 3795 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 3797 3796 </em></span> 3798 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254616 7"></a>3797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546164"></a> 3799 3798 3800 3799 name resolve order (G) 3801 </h3></div></div></div><a class="indexterm" name="id254616 8"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba3800 </h3></div></div></div><a class="indexterm" name="id2546166"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 3802 3801 suite to determine what naming services to use and in what order 3803 3802 to resolve host names to IP addresses. Its main purpose to is to … … 3830 3829 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 3831 3830 </em></span> 3832 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254636 8"></a>3831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546366"></a> 3833 3832 3834 3833 netbios aliases (G) 3835 </h3></div></div></div><a class="indexterm" name="id25463 70"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will3834 </h3></div></div></div><a class="indexterm" name="id2546367"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 3836 3835 advertise as additional names by which the Samba server is known. This allows one machine 3837 3836 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 3843 3842 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 3844 3843 </em></span> 3845 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254643 4"></a>3844 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546431"></a> 3846 3845 3847 3846 netbios name (G) 3848 </h3></div></div></div><a class="indexterm" name="id254643 5"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>3847 </h3></div></div></div><a class="indexterm" name="id2546432"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3849 3848 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 3850 3849 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 3859 3858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 3860 3859 </em></span> 3861 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254651 6"></a>3860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546513"></a> 3862 3861 3863 3862 netbios scope (G) 3864 </h3></div></div></div><a class="indexterm" name="id254651 7"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will3863 </h3></div></div></div><a class="indexterm" name="id2546514"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 3865 3864 operate under. This should not be set unless every machine 3866 3865 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 3867 3866 </em></span> 3868 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254655 9"></a>3867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546556"></a> 3869 3868 3870 3869 nis homedir (G) 3871 </h3></div></div></div><a class="indexterm" name="id25465 60"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For3870 </h3></div></div></div><a class="indexterm" name="id2546557"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 3872 3871 UNIX systems that use an automounter, the user's home directory 3873 3872 will often be mounted on a workstation on demand from a remote … … 3888 3887 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 3889 3888 </em></span> 3890 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254663 9"></a>3889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546636"></a> 3891 3890 3892 3891 nt acl support (S) 3893 </h3></div></div></div><a class="indexterm" name="id25466 40"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map3892 </h3></div></div></div><a class="indexterm" name="id2546637"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3894 3893 UNIX permissions into Windows NT access control lists. The UNIX 3895 3894 permissions considered are the the traditional UNIX owner and … … 3898 3897 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 3899 3898 </em></span> 3900 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254669 4"></a>3899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546691"></a> 3901 3900 3902 3901 ntlm auth (G) 3903 </h3></div></div></div><a class="indexterm" name="id254669 5"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to3902 </h3></div></div></div><a class="indexterm" name="id2546692"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 3904 3903 authenticate users using the NTLM encrypted password response. 3905 3904 If disabled, either the lanman password hash or an NTLMv2 response … … 3909 3908 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 3910 3909 </em></span> 3911 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254675 8"></a>3910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546755"></a> 3912 3911 3913 3912 nt pipe support (G) 3914 </h3></div></div></div><a class="indexterm" name="id254675 9"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether3913 </h3></div></div></div><a class="indexterm" name="id2546756"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 3915 3914 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 3916 3915 clients to connect to the NT SMB specific <code class="constant">IPC$</code> … … 3918 3917 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 3919 3918 </em></span> 3920 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254681 4"></a>3919 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546811"></a> 3921 3920 3922 3921 nt status support (G) 3923 </h3></div></div></div><a class="indexterm" name="id254681 5"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status3922 </h3></div></div></div><a class="indexterm" name="id2546812"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 3924 3923 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 3925 3924 If this option is set to <code class="constant">no</code> then Samba offers … … 3927 3926 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 3928 3927 </em></span> 3929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254687 5"></a>3928 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546872"></a> 3930 3929 3931 3930 null passwords (G) 3932 </h3></div></div></div><a class="indexterm" name="id254687 6"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>3933 </em></span> 3934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254692 8"></a>3931 </h3></div></div></div><a class="indexterm" name="id2546873"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 3932 </em></span> 3933 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546925"></a> 3935 3934 3936 3935 obey pam restrictions (G) 3937 </h3></div></div></div><a class="indexterm" name="id254692 9"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support3936 </h3></div></div></div><a class="indexterm" name="id2546926"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 3938 3937 (i.e. --with-pam), this parameter will control whether or not Samba 3939 3938 should obey PAM's account and session management directives. The … … 3945 3944 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 3946 3945 </em></span> 3947 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25469 92"></a>3946 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546989"></a> 3948 3947 3949 3948 only user (S) 3950 </h3></div></div></div><a class="indexterm" name="id254699 3"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether3949 </h3></div></div></div><a class="indexterm" name="id2546990"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 3951 3950 connections with usernames not in the <em class="parameter"><code>user</code></em> 3952 3951 list will be allowed. By default this option is disabled so that a … … 3961 3960 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 3962 3961 </em></span> 3963 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25470 81"></a>3962 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547078"></a> 3964 3963 3965 3964 oplock break wait time (G) 3966 </h3></div></div></div><a class="indexterm" name="id25470 82"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>3965 </h3></div></div></div><a class="indexterm" name="id2547079"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3967 3966 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 3968 3967 quickly when that client issues an SMB that can cause an oplock break request, then the network client can … … 3973 3972 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 3974 3973 </em></span> 3975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254713 6"></a>3974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547133"></a> 3976 3975 3977 3976 oplock contention limit (S) 3978 </h3></div></div></div><a class="indexterm" name="id254713 7"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>3977 </h3></div></div></div><a class="indexterm" name="id2547134"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3979 3978 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 3980 3979 granting of oplocks under multiple client contention for the same file. … … 3988 3987 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 3989 3988 </em></span> 3990 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254721 9"></a>3989 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547215"></a> 3991 3990 3992 3991 oplocks (S) 3993 </h3></div></div></div><a class="indexterm" name="id25472 20"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>3992 </h3></div></div></div><a class="indexterm" name="id2547216"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3994 3993 This boolean option tells <code class="literal">smbd</code> whether to 3995 3994 issue oplocks (opportunistic locks) to file open requests on this … … 4010 4009 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 4011 4010 </em></span> 4012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254731 8"></a>4011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547315"></a> 4013 4012 4014 4013 os2 driver map (G) 4015 </h3></div></div></div><a class="indexterm" name="id254731 9"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute4014 </h3></div></div></div><a class="indexterm" name="id2547316"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 4016 4015 path to a file containing a mapping of Windows NT printer driver 4017 4016 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 4023 4022 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 4024 4023 </em></span> 4025 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254738 4"></a>4024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547381"></a> 4026 4025 4027 4026 os level (G) 4028 </h3></div></div></div><a class="indexterm" name="id254738 5"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4027 </h3></div></div></div><a class="indexterm" name="id2547382"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4029 4028 This integer value controls what level Samba advertises itself as for browse elections. The value of this 4030 4029 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> in the local broadcast area. … … 4042 4041 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 4043 4042 </em></span> 4044 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254749 3"></a>4043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547490"></a> 4045 4044 4046 4045 pam password change (G) 4047 </h3></div></div></div><a class="indexterm" name="id254749 4"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,4046 </h3></div></div></div><a class="indexterm" name="id2547491"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 4048 4047 this parameter, it is possible to use PAM's password change control 4049 4048 flag for Samba. If enabled, then PAM will be used for password … … 4053 4052 <a class="link" href="smb.conf.5.html#PASSWDCHAT">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 4054 4053 </em></span> 4055 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254756 4"></a>4054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547561"></a> 4056 4055 4057 4056 panic action (G) 4058 </h3></div></div></div><a class="indexterm" name="id254756 5"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a4057 </h3></div></div></div><a class="indexterm" name="id2547562"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 4059 4058 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 4060 4059 draw attention to the fact that a problem occurred. … … 4063 4062 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 4064 4063 </em></span> 4065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25476 40"></a>4064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547637"></a> 4066 4065 4067 4066 paranoid server security (G) 4068 </h3></div></div></div><a class="indexterm" name="id25476 41"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest4067 </h3></div></div></div><a class="indexterm" name="id2547638"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 4069 4068 users with a bad passowrd. When this option is enabled, samba will not 4070 4069 use a broken NT 4.x server as password server, but instead complain … … 4074 4073 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 4075 4074 </em></span> 4076 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25476 91"></a>4075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547688"></a> 4077 4076 4078 4077 passdb backend (G) 4079 </h3></div></div></div><a class="indexterm" name="id25476 92"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend4078 </h3></div></div></div><a class="indexterm" name="id2547689"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 4080 4079 will be used for storing user and possibly group information. This allows 4081 4080 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' … … 4110 4109 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code> 4111 4110 </em></span> 4112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254784 7"></a>4111 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547844"></a> 4113 4112 4114 4113 passdb expand explicit (G) 4115 </h3></div></div></div><a class="indexterm" name="id254784 8"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4114 </h3></div></div></div><a class="indexterm" name="id2547845"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4116 4115 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 4117 4116 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 4119 4118 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 4120 4119 </em></span> 4121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254789 4"></a>4120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547891"></a> 4122 4121 4123 4122 passwd chat debug (G) 4124 </h3></div></div></div><a class="indexterm" name="id254789 5"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script4123 </h3></div></div></div><a class="indexterm" name="id2547892"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 4125 4124 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 4126 4125 strings passed to and received from the passwd chat are printed … … 4135 4134 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 4136 4135 </em></span> 4137 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254799 7"></a>4136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547994"></a> 4138 4137 4139 4138 passwd chat timeout (G) 4140 </h3></div></div></div><a class="indexterm" name="id254799 8"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial4139 </h3></div></div></div><a class="indexterm" name="id2547995"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 4141 4140 answer from a passwd chat script being run. Once the initial answer is received 4142 4141 the subsequent answers must be received in one tenth of this time. The default it 4143 4142 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 4144 4143 </em></span> 4145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25480 42"></a>4144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548039"></a> 4146 4145 4147 4146 passwd chat (G) 4148 </h3></div></div></div><a class="indexterm" name="id254804 3"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>4147 </h3></div></div></div><a class="indexterm" name="id2548040"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 4149 4148 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 4150 4149 program to change the user's password. The string describes a … … 4177 4176 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 4178 4177 </em></span> 4179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254824 6"></a>4178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548243"></a> 4180 4179 4181 4180 passwd program (G) 4182 </h3></div></div></div><a class="indexterm" name="id254824 7"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set4181 </h3></div></div></div><a class="indexterm" name="id2548244"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 4183 4182 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 4184 4183 will be replaced with the user name. The user name is checked for … … 4201 4200 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 4202 4201 </em></span> 4203 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25483 81"></a>4202 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548378"></a> 4204 4203 4205 4204 password level (G) 4206 </h3></div></div></div><a class="indexterm" name="id25483 82"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty4205 </h3></div></div></div><a class="indexterm" name="id2548379"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 4207 4206 with mixed-case passwords. One offending client is Windows for 4208 4207 Workgroups, which for some reason forces passwords to upper … … 4226 4225 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 4227 4226 </em></span> 4228 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254851 8"></a>4227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548515"></a> 4229 4228 4230 4229 password server (G) 4231 </h3></div></div></div><a class="indexterm" name="id254851 9"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server4230 </h3></div></div></div><a class="indexterm" name="id2548516"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 4232 4231 or Active Directory domain controller with this option, 4233 4232 and using <code class="literal">security = [ads|domain|server]</code> … … 4289 4288 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code> 4290 4289 </em></span> 4291 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254881 7"></a>4290 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548814"></a> 4292 4291 4293 4292 <a name="DIRECTORY"></a>directory 4294 </h3></div></div></div><a class="indexterm" name="id254881 8"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548848"></a>4293 </h3></div></div></div><a class="indexterm" name="id2548815"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548845"></a> 4295 4294 4296 4295 path (S) 4297 </h3></div></div></div><a class="indexterm" name="id254884 9"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which4296 </h3></div></div></div><a class="indexterm" name="id2548846"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 4298 4297 the user of the service is to be given access. In the case of 4299 4298 printable services, this is where print data will spool prior to … … 4312 4311 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 4313 4312 </em></span> 4314 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25489 52"></a>4313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548949"></a> 4315 4314 4316 4315 pid directory (G) 4317 </h3></div></div></div><a class="indexterm" name="id254895 3"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4316 </h3></div></div></div><a class="indexterm" name="id2548950"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4318 4317 This option specifies the directory where pid files will be placed. 4319 4318 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 4321 4320 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 4322 4321 </em></span> 4323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25490 12"></a>4322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549009"></a> 4324 4323 4325 4324 posix locking (S) 4326 </h3></div></div></div><a class="indexterm" name="id254901 3"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>4325 </h3></div></div></div><a class="indexterm" name="id2549010"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4327 4326 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4328 4327 daemon maintains an database of file locks obtained by SMB clients. The default behavior is … … 4332 4331 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 4333 4332 </em></span> 4334 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254906 7"></a>4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549064"></a> 4335 4334 4336 4335 postexec (S) 4337 </h3></div></div></div><a class="indexterm" name="id254906 8"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run4336 </h3></div></div></div><a class="indexterm" name="id2549065"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 4338 4337 whenever the service is disconnected. It takes the usual 4339 4338 substitutions. The command may be run as the root on some … … 4343 4342 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 4344 4343 </em></span> 4345 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25491 40"></a>4344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549137"></a> 4346 4345 4347 4346 preexec close (S) 4348 </h3></div></div></div><a class="indexterm" name="id25491 41"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>4347 </h3></div></div></div><a class="indexterm" name="id2549138"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4349 4348 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC">preexec</a> 4350 4349 should close the service being connected to. 4351 4350 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4352 4351 </em></span> 4353 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254919 4"></a>4352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549191"></a> 4354 4353 4355 4354 <a name="EXEC"></a>exec 4356 </h3></div></div></div><a class="indexterm" name="id254919 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549226"></a>4355 </h3></div></div></div><a class="indexterm" name="id2549192"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549222"></a> 4357 4356 4358 4357 preexec (S) 4359 </h3></div></div></div><a class="indexterm" name="id254922 7"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever4358 </h3></div></div></div><a class="indexterm" name="id2549224"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 4360 4359 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 4361 4360 message every time they log in. Maybe a message of the day? Here … … 4369 4368 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 4370 4369 </em></span> 4371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254933 4"></a>4370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549331"></a> 4372 4371 4373 4372 <a name="PREFEREDMASTER"></a>prefered master 4374 </h3></div></div></div><a class="indexterm" name="id254933 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549367"></a>4373 </h3></div></div></div><a class="indexterm" name="id2549332"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549364"></a> 4375 4374 4376 4375 preferred master (G) 4377 </h3></div></div></div><a class="indexterm" name="id254936 8"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>4376 </h3></div></div></div><a class="indexterm" name="id2549365"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4378 4377 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4379 4378 </p><p> … … 4389 4388 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 4390 4389 </em></span> 4391 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25494 60"></a>4390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549457"></a> 4392 4391 4393 4392 preload modules (G) 4394 </h3></div></div></div><a class="indexterm" name="id25494 61"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should4393 </h3></div></div></div><a class="indexterm" name="id2549458"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4395 4394 be loaded into smbd before a client connects. This improves 4396 4395 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> … … 4398 4397 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4399 4398 </em></span> 4400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25495 20"></a>4399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549517"></a> 4401 4400 4402 4401 <a name="AUTOSERVICES"></a>auto services 4403 </h3></div></div></div><a class="indexterm" name="id25495 21"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549553"></a>4402 </h3></div></div></div><a class="indexterm" name="id2549518"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549550"></a> 4404 4403 4405 4404 preload (G) 4406 </h3></div></div></div><a class="indexterm" name="id254955 4"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be4405 </h3></div></div></div><a class="indexterm" name="id2549551"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 4407 4406 automatically added to the browse lists. This is most useful 4408 4407 for homes and printers services that would otherwise not be … … 4415 4414 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 4416 4415 </em></span> 4417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25496 31"></a>4416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549628"></a> 4418 4417 4419 4418 preserve case (S) 4420 </h3></div></div></div><a class="indexterm" name="id25496 32"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4419 </h3></div></div></div><a class="indexterm" name="id2549629"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4421 4420 This controls if new filenames are created with the case that the client passes, or if 4422 4421 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. … … 4425 4424 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 4426 4425 </em></span> 4427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254969 8"></a>4426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549694"></a> 4428 4427 4429 4428 <a name="PRINTOK"></a>print ok 4430 </h3></div></div></div><a class="indexterm" name="id254969 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549728"></a>4429 </h3></div></div></div><a class="indexterm" name="id2549696"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549725"></a> 4431 4430 4432 4431 printable (S) 4433 </h3></div></div></div><a class="indexterm" name="id254972 9"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then4432 </h3></div></div></div><a class="indexterm" name="id2549726"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4434 4433 clients may open, write to and submit spool files on the directory 4435 4434 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing … … 4438 4437 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 4439 4438 </em></span> 4440 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25497 91"></a>4439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549788"></a> 4441 4440 4442 4441 printcap cache time (G) 4443 </h3></div></div></div><a class="indexterm" name="id25497 92"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing4442 </h3></div></div></div><a class="indexterm" name="id2549789"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4444 4443 subsystem is again asked for the known printers. If the value 4445 4444 is greater than 60 the initial waiting time is set to 60 seconds … … 4451 4450 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 4452 4451 </em></span> 4453 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254985 9"></a>4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549856"></a> 4454 4453 4455 4454 <a name="PRINTCAP"></a>printcap 4456 </h3></div></div></div><a class="indexterm" name="id25498 60"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549892"></a>4455 </h3></div></div></div><a class="indexterm" name="id2549857"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549889"></a> 4457 4456 4458 4457 printcap name (G) 4459 </h3></div></div></div><a class="indexterm" name="id254989 3"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4458 </h3></div></div></div><a class="indexterm" name="id2549890"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4460 4459 This parameter may be used to override the compiled-in default printcap name used by the server (usually 4461 4460 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. … … 4492 4491 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 4493 4492 </em></span> 4494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255007 7"></a>4493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550074"></a> 4495 4494 4496 4495 print command (S) 4497 </h3></div></div></div><a class="indexterm" name="id255007 8"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to4496 </h3></div></div></div><a class="indexterm" name="id2550075"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 4498 4497 a service, this command will be used via a <code class="literal">system()</code> 4499 4498 call to process the spool file. Typically the command specified will … … 4537 4536 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 4538 4537 </em></span> 4539 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255034 7"></a>4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550344"></a> 4540 4539 4541 4540 printer admin (S) 4542 </h3></div></div></div><a class="indexterm" name="id255034 8"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>4541 </h3></div></div></div><a class="indexterm" name="id2550345"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 4543 4542 This lists users who can do anything to printers 4544 4543 via the remote administration interfaces offered … … 4556 4555 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 4557 4556 </em></span> 4558 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255041 6"></a>4557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550413"></a> 4559 4558 4560 4559 <a name="PRINTER"></a>printer 4561 </h3></div></div></div><a class="indexterm" name="id255041 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550447"></a>4560 </h3></div></div></div><a class="indexterm" name="id2550414"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550444"></a> 4562 4561 4563 4562 printer name (S) 4564 </h3></div></div></div><a class="indexterm" name="id255044 8"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4563 </h3></div></div></div><a class="indexterm" name="id2550445"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4565 4564 This parameter specifies the name of the printer to which print jobs spooled through a printable service 4566 4565 will be sent. … … 4575 4574 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 4576 4575 </em></span> 4577 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255053 4"></a>4576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550532"></a> 4578 4577 4579 4578 printing (S) 4580 </h3></div></div></div><a class="indexterm" name="id255053 5"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is4579 </h3></div></div></div><a class="indexterm" name="id2550533"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 4581 4580 interpreted on your system. It also affects the default values for 4582 4581 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 4592 4591 the value for the <em class="parameter"><code>printing</code></em> option since it will 4593 4592 reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section"> 4594 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25506 70"></a>4593 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550667"></a> 4595 4594 4596 4595 printjob username (S) 4597 </h3></div></div></div><a class="indexterm" name="id25506 71"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4596 </h3></div></div></div><a class="indexterm" name="id2550668"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4598 4597 passed to the printing system. Usually, the username is sent, 4599 4598 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4601 4600 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4602 4601 </em></span> 4603 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25507 32"></a>4602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550728"></a> 4604 4603 4605 4604 private dir (G) 4606 </h3></div></div></div><a class="indexterm" name="id255073 3"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4605 </h3></div></div></div><a class="indexterm" name="id2550730"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4607 4606 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4608 4607 and <code class="filename">secrets.tdb</code>. 4609 4608 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4610 4609 </em></span> 4611 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255078 6"></a>4610 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550782"></a> 4612 4611 4613 4612 profile acls (S) 4614 </h3></div></div></div><a class="indexterm" name="id255078 7"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4613 </h3></div></div></div><a class="indexterm" name="id2550784"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4615 4614 This boolean parameter was added to fix the problems that people have been 4616 4615 having with storing user profiles on Samba shares from Windows 2000 or … … 4640 4639 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4641 4640 </em></span> 4642 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255085 8"></a>4641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550855"></a> 4643 4642 4644 4643 queuepause command (S) 4645 </h3></div></div></div><a class="indexterm" name="id255085 9"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4644 </h3></div></div></div><a class="indexterm" name="id2550856"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4646 4645 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4647 4646 a printer name as its only parameter and stops the printer queue, … … 4654 4653 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4655 4654 </em></span> 4656 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255093 5"></a>4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550932"></a> 4657 4656 4658 4657 queueresume command (S) 4659 </h3></div></div></div><a class="indexterm" name="id255093 6"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4658 </h3></div></div></div><a class="indexterm" name="id2550933"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4660 4659 executed on the server host in order to resume the printer queue. It 4661 4660 is the command to undo the behavior that is caused by the … … 4672 4671 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4673 4672 </em></span> 4674 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255103 7"></a>4673 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551034"></a> 4675 4674 4676 4675 read list (S) 4677 </h3></div></div></div><a class="indexterm" name="id255103 8"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>4676 </h3></div></div></div><a class="indexterm" name="id2551035"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4678 4677 This is a list of users that are given read-only access to a service. If the connecting user is in this list 4679 4678 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set … … 4685 4684 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 4686 4685 </em></span> 4687 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255113 6"></a>4686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551133"></a> 4688 4687 4689 4688 read only (S) 4690 </h3></div></div></div><a class="indexterm" name="id255113 7"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users4689 </h3></div></div></div><a class="indexterm" name="id2551134"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 4691 4690 of a service may not create or modify files in the service's 4692 4691 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 4694 4693 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 4695 4694 </em></span> 4696 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255121 3"></a>4695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551210"></a> 4697 4696 4698 4697 read raw (G) 4699 </h3></div></div></div><a class="indexterm" name="id255121 4"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server4698 </h3></div></div></div><a class="indexterm" name="id2551211"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4700 4699 will support the raw read SMB requests when transferring data 4701 4700 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 4706 4705 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 4707 4706 </em></span> 4708 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255127 3"></a>4707 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551270"></a> 4709 4708 4710 4709 realm (G) 4711 </h3></div></div></div><a class="indexterm" name="id255127 4"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is4710 </h3></div></div></div><a class="indexterm" name="id2551271"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4712 4711 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 4713 4712 is usually set to the DNS name of the kerberos server. … … 4716 4715 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 4717 4716 </em></span> 4718 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255133 8"></a>4717 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551335"></a> 4719 4718 4720 4719 registry shares (G) 4721 </h3></div></div></div><a class="indexterm" name="id25513 40"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>4720 </h3></div></div></div><a class="indexterm" name="id2551336"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4722 4721 This turns on or off support for share definitions read from 4723 4722 registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take … … 4734 4733 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code> 4735 4734 </em></span> 4736 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255142 4"></a>4735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551421"></a> 4737 4736 4738 4737 remote announce (G) 4739 </h3></div></div></div><a class="indexterm" name="id255142 5"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>4738 </h3></div></div></div><a class="indexterm" name="id2551422"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4740 4739 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself 4741 4740 to arbitrary IP addresses with an arbitrary workgroup name. … … 4761 4760 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 4762 4761 </em></span> 4763 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255152 9"></a>4762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551526"></a> 4764 4763 4765 4764 remote browse sync (G) 4766 </h3></div></div></div><a class="indexterm" name="id25515 30"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>4765 </h3></div></div></div><a class="indexterm" name="id2551527"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4767 4766 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4768 4767 synchronization of browse lists with the master browser of a Samba … … 4796 4795 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 4797 4796 </em></span> 4798 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25516 42"></a>4797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551639"></a> 4799 4798 4800 4799 rename user script (G) 4801 </h3></div></div></div><a class="indexterm" name="id255164 3"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>4800 </h3></div></div></div><a class="indexterm" name="id2551640"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4802 4801 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4803 4802 </p><p> … … 4817 4816 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 4818 4817 </em></span> 4819 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25517 32"></a>4818 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551729"></a> 4820 4819 4821 4820 reset on zero vc (G) 4822 </h3></div></div></div><a class="indexterm" name="id255173 3"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>4821 </h3></div></div></div><a class="indexterm" name="id2551730"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4823 4822 This boolean option controls whether an incoming session setup 4824 4823 should kill other connections coming from the same IP. This matches … … 4839 4838 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 4840 4839 </em></span> 4841 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255178 5"></a>4840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551781"></a> 4842 4841 4843 4842 restrict anonymous (G) 4844 </h3></div></div></div><a class="indexterm" name="id255178 6"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and4843 </h3></div></div></div><a class="indexterm" name="id2551782"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 4845 4844 group list information is returned for an anonymous connection. 4846 4845 and mirrors the effects of the … … 4865 4864 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 4866 4865 </em></span> 4867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255187 6"></a>4866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551873"></a> 4868 4867 4869 4868 <a name="ROOT"></a>root 4870 </h3></div></div></div><a class="indexterm" name="id255187 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551909"></a>4869 </h3></div></div></div><a class="indexterm" name="id2551874"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551906"></a> 4871 4870 4872 4871 <a name="ROOTDIR"></a>root dir 4873 </h3></div></div></div><a class="indexterm" name="id25519 10"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551941"></a>4872 </h3></div></div></div><a class="indexterm" name="id2551907"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551938"></a> 4874 4873 4875 4874 root directory (G) 4876 </h3></div></div></div><a class="indexterm" name="id25519 42"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.4875 </h3></div></div></div><a class="indexterm" name="id2551939"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4877 4876 Change its root directory) to this directory on startup. This is 4878 4877 not strictly necessary for secure operation. Even without it the … … 4897 4896 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 4898 4897 </em></span> 4899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255206 5"></a>4898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552062"></a> 4900 4899 4901 4900 root postexec (S) 4902 </h3></div></div></div><a class="indexterm" name="id255206 6"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4901 </h3></div></div></div><a class="indexterm" name="id2552063"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4903 4902 This is the same as the <em class="parameter"><code>postexec</code></em> 4904 4903 parameter except that the command is run as root. This is useful for … … 4906 4905 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 4907 4906 </em></span> 4908 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255211 4"></a>4907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552110"></a> 4909 4908 4910 4909 root preexec close (S) 4911 </h3></div></div></div><a class="indexterm" name="id255211 5"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close4910 </h3></div></div></div><a class="indexterm" name="id2552112"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 4912 4911 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 4913 4912 </em></span> 4914 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25521 62"></a>4913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552159"></a> 4915 4914 4916 4915 root preexec (S) 4917 </h3></div></div></div><a class="indexterm" name="id255216 4"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4916 </h3></div></div></div><a class="indexterm" name="id2552160"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4918 4917 This is the same as the <em class="parameter"><code>preexec</code></em> 4919 4918 parameter except that the command is run as root. This is useful for … … 4921 4920 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 4922 4921 </em></span> 4923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25522 10"></a>4922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552207"></a> 4924 4923 4925 4924 security mask (S) 4926 </h3></div></div></div><a class="indexterm" name="id25522 11"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>4925 </h3></div></div></div><a class="indexterm" name="id2552208"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 4927 4926 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 4928 4927 UNIX permission on a file using the native NT security dialog box. … … 4943 4942 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 4944 4943 </em></span> 4945 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255231 7"></a>4944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552314"></a> 4946 4945 4947 4946 security (G) 4948 </h3></div></div></div><a class="indexterm" name="id255231 8"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to4947 </h3></div></div></div><a class="indexterm" name="id2552315"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 4949 4948 Samba and is one of the most important settings in the <code class="filename"> 4950 4949 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 5070 5069 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 5071 5070 </em></span> 5072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255319 6"></a>5071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553192"></a> 5073 5072 5074 5073 server schannel (G) 5075 </h3></div></div></div><a class="indexterm" name="id255319 7"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>5074 </h3></div></div></div><a class="indexterm" name="id2553194"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 5076 5075 This controls whether the server offers or even demands the use of the netlogon schannel. 5077 5076 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. … … 5084 5083 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 5085 5084 </em></span> 5086 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25533 12"></a>5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553308"></a> 5087 5086 5088 5087 server signing (G) 5089 </h3></div></div></div><a class="indexterm" name="id25533 13"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires5088 </h3></div></div></div><a class="indexterm" name="id2553309"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires 5090 5089 the client it talks to to use SMB signing. Possible values 5091 5090 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 5095 5094 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 5096 5095 </em></span> 5097 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255337 3"></a>5096 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553370"></a> 5098 5097 5099 5098 server string (G) 5100 </h3></div></div></div><a class="indexterm" name="id255337 4"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print5099 </h3></div></div></div><a class="indexterm" name="id2553371"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 5101 5100 manager and next to the IPC connection in <code class="literal">net view</code>. It 5102 5101 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 5107 5106 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 5108 5107 </em></span> 5109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255346 4"></a>5108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553461"></a> 5110 5109 5111 5110 set directory (S) 5112 </h3></div></div></div><a class="indexterm" name="id255346 5"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>5111 </h3></div></div></div><a class="indexterm" name="id2553462"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5113 5112 If <code class="literal">set directory = no</code>, then users of the 5114 5113 service may not use the setdir command to change directory. … … 5119 5118 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 5120 5119 </em></span> 5121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255352 4"></a>5120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553521"></a> 5122 5121 5123 5122 set primary group script (G) 5124 </h3></div></div></div><a class="indexterm" name="id255352 6"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a5123 </h3></div></div></div><a class="indexterm" name="id2553522"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 5125 5124 primary group in addition to the auxiliary groups. This script 5126 5125 sets the primary group in the unix userdatase when an … … 5134 5133 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 5135 5134 </em></span> 5136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255360 6"></a>5135 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553603"></a> 5137 5136 5138 5137 set quota command (G) 5139 </h3></div></div></div><a class="indexterm" name="id255360 8"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used5138 </h3></div></div></div><a class="indexterm" name="id2553604"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 5140 5139 whenever there is no operating system API available from the OS that 5141 5140 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 5147 5146 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 5148 5147 </em></span> 5149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255376 9"></a>5148 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553766"></a> 5150 5149 5151 5150 share modes (S) 5152 </h3></div></div></div><a class="indexterm" name="id25537 70"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of5151 </h3></div></div></div><a class="indexterm" name="id2553767"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 5153 5152 the <em class="parameter"><code>share modes</code></em> during a file open. These 5154 5153 modes are used by clients to gain exclusive read or write access … … 5163 5162 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 5164 5163 </em></span> 5165 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255386 3"></a>5164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553860"></a> 5166 5165 5167 5166 short preserve case (S) 5168 </h3></div></div></div><a class="indexterm" name="id255386 4"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>5167 </h3></div></div></div><a class="indexterm" name="id2553861"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5169 5168 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 5170 5169 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. … … 5173 5172 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 5174 5173 </em></span> 5175 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25539 43"></a>5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553939"></a> 5176 5175 5177 5176 show add printer wizard (G) 5178 </h3></div></div></div><a class="indexterm" name="id255394 4"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support5177 </h3></div></div></div><a class="indexterm" name="id2553940"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 5179 5178 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 5180 5179 appear on Samba hosts in the share listing. Normally this folder will … … 5194 5193 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 5195 5194 </em></span> 5196 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255402 7"></a>5195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554023"></a> 5197 5196 5198 5197 shutdown script (G) 5199 </h3></div></div></div><a class="indexterm" name="id255402 8"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5198 </h3></div></div></div><a class="indexterm" name="id2554024"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5200 5199 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5201 5200 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, … … 5222 5221 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5223 5222 </em></span> 5224 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25541 80"></a>5223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554177"></a> 5225 5224 5226 5225 smb encrypt (S) 5227 </h3></div></div></div><a class="indexterm" name="id25541 81"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5226 </h3></div></div></div><a class="indexterm" name="id2554178"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5228 5227 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5229 5228 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5254 5253 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5255 5254 </em></span> 5256 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255428 6"></a>5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554283"></a> 5257 5256 5258 5257 smb passwd file (G) 5259 </h3></div></div></div><a class="indexterm" name="id255428 7"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5258 </h3></div></div></div><a class="indexterm" name="id2554284"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5260 5259 default the path to the smbpasswd file is compiled into Samba.</p><p> 5261 5260 An example of use is: … … 5265 5264 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5266 5265 </em></span> 5267 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25543 40"></a>5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554337"></a> 5268 5267 5269 5268 smb ports (G) 5270 </h3></div></div></div><a class="indexterm" name="id25543 41"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5271 </em></span> 5272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25543 82"></a>5269 </h3></div></div></div><a class="indexterm" name="id2554338"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5270 </em></span> 5271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554378"></a> 5273 5272 5274 5273 socket address (G) 5275 </h3></div></div></div><a class="indexterm" name="id255438 3"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5274 </h3></div></div></div><a class="indexterm" name="id2554380"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5276 5275 address Samba will listen for connections on. This is used to 5277 5276 support multiple virtual interfaces on the one server, each … … 5281 5280 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5282 5281 </em></span> 5283 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255444 7"></a>5282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554444"></a> 5284 5283 5285 5284 socket options (G) 5286 </h3></div></div></div><a class="indexterm" name="id255444 8"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5285 </h3></div></div></div><a class="indexterm" name="id2554445"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5287 5286 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5288 5287 of the operating systems which allow the connection to be … … 5312 5311 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5313 5312 </em></span> 5314 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255465 7"></a>5313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554654"></a> 5315 5314 5316 5315 stat cache (G) 5317 </h3></div></div></div><a class="indexterm" name="id255465 8"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5316 </h3></div></div></div><a class="indexterm" name="id2554655"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5318 5317 speed up case insensitive name mappings. You should never need 5319 5318 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5320 5319 </em></span> 5321 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255470 8"></a>5320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554705"></a> 5322 5321 5323 5322 store dos attributes (S) 5324 </h3></div></div></div><a class="indexterm" name="id255470 9"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5323 </h3></div></div></div><a class="indexterm" name="id2554706"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5325 5324 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5326 5325 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5334 5333 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5335 5334 </em></span> 5336 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25548 30"></a>5335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554827"></a> 5337 5336 5338 5337 strict allocate (S) 5339 </h3></div></div></div><a class="indexterm" name="id25548 31"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5338 </h3></div></div></div><a class="indexterm" name="id2554828"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5340 5339 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5341 5340 the server will change from UNIX behaviour of not committing real … … 5349 5348 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 5350 5349 </em></span> 5351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554 900"></a>5350 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554897"></a> 5352 5351 5353 5352 strict locking (S) 5354 </h3></div></div></div><a class="indexterm" name="id2554 901"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5353 </h3></div></div></div><a class="indexterm" name="id2554898"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5355 5354 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5356 5355 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5368 5367 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5369 5368 </em></span> 5370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255497 9"></a>5369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554976"></a> 5371 5370 5372 5371 strict sync (S) 5373 </h3></div></div></div><a class="indexterm" name="id25549 80"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5372 </h3></div></div></div><a class="indexterm" name="id2554977"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5374 5373 shell) seem to confuse flushing buffer contents to disk with doing 5375 5374 a sync to disk. Under UNIX, a sync call forces the process to be … … 5385 5384 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5386 5385 </em></span> 5387 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255504 3"></a>5386 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555041"></a> 5388 5387 5389 5388 svcctl list (G) 5390 </h3></div></div></div><a class="indexterm" name="id255504 4"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5389 </h3></div></div></div><a class="indexterm" name="id2555042"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5391 5390 will use for starting and stopping Unix services via the Win32 5392 5391 ServiceControl API. This allows Windows administrators to … … 5401 5400 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5402 5401 </em></span> 5403 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255512 8"></a>5402 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555126"></a> 5404 5403 5405 5404 sync always (S) 5406 </h3></div></div></div><a class="indexterm" name="id25551 30"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5405 </h3></div></div></div><a class="indexterm" name="id2555127"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5407 5406 whether writes will always be written to stable storage before 5408 5407 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5415 5414 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5416 5415 </em></span> 5417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555 200"></a>5416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555197"></a> 5418 5417 5419 5418 syslog only (G) 5420 </h3></div></div></div><a class="indexterm" name="id2555 201"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5419 </h3></div></div></div><a class="indexterm" name="id2555198"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5421 5420 If this parameter is set then Samba debug messages are logged into the system 5422 5421 syslog only, and not to the debug log files. There still will be some … … 5424 5423 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5425 5424 </em></span> 5426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255524 7"></a>5425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555244"></a> 5427 5426 5428 5427 syslog (G) 5429 </h3></div></div></div><a class="indexterm" name="id255524 8"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5428 </h3></div></div></div><a class="indexterm" name="id2555245"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5430 5429 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5431 5430 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5438 5437 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5439 5438 </em></span> 5440 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255531 8"></a>5439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555315"></a> 5441 5440 5442 5441 template homedir (G) 5443 </h3></div></div></div><a class="indexterm" name="id255531 9"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5442 </h3></div></div></div><a class="indexterm" name="id2555316"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5444 5443 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5445 5444 parameter to fill in the home directory for that user. If the … … 5449 5448 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5450 5449 </em></span> 5451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255538 3"></a>5450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555380"></a> 5452 5451 5453 5452 template shell (G) 5454 </h3></div></div></div><a class="indexterm" name="id255538 4"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5453 </h3></div></div></div><a class="indexterm" name="id2555381"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5455 5454 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5456 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25554 22"></a>5455 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555419"></a> 5457 5456 5458 5457 time offset (G) 5459 </h3></div></div></div><a class="indexterm" name="id255542 4"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5458 </h3></div></div></div><a class="indexterm" name="id2555420"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5460 5459 to the normal GMT to local time conversion. This is useful if 5461 5460 you are serving a lot of PCs that have incorrect daylight … … 5464 5463 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5465 5464 </em></span> 5466 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25554 82"></a>5465 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555479"></a> 5467 5466 5468 5467 time server (G) 5469 </h3></div></div></div><a class="indexterm" name="id255548 3"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5468 </h3></div></div></div><a class="indexterm" name="id2555480"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5470 5469 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5471 5470 </em></span> 5472 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25555 32"></a>5471 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555529"></a> 5473 5472 5474 5473 unix charset (G) 5475 </h3></div></div></div><a class="indexterm" name="id255553 3"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5474 </h3></div></div></div><a class="indexterm" name="id2555530"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5476 5475 Samba runs on uses. Samba needs to know this in order to be able to 5477 5476 convert text to the charsets other SMB clients use. … … 5482 5481 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5483 5482 </em></span> 5484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255559 8"></a>5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555595"></a> 5485 5484 5486 5485 unix extensions (G) 5487 </h3></div></div></div><a class="indexterm" name="id255559 9"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5486 </h3></div></div></div><a class="indexterm" name="id2555596"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5488 5487 implments the CIFS UNIX extensions, as defined by HP. 5489 5488 These extensions enable Samba to better serve UNIX CIFS clients … … 5492 5491 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5493 5492 </em></span> 5494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255564 6"></a>5493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555643"></a> 5495 5494 5496 5495 unix password sync (G) 5497 </h3></div></div></div><a class="indexterm" name="id255564 7"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5496 </h3></div></div></div><a class="indexterm" name="id2555644"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5498 5497 attempts to synchronize the UNIX password with the SMB password 5499 5498 when the encrypted SMB password in the smbpasswd file is changed. … … 5504 5503 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5505 5504 </em></span> 5506 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255570 7"></a>5505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555704"></a> 5507 5506 5508 5507 update encrypted (G) 5509 </h3></div></div></div><a class="indexterm" name="id255570 8"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>5508 </h3></div></div></div><a class="indexterm" name="id2555705"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5510 5509 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5511 5510 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to … … 5525 5524 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5526 5525 </em></span> 5527 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255582 5"></a>5526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555822"></a> 5528 5527 5529 5528 use client driver (S) 5530 </h3></div></div></div><a class="indexterm" name="id255582 6"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005529 </h3></div></div></div><a class="indexterm" name="id2555823"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5531 5530 clients. It has no effect on Windows 95/98/ME clients. When 5532 5531 serving a printer to Windows NT/2000 clients without first installing … … 5553 5552 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5554 5553 </em></span> 5555 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255591 8"></a>5554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555914"></a> 5556 5555 5557 5556 use kerberos keytab (G) 5558 </h3></div></div></div><a class="indexterm" name="id255591 9"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5557 </h3></div></div></div><a class="indexterm" name="id2555916"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5559 5558 Specifies whether Samba should attempt to maintain service principals in the systems 5560 5559 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5568 5567 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5569 5568 </em></span> 5570 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255598 6"></a>5569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555983"></a> 5571 5570 5572 5571 use mmap (G) 5573 </h3></div></div></div><a class="indexterm" name="id255598 7"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can5572 </h3></div></div></div><a class="indexterm" name="id2555984"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5574 5573 depend on mmap working correctly on the running system. Samba requires a coherent 5575 5574 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5580 5579 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5581 5580 </em></span> 5582 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255603 9"></a>5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556035"></a> 5583 5582 5584 5583 username level (G) 5585 </h3></div></div></div><a class="indexterm" name="id25560 40"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at5584 </h3></div></div></div><a class="indexterm" name="id2556036"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5586 5585 the real UNIX username, as many DOS clients send an all-uppercase 5587 5586 username. By default Samba tries all lowercase, followed by the … … 5598 5597 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5599 5598 </em></span> 5600 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25561 20"></a>5599 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556117"></a> 5601 5600 5602 5601 username map script (G) 5603 </h3></div></div></div><a class="indexterm" name="id25561 21"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5602 </h3></div></div></div><a class="indexterm" name="id2556118"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5604 5603 <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a> parameter. This parameter 5605 5604 specifies and external program or script that must accept a single … … 5612 5611 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5613 5612 </em></span> 5614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255619 6"></a>5613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556193"></a> 5615 5614 5616 5615 username map (G) 5617 </h3></div></div></div><a class="indexterm" name="id255619 7"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5616 </h3></div></div></div><a class="indexterm" name="id2556194"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5618 5617 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5619 5618 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5699 5698 # no username map</code> 5700 5699 </em></span> 5701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255647 6"></a>5700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556473"></a> 5702 5701 5703 5702 <a name="USER"></a>user 5704 </h3></div></div></div><a class="indexterm" name="id255647 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556508"></a>5703 </h3></div></div></div><a class="indexterm" name="id2556474"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556505"></a> 5705 5704 5706 5705 <a name="USERS"></a>users 5707 </h3></div></div></div><a class="indexterm" name="id255650 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556539"></a>5706 </h3></div></div></div><a class="indexterm" name="id2556506"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556537"></a> 5708 5707 5709 5708 username (S) 5710 </h3></div></div></div><a class="indexterm" name="id25565 40"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited5709 </h3></div></div></div><a class="indexterm" name="id2556538"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 5711 5710 list, in which case the supplied password will be tested against 5712 5711 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 5746 5745 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5747 5746 </em></span> 5748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255670 9"></a>5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556707"></a> 5749 5748 5750 5749 usershare allow guests (G) 5751 </h3></div></div></div><a class="indexterm" name="id25567 10"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5750 </h3></div></div></div><a class="indexterm" name="id2556708"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5752 5751 to be accessed by non-authenticated users or not. It is the equivalent 5753 5752 of allowing people who can create a share the option of setting … … 5756 5755 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5757 5756 </em></span> 5758 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255676 2"></a>5757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556760"></a> 5759 5758 5760 5759 usershare max shares (G) 5761 </h3></div></div></div><a class="indexterm" name="id255676 3"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5760 </h3></div></div></div><a class="indexterm" name="id2556761"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5762 5761 that are allowed to be created by users belonging to the group owning the 5763 5762 usershare directory. If set to zero (the default) user defined shares are ignored. 5764 5763 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5765 5764 </em></span> 5766 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255680 8"></a>5765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556805"></a> 5767 5766 5768 5767 usershare owner only (G) 5769 </h3></div></div></div><a class="indexterm" name="id255680 9"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5768 </h3></div></div></div><a class="indexterm" name="id2556806"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5770 5769 a user defined shares must be owned by the user creating the 5771 5770 user defined share or not. If set to True (the default) then … … 5777 5776 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 5778 5777 </em></span> 5779 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255685 7"></a>5778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556855"></a> 5780 5779 5781 5780 usershare path (G) 5782 </h3></div></div></div><a class="indexterm" name="id255685 8"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the5781 </h3></div></div></div><a class="indexterm" name="id2556856"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 5783 5782 filesystem used to store the user defined share definition files. 5784 5783 This directory must be owned by root, and have no access for … … 5801 5800 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 5802 5801 </em></span> 5803 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255692 8"></a>5802 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556926"></a> 5804 5803 5805 5804 usershare prefix allow list (G) 5806 </h3></div></div></div><a class="indexterm" name="id255692 9"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5805 </h3></div></div></div><a class="indexterm" name="id2556927"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5807 5806 the root of which are allowed to be exported by user defined share definitions. 5808 5807 If the pathname exported doesn't start with one of the strings in this … … 5819 5818 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5820 5819 </em></span> 5821 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255 7001"></a>5820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556998"></a> 5822 5821 5823 5822 usershare prefix deny list (G) 5824 </h3></div></div></div><a class="indexterm" name="id255 7002"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5823 </h3></div></div></div><a class="indexterm" name="id2556999"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5825 5824 the root of which are NOT allowed to be exported by user defined share definitions. 5826 5825 If the pathname exported starts with one of the strings in this … … 5838 5837 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 5839 5838 </em></span> 5840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255707 6"></a>5839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557073"></a> 5841 5840 5842 5841 usershare template share (G) 5843 </h3></div></div></div><a class="indexterm" name="id255707 7"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters5842 </h3></div></div></div><a class="indexterm" name="id2557074"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 5844 5843 such as path, guest ok etc. This parameter allows usershares to 5845 5844 "cloned" from an existing share. If "usershare template share" … … 5856 5855 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 5857 5856 </em></span> 5858 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255714 8"></a>5857 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557146"></a> 5859 5858 5860 5859 use sendfile (S) 5861 </h3></div></div></div><a class="indexterm" name="id255714 9"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5860 </h3></div></div></div><a class="indexterm" name="id2557147"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5862 5861 system call is supported by the underlying operating system, then some SMB read calls 5863 5862 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5868 5867 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5869 5868 </em></span> 5870 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255720 6"></a>5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557203"></a> 5871 5870 5872 5871 use spnego (G) 5873 </h3></div></div></div><a class="indexterm" name="id255720 7"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5872 </h3></div></div></div><a class="indexterm" name="id2557204"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5874 5873 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5875 5874 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5879 5878 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5880 5879 </em></span> 5881 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255725 5"></a>5880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557252"></a> 5882 5881 5883 5882 utmp directory (G) 5884 </h3></div></div></div><a class="indexterm" name="id255725 6"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5883 </h3></div></div></div><a class="indexterm" name="id2557254"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5885 5884 been configured and compiled with the option <code class="literal"> 5886 5885 --with-utmp</code>. It specifies a directory pathname that is … … 5894 5893 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 5895 5894 </em></span> 5896 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255733 3"></a>5895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557330"></a> 5897 5896 5898 5897 utmp (G) 5899 </h3></div></div></div><a class="indexterm" name="id255733 4"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>5898 </h3></div></div></div><a class="indexterm" name="id2557332"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5900 5899 This boolean parameter is only available if Samba has been configured and compiled 5901 5900 with the option <code class="literal">--with-utmp</code>. If set to … … 5909 5908 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 5910 5909 </em></span> 5911 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255739 6"></a>5910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557393"></a> 5912 5911 5913 5912 valid users (S) 5914 </h3></div></div></div><a class="indexterm" name="id255739 7"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>5913 </h3></div></div></div><a class="indexterm" name="id2557394"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 5915 5914 This is a list of users that should be allowed to login to this service. Names starting with 5916 5915 '@', '+' and '&' are interpreted using the same rules as described in the … … 5928 5927 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 5929 5928 </em></span> 5930 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255748 7"></a>5929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557484"></a> 5931 5930 5932 5931 -valid (S) 5933 </h3></div></div></div><a class="indexterm" name="id255748 8"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is5932 </h3></div></div></div><a class="indexterm" name="id2557486"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5934 5933 valid and thus can be used. When this parameter is set to false, 5935 5934 the share will be in no way visible nor accessible. … … 5940 5939 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 5941 5940 </em></span> 5942 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255753 6"></a>5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557534"></a> 5943 5942 5944 5943 veto files (S) 5945 </h3></div></div></div><a class="indexterm" name="id255753 8"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5944 </h3></div></div></div><a class="indexterm" name="id2557535"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5946 5945 This is a list of files and directories that are neither visible nor accessible. Each entry in 5947 5946 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 5974 5973 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 5975 5974 </em></span> 5976 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255765 5"></a>5975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557652"></a> 5977 5976 5978 5977 veto oplock files (S) 5979 </h3></div></div></div><a class="indexterm" name="id255765 6"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5978 </h3></div></div></div><a class="indexterm" name="id2557654"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5980 5979 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 5981 5980 parameter is turned on for a share. It allows the Samba administrator … … 5998 5997 # No files are vetoed for oplock grants</code> 5999 5998 </em></span> 6000 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255774 8"></a>5999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557746"></a> 6001 6000 6002 6001 <a name="VFSOBJECT"></a>vfs object 6003 </h3></div></div></div><a class="indexterm" name="id255774 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557780"></a>6002 </h3></div></div></div><a class="indexterm" name="id2557747"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557778"></a> 6004 6003 6005 6004 vfs objects (S) 6006 </h3></div></div></div><a class="indexterm" name="id25577 81"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which6005 </h3></div></div></div><a class="indexterm" name="id2557779"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 6007 6006 are used for Samba VFS I/O operations. By default, normal 6008 6007 disk I/O operations are used but these can be overloaded … … 6011 6010 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6012 6011 </em></span> 6013 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25578 40"></a>6012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557838"></a> 6014 6013 6015 6014 volume (S) 6016 </h3></div></div></div><a class="indexterm" name="id25578 41"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label6015 </h3></div></div></div><a class="indexterm" name="id2557839"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 6017 6016 returned for a share. Useful for CDROMs with installation programs 6018 6017 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 6019 6018 # the name of the share</code> 6020 6019 </em></span> 6021 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255788 4"></a>6020 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557881"></a> 6022 6021 6023 6022 wide links (S) 6024 </h3></div></div></div><a class="indexterm" name="id255788 5"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6023 </h3></div></div></div><a class="indexterm" name="id2557882"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6025 6024 in the UNIX file system may be followed by the server. Links 6026 6025 that point to areas within the directory tree exported by the … … 6030 6029 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 6031 6030 </em></span> 6032 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255793 6"></a>6031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557933"></a> 6033 6032 6034 6033 winbind cache time (G) 6035 </h3></div></div></div><a class="indexterm" name="id255793 7"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6034 </h3></div></div></div><a class="indexterm" name="id2557934"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6036 6035 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6037 6036 user and group information before querying a Windows NT server … … 6041 6040 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6042 6041 </em></span> 6043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255800 7"></a>6042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558005"></a> 6044 6043 6045 6044 winbind enum groups (G) 6046 </h3></div></div></div><a class="indexterm" name="id255800 8"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6045 </h3></div></div></div><a class="indexterm" name="id2558006"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6047 6046 the enumeration of groups through the <code class="literal">setgrent()</code>, 6048 6047 <code class="literal">getgrent()</code> and … … 6052 6051 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6053 6052 </em></span> 6054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255809 8"></a>6053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558095"></a> 6055 6054 6056 6055 winbind enum users (G) 6057 </h3></div></div></div><a class="indexterm" name="id255809 9"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be6056 </h3></div></div></div><a class="indexterm" name="id2558096"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 6058 6057 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 6059 6058 <code class="literal">getpwent()</code> and … … 6067 6066 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6068 6067 </em></span> 6069 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25581 92"></a>6068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558189"></a> 6070 6069 6071 6070 winbind expand groups (G) 6072 </h3></div></div></div><a class="indexterm" name="id255819 3"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6071 </h3></div></div></div><a class="indexterm" name="id2558190"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6073 6072 will traverse when flattening nested group memberships 6074 6073 of Windows domain groups. This is different from the … … 6082 6081 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 6083 6082 </em></span> 6084 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25582 60"></a>6083 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558257"></a> 6085 6084 6086 6085 winbind nested groups (G) 6087 </h3></div></div></div><a class="indexterm" name="id25582 61"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested6086 </h3></div></div></div><a class="indexterm" name="id2558258"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 6088 6087 groups. Nested groups are also called local groups or 6089 6088 aliases. They work like their counterparts in Windows: Nested … … 6093 6092 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6094 6093 </em></span> 6095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25583 10"></a>6094 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558307"></a> 6096 6095 6097 6096 winbind normalize names (G) 6098 </h3></div></div></div><a class="indexterm" name="id25583 11"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6097 </h3></div></div></div><a class="indexterm" name="id2558308"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6099 6098 whitespace in user and group names with an underscore (_) character. 6100 6099 For example, whether the name "Space Kadet" should be … … 6108 6107 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 6109 6108 </em></span> 6110 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255837 6"></a>6109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558373"></a> 6111 6110 6112 6111 winbind nss info (G) 6113 </h3></div></div></div><a class="indexterm" name="id255837 7"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name6112 </h3></div></div></div><a class="indexterm" name="id2558374"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 6114 6113 Service Information to construct a user's home directory and login shell. 6115 6114 Currently the following settings are available: … … 6133 6132 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 6134 6133 </em></span> 6135 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255849 6"></a>6134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558493"></a> 6136 6135 6137 6136 winbind offline logon (G) 6138 </h3></div></div></div><a class="indexterm" name="id255849 7"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6137 </h3></div></div></div><a class="indexterm" name="id2558494"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6139 6138 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6140 6139 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6144 6143 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 6145 6144 </em></span> 6146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255856 5"></a>6145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558562"></a> 6147 6146 6148 6147 winbind refresh tickets (G) 6149 </h3></div></div></div><a class="indexterm" name="id255856 6"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets6148 </h3></div></div></div><a class="indexterm" name="id2558563"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 6150 6149 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 6151 6150 … … 6154 6153 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6155 6154 </em></span> 6156 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 32"></a>6155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558628"></a> 6157 6156 6158 6157 winbind rpc only (G) 6159 </h3></div></div></div><a class="indexterm" name="id255863 3"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6158 </h3></div></div></div><a class="indexterm" name="id2558630"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6160 6159 Setting this parameter to <code class="literal">yes</code> forces 6161 6160 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6163 6162 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 6164 6163 </em></span> 6165 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 81"></a>6164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558677"></a> 6166 6165 6167 6166 winbind separator (G) 6168 </h3></div></div></div><a class="indexterm" name="id25586 82"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character6167 </h3></div></div></div><a class="indexterm" name="id2558678"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 6169 6168 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 6170 6169 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 6177 6176 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6178 6177 </em></span> 6179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255876 8"></a>6178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558764"></a> 6180 6179 6181 6180 winbind trusted domains only (G) 6182 </h3></div></div></div><a class="indexterm" name="id255876 9"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6181 </h3></div></div></div><a class="indexterm" name="id2558765"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6183 6182 This parameter is designed to allow Samba servers that are members 6184 6183 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6192 6191 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6193 6192 </em></span> 6194 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255884 7"></a>6193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558844"></a> 6195 6194 6196 6195 winbind use default domain (G) 6197 </h3></div></div></div><a class="indexterm" name="id255884 8"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6196 </h3></div></div></div><a class="indexterm" name="id2558845"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6198 6197 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6199 6198 without domain component in their username. Users without a domain … … 6205 6204 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 6206 6205 </em></span> 6207 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255891 9"></a>6206 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558916"></a> 6208 6207 6209 6208 wins hook (G) 6210 </h3></div></div></div><a class="indexterm" name="id25589 20"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this6209 </h3></div></div></div><a class="indexterm" name="id2558917"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 6211 6210 allows you to call an external program for all changes to the 6212 6211 WINS database. The primary use for this option is to allow the … … 6229 6228 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6230 6229 program <code class="literal">nsupdate</code> is provided in the examples 6231 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255902 5"></a>6230 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559022"></a> 6232 6231 6233 6232 wins proxy (G) 6234 </h3></div></div></div><a class="indexterm" name="id255902 6"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6233 </h3></div></div></div><a class="indexterm" name="id2559024"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6235 6234 queries on behalf of other hosts. You may need to set this 6236 6235 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6237 6236 </em></span> 6238 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25590 80"></a>6237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559077"></a> 6239 6238 6240 6239 wins server (G) 6241 </h3></div></div></div><a class="indexterm" name="id25590 81"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6240 </h3></div></div></div><a class="indexterm" name="id2559078"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6242 6241 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6243 6242 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6258 6257 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6259 6258 </em></span> 6260 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25591 90"></a>6259 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559188"></a> 6261 6260 6262 6261 wins support (G) 6263 </h3></div></div></div><a class="indexterm" name="id25591 91"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6262 </h3></div></div></div><a class="indexterm" name="id2559189"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6264 6263 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6265 6264 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6267 6266 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6268 6267 </em></span> 6269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25592 60"></a>6268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559257"></a> 6270 6269 6271 6270 workgroup (G) 6272 </h3></div></div></div><a class="indexterm" name="id25592 61"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6271 </h3></div></div></div><a class="indexterm" name="id2559258"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6273 6272 appear to be in when queried by clients. Note that this parameter 6274 6273 also controls the Domain name used with … … 6278 6277 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6279 6278 </em></span> 6280 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25593 32"></a>6279 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559329"></a> 6281 6280 6282 6281 <a name="WRITABLE"></a>writable 6283 </h3></div></div></div><a class="indexterm" name="id255933 3"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559363"></a>6282 </h3></div></div></div><a class="indexterm" name="id2559330"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559360"></a> 6284 6283 6285 6284 writeable (S) 6286 </h3></div></div></div><a class="indexterm" name="id255936 4"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559402"></a>6285 </h3></div></div></div><a class="indexterm" name="id2559362"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559399"></a> 6287 6286 6288 6287 write cache size (S) 6289 </h3></div></div></div><a class="indexterm" name="id255940 3"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6288 </h3></div></div></div><a class="indexterm" name="id2559400"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6290 6289 Samba will create an in-memory cache for each oplocked file 6291 6290 (it does <span class="emphasis"><em>not</em></span> do this for … … 6305 6304 # for a 256k cache size per file</code> 6306 6305 </em></span> 6307 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255948 5"></a>6306 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559483"></a> 6308 6307 6309 6308 write list (S) 6310 </h3></div></div></div><a class="indexterm" name="id255948 6"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6309 </h3></div></div></div><a class="indexterm" name="id2559484"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6311 6310 This is a list of users that are given read-write access to a service. If the 6312 6311 connecting user is in this list then they will be given write access, no matter … … 6323 6322 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6324 6323 </em></span> 6325 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255957 9"></a>6324 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559576"></a> 6326 6325 6327 6326 write raw (G) 6328 </h3></div></div></div><a class="indexterm" name="id25595 80"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6327 </h3></div></div></div><a class="indexterm" name="id2559577"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6329 6328 will support raw write SMB's when transferring data from clients. 6330 6329 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6331 6330 </em></span> 6332 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255962 2"></a>6331 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559620"></a> 6333 6332 6334 6333 wtmp directory (G) 6335 </h3></div></div></div><a class="indexterm" name="id255962 3"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6334 </h3></div></div></div><a class="indexterm" name="id2559621"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6336 6335 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6337 6336 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6345 6344 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6346 6345 </em></span> 6347 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id255970 6"></a><h2>WARNINGS</h2><p>6346 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2559703"></a><h2>WARNINGS</h2><p> 6348 6347 Although the configuration file permits service names to contain spaces, your client software may not. 6349 6348 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6358 6357 care when designing these sections. In particular, ensure that the permissions on spool directories are 6359 6358 correct. 6360 </p></div><div class="refsect1" lang="en"><a name="id255975 6"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2559767"></a><h2>SEE ALSO</h2><p>6361 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id255984 6"></a><h2>AUTHOR</h2><p>6359 </p></div><div class="refsect1" lang="en"><a name="id2559753"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2559764"></a><h2>SEE ALSO</h2><p> 6360 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2559844"></a><h2>AUTHOR</h2><p> 6362 6361 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6363 6362 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
