- Timestamp:
- May 26, 2009, 9:43:19 AM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.2.x/docs/htmldocs/manpages/smb.conf.5.html
r204 r226 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id25160 69"></a><h2>SYNOPSIS</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2516071"></a><h2>SYNOPSIS</h2><p> 2 2 The <code class="filename">smb.conf</code> file is a configuration file for the Samba suite. <code class="filename">smb.conf</code> contains runtime configuration information for the Samba programs. The 3 3 <code class="filename">smb.conf</code> file is designed to be configured and administered by the … … 27 27 which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved 28 28 in string values. Some items such as create masks are numeric. 29 </p></div><div class="refsect1" lang="en"><a name="id24792 26"></a><h2>SECTION DESCRIPTIONS</h2><p>29 </p></div><div class="refsect1" lang="en"><a name="id2479232"></a><h2>SECTION DESCRIPTIONS</h2><p> 30 30 Each section in the configuration file (except for the [global] section) describes a shared resource (known as 31 31 a “<span class="quote">share</span>”). The section name is the name of the shared resource and the parameters within the … … 70 70 <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> 71 71 </pre><p> 72 </p></div><div class="refsect1" lang="en"><a name="id24782 66"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2478272"></a><h3>The [global] section</h3><p>72 </p></div><div class="refsect1" lang="en"><a name="id2478271"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2478277"></a><h3>The [global] section</h3><p> 73 73 Parameters in this section apply to the server as a whole, or are defaults for sections that do not 74 74 specifically define certain items. See the notes under PARAMETERS for more information. … … 161 161 <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the 162 162 <code class="literal">printcap name</code> option for more details. 163 </p></div></div></div><div class="refsect1" lang="en"><a name="id2478 595"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete163 </p></div></div></div><div class="refsect1" lang="en"><a name="id2478601"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete 164 164 their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and 165 165 is controlled by a set of parameters in the [global] section of the smb.conf. … … 185 185 to the global 186 186 section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares 187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id252549 0"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2525493"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p> 188 188 Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>). Some parameters 189 189 are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal … … 197 197 find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred 198 198 synonym. 199 </p></div><div class="refsect1" lang="en"><a name="id25255 39"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>199 </p></div><div class="refsect1" lang="en"><a name="id2525542"></a><h2>VARIABLE SUBSTITUTIONS</h2><p> 200 200 Many of the strings that are settable in the config file can take substitutions. For example the option 201 201 “<span class="quote">path = /tmp/%u</span>” is interpreted as “<span class="quote">path = /tmp/john</span>” if the user connected with the … … 306 306 If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account 307 307 =</code> for the service, irrespective of the supplied password. 308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id252628 2"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2526284"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p> 309 309 Starting with Samba version 3.2.0, the capability to 310 310 store Samba configuration in the registry is available. … … 361 361 accessing the database file, circumventing the 362 362 server. 363 </p></div><div class="refsect1" lang="en"><a name="id252647 5"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526488"></a>363 </p></div><div class="refsect1" lang="en"><a name="id2526478"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526490"></a> 364 364 365 365 abort shutdown script (G) 366 </h3></div></div></div><a class="indexterm" name="id25264 89"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that366 </h3></div></div></div><a class="indexterm" name="id2526491"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 367 367 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 368 368 right, this command will be run as user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> … … 370 370 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> 371 371 </em></span> 372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252657 7"></a>372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526579"></a> 373 373 374 374 acl check permissions (S) 375 </h3></div></div></div><a class="indexterm" name="id25265 78"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"375 </h3></div></div></div><a class="indexterm" name="id2526580"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 376 376 from a Windows client. If a Windows client doesn't have permissions to delete a file then they 377 377 expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by … … 393 393 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code> 394 394 </em></span> 395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id247812 1"></a>395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478126"></a> 396 396 397 397 acl compatibility (S) 398 </h3></div></div></div><a class="indexterm" name="id247812 2"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should398 </h3></div></div></div><a class="indexterm" name="id2478127"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should 399 399 be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4, 400 400 <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>. … … 405 405 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code> 406 406 </em></span> 407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478 198"></a>407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478204"></a> 408 408 409 409 acl group control (S) 410 </h3></div></div></div><a class="indexterm" name="id2478 199"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>410 </h3></div></div></div><a class="indexterm" name="id2478205"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 411 411 In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions 412 412 and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the … … 435 435 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code> 436 436 </em></span> 437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25269 79"></a>437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526981"></a> 438 438 439 439 acl map full control (S) 440 </h3></div></div></div><a class="indexterm" name="id252698 0"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>440 </h3></div></div></div><a class="indexterm" name="id2526982"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 441 441 This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 442 442 allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX … … 446 446 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code> 447 447 </em></span> 448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252703 5"></a>448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527038"></a> 449 449 450 450 add group script (G) 451 </h3></div></div></div><a class="indexterm" name="id252703 6"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>451 </h3></div></div></div><a class="indexterm" name="id2527039"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 452 452 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 453 453 will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful … … 459 459 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code> 460 460 </em></span> 461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252711 6"></a>461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527119"></a> 462 462 463 463 add machine script (G) 464 </h3></div></div></div><a class="indexterm" name="id25271 17"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>464 </h3></div></div></div><a class="indexterm" name="id2527120"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 465 465 This is the full pathname to a script that will be run by 466 466 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is … … 473 473 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code> 474 474 </em></span> 475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252720 4"></a>475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527207"></a> 476 476 477 477 add port command (G) 478 </h3></div></div></div><a class="indexterm" name="id252720 5"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports478 </h3></div></div></div><a class="indexterm" name="id2527208"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports 479 479 remotely using the Windows "Add Standard TCP/IP Port Wizard". 480 480 This option defines an external program to be executed when … … 485 485 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code> 486 486 </em></span> 487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252729 4"></a>487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527296"></a> 488 488 489 489 addprinter command (G) 490 </h3></div></div></div><a class="indexterm" name="id252729 5"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing490 </h3></div></div></div><a class="indexterm" name="id2527297"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing 491 491 support for Windows NT/2000 clients in Samba 2.2, The MS Add 492 492 Printer Wizard (APW) icon is now also available in the … … 519 519 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code> 520 520 </em></span> 521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527 499"></a>521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527501"></a> 522 522 523 523 add share command (G) 524 </h3></div></div></div><a class="indexterm" name="id252750 0"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>524 </h3></div></div></div><a class="indexterm" name="id2527502"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 525 525 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 526 526 Manager. The <em class="parameter"><code>add share command</code></em> is used to define an external program … … 549 549 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 550 550 </em></span> 551 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252770 3"></a>551 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527706"></a> 552 552 553 553 add user script (G) 554 </h3></div></div></div><a class="indexterm" name="id252770 4"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>554 </h3></div></div></div><a class="indexterm" name="id2527707"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 555 555 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by 556 556 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 587 587 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code> 588 588 </em></span> 589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25279 47"></a>589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527950"></a> 590 590 591 591 add user to group script (G) 592 </h3></div></div></div><a class="indexterm" name="id25279 48"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>592 </h3></div></div></div><a class="indexterm" name="id2527951"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 593 593 Full path to the script that will be called when a user is added to a group using the Windows NT domain administration 594 594 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 602 602 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code> 603 603 </em></span> 604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252804 2"></a>604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528044"></a> 605 605 606 606 administrative share (S) 607 </h3></div></div></div><a class="indexterm" name="id252804 3"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for607 </h3></div></div></div><a class="indexterm" name="id2528045"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for 608 608 a share, then the share will be an administrative share. The Administrative 609 609 Shares are the default network shares created by all Windows NT-based … … 612 612 information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code> 613 613 </em></span> 614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25281 08"></a>614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528111"></a> 615 615 616 616 admin users (S) 617 </h3></div></div></div><a class="indexterm" name="id25281 09"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted617 </h3></div></div></div><a class="indexterm" name="id2528112"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted 618 618 administrative privileges on the share. This means that they 619 619 will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in … … 624 624 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code> 625 625 </em></span> 626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25281 88"></a>626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528190"></a> 627 627 628 628 afs share (S) 629 </h3></div></div></div><a class="indexterm" name="id25281 89"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled629 </h3></div></div></div><a class="indexterm" name="id2528192"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled 630 630 for this share. If enabled, it assumes that the directory exported via 631 631 the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The … … 634 634 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code> 635 635 </em></span> 636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25282 39"></a>636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528241"></a> 637 637 638 638 afs username map (G) 639 </h3></div></div></div><a class="indexterm" name="id252824 0"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might639 </h3></div></div></div><a class="indexterm" name="id2528242"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might 640 640 want to hand-craft the usernames you are creating tokens for. 641 641 For example this is necessary if you have users from several domain … … 647 647 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code> 648 648 </em></span> 649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252830 6"></a>649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528309"></a> 650 650 651 651 aio read size (S) 652 </h3></div></div></div><a class="indexterm" name="id25283 08"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this652 </h3></div></div></div><a class="indexterm" name="id2528310"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 653 653 integer parameter is set to non-zero value, 654 654 Samba will read from file asynchronously when size of request is bigger … … 661 661 request size</code> 662 662 </em></span> 663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252840 6"></a>663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528408"></a> 664 664 665 665 aio write size (S) 666 </h3></div></div></div><a class="indexterm" name="id25284 07"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this666 </h3></div></div></div><a class="indexterm" name="id2528410"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 667 667 integer parameter is set to non-zero value, 668 668 Samba will write to file asynchronously when size of request is bigger … … 675 675 request size</code> 676 676 </em></span> 677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252850 4"></a>677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528506"></a> 678 678 679 679 algorithmic rid base (G) 680 </h3></div></div></div><a class="indexterm" name="id252850 5"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its680 </h3></div></div></div><a class="indexterm" name="id2528507"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its 681 681 algorithmic mapping from uids/gid to the RIDs needed to construct 682 682 NT Security Identifiers. … … 693 693 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code> 694 694 </em></span> 695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252858 0"></a>695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528583"></a> 696 696 697 697 allocation roundup size (S) 698 </h3></div></div></div><a class="indexterm" name="id252858 1"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the698 </h3></div></div></div><a class="indexterm" name="id2528584"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the 699 699 allocation size reported to Windows clients. The default 700 700 size of 1Mb generally results in improved Windows client … … 708 708 # (to disable roundups)</code> 709 709 </em></span> 710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252865 1"></a>710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528654"></a> 711 711 712 712 allow trusted domains (G) 713 </h3></div></div></div><a class="indexterm" name="id252865 2"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>713 </h3></div></div></div><a class="indexterm" name="id2528655"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 714 714 This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY">security</a> option is set to 715 715 <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. … … 726 726 can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code> 727 727 </em></span> 728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25287 29"></a>728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528732"></a> 729 729 730 730 announce as (G) 731 </h3></div></div></div><a class="indexterm" name="id252873 0"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse731 </h3></div></div></div><a class="indexterm" name="id2528733"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 732 732 list. By default this is set to Windows NT. The valid options 733 733 are : "NT Server" (which can also be written as "NT"), … … 741 741 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code> 742 742 </em></span> 743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252880 4"></a>743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528807"></a> 744 744 745 745 announce version (G) 746 </h3></div></div></div><a class="indexterm" name="id252880 5"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers746 </h3></div></div></div><a class="indexterm" name="id2528808"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers 747 747 that nmbd will use when announcing itself as a server. The default 748 748 is 4.9. Do not change this parameter unless you have a specific … … 751 751 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code> 752 752 </em></span> 753 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252886 6"></a>753 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528869"></a> 754 754 755 755 auth methods (G) 756 </h3></div></div></div><a class="indexterm" name="id25288 67"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>756 </h3></div></div></div><a class="indexterm" name="id2528870"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p> 757 757 This option allows the administrator to chose what authentication methods <code class="literal">smbd</code> 758 758 will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY">security</a>. … … 775 775 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code> 776 776 </em></span> 777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252898 2"></a>777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528985"></a> 778 778 779 779 available (S) 780 </h3></div></div></div><a class="indexterm" name="id252898 4"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If780 </h3></div></div></div><a class="indexterm" name="id2528986"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If 781 781 <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span> 782 782 attempts to connect to the service will fail. Such failures are 783 783 logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code> 784 784 </em></span> 785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252903 4"></a>785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529037"></a> 786 786 787 787 bind interfaces only (G) 788 </h3></div></div></div><a class="indexterm" name="id252903 6"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin788 </h3></div></div></div><a class="indexterm" name="id2529038"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin 789 789 to limit what interfaces on a machine will serve SMB requests. It 790 790 affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p> … … 827 827 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code> 828 828 </em></span> 829 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252941 2"></a>829 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529415"></a> 830 830 831 831 blocking locks (S) 832 </h3></div></div></div><a class="indexterm" name="id252941 3"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior832 </h3></div></div></div><a class="indexterm" name="id2529416"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior 833 833 of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 834 834 to obtain a byte range lock on a region of an open file, and the … … 841 841 cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code> 842 842 </em></span> 843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252948 1"></a>843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529483"></a> 844 844 845 845 block size (S) 846 </h3></div></div></div><a class="indexterm" name="id252948 2"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free846 </h3></div></div></div><a class="indexterm" name="id2529484"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 847 847 sizes. By default, this reports a disk block size of 1024 bytes. 848 848 </p><p>Changing this parameter may have some effect on the … … 858 858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code> 859 859 </em></span> 860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252956 4"></a>860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529566"></a> 861 861 862 862 <a name="BROWSABLE"></a>browsable 863 </h3></div></div></div><a class="indexterm" name="id252956 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529595"></a>863 </h3></div></div></div><a class="indexterm" name="id2529567"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529597"></a> 864 864 865 865 browseable (S) 866 </h3></div></div></div><a class="indexterm" name="id252959 6"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in866 </h3></div></div></div><a class="indexterm" name="id2529598"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in 867 867 the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code> 868 868 </em></span> 869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252963 6"></a>869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529639"></a> 870 870 871 871 browse list (G) 872 </h3></div></div></div><a class="indexterm" name="id25296 38"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to872 </h3></div></div></div><a class="indexterm" name="id2529640"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 873 873 a client doing a <code class="literal">NetServerEnum</code> call. Normally 874 874 set to <code class="constant">yes</code>. You should never need to change 875 875 this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code> 876 876 </em></span> 877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529 697"></a>877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529700"></a> 878 878 879 879 <a name="CASESIGNAMES"></a>casesignames 880 </h3></div></div></div><a class="indexterm" name="id2529 698"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529728"></a>880 </h3></div></div></div><a class="indexterm" name="id2529701"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529731"></a> 881 881 882 882 case sensitive (S) 883 </h3></div></div></div><a class="indexterm" name="id252973 0"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>884 </em></span> 885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id252978 2"></a>883 </h3></div></div></div><a class="indexterm" name="id2529732"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 884 </em></span> 885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529785"></a> 886 886 887 887 change notify (S) 888 </h3></div></div></div><a class="indexterm" name="id252978 3"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply888 </h3></div></div></div><a class="indexterm" name="id2529786"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply 889 889 to a client's file change notify requests. 890 890 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code> 891 891 </em></span> 892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25298 29"></a>892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529831"></a> 893 893 894 894 change share command (G) 895 </h3></div></div></div><a class="indexterm" name="id252983 0"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>895 </h3></div></div></div><a class="indexterm" name="id2529832"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 896 896 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 897 897 Manager. The <em class="parameter"><code>change share command</code></em> is used to define an external … … 924 924 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 925 925 </em></span> 926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253002 5"></a>926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530027"></a> 927 927 928 928 check password script (G) 929 </h3></div></div></div><a class="indexterm" name="id253002 6"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password929 </h3></div></div></div><a class="indexterm" name="id2530028"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password 930 930 complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value 931 931 if the password is bad. … … 936 936 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">check password script = /usr/local/sbin/crackcheck</code> 937 937 </em></span> 938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253010 5"></a>938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530107"></a> 939 939 940 940 client lanman auth (G) 941 </h3></div></div></div><a class="indexterm" name="id253010 6"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client941 </h3></div></div></div><a class="indexterm" name="id2530108"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 942 942 tools will attempt to authenticate itself to servers using the 943 943 weaker LANMAN password hash. If disabled, only server which support NT … … 950 950 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code> 951 951 </em></span> 952 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253018 7"></a>952 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530189"></a> 953 953 954 954 client ldap sasl wrapping (G) 955 </h3></div></div></div><a class="indexterm" name="id25301 88"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>955 </h3></div></div></div><a class="indexterm" name="id2530190"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p> 956 956 The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING">client ldap sasl wrapping</a> defines whether 957 957 ldap traffic will be signed or signed and encrypted (sealed). … … 981 981 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code> 982 982 </em></span> 983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253031 6"></a>983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530319"></a> 984 984 985 985 client ntlmv2 auth (G) 986 </h3></div></div></div><a class="indexterm" name="id25303 17"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to986 </h3></div></div></div><a class="indexterm" name="id2530320"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 987 987 authenticate itself to servers using the NTLMv2 encrypted password 988 988 response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more … … 996 996 responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code> 997 997 </em></span> 998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253041 0"></a>998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530413"></a> 999 999 1000 1000 client plaintext auth (G) 1001 </h3></div></div></div><a class="indexterm" name="id253041 1"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext1001 </h3></div></div></div><a class="indexterm" name="id2530414"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext 1002 1002 password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code> 1003 1003 </em></span> 1004 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253045 3"></a>1004 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530456"></a> 1005 1005 1006 1006 client schannel (G) 1007 </h3></div></div></div><a class="indexterm" name="id253045 4"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>1007 </h3></div></div></div><a class="indexterm" name="id2530457"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 1008 1008 This controls whether the client offers or even demands the use of the netlogon schannel. 1009 1009 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = no</a> does not offer the schannel, … … 1015 1015 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code> 1016 1016 </em></span> 1017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253055 1"></a>1017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530554"></a> 1018 1018 1019 1019 client signing (G) 1020 </h3></div></div></div><a class="indexterm" name="id253055 2"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires1020 </h3></div></div></div><a class="indexterm" name="id2530555"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires 1021 1021 the server it talks to to use SMB signing. Possible values 1022 1022 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 1027 1027 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 1028 1028 </em></span> 1029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253061 2"></a>1029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530615"></a> 1030 1030 1031 1031 client use spnego (G) 1032 </h3></div></div></div><a class="indexterm" name="id253061 3"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try1032 </h3></div></div></div><a class="indexterm" name="id2530616"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 1033 1033 to use Simple and Protected NEGOciation (as specified by rfc2478) with 1034 1034 supporting servers (including WindowsXP, Windows2000 and Samba … … 1036 1036 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 1037 1037 </em></span> 1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25306 58"></a>1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530661"></a> 1039 1039 1040 1040 cluster addresses (G) 1041 </h3></div></div></div><a class="indexterm" name="id253066 0"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses1041 </h3></div></div></div><a class="indexterm" name="id2530662"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses 1042 1042 nmbd will register with a WINS server. These addresses are not 1043 1043 necessarily present on all nodes simultaneously, but they will … … 1048 1048 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code> 1049 1049 </em></span> 1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253072 0"></a>1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530723"></a> 1051 1051 1052 1052 clustering (G) 1053 </h3></div></div></div><a class="indexterm" name="id253072 2"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact1053 </h3></div></div></div><a class="indexterm" name="id2530724"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact 1054 1054 ctdb for accessing its tdb files and use ctdb as a backend 1055 1055 for its messaging backend. … … 1058 1058 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code> 1059 1059 </em></span> 1060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253077 4"></a>1060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530777"></a> 1061 1061 1062 1062 comment (S) 1063 </h3></div></div></div><a class="indexterm" name="id253077 5"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share1063 </h3></div></div></div><a class="indexterm" name="id2530778"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 1064 1064 when a client does a queries the server, either via the network 1065 1065 neighborhood or via <code class="literal">net view</code> to list what shares … … 1070 1070 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 1071 1071 </em></span> 1072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25308 57"></a>1072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530860"></a> 1073 1073 1074 1074 config backend (G) 1075 </h3></div></div></div><a class="indexterm" name="id25308 58"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>1075 </h3></div></div></div><a class="indexterm" name="id2530861"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1076 1076 This controls the backend for storing the configuration. 1077 1077 Possible values are <span class="emphasis"><em>file</em></span> (the default) … … 1091 1091 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code> 1092 1092 </em></span> 1093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25309 58"></a>1093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530960"></a> 1094 1094 1095 1095 config file (G) 1096 </h3></div></div></div><a class="indexterm" name="id25309 59"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file1096 </h3></div></div></div><a class="indexterm" name="id2530961"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file 1097 1097 to use, instead of the default (usually <code class="filename">smb.conf</code>). 1098 1098 There is a chicken and egg problem here as this option is set … … 1104 1104 clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code> 1105 1105 </em></span> 1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25310 27"></a>1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531030"></a> 1107 1107 1108 1108 copy (S) 1109 </h3></div></div></div><a class="indexterm" name="id25310 28"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service1109 </h3></div></div></div><a class="indexterm" name="id2531031"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service 1110 1110 entries. The specified service is simply duplicated under the 1111 1111 current service's name. Any parameters specified in the current … … 1117 1117 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code> 1118 1118 </em></span> 1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253109 4"></a>1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531097"></a> 1120 1120 1121 1121 <a name="CREATEMODE"></a>create mode 1122 </h3></div></div></div><a class="indexterm" name="id253109 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531126"></a>1122 </h3></div></div></div><a class="indexterm" name="id2531098"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531129"></a> 1123 1123 1124 1124 create mask (S) 1125 </h3></div></div></div><a class="indexterm" name="id25311 27"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>1125 </h3></div></div></div><a class="indexterm" name="id2531130"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 1126 1126 When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to 1127 1127 UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may … … 1144 1144 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 1145 1145 </em></span> 1146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253126 4"></a>1146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531266"></a> 1147 1147 1148 1148 csc policy (S) 1149 </h3></div></div></div><a class="indexterm" name="id253126 5"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>1149 </h3></div></div></div><a class="indexterm" name="id2531268"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 1150 1150 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 1151 1151 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 1159 1159 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code> 1160 1160 </em></span> 1161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25313 49"></a>1161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531352"></a> 1162 1162 1163 1163 ctdbd socket (G) 1164 </h3></div></div></div><a class="indexterm" name="id253135 0"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,1164 </h3></div></div></div><a class="indexterm" name="id2531353"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>, 1165 1165 you need to tell Samba where ctdbd listens on its unix domain 1166 1166 socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which … … 1170 1170 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code> 1171 1171 </em></span> 1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253141 5"></a>1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531418"></a> 1173 1173 1174 1174 cups options (S) 1175 </h3></div></div></div><a class="indexterm" name="id253141 6"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1175 </h3></div></div></div><a class="indexterm" name="id2531419"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1176 1176 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is 1177 1177 set to <code class="constant">cups</code>. Its value is a free form string of options … … 1195 1195 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code> 1196 1196 </em></span> 1197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253153 3"></a>1197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531535"></a> 1198 1198 1199 1199 cups server (G) 1200 </h3></div></div></div><a class="indexterm" name="id253153 4"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>1200 </h3></div></div></div><a class="indexterm" name="id2531536"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1201 1201 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">cups</code>. 1202 1202 </p><p> … … 1212 1212 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code> 1213 1213 </em></span> 1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253164 1"></a>1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531643"></a> 1215 1215 1216 1216 deadtime (G) 1217 </h3></div></div></div><a class="indexterm" name="id253164 2"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)1217 </h3></div></div></div><a class="indexterm" name="id2531644"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer) 1218 1218 represents the number of minutes of inactivity before a connection 1219 1219 is considered dead, and it is disconnected. The deadtime only takes … … 1227 1227 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code> 1228 1228 </em></span> 1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253172 2"></a>1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531725"></a> 1230 1230 1231 1231 debug class (G) 1232 </h3></div></div></div><a class="indexterm" name="id253172 3"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>1232 </h3></div></div></div><a class="indexterm" name="id2531726"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1233 1233 With this boolean parameter enabled, the debug class (DBGC_CLASS) 1234 1234 will be displayed in the debug header. … … 1238 1238 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code> 1239 1239 </em></span> 1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253178 1"></a>1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531784"></a> 1241 1241 1242 1242 debug hires timestamp (G) 1243 </h3></div></div></div><a class="indexterm" name="id253178 2"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1243 </h3></div></div></div><a class="indexterm" name="id2531785"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1244 1244 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 1245 1245 boolean parameter adds microsecond resolution to the timestamp message header when turned on. … … 1248 1248 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">no</code> 1249 1249 </em></span> 1250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253184 2"></a>1250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531845"></a> 1251 1251 1252 1252 debug pid (G) 1253 </h3></div></div></div><a class="indexterm" name="id253184 4"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>1253 </h3></div></div></div><a class="indexterm" name="id2531846"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1254 1254 When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 1255 1255 message. This boolean parameter is adds the process-id to the timestamp message headers in the … … 1259 1259 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code> 1260 1260 </em></span> 1261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253191 1"></a>1261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531914"></a> 1262 1262 1263 1263 debug prefix timestamp (G) 1264 </h3></div></div></div><a class="indexterm" name="id253191 2"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1264 </h3></div></div></div><a class="indexterm" name="id2531915"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1265 1265 With this option enabled, the timestamp message header is prefixed to the debug message without the 1266 1266 filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> … … 1270 1270 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 1271 1271 </em></span> 1272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253198 4"></a>1272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531987"></a> 1273 1273 1274 1274 <a name="TIMESTAMPLOGS"></a>timestamp logs 1275 </h3></div></div></div><a class="indexterm" name="id253198 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532016"></a>1275 </h3></div></div></div><a class="indexterm" name="id2531988"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532019"></a> 1276 1276 1277 1277 debug timestamp (G) 1278 </h3></div></div></div><a class="indexterm" name="id25320 17"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1278 </h3></div></div></div><a class="indexterm" name="id2532020"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1279 1279 Samba debug log messages are timestamped by default. If you are running at a high 1280 1280 <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a> these timestamps can be distracting. This … … 1282 1282 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 1283 1283 </em></span> 1284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253207 2"></a>1284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532075"></a> 1285 1285 1286 1286 debug uid (G) 1287 </h3></div></div></div><a class="indexterm" name="id253207 3"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>1287 </h3></div></div></div><a class="indexterm" name="id2532076"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1288 1288 Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the 1289 1289 current euid, egid, uid and gid to the timestamp message headers in the log file if turned on. … … 1292 1292 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 1293 1293 </em></span> 1294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253213 2"></a>1294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532134"></a> 1295 1295 1296 1296 default case (S) 1297 </h3></div></div></div><a class="indexterm" name="id253213 3"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.1297 </h3></div></div></div><a class="indexterm" name="id2532136"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. 1298 1298 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1299 1299 </em></span> 1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253219 6"></a>1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532199"></a> 1301 1301 1302 1302 default devmode (S) 1303 </h3></div></div></div><a class="indexterm" name="id2532 197"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services.1303 </h3></div></div></div><a class="indexterm" name="id2532200"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services. 1304 1304 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 1305 1305 server has a Device Mode which defines things such as paper size and … … 1324 1324 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 1325 1325 </em></span> 1326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253229 3"></a>1326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532296"></a> 1327 1327 1328 1328 <a name="DEFAULT"></a>default 1329 </h3></div></div></div><a class="indexterm" name="id253229 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532325"></a>1329 </h3></div></div></div><a class="indexterm" name="id2532297"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532328"></a> 1330 1330 1331 1331 default service (G) 1332 </h3></div></div></div><a class="indexterm" name="id253232 6"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service1332 </h3></div></div></div><a class="indexterm" name="id2532329"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 1333 1333 which will be connected to if the service actually requested cannot 1334 1334 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 1344 1344 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code> 1345 1345 </em></span> 1346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25324 39"></a>1346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532442"></a> 1347 1347 1348 1348 defer sharing violations (G) 1349 </h3></div></div></div><a class="indexterm" name="id253244 0"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1349 </h3></div></div></div><a class="indexterm" name="id2532443"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1350 1350 Windows allows specifying how a file will be shared with 1351 1351 other processes when it is opened. Sharing violations occur when … … 1360 1360 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code> 1361 1361 </em></span> 1362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532 498"></a>1362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532501"></a> 1363 1363 1364 1364 delete group script (G) 1365 </h3></div></div></div><a class="indexterm" name="id2532 499"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1365 </h3></div></div></div><a class="indexterm" name="id2532502"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1366 1366 be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1367 1367 It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. … … 1369 1369 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code> 1370 1370 </em></span> 1371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25325 59"></a>1371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532562"></a> 1372 1372 1373 1373 deleteprinter command (G) 1374 </h3></div></div></div><a class="indexterm" name="id253256 0"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer1374 </h3></div></div></div><a class="indexterm" name="id2532563"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer 1375 1375 support for Windows NT/2000 clients in Samba 2.2, it is now 1376 1376 possible to delete a printer at run time by issuing the … … 1390 1390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1391 1391 </em></span> 1392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253271 0"></a>1392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532713"></a> 1393 1393 1394 1394 delete readonly (S) 1395 </h3></div></div></div><a class="indexterm" name="id253271 2"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted.1395 </h3></div></div></div><a class="indexterm" name="id2532714"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1396 1396 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1397 1397 as rcs, where UNIX file ownership prevents changing file 1398 1398 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1399 1399 </em></span> 1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253276 0"></a>1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532762"></a> 1401 1401 1402 1402 delete share command (G) 1403 </h3></div></div></div><a class="indexterm" name="id253276 1"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1403 </h3></div></div></div><a class="indexterm" name="id2532764"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1404 1404 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 1405 1405 Manager. The <em class="parameter"><code>delete share command</code></em> is used to define an external … … 1425 1425 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1426 1426 </em></span> 1427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253293 1"></a>1427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532934"></a> 1428 1428 1429 1429 delete user from group script (G) 1430 </h3></div></div></div><a class="indexterm" name="id253293 2"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when1430 </h3></div></div></div><a class="indexterm" name="id2532935"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1431 1431 a user is removed from a group using the Windows NT domain administration 1432 1432 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. … … 1437 1437 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code> 1438 1438 </em></span> 1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253301 6"></a>1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533019"></a> 1440 1440 1441 1441 delete user script (G) 1442 </h3></div></div></div><a class="indexterm" name="id25330 17"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1442 </h3></div></div></div><a class="indexterm" name="id2533020"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1443 1443 be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1444 1444 with remote RPC (NT) tools. … … 1449 1449 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1450 1450 </em></span> 1451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533 099"></a>1451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533101"></a> 1452 1452 1453 1453 delete veto files (S) 1454 </h3></div></div></div><a class="indexterm" name="id253310 0"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to1454 </h3></div></div></div><a class="indexterm" name="id2533102"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to 1455 1455 delete a directory that contains one or more vetoed directories 1456 1456 (see the <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a> … … 1466 1466 is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code> 1467 1467 </em></span> 1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253319 6"></a>1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533199"></a> 1469 1469 1470 1470 dfree cache time (S) 1471 </h3></div></div></div><a class="indexterm" name="id2533 197"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>1471 </h3></div></div></div><a class="indexterm" name="id2533200"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 1472 1472 The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem 1473 1473 occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur … … 1482 1482 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code> 1483 1483 </em></span> 1484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25332 79"></a>1484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533281"></a> 1485 1485 1486 1486 dfree command (S) 1487 </h3></div></div></div><a class="indexterm" name="id253328 0"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1487 </h3></div></div></div><a class="indexterm" name="id2533282"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1488 1488 The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a 1489 1489 problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may … … 1523 1523 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code> 1524 1524 </em></span> 1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253341 1"></a>1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533414"></a> 1526 1526 1527 1527 <a name="DIRECTORYMODE"></a>directory mode 1528 </h3></div></div></div><a class="indexterm" name="id253341 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533443"></a>1528 </h3></div></div></div><a class="indexterm" name="id2533415"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533446"></a> 1529 1529 1530 1530 directory mask (S) 1531 </h3></div></div></div><a class="indexterm" name="id253344 4"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are1531 </h3></div></div></div><a class="indexterm" name="id2533447"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are 1532 1532 used when converting DOS modes to UNIX modes when creating UNIX 1533 1533 directories.</p><p>When a directory is created, the necessary permissions are … … 1547 1547 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1548 1548 </em></span> 1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253356 1"></a>1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533564"></a> 1550 1550 1551 1551 directory security mask (S) 1552 </h3></div></div></div><a class="indexterm" name="id253356 2"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits1552 </h3></div></div></div><a class="indexterm" name="id2533565"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1553 1553 will be set when a Windows NT client is manipulating the UNIX 1554 1554 permission on a directory using the native NT security dialog … … 1570 1570 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code> 1571 1571 </em></span> 1572 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253367 1"></a>1572 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533674"></a> 1573 1573 1574 1574 disable netbios (G) 1575 </h3></div></div></div><a class="indexterm" name="id253367 2"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support1575 </h3></div></div></div><a class="indexterm" name="id2533675"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support 1576 1576 in Samba. Netbios is the only available form of browsing in 1577 1577 all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to … … 1579 1579 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code> 1580 1580 </em></span> 1581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253372 1"></a>1581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533723"></a> 1582 1582 1583 1583 disable spoolss (G) 1584 </h3></div></div></div><a class="indexterm" name="id253372 2"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support1584 </h3></div></div></div><a class="indexterm" name="id2533724"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support 1585 1585 for the SPOOLSS set of MS-RPC's and will yield identical behavior 1586 1586 as Samba 2.0.x. Windows NT/2000 clients will downgrade to using … … 1594 1594 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code> 1595 1595 </em></span> 1596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253377 6"></a>1596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533779"></a> 1597 1597 1598 1598 display charset (G) 1599 </h3></div></div></div><a class="indexterm" name="id25337 77"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>1599 </h3></div></div></div><a class="indexterm" name="id2533780"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p> 1600 1600 Specifies the charset that samba will use to print messages to stdout and stderr. 1601 1601 The default value is "LOCALE", which means automatically set, depending on the … … 1606 1606 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1607 1607 </em></span> 1608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253385 2"></a>1608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533855"></a> 1609 1609 1610 1610 dmapi support (S) 1611 </h3></div></div></div><a class="indexterm" name="id253385 3"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to1611 </h3></div></div></div><a class="indexterm" name="id2533856"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1612 1612 determine whether a file is offline or not. This would typically 1613 1613 be used in conjunction with a hierarchical storage system that … … 1624 1624 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1625 1625 </em></span> 1626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253391 5"></a>1626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533918"></a> 1627 1627 1628 1628 dns proxy (G) 1629 </h3></div></div></div><a class="indexterm" name="id253391 6"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and1629 </h3></div></div></div><a class="indexterm" name="id2533919"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1630 1630 finding that a NetBIOS name has not been registered, should treat the 1631 1631 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1636 1636 action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code> 1637 1637 </em></span> 1638 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253398 4"></a>1638 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533986"></a> 1639 1639 1640 1640 domain logons (G) 1641 </h3></div></div></div><a class="indexterm" name="id253398 5"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1641 </h3></div></div></div><a class="indexterm" name="id2533988"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1642 1642 If set to <code class="constant">yes</code>, the Samba server will 1643 1643 provide the netlogon service for Windows 9X network logons for the … … 1649 1649 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code> 1650 1650 </em></span> 1651 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253404 5"></a>1651 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534048"></a> 1652 1652 1653 1653 domain master (G) 1654 </h3></div></div></div><a class="indexterm" name="id253404 6"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>1654 </h3></div></div></div><a class="indexterm" name="id2534049"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1655 1655 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1656 1656 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a … … 1678 1678 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1679 1679 </em></span> 1680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253427 6"></a>1680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534278"></a> 1681 1681 1682 1682 dont descend (S) 1683 </h3></div></div></div><a class="indexterm" name="id253427 7"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems1683 </h3></div></div></div><a class="indexterm" name="id2534279"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1684 1684 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1685 1685 of interest to clients or are infinitely deep (recursive). This … … 1692 1692 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1693 1693 </em></span> 1694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253436 1"></a>1694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534363"></a> 1695 1695 1696 1696 dos charset (G) 1697 </h3></div></div></div><a class="indexterm" name="id253436 2"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has1697 </h3></div></div></div><a class="indexterm" name="id2534364"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1698 1698 the same charset as they do. This option specifies which 1699 1699 charset Samba should talk to DOS clients. 1700 1700 </p><p>The default depends on which charsets you have installed. 1701 1701 Samba tries to use charset 850 but falls back to ASCII in 1702 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253440 5"></a>1702 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534407"></a> 1703 1703 1704 1704 dos filemode (S) 1705 </h3></div></div></div><a class="indexterm" name="id253440 6"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide1705 </h3></div></div></div><a class="indexterm" name="id2534408"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide 1706 1706 UNIX-like behavior where only the owner of a file/directory is 1707 1707 able to change the permissions on it. However, this behavior … … 1714 1714 file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1715 1715 </em></span> 1716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253445 5"></a>1716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534458"></a> 1717 1717 1718 1718 dos filetime resolution (S) 1719 </h3></div></div></div><a class="indexterm" name="id253445 6"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest1719 </h3></div></div></div><a class="indexterm" name="id2534459"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1720 1720 granularity on time resolution is two seconds. Setting this parameter 1721 1721 for a share causes Samba to round the reported time down to the … … 1732 1732 happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code> 1733 1733 </em></span> 1734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253452 3"></a>1734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534526"></a> 1735 1735 1736 1736 dos filetimes (S) 1737 </h3></div></div></div><a class="indexterm" name="id253452 4"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a1737 </h3></div></div></div><a class="indexterm" name="id2534527"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a 1738 1738 file they can change the timestamp on it. Under POSIX semantics, 1739 1739 only the owner of the file or root may change the timestamp. By … … 1749 1749 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1750 1750 </em></span> 1751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253459 4"></a>1751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534597"></a> 1752 1752 1753 1753 ea support (S) 1754 </h3></div></div></div><a class="indexterm" name="id253459 5"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended1754 </h3></div></div></div><a class="indexterm" name="id2534598"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1755 1755 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1756 1756 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1759 1759 extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code> 1760 1760 </em></span> 1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253465 1"></a>1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534654"></a> 1762 1762 1763 1763 enable asu support (G) 1764 </h3></div></div></div><a class="indexterm" name="id253465 2"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product1764 </h3></div></div></div><a class="indexterm" name="id2534655"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1765 1765 require some special accomodations such as creating a builting [ADMIN$] 1766 1766 share that only supports IPC connections. The has been the default … … 1770 1770 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1771 1771 </em></span> 1772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253470 1"></a>1772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534703"></a> 1773 1773 1774 1774 enable privileges (G) 1775 </h3></div></div></div><a class="indexterm" name="id253470 2"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>1775 </h3></div></div></div><a class="indexterm" name="id2534704"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1776 1776 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1777 1777 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1786 1786 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code> 1787 1787 </em></span> 1788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253476 6"></a>1788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534769"></a> 1789 1789 1790 1790 encrypt passwords (G) 1791 </h3></div></div></div><a class="indexterm" name="id25347 67"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords1791 </h3></div></div></div><a class="indexterm" name="id2534770"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords 1792 1792 will be negotiated with the client. Note that Windows NT 4.0 SP3 and 1793 1793 above and also Windows 98 will by default expect encrypted passwords … … 1812 1812 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1813 1813 </em></span> 1814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25348 79"></a>1814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534881"></a> 1815 1815 1816 1816 enhanced browsing (G) 1817 </h3></div></div></div><a class="indexterm" name="id253488 0"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to1817 </h3></div></div></div><a class="indexterm" name="id2534882"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1818 1818 cross-subnet browse propagation that have been added in Samba 1819 1819 but which are not standard in Microsoft implementations. … … 1828 1828 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> 1829 1829 </em></span> 1830 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253495 0"></a>1830 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534952"></a> 1831 1831 1832 1832 enumports command (G) 1833 </h3></div></div></div><a class="indexterm" name="id253495 1"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign1833 </h3></div></div></div><a class="indexterm" name="id2534953"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign 1834 1834 to UNIX hosts. Under Windows NT/2000 print servers, a port 1835 1835 is associated with a port monitor and generally takes the form of … … 1848 1848 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 1849 1849 </em></span> 1850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25350 39"></a>1850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535042"></a> 1851 1851 1852 1852 eventlog list (G) 1853 </h3></div></div></div><a class="indexterm" name="id253504 0"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will1853 </h3></div></div></div><a class="indexterm" name="id2535043"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 1854 1854 report to the Microsoft EventViewer utility. The listed 1855 1855 eventlogs will be associated with tdb file on disk in the … … 1864 1864 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 1865 1865 </em></span> 1866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25351 18"></a>1866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535121"></a> 1867 1867 1868 1868 fake directory create times (S) 1869 </h3></div></div></div><a class="indexterm" name="id253512 0"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create1869 </h3></div></div></div><a class="indexterm" name="id2535122"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create 1870 1870 time for all files and directories. This is not the same as the 1871 1871 ctime - status change time - that Unix keeps, so Samba by default … … 1889 1889 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 1890 1890 </em></span> 1891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535 198"></a>1891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535201"></a> 1892 1892 1893 1893 fake oplocks (S) 1894 </h3></div></div></div><a class="indexterm" name="id2535 199"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission1894 </h3></div></div></div><a class="indexterm" name="id2535202"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 1895 1895 from a server to locally cache file operations. If a server grants 1896 1896 an oplock (opportunistic lock) then the client is free to assume … … 1908 1908 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 1909 1909 </em></span> 1910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253529 0"></a>1910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535293"></a> 1911 1911 1912 1912 follow symlinks (S) 1913 </h3></div></div></div><a class="indexterm" name="id253529 1"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>1913 </h3></div></div></div><a class="indexterm" name="id2535294"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1914 1914 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1915 1915 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being … … 1921 1921 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 1922 1922 </em></span> 1923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253536 5"></a>1923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535368"></a> 1924 1924 1925 1925 force create mode (S) 1926 </h3></div></div></div><a class="indexterm" name="id253536 6"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1926 </h3></div></div></div><a class="indexterm" name="id2535369"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1927 1927 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1928 1928 file created by Samba. This is done by bitwise 'OR'ing these bits onto … … 1936 1936 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code> 1937 1937 </em></span> 1938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253544 6"></a>1938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535448"></a> 1939 1939 1940 1940 force directory mode (S) 1941 </h3></div></div></div><a class="indexterm" name="id253544 7"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1941 </h3></div></div></div><a class="indexterm" name="id2535449"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1942 1942 permissions that will <span class="emphasis"><em>always</em></span> be set on a directory 1943 1943 created by Samba. This is done by bitwise 'OR'ing these bits onto the … … 1952 1952 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 1953 1953 </em></span> 1954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25355 27"></a>1954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535530"></a> 1955 1955 1956 1956 force directory security mode (S) 1957 </h3></div></div></div><a class="indexterm" name="id25355 28"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>1957 </h3></div></div></div><a class="indexterm" name="id2535531"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1958 1958 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 1959 1959 the UNIX permission on a directory using the native NT security dialog box. … … 1976 1976 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code> 1977 1977 </em></span> 1978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253563 1"></a>1978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535634"></a> 1979 1979 1980 1980 <a name="GROUP"></a>group 1981 </h3></div></div></div><a class="indexterm" name="id253563 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535663"></a>1981 </h3></div></div></div><a class="indexterm" name="id2535635"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535666"></a> 1982 1982 1983 1983 force group (S) 1984 </h3></div></div></div><a class="indexterm" name="id253566 4"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be1984 </h3></div></div></div><a class="indexterm" name="id2535667"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be 1985 1985 assigned as the default primary group for all users connecting 1986 1986 to this service. This is useful for sharing files by ensuring … … 2006 2006 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code> 2007 2007 </em></span> 2008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25357 78"></a>2008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535781"></a> 2009 2009 2010 2010 force printername (S) 2011 </h3></div></div></div><a class="indexterm" name="id25357 79"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),2011 </h3></div></div></div><a class="indexterm" name="id2535782"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later), 2012 2012 each printer in <code class="filename">smb.conf</code> has two 2013 2013 associated names which can be used by the client. The first … … 2032 2032 folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code> 2033 2033 </em></span> 2034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253587 0"></a>2034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535872"></a> 2035 2035 2036 2036 force security mode (S) 2037 </h3></div></div></div><a class="indexterm" name="id253587 1"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2037 </h3></div></div></div><a class="indexterm" name="id2535874"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2038 2038 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2039 2039 the UNIX permission on a file using the native NT security dialog box. … … 2055 2055 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code> 2056 2056 </em></span> 2057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253597 0"></a>2057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535974"></a> 2058 2058 2059 2059 force unknown acl user (S) 2060 </h3></div></div></div><a class="indexterm" name="id253597 2"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>2060 </h3></div></div></div><a class="indexterm" name="id2535975"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2061 2061 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 2062 2062 representation of a user or group id) as the owner or group owner of the file will be silently … … 2072 2072 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code> 2073 2073 </em></span> 2074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253603 3"></a>2074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536036"></a> 2075 2075 2076 2076 force user (S) 2077 </h3></div></div></div><a class="indexterm" name="id253603 4"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be2077 </h3></div></div></div><a class="indexterm" name="id2536037"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be 2078 2078 assigned as the default user for all users connecting to this service. 2079 2079 This is useful for sharing files. You should also use it carefully … … 2089 2089 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code> 2090 2090 </em></span> 2091 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25361 09"></a>2091 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536112"></a> 2092 2092 2093 2093 fstype (S) 2094 </h3></div></div></div><a class="indexterm" name="id253611 0"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>2094 </h3></div></div></div><a class="indexterm" name="id2536113"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2095 2095 This parameter allows the administrator to configure the string that specifies the type of filesystem a share 2096 2096 is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 2102 2102 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code> 2103 2103 </em></span> 2104 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253619 0"></a>2104 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536194"></a> 2105 2105 2106 2106 get quota command (G) 2107 </h3></div></div></div><a class="indexterm" name="id253619 1"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used2107 </h3></div></div></div><a class="indexterm" name="id2536195"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used 2108 2108 whenever there is no operating system API available from the OS that 2109 2109 samba can use.</p><p>This option is only available you have compiled Samba with the … … 2118 2118 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code> 2119 2119 </em></span> 2120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25363 78"></a>2120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536380"></a> 2121 2121 2122 2122 getwd cache (G) 2123 </h3></div></div></div><a class="indexterm" name="id25363 79"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a2123 </h3></div></div></div><a class="indexterm" name="id2536381"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a 2124 2124 caching algorithm will be used to reduce the time taken for getwd() 2125 2125 calls. This can have a significant impact on performance, especially 2126 2126 when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 2127 2127 </em></span> 2128 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25364 38"></a>2128 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536440"></a> 2129 2129 2130 2130 guest account (G) 2131 </h3></div></div></div><a class="indexterm" name="id25364 39"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access2131 </h3></div></div></div><a class="indexterm" name="id2536441"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 2132 2132 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> (see below). Whatever privileges this 2133 2133 user has will be available to any client connecting to the guest service. … … 2147 2147 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code> 2148 2148 </em></span> 2149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253654 6"></a>2149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536548"></a> 2150 2150 2151 2151 <a name="PUBLIC"></a>public 2152 </h3></div></div></div><a class="indexterm" name="id253654 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536577"></a>2152 </h3></div></div></div><a class="indexterm" name="id2536549"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536579"></a> 2153 2153 2154 2154 guest ok (S) 2155 </h3></div></div></div><a class="indexterm" name="id25365 78"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2155 </h3></div></div></div><a class="indexterm" name="id2536580"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2156 2156 a service, then no password is required to connect to the service. 2157 2157 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p><p>This paramater nullifies the benifits of setting … … 2160 2160 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 2161 2161 </em></span> 2162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253666 5"></a>2162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536668"></a> 2163 2163 2164 2164 <a name="ONLYGUEST"></a>only guest 2165 </h3></div></div></div><a class="indexterm" name="id253666 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536697"></a>2165 </h3></div></div></div><a class="indexterm" name="id2536669"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536700"></a> 2166 2166 2167 2167 guest only (S) 2168 </h3></div></div></div><a class="indexterm" name="id2536 698"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2168 </h3></div></div></div><a class="indexterm" name="id2536701"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2169 2169 a service, then only guest connections to the service are permitted. 2170 2170 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option. 2171 2171 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 2172 2172 </em></span> 2173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253677 0"></a>2173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536772"></a> 2174 2174 2175 2175 hide dot files (S) 2176 </h3></div></div></div><a class="indexterm" name="id253677 1"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether2176 </h3></div></div></div><a class="indexterm" name="id2536773"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 2177 2177 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 2178 2178 </em></span> 2179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253681 2"></a>2179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536815"></a> 2180 2180 2181 2181 hide files (S) 2182 </h3></div></div></div><a class="indexterm" name="id253681 3"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not2182 </h3></div></div></div><a class="indexterm" name="id2536816"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 2183 2183 visible but are accessible. The DOS 'hidden' attribute is applied 2184 2184 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 2202 2202 # no file are hidden</code> 2203 2203 </em></span> 2204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253690 1"></a>2204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536903"></a> 2205 2205 2206 2206 hide special files (S) 2207 </h3></div></div></div><a class="indexterm" name="id253690 2"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2207 </h3></div></div></div><a class="indexterm" name="id2536904"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2208 2208 This parameter prevents clients from seeing special files such as sockets, devices and 2209 2209 fifo's in directory listings. 2210 2210 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 2211 2211 </em></span> 2212 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253694 3"></a>2212 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536946"></a> 2213 2213 2214 2214 hide unreadable (S) 2215 </h3></div></div></div><a class="indexterm" name="id253694 4"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the2215 </h3></div></div></div><a class="indexterm" name="id2536947"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the 2216 2216 existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code> 2217 2217 </em></span> 2218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253698 6"></a>2218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536989"></a> 2219 2219 2220 2220 hide unwriteable files (S) 2221 </h3></div></div></div><a class="indexterm" name="id25369 87"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2221 </h3></div></div></div><a class="indexterm" name="id2536990"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2222 2222 This parameter prevents clients from seeing the existance of files that cannot be written to. 2223 2223 Defaults to off. Note that unwriteable directories are shown as usual. 2224 2224 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code> 2225 2225 </em></span> 2226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253703 0"></a>2226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537033"></a> 2227 2227 2228 2228 homedir map (G) 2229 </h3></div></div></div><a class="indexterm" name="id253703 1"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>2229 </h3></div></div></div><a class="indexterm" name="id2537034"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2230 2230 If <a class="link" href="smb.conf.5.html#NISHOMEDIR">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 2231 2231 then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. … … 2242 2242 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 2243 2243 </em></span> 2244 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253714 3"></a>2244 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537145"></a> 2245 2245 2246 2246 host msdfs (G) 2247 </h3></div></div></div><a class="indexterm" name="id253714 4"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>2247 </h3></div></div></div><a class="indexterm" name="id2537146"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2248 2248 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 2249 2249 Dfs trees hosted on the server. … … 2253 2253 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 2254 2254 </em></span> 2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253720 7"></a>2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537209"></a> 2256 2256 2257 2257 hostname lookups (G) 2258 </h3></div></div></div><a class="indexterm" name="id25372 08"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)2258 </h3></div></div></div><a class="indexterm" name="id2537210"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 2259 2259 hostname lookups or use the ip addresses instead. An example place 2260 2260 where hostname lookups are currently used is when checking … … 2264 2264 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code> 2265 2265 </em></span> 2266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253728 0"></a>2266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537283"></a> 2267 2267 2268 2268 <a name="ALLOWHOSTS"></a>allow hosts 2269 </h3></div></div></div><a class="indexterm" name="id253728 1"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537312"></a>2269 </h3></div></div></div><a class="indexterm" name="id2537284"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537314"></a> 2270 2270 2271 2271 hosts allow (S) 2272 </h3></div></div></div><a class="indexterm" name="id253731 3"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited2272 </h3></div></div></div><a class="indexterm" name="id2537316"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 2273 2273 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 2274 2274 apply to all services, regardless of whether the individual … … 2290 2290 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 2291 2291 </em></span> 2292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253751 4"></a>2292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537516"></a> 2293 2293 2294 2294 <a name="DENYHOSTS"></a>deny hosts 2295 </h3></div></div></div><a class="indexterm" name="id253751 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537545"></a>2295 </h3></div></div></div><a class="indexterm" name="id2537517"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537548"></a> 2296 2296 2297 2297 hosts deny (S) 2298 </h3></div></div></div><a class="indexterm" name="id253754 6"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>2298 </h3></div></div></div><a class="indexterm" name="id2537549"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 2299 2299 - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to 2300 2300 services unless the specific services have their own lists to override … … 2310 2310 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code> 2311 2311 </em></span> 2312 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25376 47"></a>2312 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537650"></a> 2313 2313 2314 2314 idmap alloc backend (G) 2315 </h3></div></div></div><a class="indexterm" name="id25376 48"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2315 </h3></div></div></div><a class="indexterm" name="id2537651"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2316 2316 The idmap alloc backend provides a plugin interface for Winbind to use 2317 2317 when allocating Unix uids/gids for Windows SIDs. This option is … … 2325 2325 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 2326 2326 </em></span> 2327 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253774 5"></a>2327 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537747"></a> 2328 2328 2329 2329 idmap alloc config (G) 2330 </h3></div></div></div><a class="indexterm" name="id253774 6"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2330 </h3></div></div></div><a class="indexterm" name="id2537748"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2331 2331 The idmap alloc config prefix provides a means of managing settings 2332 2332 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc backend</a> 2333 2333 parameter. Refer to the man page for each idmap plugin regarding 2334 2334 specific configuration details. 2335 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25377 89"></a>2335 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537792"></a> 2336 2336 2337 2337 idmap backend (G) 2338 </h3></div></div></div><a class="indexterm" name="id253779 0"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2338 </h3></div></div></div><a class="indexterm" name="id2537793"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2339 2339 The idmap backend provides a plugin interface for Winbind to use 2340 2340 varying backends to store SID/uid/gid mapping tables. This … … 2349 2349 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code> 2350 2350 </em></span> 2351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253788 4"></a>2351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537886"></a> 2352 2352 2353 2353 idmap cache time (G) 2354 </h3></div></div></div><a class="indexterm" name="id253788 5"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2354 </h3></div></div></div><a class="indexterm" name="id2537888"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2355 2355 idmap interface will cache positive SID/uid/gid query results. 2356 2356 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">900</code> 2357 2357 </em></span> 2358 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25379 27"></a>2358 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537930"></a> 2359 2359 2360 2360 idmap config (G) 2361 </h3></div></div></div><a class="indexterm" name="id25379 28"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2361 </h3></div></div></div><a class="indexterm" name="id2537931"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2362 2362 The idmap config prefix provides a means of managing each domain 2363 2363 defined by the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> option using Samba's … … 2392 2392 idmap config TRUSTEDDOMAINS:default = yes 2393 2393 idmap config TRUSTEDDOMAINS:range = 1000 - 9999 2394 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253806 3"></a>2394 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538066"></a> 2395 2395 2396 2396 idmap domains (G) 2397 </h3></div></div></div><a class="indexterm" name="id253806 4"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>2397 </h3></div></div></div><a class="indexterm" name="id2538067"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2398 2398 The idmap domains option defines a list of Windows domains which will each 2399 2399 have a separately configured backend for managing Winbind's SID/uid/gid … … 2408 2408 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap domains</code></em> = <code class="literal">default AD CORP</code> 2409 2409 </em></span> 2410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25381 48"></a>2410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538151"></a> 2411 2411 2412 2412 <a name="WINBINDGID"></a>winbind gid 2413 </h3></div></div></div><a class="indexterm" name="id25381 49"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538179"></a>2413 </h3></div></div></div><a class="indexterm" name="id2538152"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538182"></a> 2414 2414 2415 2415 idmap gid (G) 2416 </h3></div></div></div><a class="indexterm" name="id253818 0"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids2416 </h3></div></div></div><a class="indexterm" name="id2538183"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 2417 2417 that are allocated for the purpose of mapping UNX groups to NT group 2418 2418 SIDs. This range of group ids should have no … … 2423 2423 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code> 2424 2424 </em></span> 2425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25382 78"></a>2425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538280"></a> 2426 2426 2427 2427 idmap negative cache time (G) 2428 </h3></div></div></div><a class="indexterm" name="id25382 79"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2428 </h3></div></div></div><a class="indexterm" name="id2538281"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2429 2429 idmap interface will cache negative SID/uid/gid query results. 2430 2430 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code> 2431 2431 </em></span> 2432 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253832 1"></a>2432 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538324"></a> 2433 2433 2434 2434 <a name="WINBINDUID"></a>winbind uid 2435 </h3></div></div></div><a class="indexterm" name="id253832 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538353"></a>2435 </h3></div></div></div><a class="indexterm" name="id2538325"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538355"></a> 2436 2436 2437 2437 idmap uid (G) 2438 </h3></div></div></div><a class="indexterm" name="id253835 4"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>2438 </h3></div></div></div><a class="indexterm" name="id2538356"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 2439 2439 The idmap uid parameter specifies the range of user ids that are 2440 2440 allocated for use in mapping UNIX users to NT user SIDs. This … … 2445 2445 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 2446 2446 </em></span> 2447 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253845 0"></a>2447 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538453"></a> 2448 2448 2449 2449 include (G) 2450 </h3></div></div></div><a class="indexterm" name="id253845 1"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>2450 </h3></div></div></div><a class="indexterm" name="id2538454"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2451 2451 This allows you to include one config file inside another. The file is included literally, as though typed 2452 2452 in place. … … 2466 2466 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 2467 2467 </em></span> 2468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253855 1"></a>2468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538554"></a> 2469 2469 2470 2470 inherit acls (S) 2471 </h3></div></div></div><a class="indexterm" name="id253855 2"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls2471 </h3></div></div></div><a class="indexterm" name="id2538555"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 2472 2472 exist on parent directories, they are always honored when creating a 2473 2473 new file or subdirectory in these parent directories. The default … … 2477 2477 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 2478 2478 </em></span> 2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538 598"></a>2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538601"></a> 2480 2480 2481 2481 inherit owner (S) 2482 </h3></div></div></div><a class="indexterm" name="id2538 599"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories2482 </h3></div></div></div><a class="indexterm" name="id2538602"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 2483 2483 is normally governed by effective uid of the connected user. 2484 2484 This option allows the Samba administrator to specify that … … 2489 2489 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 2490 2490 </em></span> 2491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253865 1"></a>2491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538654"></a> 2492 2492 2493 2493 inherit permissions (S) 2494 </h3></div></div></div><a class="indexterm" name="id253865 2"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>2494 </h3></div></div></div><a class="indexterm" name="id2538655"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2495 2495 The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>, 2496 2496 <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> but the boolean inherit permissions parameter overrides this. … … 2504 2504 share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code> 2505 2505 </em></span> 2506 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538 799"></a>2506 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538801"></a> 2507 2507 2508 2508 interfaces (G) 2509 </h3></div></div></div><a class="indexterm" name="id253880 0"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default2509 </h3></div></div></div><a class="indexterm" name="id2538802"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default 2510 2510 network interfaces list that Samba will use for browsing, name 2511 2511 registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query … … 2531 2531 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code> 2532 2532 </em></span> 2533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253891 5"></a>2533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538918"></a> 2534 2534 2535 2535 invalid users (S) 2536 </h3></div></div></div><a class="indexterm" name="id253891 6"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed2536 </h3></div></div></div><a class="indexterm" name="id2538919"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed 2537 2537 to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span> 2538 2538 check to absolutely ensure an improper setting does not breach … … 2554 2554 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 2555 2555 </em></span> 2556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25390 29"></a>2556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539031"></a> 2557 2557 2558 2558 iprint server (G) 2559 </h3></div></div></div><a class="indexterm" name="id253903 0"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>2559 </h3></div></div></div><a class="indexterm" name="id2539032"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2560 2560 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">iprint</code>. 2561 2561 </p><p> … … 2566 2566 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code> 2567 2567 </em></span> 2568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253911 5"></a>2568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539118"></a> 2569 2569 2570 2570 keepalive (G) 2571 </h3></div></div></div><a class="indexterm" name="id253911 6"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents2571 </h3></div></div></div><a class="indexterm" name="id2539119"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents 2572 2572 the number of seconds between <em class="parameter"><code>keepalive</code></em> 2573 2573 packets. If this parameter is zero, no keepalive packets will be … … 2579 2579 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 2580 2580 </em></span> 2581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253920 2"></a>2581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539205"></a> 2582 2582 2583 2583 kernel change notify (S) 2584 </h3></div></div></div><a class="indexterm" name="id253920 3"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the2584 </h3></div></div></div><a class="indexterm" name="id2539206"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 2585 2585 kernel for change notifications in directories so that 2586 2586 SMB clients can refresh whenever the data on the server changes. … … 2589 2589 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 2590 2590 </em></span> 2591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253925 2"></a>2591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539254"></a> 2592 2592 2593 2593 kernel oplocks (G) 2594 </h3></div></div></div><a class="indexterm" name="id253925 3"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a>2594 </h3></div></div></div><a class="indexterm" name="id2539256"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 2595 2595 (currently only IRIX and the Linux 2.4 kernel), this parameter 2596 2596 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks … … 2602 2602 You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code> 2603 2603 </em></span> 2604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25393 39"></a>2604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539342"></a> 2605 2605 2606 2606 lanman auth (G) 2607 </h3></div></div></div><a class="indexterm" name="id253934 0"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to2607 </h3></div></div></div><a class="indexterm" name="id2539343"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 2608 2608 authenticate users or permit password changes 2609 2609 using the LANMAN password hash. If disabled, only clients which support NT … … 2622 2622 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code> 2623 2623 </em></span> 2624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253943 2"></a>2624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539435"></a> 2625 2625 2626 2626 large readwrite (G) 2627 </h3></div></div></div><a class="indexterm" name="id253943 3"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not2627 </h3></div></div></div><a class="indexterm" name="id2539436"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2628 2628 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2629 2629 streaming read and write varient SMB requests introduced with … … 2634 2634 tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code> 2635 2635 </em></span> 2636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25394 88"></a>2636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539491"></a> 2637 2637 2638 2638 ldap admin dn (G) 2639 </h3></div></div></div><a class="indexterm" name="id25394 89"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>2639 </h3></div></div></div><a class="indexterm" name="id2539492"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2640 2640 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> defines the Distinguished Name (DN) name used by Samba to contact 2641 2641 the ldap server when retreiving user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> is used … … 2645 2645 </p><p> 2646 2646 The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>. 2647 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539 597"></a>2647 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539600"></a> 2648 2648 2649 2649 ldap connection timeout (G) 2650 </h3></div></div></div><a class="indexterm" name="id2539 598"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2650 </h3></div></div></div><a class="indexterm" name="id2539601"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2651 2651 This parameter tells the LDAP library calls which timeout in seconds 2652 2652 they should honor during initial connection establishments to LDAP servers. … … 2660 2660 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code> 2661 2661 </em></span> 2662 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253966 2"></a>2662 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539665"></a> 2663 2663 2664 2664 ldap debug level (G) 2665 </h3></div></div></div><a class="indexterm" name="id253966 3"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>2665 </h3></div></div></div><a class="indexterm" name="id2539666"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2666 2666 This parameter controls the debug level of the LDAP library 2667 2667 calls. In the case of OpenLDAP, it is the same … … 2680 2680 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code> 2681 2681 </em></span> 2682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253975 0"></a>2682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539752"></a> 2683 2683 2684 2684 ldap debug threshold (G) 2685 </h3></div></div></div><a class="indexterm" name="id253975 1"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>2685 </h3></div></div></div><a class="indexterm" name="id2539753"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2686 2686 This parameter controls the Samba debug level at which 2687 2687 the ldap library debug output is … … 2692 2692 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code> 2693 2693 </em></span> 2694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253981 7"></a>2694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539819"></a> 2695 2695 2696 2696 ldap delete dn (G) 2697 </h3></div></div></div><a class="indexterm" name="id25398 18"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete2697 </h3></div></div></div><a class="indexterm" name="id2539820"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete 2698 2698 operation in the ldapsam deletes the complete entry or only the attributes 2699 2699 specific to Samba. 2700 2700 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code> 2701 2701 </em></span> 2702 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253986 0"></a>2702 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539863"></a> 2703 2703 2704 2704 ldap group suffix (G) 2705 </h3></div></div></div><a class="indexterm" name="id253986 1"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is2705 </h3></div></div></div><a class="indexterm" name="id2539864"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is 2706 2706 used for groups when these are added to the LDAP directory. 2707 2707 If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2710 2710 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2711 2711 </em></span> 2712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253994 4"></a>2712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539946"></a> 2713 2713 2714 2714 ldap idmap suffix (G) 2715 </h3></div></div></div><a class="indexterm" name="id253994 5"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2715 </h3></div></div></div><a class="indexterm" name="id2539947"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2716 2716 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2717 2717 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix … … 2721 2721 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code> 2722 2722 </em></span> 2723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254002 6"></a>2723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540029"></a> 2724 2724 2725 2725 ldap machine suffix (G) 2726 </h3></div></div></div><a class="indexterm" name="id25400 27"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2726 </h3></div></div></div><a class="indexterm" name="id2540030"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2727 2727 It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of 2728 2728 <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2732 2732 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2733 2733 </em></span> 2734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25401 08"></a>2734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540111"></a> 2735 2735 2736 2736 ldap passwd sync (G) 2737 </h3></div></div></div><a class="indexterm" name="id25401 09"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>2737 </h3></div></div></div><a class="indexterm" name="id2540112"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2738 2738 This option is used to define whether or not Samba should sync the LDAP password with the NT 2739 2739 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password … … 2746 2746 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 2747 2747 </em></span> 2748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25402 08"></a>2748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540211"></a> 2749 2749 2750 2750 ldap replication sleep (G) 2751 </h3></div></div></div><a class="indexterm" name="id254021 0"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>2751 </h3></div></div></div><a class="indexterm" name="id2540212"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2752 2752 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 2753 2753 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 2762 2762 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code> 2763 2763 </em></span> 2764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254027 2"></a>2764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540275"></a> 2765 2765 2766 2766 ldapsam:editposix (G) 2767 </h3></div></div></div><a class="indexterm" name="id254027 3"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2767 </h3></div></div></div><a class="indexterm" name="id2540276"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2768 2768 Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller 2769 2769 eliminating the need to set up custom scripts to add and manage the posix users and groups. This option … … 2843 2843 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code> 2844 2844 </em></span> 2845 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25404 09"></a>2845 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540412"></a> 2846 2846 2847 2847 ldapsam:trusted (G) 2848 </h3></div></div></div><a class="indexterm" name="id254041 0"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>2848 </h3></div></div></div><a class="indexterm" name="id2540413"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 2849 2849 By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to 2850 2850 access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group … … 2864 2864 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code> 2865 2865 </em></span> 2866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540 498"></a>2866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540500"></a> 2867 2867 2868 2868 ldap ssl (G) 2869 </h3></div></div></div><a class="indexterm" name="id2540 499"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should2869 </h3></div></div></div><a class="indexterm" name="id2540502"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 2870 2870 use SSL when connecting to the ldap server 2871 2871 This is <span class="emphasis"><em>NOT</em></span> related to … … 2881 2881 </li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start_tls</code> 2882 2882 </em></span> 2883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25406 37"></a>2883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540640"></a> 2884 2884 2885 2885 ldap suffix (G) 2886 </h3></div></div></div><a class="indexterm" name="id25406 38"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>2886 </h3></div></div></div><a class="indexterm" name="id2540641"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 2887 2887 The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX">ldap user suffix</a>, 2888 2888 <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX">ldap machine suffix</a>, and the … … 2893 2893 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 2894 2894 </em></span> 2895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254076 0"></a>2895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540762"></a> 2896 2896 2897 2897 ldap timeout (G) 2898 </h3></div></div></div><a class="indexterm" name="id254076 1"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2898 </h3></div></div></div><a class="indexterm" name="id2540763"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2899 2899 When Samba connects to an ldap server that server may be down or unreachable. To prevent Samba from hanging whilst 2900 2900 waiting for the connection this parameter specifies in seconds how long Samba should wait before failing the … … 2902 2902 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> 2903 2903 </em></span> 2904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254080 6"></a>2904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540809"></a> 2905 2905 2906 2906 ldap user suffix (G) 2907 </h3></div></div></div><a class="indexterm" name="id25408 07"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2907 </h3></div></div></div><a class="indexterm" name="id2540810"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2908 2908 This parameter specifies where users are added to the tree. If this parameter is unset, 2909 2909 the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead. The suffix … … 2913 2913 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 2914 2914 </em></span> 2915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25408 88"></a>2915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540890"></a> 2916 2916 2917 2917 level2 oplocks (S) 2918 </h3></div></div></div><a class="indexterm" name="id25408 89"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports2918 </h3></div></div></div><a class="indexterm" name="id2540891"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports 2919 2919 level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients 2920 2920 that have an oplock on a file to downgrade from a read-write oplock … … 2936 2936 this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code> 2937 2937 </em></span> 2938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254099 5"></a>2938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540998"></a> 2939 2939 2940 2940 lm announce (G) 2941 </h3></div></div></div><a class="indexterm" name="id254099 6"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce2941 </h3></div></div></div><a class="indexterm" name="id2540999"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 2942 2942 broadcasts that are needed by OS/2 clients in order for them to see 2943 2943 the Samba server in their browse list. This parameter can have three … … 2955 2955 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 2956 2956 </em></span> 2957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25411 17"></a>2957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541120"></a> 2958 2958 2959 2959 lm interval (G) 2960 </h3></div></div></div><a class="indexterm" name="id25411 18"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce2960 </h3></div></div></div><a class="indexterm" name="id2541121"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 2961 2961 broadcasts needed by OS/2 clients (see the 2962 2962 <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a> parameter) then this … … 2968 2968 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code> 2969 2969 </em></span> 2970 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254120 1"></a>2970 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541204"></a> 2971 2971 2972 2972 load printers (G) 2973 </h3></div></div></div><a class="indexterm" name="id254120 2"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all2973 </h3></div></div></div><a class="indexterm" name="id2541205"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all 2974 2974 printers in the printcap will be loaded for browsing by default. 2975 2975 See the <a class="link" href="smb.conf.5.html#PRINTERS">printers</a> section for 2976 2976 more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code> 2977 2977 </em></span> 2978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25412 58"></a>2978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541260"></a> 2979 2979 2980 2980 local master (G) 2981 </h3></div></div></div><a class="indexterm" name="id25412 59"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser2981 </h3></div></div></div><a class="indexterm" name="id2541261"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 2982 2982 on a subnet. If set to <code class="constant">no</code> then <code class="literal"> 2983 2983 nmbd</code> will not attempt to become a local master browser … … 2989 2989 master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code> 2990 2990 </em></span> 2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25413 58"></a>2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541360"></a> 2992 2992 2993 2993 <a name="LOCKDIR"></a>lock dir 2994 </h3></div></div></div><a class="indexterm" name="id25413 59"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541390"></a>2994 </h3></div></div></div><a class="indexterm" name="id2541362"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541392"></a> 2995 2995 2996 2996 lock directory (G) 2997 </h3></div></div></div><a class="indexterm" name="id254139 1"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock2997 </h3></div></div></div><a class="indexterm" name="id2541394"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock 2998 2998 files will be placed. The lock files are used to implement the 2999 2999 <a class="link" href="smb.conf.5.html#MAXCONNECTIONS">max connections</a> option. … … 3005 3005 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 3006 3006 </em></span> 3007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25414 68"></a>3007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541471"></a> 3008 3008 3009 3009 locking (S) 3010 </h3></div></div></div><a class="indexterm" name="id254147 0"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be3010 </h3></div></div></div><a class="indexterm" name="id2541472"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 3011 3011 performed by the server in response to lock requests from the 3012 3012 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 3018 3018 is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a 3019 3019 specific service, as lack of locking may result in data corruption. 3020 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254154 4"></a>3020 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541547"></a> 3021 3021 3022 3022 lock spin count (G) 3023 </h3></div></div></div><a class="indexterm" name="id254154 5"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.3023 </h3></div></div></div><a class="indexterm" name="id2541548"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 3024 3024 The functionality it contolled is now controlled by the parameter 3025 3025 <a class="link" href="smb.conf.5.html#LOCKSPINTIME">lock spin time</a>. 3026 3026 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 3027 3027 </em></span> 3028 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254160 0"></a>3028 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541603"></a> 3029 3029 3030 3030 lock spin time (G) 3031 </h3></div></div></div><a class="indexterm" name="id254160 1"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should3031 </h3></div></div></div><a class="indexterm" name="id2541604"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should 3032 3032 keep waiting to see if a failed lock request can 3033 3033 be granted. This parameter has changed in default … … 3037 3037 to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code> 3038 3038 </em></span> 3039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25416 59"></a>3039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541662"></a> 3040 3040 3041 3041 log file (G) 3042 </h3></div></div></div><a class="indexterm" name="id254166 0"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>3042 </h3></div></div></div><a class="indexterm" name="id2541663"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3043 3043 This option allows you to override the name of the Samba log file (also known as the debug file). 3044 3044 </p><p> … … 3046 3046 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 3047 3047 </em></span> 3048 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254171 1"></a>3048 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541714"></a> 3049 3049 3050 3050 <a name="DEBUGLEVEL"></a>debuglevel 3051 </h3></div></div></div><a class="indexterm" name="id254171 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541742"></a>3051 </h3></div></div></div><a class="indexterm" name="id2541715"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541745"></a> 3052 3052 3053 3053 log level (G) 3054 </h3></div></div></div><a class="indexterm" name="id254174 3"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>3054 </h3></div></div></div><a class="indexterm" name="id2541746"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3055 3055 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 3056 3056 <code class="filename">smb.conf</code> file. … … 3063 3063 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 3064 3064 </em></span> 3065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254197 5"></a>3065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541977"></a> 3066 3066 3067 3067 logon drive (G) 3068 </h3></div></div></div><a class="indexterm" name="id254197 6"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3068 </h3></div></div></div><a class="indexterm" name="id2541978"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3069 3069 This parameter specifies the local path to which the home directory will be 3070 3070 connected (see <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a>) and is only used by NT … … 3076 3076 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 3077 3077 </em></span> 3078 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25420 49"></a>3078 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542052"></a> 3079 3079 3080 3080 logon home (G) 3081 </h3></div></div></div><a class="indexterm" name="id254205 0"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>3081 </h3></div></div></div><a class="indexterm" name="id2542053"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3082 3082 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 3083 3083 It allows you to do … … 3110 3110 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code> 3111 3111 </em></span> 3112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254221 4"></a>3112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542216"></a> 3113 3113 3114 3114 logon path (G) 3115 </h3></div></div></div><a class="indexterm" name="id254221 5"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>3115 </h3></div></div></div><a class="indexterm" name="id2542217"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p> 3116 3116 This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are 3117 3117 stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming … … 3157 3157 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 3158 3158 </em></span> 3159 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254238 2"></a>3159 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542385"></a> 3160 3160 3161 3161 logon script (G) 3162 </h3></div></div></div><a class="indexterm" name="id254238 3"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>3162 </h3></div></div></div><a class="indexterm" name="id2542386"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3163 3163 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 3164 3164 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 3191 3191 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 3192 3192 </em></span> 3193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254255 2"></a>3193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542554"></a> 3194 3194 3195 3195 lppause command (S) 3196 </h3></div></div></div><a class="indexterm" name="id254255 3"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3196 </h3></div></div></div><a class="indexterm" name="id2542556"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3197 3197 executed on the server host in order to stop printing or spooling 3198 3198 a specific print job.</p><p>This command should be a program or script which takes … … 3218 3218 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 3219 3219 </em></span> 3220 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542 699"></a>3220 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542702"></a> 3221 3221 3222 3222 lpq cache time (G) 3223 </h3></div></div></div><a class="indexterm" name="id254270 0"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached3223 </h3></div></div></div><a class="indexterm" name="id2542703"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 3224 3224 for to prevent the <code class="literal">lpq</code> command being called too 3225 3225 often. A separate cache is kept for each variation of the <code class="literal"> … … 3234 3234 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 3235 3235 </em></span> 3236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25428 19"></a>3236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542822"></a> 3237 3237 3238 3238 lpq command (S) 3239 </h3></div></div></div><a class="indexterm" name="id254282 0"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3239 </h3></div></div></div><a class="indexterm" name="id2542823"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3240 3240 executed on the server host in order to obtain <code class="literal">lpq 3241 3241 </code>-style printer status information.</p><p>This command should be a program or script which … … 3259 3259 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 3260 3260 </em></span> 3261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254294 5"></a>3261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542948"></a> 3262 3262 3263 3263 lpresume command (S) 3264 </h3></div></div></div><a class="indexterm" name="id254294 6"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3264 </h3></div></div></div><a class="indexterm" name="id2542949"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3265 3265 executed on the server host in order to restart or continue 3266 3266 printing or spooling a specific print job.</p><p>This command should be a program or script which takes … … 3275 3275 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3276 3276 </em></span> 3277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543 098"></a>3277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543100"></a> 3278 3278 3279 3279 lprm command (S) 3280 </h3></div></div></div><a class="indexterm" name="id2543 099"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3280 </h3></div></div></div><a class="indexterm" name="id2543101"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3281 3281 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 3282 3282 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 3295 3295 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 3296 3296 </em></span> 3297 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254318 5"></a>3297 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543187"></a> 3298 3298 3299 3299 machine password timeout (G) 3300 </h3></div></div></div><a class="indexterm" name="id254318 6"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3300 </h3></div></div></div><a class="indexterm" name="id2543188"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3301 3301 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter) then periodically a running smbd process will try and change 3302 3302 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb … … 3308 3308 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 3309 3309 </em></span> 3310 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254327 2"></a>3310 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543275"></a> 3311 3311 3312 3312 magic output (S) 3313 </h3></div></div></div><a class="indexterm" name="id254327 3"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3313 </h3></div></div></div><a class="indexterm" name="id2543276"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3314 3314 This parameter specifies the name of a file which will contain output created by a magic script (see the 3315 3315 <a class="link" href="smb.conf.5.html#MAGICSCRIPT">magic script</a> parameter below). … … 3320 3320 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 3321 3321 </em></span> 3322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254335 6"></a>3322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543359"></a> 3323 3323 3324 3324 magic script (S) 3325 </h3></div></div></div><a class="indexterm" name="id25433 57"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,3325 </h3></div></div></div><a class="indexterm" name="id2543360"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 3326 3326 if opened, will be executed by the server when the file is closed. 3327 3327 This allows a UNIX script to be sent to the Samba host and … … 3339 3339 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 3340 3340 </em></span> 3341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254346 2"></a>3341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543464"></a> 3342 3342 3343 3343 mangled names (S) 3344 </h3></div></div></div><a class="indexterm" name="id254346 3"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX3344 </h3></div></div></div><a class="indexterm" name="id2543465"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 3345 3345 should be mapped to DOS-compatible names ("mangled") and made visible, 3346 3346 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a> for … … 3367 3367 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 3368 3368 </em></span> 3369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543 598"></a>3369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543601"></a> 3370 3370 3371 3371 mangle prefix (G) 3372 </h3></div></div></div><a class="indexterm" name="id2543 599"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix3372 </h3></div></div></div><a class="indexterm" name="id2543602"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 3373 3373 characters from the original name used when generating 3374 3374 the mangled names. A larger value will give a weaker … … 3380 3380 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 3381 3381 </em></span> 3382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254366 5"></a>3382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543667"></a> 3383 3383 3384 3384 mangling char (S) 3385 </h3></div></div></div><a class="indexterm" name="id254366 6"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as3385 </h3></div></div></div><a class="indexterm" name="id2543668"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3386 3386 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. The 3387 3387 default is a '~' but this may interfere with some software. Use this option to set … … 3390 3390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 3391 3391 </em></span> 3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254374 2"></a>3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543745"></a> 3393 3393 3394 3394 mangling method (G) 3395 </h3></div></div></div><a class="indexterm" name="id254374 3"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating3395 </h3></div></div></div><a class="indexterm" name="id2543746"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 3396 3396 the mangled names. Can take two different values, "hash" and 3397 3397 "hash2". "hash" is the algorithm that was used … … 3404 3404 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 3405 3405 </em></span> 3406 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25438 09"></a>3406 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543812"></a> 3407 3407 3408 3408 map acl inherit (S) 3409 </h3></div></div></div><a class="indexterm" name="id254381 0"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'3409 </h3></div></div></div><a class="indexterm" name="id2543813"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3410 3410 access control entry flags stored in Windows ACLs into an extended attribute 3411 3411 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 3415 3415 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 3416 3416 </em></span> 3417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254386 6"></a>3417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543869"></a> 3418 3418 3419 3419 map archive (S) 3420 </h3></div></div></div><a class="indexterm" name="id25438 67"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3420 </h3></div></div></div><a class="indexterm" name="id2543870"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3421 3421 This controls whether the DOS archive attribute 3422 3422 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 3431 3431 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 3432 3432 </em></span> 3433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254394 1"></a>3433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543944"></a> 3434 3434 3435 3435 map hidden (S) 3436 </h3></div></div></div><a class="indexterm" name="id254394 2"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>3436 </h3></div></div></div><a class="indexterm" name="id2543945"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3437 3437 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 3438 3438 </p><p> … … 3440 3440 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> 3441 3441 for details. 3442 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254 3999"></a>3442 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544002"></a> 3443 3443 3444 3444 map read only (S) 3445 </h3></div></div></div><a class="indexterm" name="id254400 0"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>3445 </h3></div></div></div><a class="indexterm" name="id2544003"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3446 3446 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 3447 3447 </p><p> … … 3468 3468 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code> 3469 3469 </em></span> 3470 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254416 4"></a>3470 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544166"></a> 3471 3471 3472 3472 map system (S) 3473 </h3></div></div></div><a class="indexterm" name="id254416 5"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>3473 </h3></div></div></div><a class="indexterm" name="id2544168"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 3474 3474 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 3475 3475 </p><p> … … 3479 3479 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 3480 3480 </em></span> 3481 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254423 3"></a>3481 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544236"></a> 3482 3482 3483 3483 map to guest (G) 3484 </h3></div></div></div><a class="indexterm" name="id254423 4"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY =3484 </h3></div></div></div><a class="indexterm" name="id2544237"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY = 3485 3485 security</a> modes other than <em class="parameter"><code>security = share</code></em> 3486 3486 and <em class="parameter"><code>security = server</code></em> … … 3524 3524 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 3525 3525 </em></span> 3526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254447 3"></a>3526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544475"></a> 3527 3527 3528 3528 max connections (S) 3529 </h3></div></div></div><a class="indexterm" name="id254447 4"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.3529 </h3></div></div></div><a class="indexterm" name="id2544476"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3530 3530 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 3531 3531 will be refused if this number of connections to the service are already open. A value … … 3535 3535 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 3536 3536 </em></span> 3537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25445 59"></a>3537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544561"></a> 3538 3538 3539 3539 max disk size (G) 3540 </h3></div></div></div><a class="indexterm" name="id254456 0"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit3540 </h3></div></div></div><a class="indexterm" name="id2544562"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 3541 3541 on the apparent size of disks. If you set this option to 100 3542 3542 then all shares will appear to be not larger than 100 MB in … … 3552 3552 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 3553 3553 </em></span> 3554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254465 0"></a>3554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544653"></a> 3555 3555 3556 3556 max log size (G) 3557 </h3></div></div></div><a class="indexterm" name="id254465 1"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3557 </h3></div></div></div><a class="indexterm" name="id2544654"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3558 3558 This option (an integer in kilobytes) specifies the max size the log file should grow to. 3559 3559 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 3564 3564 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 3565 3565 </em></span> 3566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254472 2"></a>3566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544724"></a> 3567 3567 3568 3568 max mux (G) 3569 </h3></div></div></div><a class="indexterm" name="id254472 3"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of3569 </h3></div></div></div><a class="indexterm" name="id2544725"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 3570 3570 outstanding simultaneous SMB operations that Samba tells the client 3571 3571 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 3572 3572 </em></span> 3573 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254476 5"></a>3573 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544768"></a> 3574 3574 3575 3575 max open files (G) 3576 </h3></div></div></div><a class="indexterm" name="id254476 6"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3576 </h3></div></div></div><a class="indexterm" name="id2544769"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3577 3577 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3578 3578 serving process may have open for a client at any one time. The … … 3582 3582 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code> 3583 3583 </em></span> 3584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254482 5"></a>3584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544828"></a> 3585 3585 3586 3586 max print jobs (S) 3587 </h3></div></div></div><a class="indexterm" name="id254482 6"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3587 </h3></div></div></div><a class="indexterm" name="id2544829"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3588 3588 jobs allowable in a Samba printer queue at any given moment. 3589 3589 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. … … 3592 3592 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 3593 3593 </em></span> 3594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254489 5"></a>3594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544898"></a> 3595 3595 3596 3596 <a name="PROTOCOL"></a>protocol 3597 </h3></div></div></div><a class="indexterm" name="id254489 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544927"></a>3597 </h3></div></div></div><a class="indexterm" name="id2544899"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544930"></a> 3598 3598 3599 3599 max protocol (G) 3600 </h3></div></div></div><a class="indexterm" name="id25449 28"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest3600 </h3></div></div></div><a class="indexterm" name="id2544931"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 3601 3601 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No 3602 3602 concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on … … 3610 3610 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 3611 3611 </em></span> 3612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254505 2"></a>3612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545054"></a> 3613 3613 3614 3614 max reported print jobs (S) 3615 </h3></div></div></div><a class="indexterm" name="id254505 3"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>3615 </h3></div></div></div><a class="indexterm" name="id2545055"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3616 3616 This parameter limits the maximum number of jobs displayed in a port monitor for 3617 3617 Samba printer queue at any given moment. If this number is exceeded, the excess … … 3622 3622 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 3623 3623 </em></span> 3624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254511 6"></a>3624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545118"></a> 3625 3625 3626 3626 max smbd processes (G) 3627 </h3></div></div></div><a class="indexterm" name="id254511 7"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended3627 </h3></div></div></div><a class="indexterm" name="id2545119"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3628 3628 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 3629 3629 resources to handle more than this number of connections. Remember that under normal operating … … 3633 3633 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 3634 3634 </em></span> 3635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545 197"></a>3635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545200"></a> 3636 3636 3637 3637 max stat cache size (G) 3638 </h3></div></div></div><a class="indexterm" name="id2545 198"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any3638 </h3></div></div></div><a class="indexterm" name="id2545201"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3639 3639 <em class="parameter"><code>stat cache</code></em> being used 3640 3640 to speed up case insensitive name mappings. It represents … … 3647 3647 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 3648 3648 </em></span> 3649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254526 7"></a>3649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545269"></a> 3650 3650 3651 3651 max ttl (G) 3652 </h3></div></div></div><a class="indexterm" name="id25452 68"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'3652 </h3></div></div></div><a class="indexterm" name="id2545270"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3653 3653 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 3654 3654 requesting a name using either a broadcast packet or from a WINS server. You should 3655 3655 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 3656 3656 </em></span> 3657 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254532 6"></a>3657 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545328"></a> 3658 3658 3659 3659 max wins ttl (G) 3660 </h3></div></div></div><a class="indexterm" name="id254532 7"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server3660 </h3></div></div></div><a class="indexterm" name="id2545329"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3661 3661 (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the maximum 3662 3662 'time to live' of NetBIOS names that <code class="literal">nmbd</code> … … 3664 3664 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 3665 3665 </em></span> 3666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545 397"></a>3666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545400"></a> 3667 3667 3668 3668 max xmit (G) 3669 </h3></div></div></div><a class="indexterm" name="id2545 398"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size3669 </h3></div></div></div><a class="indexterm" name="id2545401"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 3670 3670 that will be negotiated by Samba. The default is 16644, which 3671 3671 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 3675 3675 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 3676 3676 </em></span> 3677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254546 0"></a>3677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545462"></a> 3678 3678 3679 3679 message command (G) 3680 </h3></div></div></div><a class="indexterm" name="id254546 1"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the3680 </h3></div></div></div><a class="indexterm" name="id2545464"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 3681 3681 server receives a WinPopup style message.</p><p>This would normally be a command that would 3682 3682 deliver the message somehow. How this is to be done is … … 3717 3717 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 3718 3718 </em></span> 3719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254567 0"></a>3719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545672"></a> 3720 3720 3721 3721 min print space (S) 3722 </h3></div></div></div><a class="indexterm" name="id254567 1"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk3722 </h3></div></div></div><a class="indexterm" name="id2545674"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 3723 3723 space that must be available before a user will be able to spool 3724 3724 a print job. It is specified in kilobytes. The default is 0, which … … 3727 3727 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 3728 3728 </em></span> 3729 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254573 2"></a>3729 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545735"></a> 3730 3730 3731 3731 min protocol (G) 3732 </h3></div></div></div><a class="indexterm" name="id254573 3"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the3732 </h3></div></div></div><a class="indexterm" name="id2545736"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 3733 3733 lowest SMB protocol dialect than Samba will support. Please refer 3734 3734 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL">max protocol</a> … … 3742 3742 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 3743 3743 </em></span> 3744 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254583 0"></a>3744 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545833"></a> 3745 3745 3746 3746 min receivefile size (G) 3747 </h3></div></div></div><a class="indexterm" name="id254583 1"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming3747 </h3></div></div></div><a class="indexterm" name="id2545834"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming 3748 3748 SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will 3749 3749 be passed to any underlying kernel recvfile or splice system call (if there is no such … … 3754 3754 nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code> 3755 3755 </em></span> 3756 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254590 0"></a>3756 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545902"></a> 3757 3757 3758 3758 min wins ttl (G) 3759 </h3></div></div></div><a class="indexterm" name="id254590 1"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>3759 </h3></div></div></div><a class="indexterm" name="id2545903"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 3760 3760 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the minimum 'time to live' 3761 3761 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in … … 3763 3763 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 3764 3764 </em></span> 3765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254597 0"></a>3765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545972"></a> 3766 3766 3767 3767 msdfs proxy (S) 3768 </h3></div></div></div><a class="indexterm" name="id254597 1"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a3768 </h3></div></div></div><a class="indexterm" name="id2545973"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 3769 3769 stand-in for another CIFS share whose location is specified by 3770 3770 the value of the parameter. When clients attempt to connect to … … 3774 3774 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 3775 3775 </em></span> 3776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25460 48"></a>3776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546051"></a> 3777 3777 3778 3778 msdfs root (S) 3779 </h3></div></div></div><a class="indexterm" name="id25460 49"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the3779 </h3></div></div></div><a class="indexterm" name="id2546052"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 3780 3780 share as a Dfs root and allows clients to browse the 3781 3781 distributed file system tree rooted at the share directory. … … 3785 3785 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 3786 3786 </em></span> 3787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254610 3"></a>3787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546106"></a> 3788 3788 3789 3789 name cache timeout (G) 3790 </h3></div></div></div><a class="indexterm" name="id254610 4"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before3790 </h3></div></div></div><a class="indexterm" name="id2546107"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 3791 3791 entries in samba's hostname resolve cache time out. If 3792 3792 the timeout is set to 0. the caching is disabled. … … 3795 3795 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 3796 3796 </em></span> 3797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254616 4"></a>3797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546167"></a> 3798 3798 3799 3799 name resolve order (G) 3800 </h3></div></div></div><a class="indexterm" name="id254616 6"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba3800 </h3></div></div></div><a class="indexterm" name="id2546168"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 3801 3801 suite to determine what naming services to use and in what order 3802 3802 to resolve host names to IP addresses. Its main purpose to is to … … 3829 3829 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 3830 3830 </em></span> 3831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254636 6"></a>3831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546368"></a> 3832 3832 3833 3833 netbios aliases (G) 3834 </h3></div></div></div><a class="indexterm" name="id254636 7"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will3834 </h3></div></div></div><a class="indexterm" name="id2546369"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 3835 3835 advertise as additional names by which the Samba server is known. This allows one machine 3836 3836 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 3842 3842 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 3843 3843 </em></span> 3844 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254643 1"></a>3844 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546434"></a> 3845 3845 3846 3846 netbios name (G) 3847 </h3></div></div></div><a class="indexterm" name="id254643 2"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>3847 </h3></div></div></div><a class="indexterm" name="id2546435"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3848 3848 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 3849 3849 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 3858 3858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 3859 3859 </em></span> 3860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254651 3"></a>3860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546516"></a> 3861 3861 3862 3862 netbios scope (G) 3863 </h3></div></div></div><a class="indexterm" name="id254651 4"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will3863 </h3></div></div></div><a class="indexterm" name="id2546517"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 3864 3864 operate under. This should not be set unless every machine 3865 3865 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 3866 3866 </em></span> 3867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254655 6"></a>3867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546558"></a> 3868 3868 3869 3869 nis homedir (G) 3870 </h3></div></div></div><a class="indexterm" name="id25465 57"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For3870 </h3></div></div></div><a class="indexterm" name="id2546560"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 3871 3871 UNIX systems that use an automounter, the user's home directory 3872 3872 will often be mounted on a workstation on demand from a remote … … 3887 3887 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 3888 3888 </em></span> 3889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254663 6"></a>3889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546638"></a> 3890 3890 3891 3891 nt acl support (S) 3892 </h3></div></div></div><a class="indexterm" name="id25466 37"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map3892 </h3></div></div></div><a class="indexterm" name="id2546640"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3893 3893 UNIX permissions into Windows NT access control lists. The UNIX 3894 3894 permissions considered are the the traditional UNIX owner and … … 3897 3897 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 3898 3898 </em></span> 3899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254669 1"></a>3899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546693"></a> 3900 3900 3901 3901 ntlm auth (G) 3902 </h3></div></div></div><a class="indexterm" name="id254669 2"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to3902 </h3></div></div></div><a class="indexterm" name="id2546694"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 3903 3903 authenticate users using the NTLM encrypted password response. 3904 3904 If disabled, either the lanman password hash or an NTLMv2 response … … 3908 3908 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 3909 3909 </em></span> 3910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254675 5"></a>3910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546757"></a> 3911 3911 3912 3912 nt pipe support (G) 3913 </h3></div></div></div><a class="indexterm" name="id254675 6"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether3913 </h3></div></div></div><a class="indexterm" name="id2546758"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 3914 3914 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 3915 3915 clients to connect to the NT SMB specific <code class="constant">IPC$</code> … … 3917 3917 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 3918 3918 </em></span> 3919 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254681 1"></a>3919 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546814"></a> 3920 3920 3921 3921 nt status support (G) 3922 </h3></div></div></div><a class="indexterm" name="id254681 2"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status3922 </h3></div></div></div><a class="indexterm" name="id2546815"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 3923 3923 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 3924 3924 If this option is set to <code class="constant">no</code> then Samba offers … … 3926 3926 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 3927 3927 </em></span> 3928 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254687 2"></a>3928 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546875"></a> 3929 3929 3930 3930 null passwords (G) 3931 </h3></div></div></div><a class="indexterm" name="id254687 3"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>3932 </em></span> 3933 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254692 5"></a>3931 </h3></div></div></div><a class="indexterm" name="id2546876"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 3932 </em></span> 3933 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546928"></a> 3934 3934 3935 3935 obey pam restrictions (G) 3936 </h3></div></div></div><a class="indexterm" name="id254692 6"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support3936 </h3></div></div></div><a class="indexterm" name="id2546929"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 3937 3937 (i.e. --with-pam), this parameter will control whether or not Samba 3938 3938 should obey PAM's account and session management directives. The … … 3944 3944 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 3945 3945 </em></span> 3946 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25469 89"></a>3946 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546992"></a> 3947 3947 3948 3948 only user (S) 3949 </h3></div></div></div><a class="indexterm" name="id254699 0"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether3949 </h3></div></div></div><a class="indexterm" name="id2546993"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 3950 3950 connections with usernames not in the <em class="parameter"><code>user</code></em> 3951 3951 list will be allowed. By default this option is disabled so that a … … 3960 3960 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 3961 3961 </em></span> 3962 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25470 78"></a>3962 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547081"></a> 3963 3963 3964 3964 oplock break wait time (G) 3965 </h3></div></div></div><a class="indexterm" name="id25470 79"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>3965 </h3></div></div></div><a class="indexterm" name="id2547082"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3966 3966 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 3967 3967 quickly when that client issues an SMB that can cause an oplock break request, then the network client can … … 3972 3972 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 3973 3973 </em></span> 3974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254713 3"></a>3974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547136"></a> 3975 3975 3976 3976 oplock contention limit (S) 3977 </h3></div></div></div><a class="indexterm" name="id254713 4"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>3977 </h3></div></div></div><a class="indexterm" name="id2547137"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3978 3978 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 3979 3979 granting of oplocks under multiple client contention for the same file. … … 3987 3987 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 3988 3988 </em></span> 3989 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254721 5"></a>3989 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547217"></a> 3990 3990 3991 3991 oplocks (S) 3992 </h3></div></div></div><a class="indexterm" name="id254721 6"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>3992 </h3></div></div></div><a class="indexterm" name="id2547218"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3993 3993 This boolean option tells <code class="literal">smbd</code> whether to 3994 3994 issue oplocks (opportunistic locks) to file open requests on this … … 4009 4009 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 4010 4010 </em></span> 4011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254731 5"></a>4011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547317"></a> 4012 4012 4013 4013 os2 driver map (G) 4014 </h3></div></div></div><a class="indexterm" name="id254731 6"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute4014 </h3></div></div></div><a class="indexterm" name="id2547318"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 4015 4015 path to a file containing a mapping of Windows NT printer driver 4016 4016 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 4022 4022 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 4023 4023 </em></span> 4024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254738 1"></a>4024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547384"></a> 4025 4025 4026 4026 os level (G) 4027 </h3></div></div></div><a class="indexterm" name="id254738 2"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4027 </h3></div></div></div><a class="indexterm" name="id2547385"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4028 4028 This integer value controls what level Samba advertises itself as for browse elections. The value of this 4029 4029 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> in the local broadcast area. … … 4041 4041 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 4042 4042 </em></span> 4043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254749 0"></a>4043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547492"></a> 4044 4044 4045 4045 pam password change (G) 4046 </h3></div></div></div><a class="indexterm" name="id254749 1"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,4046 </h3></div></div></div><a class="indexterm" name="id2547493"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 4047 4047 this parameter, it is possible to use PAM's password change control 4048 4048 flag for Samba. If enabled, then PAM will be used for password … … 4052 4052 <a class="link" href="smb.conf.5.html#PASSWDCHAT">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 4053 4053 </em></span> 4054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254756 1"></a>4054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547564"></a> 4055 4055 4056 4056 panic action (G) 4057 </h3></div></div></div><a class="indexterm" name="id254756 2"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a4057 </h3></div></div></div><a class="indexterm" name="id2547565"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 4058 4058 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 4059 4059 draw attention to the fact that a problem occurred. … … 4062 4062 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 4063 4063 </em></span> 4064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25476 37"></a>4064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547640"></a> 4065 4065 4066 4066 paranoid server security (G) 4067 </h3></div></div></div><a class="indexterm" name="id25476 38"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest4067 </h3></div></div></div><a class="indexterm" name="id2547641"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 4068 4068 users with a bad passowrd. When this option is enabled, samba will not 4069 4069 use a broken NT 4.x server as password server, but instead complain … … 4073 4073 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 4074 4074 </em></span> 4075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25476 88"></a>4075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547691"></a> 4076 4076 4077 4077 passdb backend (G) 4078 </h3></div></div></div><a class="indexterm" name="id25476 89"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend4078 </h3></div></div></div><a class="indexterm" name="id2547692"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 4079 4079 will be used for storing user and possibly group information. This allows 4080 4080 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' … … 4109 4109 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code> 4110 4110 </em></span> 4111 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254784 4"></a>4111 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547846"></a> 4112 4112 4113 4113 passdb expand explicit (G) 4114 </h3></div></div></div><a class="indexterm" name="id254784 5"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4114 </h3></div></div></div><a class="indexterm" name="id2547848"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4115 4115 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 4116 4116 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 4118 4118 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 4119 4119 </em></span> 4120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254789 1"></a>4120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547893"></a> 4121 4121 4122 4122 passwd chat debug (G) 4123 </h3></div></div></div><a class="indexterm" name="id254789 2"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script4123 </h3></div></div></div><a class="indexterm" name="id2547894"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 4124 4124 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 4125 4125 strings passed to and received from the passwd chat are printed … … 4134 4134 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 4135 4135 </em></span> 4136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254799 4"></a>4136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547996"></a> 4137 4137 4138 4138 passwd chat timeout (G) 4139 </h3></div></div></div><a class="indexterm" name="id254799 5"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial4139 </h3></div></div></div><a class="indexterm" name="id2547997"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 4140 4140 answer from a passwd chat script being run. Once the initial answer is received 4141 4141 the subsequent answers must be received in one tenth of this time. The default it 4142 4142 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 4143 4143 </em></span> 4144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25480 39"></a>4144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548041"></a> 4145 4145 4146 4146 passwd chat (G) 4147 </h3></div></div></div><a class="indexterm" name="id254804 0"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>4147 </h3></div></div></div><a class="indexterm" name="id2548042"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 4148 4148 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 4149 4149 program to change the user's password. The string describes a … … 4176 4176 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 4177 4177 </em></span> 4178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254824 3"></a>4178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548246"></a> 4179 4179 4180 4180 passwd program (G) 4181 </h3></div></div></div><a class="indexterm" name="id254824 4"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set4181 </h3></div></div></div><a class="indexterm" name="id2548247"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 4182 4182 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 4183 4183 will be replaced with the user name. The user name is checked for … … 4200 4200 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 4201 4201 </em></span> 4202 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25483 78"></a>4202 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548381"></a> 4203 4203 4204 4204 password level (G) 4205 </h3></div></div></div><a class="indexterm" name="id25483 79"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty4205 </h3></div></div></div><a class="indexterm" name="id2548382"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 4206 4206 with mixed-case passwords. One offending client is Windows for 4207 4207 Workgroups, which for some reason forces passwords to upper … … 4225 4225 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 4226 4226 </em></span> 4227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254851 5"></a>4227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548518"></a> 4228 4228 4229 4229 password server (G) 4230 </h3></div></div></div><a class="indexterm" name="id254851 6"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server4230 </h3></div></div></div><a class="indexterm" name="id2548519"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 4231 4231 or Active Directory domain controller with this option, 4232 4232 and using <code class="literal">security = [ads|domain|server]</code> … … 4288 4288 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code> 4289 4289 </em></span> 4290 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254881 4"></a>4290 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548816"></a> 4291 4291 4292 4292 <a name="DIRECTORY"></a>directory 4293 </h3></div></div></div><a class="indexterm" name="id254881 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548845"></a>4293 </h3></div></div></div><a class="indexterm" name="id2548817"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548848"></a> 4294 4294 4295 4295 path (S) 4296 </h3></div></div></div><a class="indexterm" name="id254884 6"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which4296 </h3></div></div></div><a class="indexterm" name="id2548849"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 4297 4297 the user of the service is to be given access. In the case of 4298 4298 printable services, this is where print data will spool prior to … … 4311 4311 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 4312 4312 </em></span> 4313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25489 49"></a>4313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548952"></a> 4314 4314 4315 4315 pid directory (G) 4316 </h3></div></div></div><a class="indexterm" name="id254895 0"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4316 </h3></div></div></div><a class="indexterm" name="id2548953"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4317 4317 This option specifies the directory where pid files will be placed. 4318 4318 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 4320 4320 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 4321 4321 </em></span> 4322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25490 09"></a>4322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549011"></a> 4323 4323 4324 4324 posix locking (S) 4325 </h3></div></div></div><a class="indexterm" name="id254901 0"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>4325 </h3></div></div></div><a class="indexterm" name="id2549012"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4326 4326 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4327 4327 daemon maintains an database of file locks obtained by SMB clients. The default behavior is … … 4331 4331 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 4332 4332 </em></span> 4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254906 4"></a>4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549067"></a> 4334 4334 4335 4335 postexec (S) 4336 </h3></div></div></div><a class="indexterm" name="id254906 5"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run4336 </h3></div></div></div><a class="indexterm" name="id2549068"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 4337 4337 whenever the service is disconnected. It takes the usual 4338 4338 substitutions. The command may be run as the root on some … … 4342 4342 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 4343 4343 </em></span> 4344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25491 37"></a>4344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549140"></a> 4345 4345 4346 4346 preexec close (S) 4347 </h3></div></div></div><a class="indexterm" name="id25491 38"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>4347 </h3></div></div></div><a class="indexterm" name="id2549141"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4348 4348 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC">preexec</a> 4349 4349 should close the service being connected to. 4350 4350 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4351 4351 </em></span> 4352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254919 1"></a>4352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549194"></a> 4353 4353 4354 4354 <a name="EXEC"></a>exec 4355 </h3></div></div></div><a class="indexterm" name="id254919 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549222"></a>4355 </h3></div></div></div><a class="indexterm" name="id2549195"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549225"></a> 4356 4356 4357 4357 preexec (S) 4358 </h3></div></div></div><a class="indexterm" name="id254922 4"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever4358 </h3></div></div></div><a class="indexterm" name="id2549226"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 4359 4359 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 4360 4360 message every time they log in. Maybe a message of the day? Here … … 4368 4368 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 4369 4369 </em></span> 4370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254933 1"></a>4370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549333"></a> 4371 4371 4372 4372 <a name="PREFEREDMASTER"></a>prefered master 4373 </h3></div></div></div><a class="indexterm" name="id254933 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549364"></a>4373 </h3></div></div></div><a class="indexterm" name="id2549334"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549366"></a> 4374 4374 4375 4375 preferred master (G) 4376 </h3></div></div></div><a class="indexterm" name="id254936 5"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>4376 </h3></div></div></div><a class="indexterm" name="id2549367"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4377 4377 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4378 4378 </p><p> … … 4388 4388 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 4389 4389 </em></span> 4390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254945 7"></a>4390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549459"></a> 4391 4391 4392 4392 preload modules (G) 4393 </h3></div></div></div><a class="indexterm" name="id25494 58"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should4393 </h3></div></div></div><a class="indexterm" name="id2549460"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4394 4394 be loaded into smbd before a client connects. This improves 4395 4395 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> … … 4397 4397 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4398 4398 </em></span> 4399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25495 17"></a>4399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549520"></a> 4400 4400 4401 4401 <a name="AUTOSERVICES"></a>auto services 4402 </h3></div></div></div><a class="indexterm" name="id25495 18"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549550"></a>4402 </h3></div></div></div><a class="indexterm" name="id2549521"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549553"></a> 4403 4403 4404 4404 preload (G) 4405 </h3></div></div></div><a class="indexterm" name="id254955 1"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be4405 </h3></div></div></div><a class="indexterm" name="id2549554"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 4406 4406 automatically added to the browse lists. This is most useful 4407 4407 for homes and printers services that would otherwise not be … … 4414 4414 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 4415 4415 </em></span> 4416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25496 28"></a>4416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549631"></a> 4417 4417 4418 4418 preserve case (S) 4419 </h3></div></div></div><a class="indexterm" name="id25496 29"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4419 </h3></div></div></div><a class="indexterm" name="id2549632"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4420 4420 This controls if new filenames are created with the case that the client passes, or if 4421 4421 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. … … 4424 4424 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 4425 4425 </em></span> 4426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254969 4"></a>4426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549697"></a> 4427 4427 4428 4428 <a name="PRINTOK"></a>print ok 4429 </h3></div></div></div><a class="indexterm" name="id254969 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549725"></a>4429 </h3></div></div></div><a class="indexterm" name="id2549698"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549728"></a> 4430 4430 4431 4431 printable (S) 4432 </h3></div></div></div><a class="indexterm" name="id254972 6"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then4432 </h3></div></div></div><a class="indexterm" name="id2549729"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4433 4433 clients may open, write to and submit spool files on the directory 4434 4434 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing … … 4437 4437 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 4438 4438 </em></span> 4439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25497 88"></a>4439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549791"></a> 4440 4440 4441 4441 printcap cache time (G) 4442 </h3></div></div></div><a class="indexterm" name="id25497 89"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing4442 </h3></div></div></div><a class="indexterm" name="id2549792"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4443 4443 subsystem is again asked for the known printers. If the value 4444 4444 is greater than 60 the initial waiting time is set to 60 seconds … … 4450 4450 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 4451 4451 </em></span> 4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254985 6"></a>4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549859"></a> 4453 4453 4454 4454 <a name="PRINTCAP"></a>printcap 4455 </h3></div></div></div><a class="indexterm" name="id25498 57"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549889"></a>4455 </h3></div></div></div><a class="indexterm" name="id2549860"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549892"></a> 4456 4456 4457 4457 printcap name (G) 4458 </h3></div></div></div><a class="indexterm" name="id254989 0"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4458 </h3></div></div></div><a class="indexterm" name="id2549893"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4459 4459 This parameter may be used to override the compiled-in default printcap name used by the server (usually 4460 4460 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. … … 4491 4491 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 4492 4492 </em></span> 4493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255007 4"></a>4493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550076"></a> 4494 4494 4495 4495 print command (S) 4496 </h3></div></div></div><a class="indexterm" name="id255007 5"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to4496 </h3></div></div></div><a class="indexterm" name="id2550077"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 4497 4497 a service, this command will be used via a <code class="literal">system()</code> 4498 4498 call to process the spool file. Typically the command specified will … … 4536 4536 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 4537 4537 </em></span> 4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255034 4"></a>4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550346"></a> 4539 4539 4540 4540 printer admin (S) 4541 </h3></div></div></div><a class="indexterm" name="id255034 5"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>4541 </h3></div></div></div><a class="indexterm" name="id2550347"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 4542 4542 This lists users who can do anything to printers 4543 4543 via the remote administration interfaces offered … … 4555 4555 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 4556 4556 </em></span> 4557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255041 3"></a>4557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550416"></a> 4558 4558 4559 4559 <a name="PRINTER"></a>printer 4560 </h3></div></div></div><a class="indexterm" name="id255041 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550444"></a>4560 </h3></div></div></div><a class="indexterm" name="id2550417"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550447"></a> 4561 4561 4562 4562 printer name (S) 4563 </h3></div></div></div><a class="indexterm" name="id255044 5"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4563 </h3></div></div></div><a class="indexterm" name="id2550448"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4564 4564 This parameter specifies the name of the printer to which print jobs spooled through a printable service 4565 4565 will be sent. … … 4574 4574 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 4575 4575 </em></span> 4576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255053 2"></a>4576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550535"></a> 4577 4577 4578 4578 printing (S) 4579 </h3></div></div></div><a class="indexterm" name="id255053 3"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is4579 </h3></div></div></div><a class="indexterm" name="id2550536"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 4580 4580 interpreted on your system. It also affects the default values for 4581 4581 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 4591 4591 the value for the <em class="parameter"><code>printing</code></em> option since it will 4592 4592 reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section"> 4593 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25506 67"></a>4593 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550670"></a> 4594 4594 4595 4595 printjob username (S) 4596 </h3></div></div></div><a class="indexterm" name="id25506 68"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4596 </h3></div></div></div><a class="indexterm" name="id2550671"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4597 4597 passed to the printing system. Usually, the username is sent, 4598 4598 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4600 4600 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4601 4601 </em></span> 4602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25507 28"></a>4602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550731"></a> 4603 4603 4604 4604 private dir (G) 4605 </h3></div></div></div><a class="indexterm" name="id255073 0"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4605 </h3></div></div></div><a class="indexterm" name="id2550732"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4606 4606 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4607 4607 and <code class="filename">secrets.tdb</code>. 4608 4608 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4609 4609 </em></span> 4610 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255078 2"></a>4610 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550785"></a> 4611 4611 4612 4612 profile acls (S) 4613 </h3></div></div></div><a class="indexterm" name="id255078 4"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4613 </h3></div></div></div><a class="indexterm" name="id2550786"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4614 4614 This boolean parameter was added to fix the problems that people have been 4615 4615 having with storing user profiles on Samba shares from Windows 2000 or … … 4639 4639 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4640 4640 </em></span> 4641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255085 5"></a>4641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550858"></a> 4642 4642 4643 4643 queuepause command (S) 4644 </h3></div></div></div><a class="indexterm" name="id255085 6"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4644 </h3></div></div></div><a class="indexterm" name="id2550859"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4645 4645 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4646 4646 a printer name as its only parameter and stops the printer queue, … … 4653 4653 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4654 4654 </em></span> 4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255093 2"></a>4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550934"></a> 4656 4656 4657 4657 queueresume command (S) 4658 </h3></div></div></div><a class="indexterm" name="id255093 3"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4658 </h3></div></div></div><a class="indexterm" name="id2550935"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4659 4659 executed on the server host in order to resume the printer queue. It 4660 4660 is the command to undo the behavior that is caused by the … … 4671 4671 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4672 4672 </em></span> 4673 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255103 4"></a>4673 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551036"></a> 4674 4674 4675 4675 read list (S) 4676 </h3></div></div></div><a class="indexterm" name="id255103 5"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>4676 </h3></div></div></div><a class="indexterm" name="id2551038"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4677 4677 This is a list of users that are given read-only access to a service. If the connecting user is in this list 4678 4678 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set … … 4684 4684 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 4685 4685 </em></span> 4686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255113 3"></a>4686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551136"></a> 4687 4687 4688 4688 read only (S) 4689 </h3></div></div></div><a class="indexterm" name="id255113 4"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users4689 </h3></div></div></div><a class="indexterm" name="id2551137"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 4690 4690 of a service may not create or modify files in the service's 4691 4691 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 4693 4693 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 4694 4694 </em></span> 4695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255121 0"></a>4695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551213"></a> 4696 4696 4697 4697 read raw (G) 4698 </h3></div></div></div><a class="indexterm" name="id255121 1"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server4698 </h3></div></div></div><a class="indexterm" name="id2551214"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4699 4699 will support the raw read SMB requests when transferring data 4700 4700 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 4705 4705 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 4706 4706 </em></span> 4707 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255127 0"></a>4707 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551273"></a> 4708 4708 4709 4709 realm (G) 4710 </h3></div></div></div><a class="indexterm" name="id255127 1"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is4710 </h3></div></div></div><a class="indexterm" name="id2551274"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4711 4711 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 4712 4712 is usually set to the DNS name of the kerberos server. … … 4715 4715 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 4716 4716 </em></span> 4717 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255133 5"></a>4717 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551338"></a> 4718 4718 4719 4719 registry shares (G) 4720 </h3></div></div></div><a class="indexterm" name="id255133 6"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>4720 </h3></div></div></div><a class="indexterm" name="id2551339"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4721 4721 This turns on or off support for share definitions read from 4722 4722 registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take … … 4733 4733 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code> 4734 4734 </em></span> 4735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255142 1"></a>4735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551424"></a> 4736 4736 4737 4737 remote announce (G) 4738 </h3></div></div></div><a class="indexterm" name="id255142 2"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>4738 </h3></div></div></div><a class="indexterm" name="id2551425"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4739 4739 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself 4740 4740 to arbitrary IP addresses with an arbitrary workgroup name. … … 4760 4760 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 4761 4761 </em></span> 4762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255152 6"></a>4762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551529"></a> 4763 4763 4764 4764 remote browse sync (G) 4765 </h3></div></div></div><a class="indexterm" name="id25515 27"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>4765 </h3></div></div></div><a class="indexterm" name="id2551530"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4766 4766 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4767 4767 synchronization of browse lists with the master browser of a Samba … … 4795 4795 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 4796 4796 </em></span> 4797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25516 39"></a>4797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551642"></a> 4798 4798 4799 4799 rename user script (G) 4800 </h3></div></div></div><a class="indexterm" name="id255164 0"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>4800 </h3></div></div></div><a class="indexterm" name="id2551643"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4801 4801 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4802 4802 </p><p> … … 4816 4816 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 4817 4817 </em></span> 4818 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25517 29"></a>4818 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551731"></a> 4819 4819 4820 4820 reset on zero vc (G) 4821 </h3></div></div></div><a class="indexterm" name="id255173 0"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>4821 </h3></div></div></div><a class="indexterm" name="id2551732"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4822 4822 This boolean option controls whether an incoming session setup 4823 4823 should kill other connections coming from the same IP. This matches … … 4838 4838 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 4839 4839 </em></span> 4840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255178 1"></a>4840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551784"></a> 4841 4841 4842 4842 restrict anonymous (G) 4843 </h3></div></div></div><a class="indexterm" name="id255178 2"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and4843 </h3></div></div></div><a class="indexterm" name="id2551785"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 4844 4844 group list information is returned for an anonymous connection. 4845 4845 and mirrors the effects of the … … 4864 4864 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 4865 4865 </em></span> 4866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255187 3"></a>4866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551876"></a> 4867 4867 4868 4868 <a name="ROOT"></a>root 4869 </h3></div></div></div><a class="indexterm" name="id255187 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551906"></a>4869 </h3></div></div></div><a class="indexterm" name="id2551877"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551909"></a> 4870 4870 4871 4871 <a name="ROOTDIR"></a>root dir 4872 </h3></div></div></div><a class="indexterm" name="id25519 07"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551938"></a>4872 </h3></div></div></div><a class="indexterm" name="id2551910"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551940"></a> 4873 4873 4874 4874 root directory (G) 4875 </h3></div></div></div><a class="indexterm" name="id25519 39"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.4875 </h3></div></div></div><a class="indexterm" name="id2551942"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4876 4876 Change its root directory) to this directory on startup. This is 4877 4877 not strictly necessary for secure operation. Even without it the … … 4896 4896 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 4897 4897 </em></span> 4898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255206 2"></a>4898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552064"></a> 4899 4899 4900 4900 root postexec (S) 4901 </h3></div></div></div><a class="indexterm" name="id255206 3"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4901 </h3></div></div></div><a class="indexterm" name="id2552066"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4902 4902 This is the same as the <em class="parameter"><code>postexec</code></em> 4903 4903 parameter except that the command is run as root. This is useful for … … 4905 4905 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 4906 4906 </em></span> 4907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255211 0"></a>4907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552113"></a> 4908 4908 4909 4909 root preexec close (S) 4910 </h3></div></div></div><a class="indexterm" name="id255211 2"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close4910 </h3></div></div></div><a class="indexterm" name="id2552114"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 4911 4911 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 4912 4912 </em></span> 4913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25521 59"></a>4913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552162"></a> 4914 4914 4915 4915 root preexec (S) 4916 </h3></div></div></div><a class="indexterm" name="id255216 0"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4916 </h3></div></div></div><a class="indexterm" name="id2552163"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4917 4917 This is the same as the <em class="parameter"><code>preexec</code></em> 4918 4918 parameter except that the command is run as root. This is useful for … … 4920 4920 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 4921 4921 </em></span> 4922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25522 07"></a>4922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552210"></a> 4923 4923 4924 4924 security mask (S) 4925 </h3></div></div></div><a class="indexterm" name="id25522 08"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>4925 </h3></div></div></div><a class="indexterm" name="id2552211"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 4926 4926 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 4927 4927 UNIX permission on a file using the native NT security dialog box. … … 4942 4942 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 4943 4943 </em></span> 4944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255231 4"></a>4944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552316"></a> 4945 4945 4946 4946 security (G) 4947 </h3></div></div></div><a class="indexterm" name="id255231 5"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to4947 </h3></div></div></div><a class="indexterm" name="id2552317"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 4948 4948 Samba and is one of the most important settings in the <code class="filename"> 4949 4949 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 5069 5069 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 5070 5070 </em></span> 5071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255319 2"></a>5071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553195"></a> 5072 5072 5073 5073 server schannel (G) 5074 </h3></div></div></div><a class="indexterm" name="id255319 4"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>5074 </h3></div></div></div><a class="indexterm" name="id2553196"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 5075 5075 This controls whether the server offers or even demands the use of the netlogon schannel. 5076 5076 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. … … 5083 5083 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 5084 5084 </em></span> 5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25533 08"></a>5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553311"></a> 5086 5086 5087 5087 server signing (G) 5088 </h3></div></div></div><a class="indexterm" name="id25533 09"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires5088 </h3></div></div></div><a class="indexterm" name="id2553312"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires 5089 5089 the client it talks to to use SMB signing. Possible values 5090 5090 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 5094 5094 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 5095 5095 </em></span> 5096 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255337 0"></a>5096 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553372"></a> 5097 5097 5098 5098 server string (G) 5099 </h3></div></div></div><a class="indexterm" name="id255337 1"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print5099 </h3></div></div></div><a class="indexterm" name="id2553373"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 5100 5100 manager and next to the IPC connection in <code class="literal">net view</code>. It 5101 5101 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 5106 5106 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 5107 5107 </em></span> 5108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255346 1"></a>5108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553464"></a> 5109 5109 5110 5110 set directory (S) 5111 </h3></div></div></div><a class="indexterm" name="id255346 2"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>5111 </h3></div></div></div><a class="indexterm" name="id2553465"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5112 5112 If <code class="literal">set directory = no</code>, then users of the 5113 5113 service may not use the setdir command to change directory. … … 5118 5118 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 5119 5119 </em></span> 5120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255352 1"></a>5120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553524"></a> 5121 5121 5122 5122 set primary group script (G) 5123 </h3></div></div></div><a class="indexterm" name="id255352 2"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a5123 </h3></div></div></div><a class="indexterm" name="id2553525"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 5124 5124 primary group in addition to the auxiliary groups. This script 5125 5125 sets the primary group in the unix userdatase when an … … 5133 5133 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 5134 5134 </em></span> 5135 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255360 3"></a>5135 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553606"></a> 5136 5136 5137 5137 set quota command (G) 5138 </h3></div></div></div><a class="indexterm" name="id255360 4"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used5138 </h3></div></div></div><a class="indexterm" name="id2553607"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 5139 5139 whenever there is no operating system API available from the OS that 5140 5140 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 5146 5146 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 5147 5147 </em></span> 5148 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255376 6"></a>5148 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553769"></a> 5149 5149 5150 5150 share modes (S) 5151 </h3></div></div></div><a class="indexterm" name="id25537 67"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of5151 </h3></div></div></div><a class="indexterm" name="id2553770"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 5152 5152 the <em class="parameter"><code>share modes</code></em> during a file open. These 5153 5153 modes are used by clients to gain exclusive read or write access … … 5162 5162 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 5163 5163 </em></span> 5164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255386 0"></a>5164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553863"></a> 5165 5165 5166 5166 short preserve case (S) 5167 </h3></div></div></div><a class="indexterm" name="id255386 1"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>5167 </h3></div></div></div><a class="indexterm" name="id2553864"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5168 5168 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 5169 5169 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>. … … 5172 5172 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 5173 5173 </em></span> 5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25539 39"></a>5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553942"></a> 5175 5175 5176 5176 show add printer wizard (G) 5177 </h3></div></div></div><a class="indexterm" name="id255394 0"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support5177 </h3></div></div></div><a class="indexterm" name="id2553943"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 5178 5178 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 5179 5179 appear on Samba hosts in the share listing. Normally this folder will … … 5193 5193 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 5194 5194 </em></span> 5195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255402 3"></a>5195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554026"></a> 5196 5196 5197 5197 shutdown script (G) 5198 </h3></div></div></div><a class="indexterm" name="id255402 4"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5198 </h3></div></div></div><a class="indexterm" name="id2554027"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5199 5199 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5200 5200 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, … … 5221 5221 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5222 5222 </em></span> 5223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255417 7"></a>5223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554179"></a> 5224 5224 5225 5225 smb encrypt (S) 5226 </h3></div></div></div><a class="indexterm" name="id25541 78"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5226 </h3></div></div></div><a class="indexterm" name="id2554180"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5227 5227 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5228 5228 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5253 5253 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5254 5254 </em></span> 5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255428 3"></a>5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554286"></a> 5256 5256 5257 5257 smb passwd file (G) 5258 </h3></div></div></div><a class="indexterm" name="id255428 4"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5258 </h3></div></div></div><a class="indexterm" name="id2554287"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5259 5259 default the path to the smbpasswd file is compiled into Samba.</p><p> 5260 5260 An example of use is: … … 5264 5264 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5265 5265 </em></span> 5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255433 7"></a>5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554339"></a> 5267 5267 5268 5268 smb ports (G) 5269 </h3></div></div></div><a class="indexterm" name="id25543 38"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5270 </em></span> 5271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25543 78"></a>5269 </h3></div></div></div><a class="indexterm" name="id2554340"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5270 </em></span> 5271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554381"></a> 5272 5272 5273 5273 socket address (G) 5274 </h3></div></div></div><a class="indexterm" name="id255438 0"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5274 </h3></div></div></div><a class="indexterm" name="id2554382"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5275 5275 address Samba will listen for connections on. This is used to 5276 5276 support multiple virtual interfaces on the one server, each … … 5280 5280 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5281 5281 </em></span> 5282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255444 4"></a>5282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554446"></a> 5283 5283 5284 5284 socket options (G) 5285 </h3></div></div></div><a class="indexterm" name="id255444 5"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5285 </h3></div></div></div><a class="indexterm" name="id2554447"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5286 5286 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5287 5287 of the operating systems which allow the connection to be … … 5311 5311 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5312 5312 </em></span> 5313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255465 4"></a>5313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554657"></a> 5314 5314 5315 5315 stat cache (G) 5316 </h3></div></div></div><a class="indexterm" name="id255465 5"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5316 </h3></div></div></div><a class="indexterm" name="id2554658"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5317 5317 speed up case insensitive name mappings. You should never need 5318 5318 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5319 5319 </em></span> 5320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255470 5"></a>5320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554708"></a> 5321 5321 5322 5322 store dos attributes (S) 5323 </h3></div></div></div><a class="indexterm" name="id255470 6"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5323 </h3></div></div></div><a class="indexterm" name="id2554709"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5324 5324 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5325 5325 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5333 5333 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5334 5334 </em></span> 5335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255482 7"></a>5335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554829"></a> 5336 5336 5337 5337 strict allocate (S) 5338 </h3></div></div></div><a class="indexterm" name="id25548 28"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5338 </h3></div></div></div><a class="indexterm" name="id2554830"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5339 5339 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5340 5340 the server will change from UNIX behaviour of not committing real … … 5348 5348 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 5349 5349 </em></span> 5350 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554 897"></a>5350 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554900"></a> 5351 5351 5352 5352 strict locking (S) 5353 </h3></div></div></div><a class="indexterm" name="id2554 898"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5353 </h3></div></div></div><a class="indexterm" name="id2554901"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5354 5354 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5355 5355 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5367 5367 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5368 5368 </em></span> 5369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255497 6"></a>5369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554979"></a> 5370 5370 5371 5371 strict sync (S) 5372 </h3></div></div></div><a class="indexterm" name="id25549 77"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5372 </h3></div></div></div><a class="indexterm" name="id2554980"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5373 5373 shell) seem to confuse flushing buffer contents to disk with doing 5374 5374 a sync to disk. Under UNIX, a sync call forces the process to be … … 5384 5384 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5385 5385 </em></span> 5386 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255504 1"></a>5386 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555044"></a> 5387 5387 5388 5388 svcctl list (G) 5389 </h3></div></div></div><a class="indexterm" name="id255504 2"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5389 </h3></div></div></div><a class="indexterm" name="id2555045"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5390 5390 will use for starting and stopping Unix services via the Win32 5391 5391 ServiceControl API. This allows Windows administrators to … … 5400 5400 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5401 5401 </em></span> 5402 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255512 6"></a>5402 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555129"></a> 5403 5403 5404 5404 sync always (S) 5405 </h3></div></div></div><a class="indexterm" name="id25551 27"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5405 </h3></div></div></div><a class="indexterm" name="id2555130"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5406 5406 whether writes will always be written to stable storage before 5407 5407 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5414 5414 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5415 5415 </em></span> 5416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555 197"></a>5416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555200"></a> 5417 5417 5418 5418 syslog only (G) 5419 </h3></div></div></div><a class="indexterm" name="id2555 198"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5419 </h3></div></div></div><a class="indexterm" name="id2555201"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5420 5420 If this parameter is set then Samba debug messages are logged into the system 5421 5421 syslog only, and not to the debug log files. There still will be some … … 5423 5423 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5424 5424 </em></span> 5425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255524 4"></a>5425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555247"></a> 5426 5426 5427 5427 syslog (G) 5428 </h3></div></div></div><a class="indexterm" name="id255524 5"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5428 </h3></div></div></div><a class="indexterm" name="id2555248"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5429 5429 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5430 5430 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5437 5437 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5438 5438 </em></span> 5439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255531 5"></a>5439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555317"></a> 5440 5440 5441 5441 template homedir (G) 5442 </h3></div></div></div><a class="indexterm" name="id255531 6"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5442 </h3></div></div></div><a class="indexterm" name="id2555318"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5443 5443 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5444 5444 parameter to fill in the home directory for that user. If the … … 5448 5448 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5449 5449 </em></span> 5450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255538 0"></a>5450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555383"></a> 5451 5451 5452 5452 template shell (G) 5453 </h3></div></div></div><a class="indexterm" name="id255538 1"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5453 </h3></div></div></div><a class="indexterm" name="id2555384"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5454 5454 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5455 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25554 19"></a>5455 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555422"></a> 5456 5456 5457 5457 time offset (G) 5458 </h3></div></div></div><a class="indexterm" name="id255542 0"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5458 </h3></div></div></div><a class="indexterm" name="id2555423"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5459 5459 to the normal GMT to local time conversion. This is useful if 5460 5460 you are serving a lot of PCs that have incorrect daylight … … 5463 5463 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5464 5464 </em></span> 5465 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25554 79"></a>5465 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555482"></a> 5466 5466 5467 5467 time server (G) 5468 </h3></div></div></div><a class="indexterm" name="id255548 0"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5468 </h3></div></div></div><a class="indexterm" name="id2555483"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5469 5469 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5470 5470 </em></span> 5471 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25555 29"></a>5471 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555532"></a> 5472 5472 5473 5473 unix charset (G) 5474 </h3></div></div></div><a class="indexterm" name="id255553 0"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5474 </h3></div></div></div><a class="indexterm" name="id2555533"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5475 5475 Samba runs on uses. Samba needs to know this in order to be able to 5476 5476 convert text to the charsets other SMB clients use. … … 5481 5481 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5482 5482 </em></span> 5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255559 5"></a>5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555598"></a> 5484 5484 5485 5485 unix extensions (G) 5486 </h3></div></div></div><a class="indexterm" name="id255559 6"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5486 </h3></div></div></div><a class="indexterm" name="id2555599"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5487 5487 implments the CIFS UNIX extensions, as defined by HP. 5488 5488 These extensions enable Samba to better serve UNIX CIFS clients … … 5491 5491 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5492 5492 </em></span> 5493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255564 3"></a>5493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555645"></a> 5494 5494 5495 5495 unix password sync (G) 5496 </h3></div></div></div><a class="indexterm" name="id255564 4"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5496 </h3></div></div></div><a class="indexterm" name="id2555646"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5497 5497 attempts to synchronize the UNIX password with the SMB password 5498 5498 when the encrypted SMB password in the smbpasswd file is changed. … … 5503 5503 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5504 5504 </em></span> 5505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255570 4"></a>5505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555706"></a> 5506 5506 5507 5507 update encrypted (G) 5508 </h3></div></div></div><a class="indexterm" name="id255570 5"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>5508 </h3></div></div></div><a class="indexterm" name="id2555708"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5509 5509 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5510 5510 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to … … 5524 5524 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5525 5525 </em></span> 5526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255582 2"></a>5526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555825"></a> 5527 5527 5528 5528 use client driver (S) 5529 </h3></div></div></div><a class="indexterm" name="id255582 3"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005529 </h3></div></div></div><a class="indexterm" name="id2555826"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5530 5530 clients. It has no effect on Windows 95/98/ME clients. When 5531 5531 serving a printer to Windows NT/2000 clients without first installing … … 5552 5552 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5553 5553 </em></span> 5554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255591 4"></a>5554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555917"></a> 5555 5555 5556 5556 use kerberos keytab (G) 5557 </h3></div></div></div><a class="indexterm" name="id255591 6"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5557 </h3></div></div></div><a class="indexterm" name="id2555918"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5558 5558 Specifies whether Samba should attempt to maintain service principals in the systems 5559 5559 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5567 5567 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5568 5568 </em></span> 5569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255598 3"></a>5569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555985"></a> 5570 5570 5571 5571 use mmap (G) 5572 </h3></div></div></div><a class="indexterm" name="id255598 4"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can5572 </h3></div></div></div><a class="indexterm" name="id2555986"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5573 5573 depend on mmap working correctly on the running system. Samba requires a coherent 5574 5574 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5579 5579 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5580 5580 </em></span> 5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255603 5"></a>5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556038"></a> 5582 5582 5583 5583 username level (G) 5584 </h3></div></div></div><a class="indexterm" name="id255603 6"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at5584 </h3></div></div></div><a class="indexterm" name="id2556039"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5585 5585 the real UNIX username, as many DOS clients send an all-uppercase 5586 5586 username. By default Samba tries all lowercase, followed by the … … 5597 5597 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5598 5598 </em></span> 5599 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255611 7"></a>5599 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556119"></a> 5600 5600 5601 5601 username map script (G) 5602 </h3></div></div></div><a class="indexterm" name="id25561 18"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5602 </h3></div></div></div><a class="indexterm" name="id2556120"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5603 5603 <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a> parameter. This parameter 5604 5604 specifies and external program or script that must accept a single … … 5611 5611 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5612 5612 </em></span> 5613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255619 3"></a>5613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556195"></a> 5614 5614 5615 5615 username map (G) 5616 </h3></div></div></div><a class="indexterm" name="id255619 4"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5616 </h3></div></div></div><a class="indexterm" name="id2556196"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5617 5617 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5618 5618 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5698 5698 # no username map</code> 5699 5699 </em></span> 5700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255647 3"></a>5700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556476"></a> 5701 5701 5702 5702 <a name="USER"></a>user 5703 </h3></div></div></div><a class="indexterm" name="id255647 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556505"></a>5703 </h3></div></div></div><a class="indexterm" name="id2556477"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556508"></a> 5704 5704 5705 5705 <a name="USERS"></a>users 5706 </h3></div></div></div><a class="indexterm" name="id255650 6"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556537"></a>5706 </h3></div></div></div><a class="indexterm" name="id2556509"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556539"></a> 5707 5707 5708 5708 username (S) 5709 </h3></div></div></div><a class="indexterm" name="id25565 38"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited5709 </h3></div></div></div><a class="indexterm" name="id2556540"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 5710 5710 list, in which case the supplied password will be tested against 5711 5711 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 5745 5745 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5746 5746 </em></span> 5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255670 7"></a>5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556709"></a> 5748 5748 5749 5749 usershare allow guests (G) 5750 </h3></div></div></div><a class="indexterm" name="id25567 08"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5750 </h3></div></div></div><a class="indexterm" name="id2556710"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5751 5751 to be accessed by non-authenticated users or not. It is the equivalent 5752 5752 of allowing people who can create a share the option of setting … … 5755 5755 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5756 5756 </em></span> 5757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255676 0"></a>5757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556762"></a> 5758 5758 5759 5759 usershare max shares (G) 5760 </h3></div></div></div><a class="indexterm" name="id255676 1"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5760 </h3></div></div></div><a class="indexterm" name="id2556763"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5761 5761 that are allowed to be created by users belonging to the group owning the 5762 5762 usershare directory. If set to zero (the default) user defined shares are ignored. 5763 5763 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5764 5764 </em></span> 5765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255680 5"></a>5765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556808"></a> 5766 5766 5767 5767 usershare owner only (G) 5768 </h3></div></div></div><a class="indexterm" name="id255680 6"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5768 </h3></div></div></div><a class="indexterm" name="id2556809"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5769 5769 a user defined shares must be owned by the user creating the 5770 5770 user defined share or not. If set to True (the default) then … … 5776 5776 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 5777 5777 </em></span> 5778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255685 5"></a>5778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556857"></a> 5779 5779 5780 5780 usershare path (G) 5781 </h3></div></div></div><a class="indexterm" name="id255685 6"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the5781 </h3></div></div></div><a class="indexterm" name="id2556858"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 5782 5782 filesystem used to store the user defined share definition files. 5783 5783 This directory must be owned by root, and have no access for … … 5800 5800 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 5801 5801 </em></span> 5802 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255692 6"></a>5802 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556928"></a> 5803 5803 5804 5804 usershare prefix allow list (G) 5805 </h3></div></div></div><a class="indexterm" name="id255692 7"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5805 </h3></div></div></div><a class="indexterm" name="id2556929"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5806 5806 the root of which are allowed to be exported by user defined share definitions. 5807 5807 If the pathname exported doesn't start with one of the strings in this … … 5818 5818 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5819 5819 </em></span> 5820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255 6998"></a>5820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557001"></a> 5821 5821 5822 5822 usershare prefix deny list (G) 5823 </h3></div></div></div><a class="indexterm" name="id255 6999"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5823 </h3></div></div></div><a class="indexterm" name="id2557002"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5824 5824 the root of which are NOT allowed to be exported by user defined share definitions. 5825 5825 If the pathname exported starts with one of the strings in this … … 5837 5837 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 5838 5838 </em></span> 5839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255707 3"></a>5839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557076"></a> 5840 5840 5841 5841 usershare template share (G) 5842 </h3></div></div></div><a class="indexterm" name="id255707 4"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters5842 </h3></div></div></div><a class="indexterm" name="id2557077"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 5843 5843 such as path, guest ok etc. This parameter allows usershares to 5844 5844 "cloned" from an existing share. If "usershare template share" … … 5855 5855 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 5856 5856 </em></span> 5857 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255714 6"></a>5857 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557148"></a> 5858 5858 5859 5859 use sendfile (S) 5860 </h3></div></div></div><a class="indexterm" name="id255714 7"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5860 </h3></div></div></div><a class="indexterm" name="id2557149"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5861 5861 system call is supported by the underlying operating system, then some SMB read calls 5862 5862 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5867 5867 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5868 5868 </em></span> 5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255720 3"></a>5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557205"></a> 5870 5870 5871 5871 use spnego (G) 5872 </h3></div></div></div><a class="indexterm" name="id255720 4"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5872 </h3></div></div></div><a class="indexterm" name="id2557206"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5873 5873 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5874 5874 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5878 5878 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5879 5879 </em></span> 5880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255725 2"></a>5880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557255"></a> 5881 5881 5882 5882 utmp directory (G) 5883 </h3></div></div></div><a class="indexterm" name="id255725 4"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5883 </h3></div></div></div><a class="indexterm" name="id2557256"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5884 5884 been configured and compiled with the option <code class="literal"> 5885 5885 --with-utmp</code>. It specifies a directory pathname that is … … 5893 5893 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 5894 5894 </em></span> 5895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255733 0"></a>5895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557333"></a> 5896 5896 5897 5897 utmp (G) 5898 </h3></div></div></div><a class="indexterm" name="id255733 2"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>5898 </h3></div></div></div><a class="indexterm" name="id2557334"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5899 5899 This boolean parameter is only available if Samba has been configured and compiled 5900 5900 with the option <code class="literal">--with-utmp</code>. If set to … … 5908 5908 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 5909 5909 </em></span> 5910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255739 3"></a>5910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557396"></a> 5911 5911 5912 5912 valid users (S) 5913 </h3></div></div></div><a class="indexterm" name="id255739 4"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>5913 </h3></div></div></div><a class="indexterm" name="id2557397"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 5914 5914 This is a list of users that should be allowed to login to this service. Names starting with 5915 5915 '@', '+' and '&' are interpreted using the same rules as described in the … … 5927 5927 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 5928 5928 </em></span> 5929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255748 4"></a>5929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557487"></a> 5930 5930 5931 5931 -valid (S) 5932 </h3></div></div></div><a class="indexterm" name="id255748 6"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is5932 </h3></div></div></div><a class="indexterm" name="id2557488"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5933 5933 valid and thus can be used. When this parameter is set to false, 5934 5934 the share will be in no way visible nor accessible. … … 5939 5939 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 5940 5940 </em></span> 5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255753 4"></a>5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557536"></a> 5942 5942 5943 5943 veto files (S) 5944 </h3></div></div></div><a class="indexterm" name="id255753 5"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5944 </h3></div></div></div><a class="indexterm" name="id2557537"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5945 5945 This is a list of files and directories that are neither visible nor accessible. Each entry in 5946 5946 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 5973 5973 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 5974 5974 </em></span> 5975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255765 2"></a>5975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557655"></a> 5976 5976 5977 5977 veto oplock files (S) 5978 </h3></div></div></div><a class="indexterm" name="id255765 4"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5978 </h3></div></div></div><a class="indexterm" name="id2557656"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5979 5979 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> 5980 5980 parameter is turned on for a share. It allows the Samba administrator … … 5997 5997 # No files are vetoed for oplock grants</code> 5998 5998 </em></span> 5999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255774 6"></a>5999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557748"></a> 6000 6000 6001 6001 <a name="VFSOBJECT"></a>vfs object 6002 </h3></div></div></div><a class="indexterm" name="id255774 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557778"></a>6002 </h3></div></div></div><a class="indexterm" name="id2557749"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557780"></a> 6003 6003 6004 6004 vfs objects (S) 6005 </h3></div></div></div><a class="indexterm" name="id25577 79"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which6005 </h3></div></div></div><a class="indexterm" name="id2557781"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 6006 6006 are used for Samba VFS I/O operations. By default, normal 6007 6007 disk I/O operations are used but these can be overloaded … … 6010 6010 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6011 6011 </em></span> 6012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25578 38"></a>6012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557840"></a> 6013 6013 6014 6014 volume (S) 6015 </h3></div></div></div><a class="indexterm" name="id25578 39"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label6015 </h3></div></div></div><a class="indexterm" name="id2557841"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 6016 6016 returned for a share. Useful for CDROMs with installation programs 6017 6017 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 6018 6018 # the name of the share</code> 6019 6019 </em></span> 6020 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255788 1"></a>6020 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557884"></a> 6021 6021 6022 6022 wide links (S) 6023 </h3></div></div></div><a class="indexterm" name="id255788 2"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6023 </h3></div></div></div><a class="indexterm" name="id2557885"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6024 6024 in the UNIX file system may be followed by the server. Links 6025 6025 that point to areas within the directory tree exported by the … … 6029 6029 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 6030 6030 </em></span> 6031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255793 3"></a>6031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557936"></a> 6032 6032 6033 6033 winbind cache time (G) 6034 </h3></div></div></div><a class="indexterm" name="id255793 4"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6034 </h3></div></div></div><a class="indexterm" name="id2557937"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6035 6035 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6036 6036 user and group information before querying a Windows NT server … … 6040 6040 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6041 6041 </em></span> 6042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255800 5"></a>6042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558007"></a> 6043 6043 6044 6044 winbind enum groups (G) 6045 </h3></div></div></div><a class="indexterm" name="id255800 6"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6045 </h3></div></div></div><a class="indexterm" name="id2558008"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6046 6046 the enumeration of groups through the <code class="literal">setgrent()</code>, 6047 6047 <code class="literal">getgrent()</code> and … … 6051 6051 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6052 6052 </em></span> 6053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255809 5"></a>6053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558098"></a> 6054 6054 6055 6055 winbind enum users (G) 6056 </h3></div></div></div><a class="indexterm" name="id255809 6"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be6056 </h3></div></div></div><a class="indexterm" name="id2558099"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 6057 6057 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 6058 6058 <code class="literal">getpwent()</code> and … … 6066 6066 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6067 6067 </em></span> 6068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25581 89"></a>6068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558191"></a> 6069 6069 6070 6070 winbind expand groups (G) 6071 </h3></div></div></div><a class="indexterm" name="id255819 0"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6071 </h3></div></div></div><a class="indexterm" name="id2558192"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6072 6072 will traverse when flattening nested group memberships 6073 6073 of Windows domain groups. This is different from the … … 6081 6081 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 6082 6082 </em></span> 6083 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25582 57"></a>6083 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558260"></a> 6084 6084 6085 6085 winbind nested groups (G) 6086 </h3></div></div></div><a class="indexterm" name="id25582 58"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested6086 </h3></div></div></div><a class="indexterm" name="id2558261"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 6087 6087 groups. Nested groups are also called local groups or 6088 6088 aliases. They work like their counterparts in Windows: Nested … … 6092 6092 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6093 6093 </em></span> 6094 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255830 7"></a>6094 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558309"></a> 6095 6095 6096 6096 winbind normalize names (G) 6097 </h3></div></div></div><a class="indexterm" name="id25583 08"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6097 </h3></div></div></div><a class="indexterm" name="id2558310"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6098 6098 whitespace in user and group names with an underscore (_) character. 6099 6099 For example, whether the name "Space Kadet" should be … … 6107 6107 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 6108 6108 </em></span> 6109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255837 3"></a>6109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558376"></a> 6110 6110 6111 6111 winbind nss info (G) 6112 </h3></div></div></div><a class="indexterm" name="id255837 4"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name6112 </h3></div></div></div><a class="indexterm" name="id2558377"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 6113 6113 Service Information to construct a user's home directory and login shell. 6114 6114 Currently the following settings are available: … … 6132 6132 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 6133 6133 </em></span> 6134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255849 3"></a>6134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558495"></a> 6135 6135 6136 6136 winbind offline logon (G) 6137 </h3></div></div></div><a class="indexterm" name="id255849 4"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6137 </h3></div></div></div><a class="indexterm" name="id2558496"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6138 6138 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6139 6139 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6143 6143 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 6144 6144 </em></span> 6145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255856 2"></a>6145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558564"></a> 6146 6146 6147 6147 winbind refresh tickets (G) 6148 </h3></div></div></div><a class="indexterm" name="id255856 3"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets6148 </h3></div></div></div><a class="indexterm" name="id2558565"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 6149 6149 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 6150 6150 … … 6153 6153 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6154 6154 </em></span> 6155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 28"></a>6155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558631"></a> 6156 6156 6157 6157 winbind rpc only (G) 6158 </h3></div></div></div><a class="indexterm" name="id255863 0"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6158 </h3></div></div></div><a class="indexterm" name="id2558632"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6159 6159 Setting this parameter to <code class="literal">yes</code> forces 6160 6160 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6162 6162 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 6163 6163 </em></span> 6164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 77"></a>6164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558680"></a> 6165 6165 6166 6166 winbind separator (G) 6167 </h3></div></div></div><a class="indexterm" name="id25586 78"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character6167 </h3></div></div></div><a class="indexterm" name="id2558681"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 6168 6168 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 6169 6169 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 6176 6176 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6177 6177 </em></span> 6178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255876 4"></a>6178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558767"></a> 6179 6179 6180 6180 winbind trusted domains only (G) 6181 </h3></div></div></div><a class="indexterm" name="id255876 5"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6181 </h3></div></div></div><a class="indexterm" name="id2558768"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6182 6182 This parameter is designed to allow Samba servers that are members 6183 6183 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6191 6191 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6192 6192 </em></span> 6193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255884 4"></a>6193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558846"></a> 6194 6194 6195 6195 winbind use default domain (G) 6196 </h3></div></div></div><a class="indexterm" name="id255884 5"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6196 </h3></div></div></div><a class="indexterm" name="id2558847"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6197 6197 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6198 6198 without domain component in their username. Users without a domain … … 6204 6204 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 6205 6205 </em></span> 6206 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255891 6"></a>6206 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558919"></a> 6207 6207 6208 6208 wins hook (G) 6209 </h3></div></div></div><a class="indexterm" name="id25589 17"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this6209 </h3></div></div></div><a class="indexterm" name="id2558920"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 6210 6210 allows you to call an external program for all changes to the 6211 6211 WINS database. The primary use for this option is to allow the … … 6228 6228 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6229 6229 program <code class="literal">nsupdate</code> is provided in the examples 6230 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255902 2"></a>6230 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559025"></a> 6231 6231 6232 6232 wins proxy (G) 6233 </h3></div></div></div><a class="indexterm" name="id255902 4"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6233 </h3></div></div></div><a class="indexterm" name="id2559026"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6234 6234 queries on behalf of other hosts. You may need to set this 6235 6235 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6236 6236 </em></span> 6237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25590 77"></a>6237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559080"></a> 6238 6238 6239 6239 wins server (G) 6240 </h3></div></div></div><a class="indexterm" name="id25590 78"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6240 </h3></div></div></div><a class="indexterm" name="id2559081"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6241 6241 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6242 6242 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6257 6257 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6258 6258 </em></span> 6259 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25591 88"></a>6259 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559190"></a> 6260 6260 6261 6261 wins support (G) 6262 </h3></div></div></div><a class="indexterm" name="id25591 89"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6262 </h3></div></div></div><a class="indexterm" name="id2559191"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6263 6263 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6264 6264 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6266 6266 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6267 6267 </em></span> 6268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25592 57"></a>6268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559260"></a> 6269 6269 6270 6270 workgroup (G) 6271 </h3></div></div></div><a class="indexterm" name="id25592 58"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6271 </h3></div></div></div><a class="indexterm" name="id2559261"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6272 6272 appear to be in when queried by clients. Note that this parameter 6273 6273 also controls the Domain name used with … … 6277 6277 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6278 6278 </em></span> 6279 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25593 29"></a>6279 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559332"></a> 6280 6280 6281 6281 <a name="WRITABLE"></a>writable 6282 </h3></div></div></div><a class="indexterm" name="id255933 0"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559360"></a>6282 </h3></div></div></div><a class="indexterm" name="id2559333"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559363"></a> 6283 6283 6284 6284 writeable (S) 6285 </h3></div></div></div><a class="indexterm" name="id2559362"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559399"></a> 6285 </h3></div></div></div><a class="indexterm" name="id2559364"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code> 6286 </em></span> 6287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559414"></a> 6286 6288 6287 6289 write cache size (S) 6288 </h3></div></div></div><a class="indexterm" name="id25594 00"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6290 </h3></div></div></div><a class="indexterm" name="id2559415"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6289 6291 Samba will create an in-memory cache for each oplocked file 6290 6292 (it does <span class="emphasis"><em>not</em></span> do this for … … 6304 6306 # for a 256k cache size per file</code> 6305 6307 </em></span> 6306 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25594 83"></a>6308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559497"></a> 6307 6309 6308 6310 write list (S) 6309 </h3></div></div></div><a class="indexterm" name="id25594 84"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6311 </h3></div></div></div><a class="indexterm" name="id2559498"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6310 6312 This is a list of users that are given read-write access to a service. If the 6311 6313 connecting user is in this list then they will be given write access, no matter … … 6322 6324 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6323 6325 </em></span> 6324 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25595 76"></a>6326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559591"></a> 6325 6327 6326 6328 write raw (G) 6327 </h3></div></div></div><a class="indexterm" name="id25595 77"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6329 </h3></div></div></div><a class="indexterm" name="id2559592"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6328 6330 will support raw write SMB's when transferring data from clients. 6329 6331 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6330 6332 </em></span> 6331 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25596 20"></a>6333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559634"></a> 6332 6334 6333 6335 wtmp directory (G) 6334 </h3></div></div></div><a class="indexterm" name="id25596 21"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6336 </h3></div></div></div><a class="indexterm" name="id2559635"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6335 6337 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6336 6338 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6344 6346 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6345 6347 </em></span> 6346 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id25597 03"></a><h2>WARNINGS</h2><p>6348 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2559718"></a><h2>WARNINGS</h2><p> 6347 6349 Although the configuration file permits service names to contain spaces, your client software may not. 6348 6350 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6357 6359 care when designing these sections. In particular, ensure that the permissions on spool directories are 6358 6360 correct. 6359 </p></div><div class="refsect1" lang="en"><a name="id25597 53"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2559764"></a><h2>SEE ALSO</h2><p>6360 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id25598 44"></a><h2>AUTHOR</h2><p>6361 </p></div><div class="refsect1" lang="en"><a name="id2559768"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2559779"></a><h2>SEE ALSO</h2><p> 6362 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2559858"></a><h2>AUTHOR</h2><p> 6361 6363 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6362 6364 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
