Changeset 221 for branches/samba-3.3.x/docs-xml

Timestamp:

May 24, 2009, 7:17:10 AM (16 years ago)

Author:

Herwig Bauernfeind

Message:

Update Samba 3.3 to 3.3.1

Location:

branches/samba-3.3.x/docs-xml

Files:

• archives/THANKS (modified) (1 diff)
• manpages-3/eventlogadm.8.xml (modified) (2 diffs)
• manpages-3/mount.cifs.8.xml (modified) (3 diffs)
• manpages-3/vfs_smb_traffic_analyzer.8.xml (modified) (1 diff)
• smbdotconf/browse/enhancedbrowsing.xml (modified) (1 diff)
• smbdotconf/ldap/ldapssl.xml (modified) (2 diffs)
• smbdotconf/locking/strictlocking.xml (modified) (1 diff)
• smbdotconf/misc/remoteannounce.xml (modified) (2 diffs)
• smbdotconf/misc/usershareallowguests.xml (modified) (1 diff)
• smbdotconf/misc/usershareprefixallowlist.xml (modified) (1 diff)
• smbdotconf/misc/usersharetemplateshare.xml (modified) (1 diff)
• smbdotconf/printing/useclientdriver.xml (modified) (1 diff)
• smbdotconf/protocol/aclcheckpermissions.xml (modified) (1 diff)
• smbdotconf/protocol/enableasusupport.xml (modified) (1 diff)
• smbdotconf/security/clientlanmanauth.xml (modified) (1 diff)
• smbdotconf/security/clientsigning.xml (modified) (1 diff)
• smbdotconf/security/lanmanauth.xml (modified) (1 diff)
• smbdotconf/security/passwordserver.xml (modified) (1 diff)
• smbdotconf/security/security.xml (modified) (3 diffs)
• smbdotconf/security/serverschannel.xml (modified) (1 diff)
• smbdotconf/security/serversigning.xml (modified) (1 diff)
• smbdotconf/security/smbencrypt.xml (modified) (1 diff)
• smbdotconf/security/updateencrypted.xml (modified) (2 diffs)

branches/samba-3.3.x/docs-xml/archives/THANKS

@@ -87 +87 @@
     with a variety of environments (such as Windows, Windows NT and
     Unix), tools and application areas, and can provide assistance for
-    development work ranging from a few days to to multiple man-year
+    development work ranging from a few days to multiple man-year
     projects.  You can find more information at http://www.metrics.com/.
     

branches/samba-3.3.x/docs-xml/manpages-3/eventlogadm.8.xml

@@ -92 +92 @@
                 <listitem><para>
                 The <command>-o write</command> reads event log
-                records from standard input and writes them to theSamba
+                records from standard input and writes them to the Samba
                 event log store named by EVENTLOG.
                 </para> </listitem>
@@ -181 +181 @@
 
                 <listitem><para>
-                <command>SRN</command> - he name of the machine on
+                <command>SRN</command> - The name of the machine on
                 which the eventlog was generated. This is typically the
                 host name.

branches/samba-3.3.x/docs-xml/manpages-3/mount.cifs.8.xml

@@ -44 +44 @@
 
         <para>
-        The mount.cifs utility attaches the UNC name (exported network resource) to
-        the local directory <emphasis>mount-point</emphasis>. It is possible to set the mode for mount.cifs to 
-setuid root to allow non-root users to mount shares to directories for which they
-have write permission.
+        The mount.cifs utility attaches the UNC name (exported network resource)
+        specified as <emphasis>service</emphasis> (using //server/share syntax,
+        where "server" is the server name or IP address and "share" is the name
+        of the share) to the local directory <emphasis>mount-point</emphasis>.
+        It is possible to set the mode for mount.cifs to setuid root to allow
+        non-root users to mount shares to directories for which they
+        have write permission.
         </para>
 
@@ -138 +141 @@
                 the server supports the Unix Extensions then the uid
                 and gid can be retrieved from the server (and uid
-                and gid would not have to be specifed on the mount. 
+                and gid would not have to be specified on the mount.
                 For servers which do not support the CIFS Unix
                 extensions, the default uid (and gid) returned on lookup 
@@ -370 +373 @@
                 <listitem><para>Do not allow POSIX ACL operations even if server would support them.</para><para>
                 The CIFS client can get and set POSIX ACLs (getfacl, setfacl) to Samba servers
-                version 3.10 and later.  Setting POSIX ACLs requires enabling both XATTR and
+                version 3.0.10 and later.  Setting POSIX ACLs requires enabling both XATTR and
                 then POSIX support in the CIFS configuration options when building the cifs
-                module.  POSIX ACL support can be disabled on a per mount basic by specifying
+                module.  POSIX ACL support can be disabled on a per mount basis by specifying
                 "noacl" on mount.</para>
                 </listitem>

branches/samba-3.3.x/docs-xml/manpages-3/vfs_smb_traffic_analyzer.8.xml

@@ -118 +118 @@
                 </varlistentry>
 
+                <varlistentry>
+                <term>smb_traffic_analyzer:total_anonymization = STRING</term>
+                <listitem>
+                <para>If STRING matches to 'yes', the module will replace
+                any user name with the string given by the option 
+                smb_traffic_analyzer:anonymize_prefix, without generating
+                an additional hash number. This means that any transfer data
+                will be mapped to a single user, leading to a total 
+                anonymization of user related data.</para>
+                </listitem>
+                </varlistentry>
 
         </variablelist>

branches/samba-3.3.x/docs-xml/smbdotconf/browse/enhancedbrowsing.xml

@@ -18 +18 @@
         <para>You may wish to disable this option if you have a problem with empty
         workgroups not disappearing from browse lists. Due to the restrictions
-        of the browse protocols these enhancements can cause a empty workgroup
+        of the browse protocols, these enhancements can cause a empty workgroup
         to stay around forever which can be annoying.</para>
 

branches/samba-3.3.x/docs-xml/smbdotconf/ldap/ldapssl.xml

@@ -14 +14 @@
 
         <para>LDAP connections should be secured where possible. This may be
-        done setting either this parameter to
+        done setting <emphasis>either</emphasis> this parameter to
         <parameter moreinfo="none">Start_tls</parameter>
-        or by specifying <parameter moreinfo="none">ldaps://</parameter> in
+        <emphasis>or</emphasis> by specifying <parameter moreinfo="none">ldaps://</parameter> in
         the URL argument of <smbconfoption name="passdb backend"/>.</para>
 
@@ -33 +33 @@
                 </listitem>
         </itemizedlist>
+        <para>
+        Please note that this parameter does only affect <emphasis>rpc</emphasis>
+        methods. To enable the LDAPv3 StartTLS extended operation (RFC2830) for
+        <emphasis>ads</emphasis>, set
+        <smbconfoption name="ldap ssl">yes</smbconfoption>
+        <emphasis>and</emphasis>
+        <smbconfoption name="ldap ssl ads">yes</smbconfoption>.
+        See <refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum>
+        for more information on <smbconfoption name="ldap ssl ads"/>.
+        </para>
+
 </description>
 <value type="default">start tls</value>

branches/samba-3.3.x/docs-xml/smbdotconf/locking/strictlocking.xml

@@ -13 +13 @@
         When strict locking is set to Auto (the default), the server performs file lock checks only on non-oplocked files.
         As most Windows redirectors perform file locking checks locally on oplocked files this is a good trade off for
-        inproved performance.
+        improved performance.
         </para>
 

branches/samba-3.3.x/docs-xml/smbdotconf/misc/remoteannounce.xml

@@ -7 +7 @@
         <para>
         This option allows you to setup <citerefentry><refentrytitle>nmbd</refentrytitle>
-        <manvolnum>8</manvolnum></citerefentry>to periodically announce itself 
+        <manvolnum>8</manvolnum></citerefentry> to periodically announce itself 
         to arbitrary IP addresses with an arbitrary workgroup name.
         </para>
@@ -24 +24 @@
         the above line would cause <command moreinfo="none">nmbd</command> to announce itself 
         to the two given IP addresses using the given workgroup names. If you leave out the 
-        workgroup name then the one given in the <smbconfoption name="workgroup"/> parameter 
+        workgroup name, then the one given in the <smbconfoption name="workgroup"/> parameter 
         is used instead.
         </para>

branches/samba-3.3.x/docs-xml/smbdotconf/misc/usershareallowguests.xml

@@ -9 +9 @@
         of allowing people who can create a share the option of setting
         <parameter moreinfo="none">guest ok = yes</parameter> in a share
-        definition. Due to the security sensitive nature of this the default
+        definition. Due to its security sensitive nature, the default
         is set to off.</para>
 

branches/samba-3.3.x/docs-xml/smbdotconf/misc/usershareprefixallowlist.xml

@@ -7 +7 @@
         <para>This parameter specifies a list of absolute pathnames
         the root of which are allowed to be exported by user defined share definitions.
-        If the pathname exported doesn't start with one of the strings in this
-        list the user defined share will not be allowed. This allows the Samba
+        If the pathname to be exported doesn't start with one of the strings in this
+        list, the user defined share will not be allowed. This allows the Samba
         administrator to restrict the directories on the system that can be
         exported by user defined shares.

branches/samba-3.3.x/docs-xml/smbdotconf/misc/usersharetemplateshare.xml

@@ -6 +6 @@
 <description>
         <para>User defined shares only have limited possible parameters
-        such as path, guest ok etc. This parameter allows usershares to
+        such as path, guest ok, etc. This parameter allows usershares to
         "cloned" from an existing share. If "usershare template share"
         is set to the name of an existing share, then all usershares

branches/samba-3.3.x/docs-xml/smbdotconf/printing/useclientdriver.xml

@@ -30 +30 @@
     to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped
     to PRINTER_ACCESS_USE instead.  Thus allowing the OpenPrinterEx()
-    call to succeed.  <emphasis>This parameter MUST not be able enabled
+    call to succeed.  <emphasis>This parameter MUST not be enabled
     on a print share which has valid print driver installed on the Samba 
         server.</emphasis></para>

branches/samba-3.3.x/docs-xml/smbdotconf/protocol/aclcheckpermissions.xml

@@ -22 +22 @@
     discovered at close time, which is too late for the Windows user tools to display an error message
     to the user. The symptom of this is files that appear to have been deleted "magically" re-appearing
-    on a Windows explorer refersh. This is an extremely advanced protocol option which should not
+    on a Windows explorer refresh. This is an extremely advanced protocol option which should not
     need to be changed. This parameter was introduced in its final form in 3.0.21, an earlier version
     with slightly different semantics was introduced in 3.0.20. That older version is not documented here.

branches/samba-3.3.x/docs-xml/smbdotconf/protocol/enableasusupport.xml

@@ -6 +6 @@
 <description>
     <para>Hosts running the "Advanced Server for Unix (ASU)" product 
-    require some special accomodations such as creating a builting [ADMIN$] 
+    require some special accomodations such as creating a builtin [ADMIN$] 
     share that only supports IPC connections.  The has been the default
     behavior in smbd for many years.  However, certain Microsoft applications

branches/samba-3.3.x/docs-xml/smbdotconf/security/clientlanmanauth.xml

@@ -12 +12 @@
     Windows 95/98) will be able to be connected from the Samba client.</para>
 
-    <para>The LANMAN encrypted response is easily broken, due to it's
+    <para>The LANMAN encrypted response is easily broken, due to its
     case-insensitive nature, and the choice of algorithm.  Clients
     without Windows 95/98 servers are advised to disable

branches/samba-3.3.x/docs-xml/smbdotconf/security/clientsigning.xml

@@ -5 +5 @@
                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
 <description>
-    <para>This controls whether the client offers or requires
-    the server it talks to to use SMB signing. Possible values 
+    <para>This controls whether the client is allowed or required to use SMB signing. Possible values 
     are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> 
     and <emphasis>disabled</emphasis>. 

branches/samba-3.3.x/docs-xml/smbdotconf/security/lanmanauth.xml

@@ -13 +13 @@
     connect to the Samba host.</para>
 
-    <para>The LANMAN encrypted response is easily broken, due to it's
+    <para>The LANMAN encrypted response is easily broken, due to its
     case-insensitive nature, and the choice of algorithm.  Servers
     without Windows 95/98/ME or MS DOS clients are advised to disable

branches/samba-3.3.x/docs-xml/smbdotconf/security/passwordserver.xml

@@ -8 +8 @@
     or Active Directory domain controller with this option, 
     and using <command moreinfo="none">security = [ads|domain|server]</command> 
-    it is possible to get Samba to 
+    it is possible to get Samba
     to do all its username/password validation using a specific remote server.</para>
 

branches/samba-3.3.x/docs-xml/smbdotconf/security/security.xml

@@ -48 +48 @@
     is commonly used for a shared printer server. It is more difficult 
     to setup guest shares with <command moreinfo="none">security = user</command>, see 
-    the <smbconfoption name="map to guest"/>parameter for details.</para>
+    the <smbconfoption name="map to guest"/> parameter for details.</para>
                 
     <para>It is possible to use <command moreinfo="none">smbd</command> in a <emphasis>
@@ -59 +59 @@
     <para><anchor id="SECURITYEQUALSSHARE"/><emphasis>SECURITY = SHARE</emphasis></para> 
                 
-    <para>When clients connect to a share level security server they 
+    <para>When clients connect to a share level security server, they 
     need not log onto the server with a valid username and password before 
     attempting to connect to a shared resource (although modern clients 
@@ -212 +212 @@
 
         <note><para>From the client's point of 
-    view <command moreinfo="none">security = server</command> is the
+    view, <command moreinfo="none">security = server</command> is the
     same as <command moreinfo="none">security = user</command>.  It
     only affects how the server deals  with the authentication, it does

branches/samba-3.3.x/docs-xml/smbdotconf/security/serverschannel.xml

@@ -14 +14 @@
 
     <para>
-        Please note that with this set to <literal>no</literal> you will have to apply the WindowsXP
+        Please note that with this set to <literal>no</literal>, you will have to apply the WindowsXP
         <filename>WinXP_SignOrSeal.reg</filename> registry patch found in the docs/registry subdirectory of the Samba distribution tarball.
         </para>

branches/samba-3.3.x/docs-xml/smbdotconf/security/serversigning.xml

@@ -6 +6 @@
 <description>
 
-    <para>This controls whether the server offers or requires
-    the client it talks to to use SMB signing. Possible values 
+    <para>This controls whether the client is allowed or required to use SMB signing. Possible values 
     are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> 
     and <emphasis>disabled</emphasis>. 

branches/samba-3.3.x/docs-xml/smbdotconf/security/smbencrypt.xml

@@ -17 +17 @@
     </para>
 
-    <para>This controls whether the server offers or requires
-    the client it talks to to use SMB encryption. Possible values 
+    <para>This controls whether the remote client is allowed or required to use SMB encryption. Possible values 
     are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis> 
     and <emphasis>disabled</emphasis>. This may be set on a per-share

branches/samba-3.3.x/docs-xml/smbdotconf/security/updateencrypted.xml

@@ -10 +10 @@
         password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
         migrate from plaintext password authentication (users authenticate with plaintext password over the
-        wire, and are checked against a UNIX account atabase) to encrypted password authentication (the SMB
+        wire, and are checked against a UNIX account database) to encrypted password authentication (the SMB
         challenge/response authentication mechanism) without forcing all users to re-enter their passwords via
         smbpasswd at the time the change is made. This is a convenience option to allow the change over to encrypted
@@ -25 +25 @@
 
     <para>
-        Note that even when this parameter is set a user authenticating to <command moreinfo="none">smbd</command>
+        Note that even when this parameter is set, a user authenticating to <command moreinfo="none">smbd</command>
         must still enter a valid password in order to connect correctly, and to update their hashed (smbpasswd)
         passwords.