Ignore:
Timestamp:
May 27, 2009, 9:08:03 AM (16 years ago)
Author:
Herwig Bauernfeind
Message:

Update 3.2 branch to 3.2.8 docs

File:
1 edited

Legend:

Unmodified
Added
Removed

  • branches/samba-3.2.x/docs/htmldocs/manpages/smb.conf.5.html

    r226 r231  
    1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.73.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2516071"></a><h2>SYNOPSIS</h2><p>
     1<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2522915"></a><h2>SYNOPSIS</h2><p>
    22        The <code class="filename">smb.conf</code> file is a configuration  file for the Samba suite. <code class="filename">smb.conf</code> contains  runtime configuration information for the Samba programs. The
    33         <code class="filename">smb.conf</code> file is designed to be configured and administered by the
    … …  
    2727        which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved
    2828        in string values. Some items such as create masks are numeric.
    29         </p></div><div class="refsect1" lang="en"><a name="id2479232"></a><h2>SECTION DESCRIPTIONS</h2><p>
     29        </p></div><div class="refsect1" lang="en"><a name="id2483408"></a><h2>SECTION DESCRIPTIONS</h2><p>
    3030        Each section in the configuration file (except for the [global] section) describes a shared resource (known as
    3131        a &#8220;<span class="quote">share</span>&#8221;). The section name is the name of the shared resource and the parameters within the
    … …  
    5656</p><pre class="programlisting">
    5757        <em class="parameter"><code>[foo]</code></em>
    58         <a class="link" href="smb.conf.5.html#PATH">path = /home/bar</a>
    59         <a class="link" href="smb.conf.5.html#READONLY">read only = no</a>
     58        <a class="link" href="smb.conf.5.html#PATH" target="_top">path = /home/bar</a>
     59        <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only = no</a>
    6060</pre><p>
    6161        </p><p>
    … …  
    6565</p><pre class="programlisting">
    6666        <em class="parameter"><code>[aprinter]</code></em>
    67         <a class="link" href="smb.conf.5.html#PATH">path = /usr/spool/public</a>
    68         <a class="link" href="smb.conf.5.html#READONLY">read only = yes</a>
    69         <a class="link" href="smb.conf.5.html#PRINTABLE">printable = yes</a>
    70         <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a>
     67        <a class="link" href="smb.conf.5.html#PATH" target="_top">path = /usr/spool/public</a>
     68        <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only = yes</a>
     69        <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable = yes</a>
     70        <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a>
    7171</pre><p>
    72         </p></div><div class="refsect1" lang="en"><a name="id2478271"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2478277"></a><h3>The [global] section</h3><p>
     72        </p></div><div class="refsect1" lang="en"><a name="id2481484"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2481490"></a><h3>The [global] section</h3><p>
    7373                Parameters in this section apply to the server as a whole, or are defaults for sections that do not
    7474                specifically define certain items. See the notes under PARAMETERS for more information.
    … …  
    106106</p><pre class="programlisting">
    107107<em class="parameter"><code>[homes]</code></em>
    108 <a class="link" href="smb.conf.5.html#READONLY">read only = no</a>
     108<a class="link" href="smb.conf.5.html#READONLY" target="_top">read only = no</a>
    109109</pre><p>
    110110                </p><p>
    … …  
    138138</p><pre class="programlisting">
    139139<em class="parameter"><code>[printers]</code></em>
    140 <a class="link" href="smb.conf.5.html#PATH">path = /usr/spool/public</a>
    141 <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a>
    142 <a class="link" href="smb.conf.5.html#PRINTABLE">printable = yes</a>
     140<a class="link" href="smb.conf.5.html#PATH" target="_top">path = /usr/spool/public</a>
     141<a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a>
     142<a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable = yes</a>
    143143</pre><p>
    144144                </p><p>
    … …  
    161161                <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the
    162162                <code class="literal">printcap name</code> option for more details.
    163                 </p></div></div></div><div class="refsect1" lang="en"><a name="id2478601"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
     163                </p></div></div></div><div class="refsect1" lang="en"><a name="id2481804"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
    164164        their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and
    165165        is controlled by a set of parameters in the [global] section of the smb.conf.
    … …  
    179179
    180180</p><pre class="programlisting">
    181         <a class="link" href="smb.conf.5.html#USERSHAREPATH">usershare path = /usr/local/samba/lib/usershares</a>
    182         <a class="link" href="smb.conf.5.html#USERSHAREMAXSHARES">usershare max shares = 10</a> # (or the desired number of shares)
     181        <a class="link" href="smb.conf.5.html#USERSHAREPATH" target="_top">usershare path = /usr/local/samba/lib/usershares</a>
     182        <a class="link" href="smb.conf.5.html#USERSHAREMAXSHARES" target="_top">usershare max shares = 10</a> # (or the desired number of shares)
    183183</pre><p>
    184184
    185185        to the global
    186186        section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares
    187         using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2525493"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
     187        using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2482031"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
    188188        Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>).  Some parameters
    189189        are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal
    … …  
    197197        find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred
    198198        synonym.
    199         </p></div><div class="refsect1" lang="en"><a name="id2525542"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
     199        </p></div><div class="refsect1" lang="en"><a name="id2532544"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
    200200        Many of the strings that are settable in the config file can take substitutions. For example the option
    201201        &#8220;<span class="quote">path = /tmp/%u</span>&#8221; is interpreted as &#8220;<span class="quote">path = /tmp/john</span>&#8221; if the user connected with the
    … …  
    259259                controls what the default case is for new filenames (ie. files that don't currently exist in the filesystem).
    260260                Default <span class="emphasis"><em>lower</em></span>.  IMPORTANT NOTE: This option will be used to modify the case of
    261                 <span class="emphasis"><em>all</em></span> incoming client filenames, not just new filenames if the options <a class="link" href="smb.conf.5.html#CASESENSITIVE">case sensitive = yes</a>, <a class="link" href="smb.conf.5.html#PRESERVECASE">preserve case = No</a>,
    262                 <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case = No</a> are set.  This change is needed as part of the
     261                <span class="emphasis"><em>all</em></span> incoming client filenames, not just new filenames if the options <a class="link" href="smb.conf.5.html#CASESENSITIVE" target="_top">case sensitive = yes</a>, <a class="link" href="smb.conf.5.html#PRESERVECASE" target="_top">preserve case = No</a>,
     262                <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case = No</a> are set.  This change is needed as part of the
    263263                optimisations for directories containing large numbers of files.
    264264                </p></dd><dt><span class="term">preserve case = yes/no</span></dt><dd><p>
    … …  
    306306                If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account
    307307                =</code> for the service, irrespective of the supplied password.
    308                 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2526284"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
     308                </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2533244"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
    309309                Starting with Samba version 3.2.0, the capability to
    310310                store Samba configuration in the registry is available.
    … …  
    324324                in two different ways:</p><p>Firstly, a registry only configuration is triggered
    325325                by setting
    326                 <a class="link" href="smb.conf.5.html#CONFIGBACKEND">config backend = registry</a>
     326                <a class="link" href="smb.conf.5.html#CONFIGBACKEND" target="_top">config backend = registry</a>
    327327                in the [global] section of <span class="emphasis"><em>smb.conf</em></span>.
    328328                This resets everything that has been read from config files
    … …  
    332332                configuration.</p><p>Secondly, a mixed configuration can be activated
    333333                by a special new meaning of the parameter
    334                 <a class="link" href="smb.conf.5.html#INCLUDE">include = registry</a>
     334                <a class="link" href="smb.conf.5.html#INCLUDE" target="_top">include = registry</a>
    335335                in the [global] section of <span class="emphasis"><em>smb.conf</em></span>.
    336336                This reads the global options from registry with the same
    … …  
    361361                accessing the database file, circumventing the
    362362                server.
    363         </p></div><div class="refsect1" lang="en"><a name="id2526478"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526490"></a>
     363        </p></div><div class="refsect1" lang="en"><a name="id2533419"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533430"></a>
    364364
    365365abort shutdown script (G)
    366 </h3></div></div></div><a class="indexterm" name="id2526491"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
    367         should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
     366</h3></div></div></div><a class="indexterm" name="id2533431"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
     367        should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    368368        right, this command will be run as user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code>
    369369</em></span>
    370370</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code>
    371371</em></span>
    372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526579"></a>
     372</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533509"></a>
    373373
    374374acl check permissions (S)
    375 </h3></div></div></div><a class="indexterm" name="id2526580"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
     375</h3></div></div></div><a class="indexterm" name="id2533510"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
    376376    from a Windows client. If a Windows client doesn't have permissions to delete a file then they
    377377    expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by
    … …  
    393393    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code>
    394394</em></span>
    395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478126"></a>
    396 
    397 acl compatibility (S)
    398 </h3></div></div></div><a class="indexterm" name="id2478127"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
     395</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2481367"></a>
     396
     397acl compatibility (G)
     398</h3></div></div></div><a class="indexterm" name="id2481368"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
    399399        be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4,
    400400        <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>.
    … …  
    405405</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code>
    406406</em></span>
    407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2478204"></a>
     407</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2481444"></a>
    408408
    409409acl group control (S)
    410 </h3></div></div></div><a class="indexterm" name="id2478205"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     410</h3></div></div></div><a class="indexterm" name="id2481445"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    411411        In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions
    412412        and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the
    … …  
    424424        control the permissions on a file or directory they have group ownership on.
    425425        </p><p>
    426         This parameter is best used with the <a class="link" href="smb.conf.5.html#INHERITOWNER">inherit owner</a> option and also
     426        This parameter is best used with the <a class="link" href="smb.conf.5.html#INHERITOWNER" target="_top">inherit owner</a> option and also
    427427        on on a share containing directories with the UNIX <span class="emphasis"><em>setgid bit</em></span> set
    428428        on them, which causes new files and directories created within it to inherit the group
    … …  
    435435        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code>
    436436</em></span>
    437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2526981"></a>
     437</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533900"></a>
    438438
    439439acl map full control (S)
    440 </h3></div></div></div><a class="indexterm" name="id2526982"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     440</h3></div></div></div><a class="indexterm" name="id2533901"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    441441        This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum
    442442        allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX
    … …  
    446446        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code>
    447447</em></span>
    448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527038"></a>
     448</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533951"></a>
    449449
    450450add group script (G)
    451 </h3></div></div></div><a class="indexterm" name="id2527039"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     451</h3></div></div></div><a class="indexterm" name="id2533952"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    452452        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It
    453453        will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful
    … …  
    459459</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code>
    460460</em></span>
    461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527119"></a>
     461</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534026"></a>
    462462
    463463add machine script (G)
    464 </h3></div></div></div><a class="indexterm" name="id2527120"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     464</h3></div></div></div><a class="indexterm" name="id2534027"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    465465        This is the full pathname to a script that will  be run by
    466466         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is
    467467        added to Samba's domain and a Unix account matching the machine's name appended with a "$" does not
    468468        already exist.
    469         </p><p>This option is very similar to the <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a>, and likewise uses the %u
     469        </p><p>This option is very similar to the <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT" target="_top">add user script</a>, and likewise uses the %u
    470470        substitution for the account name.  Do not use the %m
    471471        substitution.  </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal"></code>
    … …  
    473473</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code>
    474474</em></span>
    475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527207"></a>
     475</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534105"></a>
    476476
    477477add port command (G)
    478 </h3></div></div></div><a class="indexterm" name="id2527208"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
     478</h3></div></div></div><a class="indexterm" name="id2534106"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
    479479        remotely using the Windows "Add Standard TCP/IP Port Wizard".
    480480        This option defines an external program to be executed when
    … …  
    485485</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code>
    486486</em></span>
    487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527296"></a>
     487</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534188"></a>
    488488
    489489addprinter command (G)
    490 </h3></div></div></div><a class="indexterm" name="id2527297"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
     490</h3></div></div></div><a class="indexterm" name="id2534189"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
    491491    support for Windows NT/2000 clients in Samba 2.2, The MS Add
    492492    Printer Wizard (APW) icon is now also available in the
    … …  
    519519</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code>
    520520</em></span>
    521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527501"></a>
     521</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534376"></a>
    522522
    523523add share command (G)
    524 </h3></div></div></div><a class="indexterm" name="id2527502"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     524</h3></div></div></div><a class="indexterm" name="id2534378"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    525525        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    526526        Manager.  The <em class="parameter"><code>add share command</code></em> is used to define an external program
    527         or script which will add a new service definition to <code class="filename">smb.conf</code>.  In order
    528         to successfully execute the <em class="parameter"><code>add share command</code></em>, <code class="literal">smbd</code> requires that the administrator be connected using a root account (i.e.  uid == 0).
    529         </p><p>
    530     If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in
    531     <em class="parameter"><code>change share</code></em> parameter are executed as root.
    532     </p><p>
     527        or script which will add a new service definition to
     528        <code class="filename">smb.conf</code>.
     529        </p><p>
     530        In order to successfully execute the
     531        <em class="parameter"><code>add share command</code></em>,
     532        <code class="literal">smbd</code> requires that the administrator
     533        connects using a root account (i.e.  uid == 0) or has the
     534        <code class="literal">SeDiskOperatorPrivilege</code>.
     535        Scripts defined in the <em class="parameter"><code>add share command</code></em>
     536        parameter are executed as root.
     537        </p><p>
    533538        When executed, <code class="literal">smbd</code> will automatically invoke the
    534539        <em class="parameter"><code>add share command</code></em> with five parameters.
    … …  
    544549                        share.
    545550                        </p></li></ul></div><p>
    546         This parameter is only used for add file shares.  To add printer shares, see the <a class="link" href="smb.conf.5.html#ADDPRINTERCOMMAND">addprinter command</a>.
     551        This parameter is only used to add file shares. To add printer shares, see the <a class="link" href="smb.conf.5.html#ADDPRINTERCOMMAND" target="_top">addprinter command</a>.
    547552        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal"></code>
    548553</em></span>
    549554</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code>
    550555</em></span>
    551 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527706"></a>
     556</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534562"></a>
    552557
    553558add user script (G)
    554 </h3></div></div></div><a class="indexterm" name="id2527707"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     559</h3></div></div></div><a class="indexterm" name="id2534563"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    555560        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by
    556561        <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    564569        </p><p>
    565570        In order to use this option, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must <span class="emphasis"><em>NOT</em></span> be set to
    566         <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> and <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a>
     571        <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = share</a> and <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT" target="_top">add user script</a>
    567572        must be set to a full pathname for a script that will create a UNIX user given one argument of
    568573        <em class="parameter"><code>%u</code></em>, which expands into the UNIX user name to create.
    569574        </p><p>
    570575        When the Windows user attempts to access the Samba server, at login (session setup in
    571         the SMB protocol) time, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> contacts the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a>
     576        the SMB protocol) time, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> contacts the <a class="link" href="smb.conf.5.html#PASSWORDSERVER" target="_top">password server</a>
    572577        and attempts to authenticate the given user with the given password. If the authentication
    573578        succeeds then <code class="literal">smbd</code> attempts to find a UNIX user in the UNIX
    574579        password database to map the Windows user into. If this lookup fails, and
    575         <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT">add user script</a> is set then <code class="literal">smbd</code> will
     580        <a class="link" href="smb.conf.5.html#ADDUSERSCRIPT" target="_top">add user script</a> is set then <code class="literal">smbd</code> will
    576581        call the specified script <span class="emphasis"><em>AS ROOT</em></span>, expanding any
    577582        <em class="parameter"><code>%u</code></em> argument to be the user name to create.
    … …  
    581586        match existing Windows NT accounts.
    582587        </p><p>
    583         See also <a class="link" href="smb.conf.5.html#SECURITY">security</a>, <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a>,
    584         <a class="link" href="smb.conf.5.html#DELETEUSERSCRIPT">delete user script</a>.
     588        See also <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>, <a class="link" href="smb.conf.5.html#PASSWORDSERVER" target="_top">password server</a>,
     589        <a class="link" href="smb.conf.5.html#DELETEUSERSCRIPT" target="_top">delete user script</a>.
    585590        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal"></code>
    586591</em></span>
    587592</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code>
    588593</em></span>
    589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2527950"></a>
     594</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534773"></a>
    590595
    591596add user to group script (G)
    592 </h3></div></div></div><a class="indexterm" name="id2527951"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     597</h3></div></div></div><a class="indexterm" name="id2534774"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    593598        Full path to the script that will be called when a user is added to a group using the Windows NT domain administration
    594599        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    602607</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code>
    603608</em></span>
    604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528044"></a>
     609</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534860"></a>
    605610
    606611administrative share (S)
    607 </h3></div></div></div><a class="indexterm" name="id2528045"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
     612</h3></div></div></div><a class="indexterm" name="id2534861"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
    608613      a share, then the share will be an administrative share. The Administrative
    609614      Shares are the default network shares created by all Windows NT-based
    610615      operating systems. These are shares like C$, D$ or ADMIN$. The type of these
    611       shares is STYPE_DISKTREE_HIDDEN.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more
     616      shares is STYPE_DISKTREE_HIDDEN.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more
    612617      information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code>
    613618</em></span>
    614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528111"></a>
     619</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534919"></a>
    615620
    616621admin users (S)
    617 </h3></div></div></div><a class="indexterm" name="id2528112"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
     622</h3></div></div></div><a class="indexterm" name="id2534920"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
    618623    administrative privileges on the share. This means that they
    619624    will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in
    620625    this list will be able to do anything they like on the share,
    621     irrespective of file permissions.</p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in
     626    irrespective of file permissions.</p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = share</a> in
    622627    Samba 3.0.  This is by design.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal"></code>
    623628</em></span>
    624629</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code>
    625630</em></span>
    626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528190"></a>
     631</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534991"></a>
    627632
    628633afs share (S)
    629 </h3></div></div></div><a class="indexterm" name="id2528192"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
     634</h3></div></div></div><a class="indexterm" name="id2534992"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
    630635        for this share. If enabled, it assumes that the directory exported via
    631636        the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The
    … …  
    634639        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code>
    635640</em></span>
    636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528241"></a>
     641</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535038"></a>
    637642
    638643afs username map (G)
    639 </h3></div></div></div><a class="indexterm" name="id2528242"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
     644</h3></div></div></div><a class="indexterm" name="id2535039"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
    640645        want to hand-craft the usernames you are creating tokens for.
    641646        For example this is necessary if you have users from several domain
    … …  
    647652</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code>
    648653</em></span>
    649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528309"></a>
     654</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535101"></a>
    650655
    651656aio read size (S)
    652 </h3></div></div></div><a class="indexterm" name="id2528310"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     657</h3></div></div></div><a class="indexterm" name="id2535102"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    653658    integer parameter is set to non-zero value,
    654659    Samba will read from file asynchronously when size of request is bigger
    655660    than this value. Note that it happens only for non-chained and non-chaining
    656661    reads and when not using write cache.</p><p>Current implementation of asynchronous I/O in Samba 3.0 does support
    657     only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOWRITESIZE">aio write size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">0</code>
     662    only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE" target="_top">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOWRITESIZE" target="_top">aio write size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">0</code>
    658663</em></span>
    659664</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio read size</code></em> = <code class="literal">16384
    … …  
    661666    request size</code>
    662667</em></span>
    663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528408"></a>
     668</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535187"></a>
    664669
    665670aio write size (S)
    666 </h3></div></div></div><a class="indexterm" name="id2528410"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     671</h3></div></div></div><a class="indexterm" name="id2535188"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    667672    integer parameter is set to non-zero value,
    668673    Samba will write to file asynchronously when size of request is bigger
    669674    than this value. Note that it happens only for non-chained and non-chaining
    670675    reads and when not using write cache.</p><p>Current implementation of asynchronous I/O in Samba 3.0 does support
    671     only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOREADSIZE">aio read size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">0</code>
     676    only up to 10 outstanding asynchronous requests, read and write combined.</p><p>Related command: <a class="link" href="smb.conf.5.html#WRITECACHESIZE" target="_top">write cache size</a></p><p>Related command: <a class="link" href="smb.conf.5.html#AIOREADSIZE" target="_top">aio read size</a></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">0</code>
    672677</em></span>
    673678</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write size</code></em> = <code class="literal">16384
    … …  
    675680    request size</code>
    676681</em></span>
    677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528506"></a>
     682</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535273"></a>
    678683
    679684algorithmic rid base (G)
    680 </h3></div></div></div><a class="indexterm" name="id2528507"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
     685</h3></div></div></div><a class="indexterm" name="id2535274"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
    681686    algorithmic mapping from uids/gid to the RIDs needed to construct
    682687    NT Security Identifiers.
    … …  
    693698</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code>
    694699</em></span>
    695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528583"></a>
     700</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535344"></a>
    696701
    697702allocation roundup size (S)
    698 </h3></div></div></div><a class="indexterm" name="id2528584"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
     703</h3></div></div></div><a class="indexterm" name="id2535345"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
    699704    allocation size reported to Windows clients.  The default
    700705    size of 1Mb generally results in improved Windows client
    … …  
    708713# (to disable roundups)</code>
    709714</em></span>
    710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528654"></a>
     715</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535408"></a>
    711716
    712717allow trusted domains (G)
    713 </h3></div></div></div><a class="indexterm" name="id2528655"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    714     This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY">security</a> option is set to
     718</h3></div></div></div><a class="indexterm" name="id2535410"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     719    This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> option is set to
    715720    <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. 
    716721    If it is set to no, then attempts to connect to a resource from
    … …  
    726731    can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code>
    727732</em></span>
    728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528732"></a>
     733</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535481"></a>
    729734
    730735announce as (G)
    731 </h3></div></div></div><a class="indexterm" name="id2528733"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
     736</h3></div></div></div><a class="indexterm" name="id2535482"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
    732737    list. By default this is set to Windows NT. The valid options
    733738    are : "NT Server" (which can also be written as "NT"),
    … …  
    741746</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code>
    742747</em></span>
    743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528807"></a>
     748</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535550"></a>
    744749
    745750announce version (G)
    746 </h3></div></div></div><a class="indexterm" name="id2528808"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
     751</h3></div></div></div><a class="indexterm" name="id2535551"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
    747752    that nmbd will use when announcing itself as a server. The default
    748753    is 4.9.  Do not change this parameter unless you have a specific
    … …  
    751756</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code>
    752757</em></span>
    753 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528869"></a>
     758</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535606"></a>
    754759
    755760auth methods (G)
    756 </h3></div></div></div><a class="indexterm" name="id2528870"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     761</h3></div></div></div><a class="indexterm" name="id2535608"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    757762    This option allows the administrator to chose what authentication methods <code class="literal">smbd</code>
    758     will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY">security</a>. 
     763    will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>. 
    759764    This should be considered a developer option and used only in rare circumstances.  In the majority (if not all)
    760765    of production servers, the default setting should be adequate.
    … …  
    775780</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code>
    776781</em></span>
    777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2528985"></a>
     782</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535712"></a>
    778783
    779784available (S)
    780 </h3></div></div></div><a class="indexterm" name="id2528986"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
     785</h3></div></div></div><a class="indexterm" name="id2535713"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
    781786        <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span>
    782787        attempts to connect to the service will fail. Such failures are
    783788        logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code>
    784789</em></span>
    785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529037"></a>
     790</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535760"></a>
    786791
    787792bind interfaces only (G)
    788 </h3></div></div></div><a class="indexterm" name="id2529038"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
     793</h3></div></div></div><a class="indexterm" name="id2535761"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
    789794        to limit what interfaces on a machine will serve SMB requests. It
    790795        affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p>
    791796        For name service it causes <code class="literal">nmbd</code> to bind to ports 137 and 138 on the
    792         interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter. <code class="literal">nmbd</code>
     797        interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> parameter. <code class="literal">nmbd</code>
    793798        also binds to the "all addresses" interface (0.0.0.0) on ports 137 and 138 for the purposes of
    794799        reading broadcast messages.  If this option is not set then <code class="literal">nmbd</code> will
    795         service name requests on all of these sockets. If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set then
     800        service name requests on all of these sockets. If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY" target="_top">bind interfaces only</a> is set then
    796801         <code class="literal">nmbd</code> will check the source address of any packets coming in on the
    797802        broadcast sockets and discard any that don't match the broadcast addresses of the interfaces in the
    798         <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list.  As unicast packets are received on the other sockets it
     803        <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> parameter list.  As unicast packets are received on the other sockets it
    799804        allows <code class="literal">nmbd</code> to refuse to serve names to machines that send packets that
    800         arrive through any interfaces not listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> list.  IP Source address
     805        arrive through any interfaces not listed in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> list.  IP Source address
    801806        spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for
    802807         <code class="literal">nmbd</code>.
    803808        </p><p>
    804         For file service it causes <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to bind only to the interface list given in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter. This restricts the networks that <code class="literal">smbd</code> will
     809        For file service it causes <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to bind only to the interface list given in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> parameter. This restricts the networks that <code class="literal">smbd</code> will
    805810        serve, to packets coming in on those interfaces.  Note that you should not use this parameter for machines that
    806811        are serving PPP or other intermittent or non-broadcast network interfaces as it will not cope with
    807812        non-permanent interfaces.
    808813        </p><p>
    809         If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set and the network address
    810          <span class="emphasis"><em>127.0.0.1</em></span> is not added to the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list
     814        If <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY" target="_top">bind interfaces only</a> is set and the network address
     815         <span class="emphasis"><em>127.0.0.1</em></span> is not added to the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> parameter list
    811816         <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> and
    812817         <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> may not work as
    … …  
    815820        To change a users SMB password, the <code class="literal">smbpasswd</code> by default connects to the
    816821         <span class="emphasis"><em>localhost - 127.0.0.1</em></span> address as an SMB client to issue the password change request. If
    817         <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY">bind interfaces only</a> is set then unless the network address
    818          <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a> parameter list then <code class="literal"> smbpasswd</code> will fail to connect in it's default mode.  <code class="literal">smbpasswd</code> can be forced to use the primary IP interface of the local host by using
     822        <a class="link" href="smb.conf.5.html#BINDINTERFACESONLY" target="_top">bind interfaces only</a> is set then unless the network address
     823         <span class="emphasis"><em>127.0.0.1</em></span> is added to the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> parameter list then <code class="literal"> smbpasswd</code> will fail to connect in it's default mode.  <code class="literal">smbpasswd</code> can be forced to use the primary IP interface of the local host by using
    819824        its <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>       <em class="parameter"><code>-r <em class="replaceable"><code>remote machine</code></em></code></em> parameter, with <em class="replaceable"><code>remote
    820825        machine</code></em> set to the IP name of the primary interface of the local host.
    … …  
    827832        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code>
    828833</em></span>
    829 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529415"></a>
     834</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536087"></a>
    830835
    831836blocking locks (S)
    832 </h3></div></div></div><a class="indexterm" name="id2529416"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
     837</h3></div></div></div><a class="indexterm" name="id2536088"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
    833838        of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client
    834839        to obtain a byte range lock on a region of an open file, and the
    … …  
    841846        cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code>
    842847</em></span>
    843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529483"></a>
     848</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536151"></a>
    844849
    845850block size (S)
    846 </h3></div></div></div><a class="indexterm" name="id2529484"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
     851</h3></div></div></div><a class="indexterm" name="id2536152"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
    847852    sizes. By default, this reports a disk block size of 1024 bytes.
    848853    </p><p>Changing this parameter may have some effect on the
    … …  
    858863</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code>
    859864</em></span>
    860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529566"></a>
     865</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536229"></a>
    861866
    862867<a name="BROWSABLE"></a>browsable
    863 </h3></div></div></div><a class="indexterm" name="id2529567"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529597"></a>
     868</h3></div></div></div><a class="indexterm" name="id2536230"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536256"></a>
    864869
    865870browseable (S)
    866 </h3></div></div></div><a class="indexterm" name="id2529598"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
     871</h3></div></div></div><a class="indexterm" name="id2536257"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
    867872        the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code>
    868873</em></span>
    869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529639"></a>
     874</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536295"></a>
    870875
    871876browse list (G)
    872 </h3></div></div></div><a class="indexterm" name="id2529640"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
     877</h3></div></div></div><a class="indexterm" name="id2536296"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
    873878        a client doing a <code class="literal">NetServerEnum</code> call. Normally
    874879        set to <code class="constant">yes</code>. You should never need to change
    875880        this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code>
    876881</em></span>
    877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529700"></a>
     882</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536349"></a>
    878883
    879884<a name="CASESIGNAMES"></a>casesignames
    880 </h3></div></div></div><a class="indexterm" name="id2529701"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529731"></a>
     885</h3></div></div></div><a class="indexterm" name="id2536350"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536376"></a>
    881886
    882887case sensitive (S)
    883 </h3></div></div></div><a class="indexterm" name="id2529732"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>
    884 </em></span>
    885 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529785"></a>
     888</h3></div></div></div><a class="indexterm" name="id2536377"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>
     889</em></span>
     890</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536423"></a>
    886891
    887892change notify (S)
    888 </h3></div></div></div><a class="indexterm" name="id2529786"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
     893</h3></div></div></div><a class="indexterm" name="id2536424"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
    889894        to a client's file change notify requests.
    890895        </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code>
    891896</em></span>
    892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2529831"></a>
     897</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536466"></a>
    893898
    894899change share command (G)
    895 </h3></div></div></div><a class="indexterm" name="id2529832"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     900</h3></div></div></div><a class="indexterm" name="id2536467"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    896901        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    897902Manager.  The <em class="parameter"><code>change share command</code></em> is used to define an external
    898 program or script which will modify an existing service definition in <code class="filename">smb.conf</code>.  In order to successfully execute the <em class="parameter"><code>change
    899 share command</code></em>, <code class="literal">smbd</code> requires that the administrator be
    900 connected using a root account (i.e. uid == 0).
    901         </p><p>
    902         If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in
    903         <em class="parameter"><code>change share</code></em> parameter are executed as root.
     903program or script which will modify an existing service definition in <code class="filename">smb.conf</code>.
     904        </p><p>
     905        In order to successfully execute the
     906        <em class="parameter"><code>change share command</code></em>,
     907        <code class="literal">smbd</code> requires that the administrator
     908        connects using a root account (i.e. uid == 0) or has the
     909        <code class="literal">SeDiskOperatorPrivilege</code>.
     910        Scripts defined in the <em class="parameter"><code>change share command</code></em>
     911        parameter are executed as root.
    904912        </p><p>
    905913        When executed, <code class="literal">smbd</code> will automatically invoke the
    … …  
    918926                        share.
    919927                        </p></li></ul></div><p>
    920         This parameter is only used modify existing file shares definitions.  To modify
    921         printer shares, use the "Printers..." folder as seen when browsing the Samba host.
     928        This parameter is only used to modify existing file share definitions.
     929        To modify printer shares, use the "Printers..." folder as seen
     930        when browsing the Samba host.
    922931        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal"></code>
    923932</em></span>
    924 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/addshare</code>
    925 </em></span>
    926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530027"></a>
     933</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/changeshare</code>
     934</em></span>
     935</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536644"></a>
    927936
    928937check password script (G)
    929 </h3></div></div></div><a class="indexterm" name="id2530028"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
     938</h3></div></div></div><a class="indexterm" name="id2536645"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
    930939    complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value
    931940    if the password is bad.
    … …  
    936945</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">check password script = /usr/local/sbin/crackcheck</code>
    937946</em></span>
    938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530107"></a>
     947</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536718"></a>
    939948
    940949client lanman auth (G)
    941 </h3></div></div></div><a class="indexterm" name="id2530108"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
     950</h3></div></div></div><a class="indexterm" name="id2536719"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
    942951    tools will attempt to authenticate itself to servers using the
    943952    weaker LANMAN password hash. If disabled, only server which support NT
    … …  
    950959    attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code>
    951960</em></span>
    952 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530189"></a>
     961</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536794"></a>
    953962
    954963client ldap sasl wrapping (G)
    955 </h3></div></div></div><a class="indexterm" name="id2530190"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    956         The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING">client ldap sasl wrapping</a> defines whether
     964</h3></div></div></div><a class="indexterm" name="id2536795"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     965        The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING" target="_top">client ldap sasl wrapping</a> defines whether
    957966        ldap traffic will be signed or signed and encrypted (sealed).
    958967        Possible values are <span class="emphasis"><em>plain</em></span>, <span class="emphasis"><em>sign</em></span>
    … …  
    981990        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code>
    982991</em></span>
    983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530319"></a>
     992</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536910"></a>
    984993
    985994client ntlmv2 auth (G)
    986 </h3></div></div></div><a class="indexterm" name="id2530320"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
     995</h3></div></div></div><a class="indexterm" name="id2536911"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
    987996    authenticate itself to servers using the NTLMv2 encrypted password
    988997    response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more
    … …  
    9961005        responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code>
    9971006</em></span>
    998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530413"></a>
     1007</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536997"></a>
    9991008
    10001009client plaintext auth (G)
    1001 </h3></div></div></div><a class="indexterm" name="id2530414"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
     1010</h3></div></div></div><a class="indexterm" name="id2536998"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
    10021011                password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code>
    10031012</em></span>
    1004 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530456"></a>
     1013</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537037"></a>
    10051014
    10061015client schannel (G)
    1007 </h3></div></div></div><a class="indexterm" name="id2530457"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1016</h3></div></div></div><a class="indexterm" name="id2537038"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10081017    This controls whether the client offers or even demands the use of the netlogon schannel.
    1009     <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = no</a> does not offer the schannel,
    1010     <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = auto</a> offers the schannel but does not
    1011     enforce it, and <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL">client schannel = yes</a> denies access
     1018    <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = no</a> does not offer the schannel,
     1019    <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = auto</a> offers the schannel but does not
     1020    enforce it, and <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = yes</a> denies access
    10121021    if the server is not able to speak netlogon schannel.
    10131022    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">auto</code>
    … …  
    10151024</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code>
    10161025</em></span>
    1017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530554"></a>
     1026</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537121"></a>
    10181027
    10191028client signing (G)
    1020 </h3></div></div></div><a class="indexterm" name="id2530555"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires
     1029</h3></div></div></div><a class="indexterm" name="id2537122"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires
    10211030    the server it talks to to use SMB signing. Possible values
    10221031    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    … …  
    10271036</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code>
    10281037</em></span>
    1029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530615"></a>
     1038</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537176"></a>
    10301039
    10311040client use spnego (G)
    1032 </h3></div></div></div><a class="indexterm" name="id2530616"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
     1041</h3></div></div></div><a class="indexterm" name="id2537177"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
    10331042    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    10341043    supporting servers (including WindowsXP, Windows2000 and Samba
    … …  
    10361045    mechanism.  This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code>
    10371046</em></span>
    1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530661"></a>
     1047</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537218"></a>
    10391048
    10401049cluster addresses (G)
    1041 </h3></div></div></div><a class="indexterm" name="id2530662"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
     1050</h3></div></div></div><a class="indexterm" name="id2537219"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
    10421051        nmbd will register with a WINS server. These addresses are not
    10431052        necessarily present on all nodes simultaneously, but they will
    … …  
    10481057</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code>
    10491058</em></span>
    1050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530723"></a>
     1059</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537274"></a>
    10511060
    10521061clustering (G)
    1053 </h3></div></div></div><a class="indexterm" name="id2530724"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
     1062</h3></div></div></div><a class="indexterm" name="id2537275"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
    10541063        ctdb for accessing its tdb files and use ctdb as a backend
    10551064        for its messaging backend.
    … …  
    10581067        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code>
    10591068</em></span>
    1060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530777"></a>
     1069</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537322"></a>
    10611070
    10621071comment (S)
    1063 </h3></div></div></div><a class="indexterm" name="id2530778"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
     1072</h3></div></div></div><a class="indexterm" name="id2537324"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
    10641073        when a client does a queries the server, either via the network
    10651074        neighborhood or via <code class="literal">net view</code> to list what shares
    10661075        are available.</p><p>If you want to set the string that is displayed next to the
    1067                 machine name then see the <a class="link" href="smb.conf.5.html#SERVERSTRING">server string</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">
     1076                machine name then see the <a class="link" href="smb.conf.5.html#SERVERSTRING" target="_top">server string</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">
    10681077# No comment</code>
    10691078</em></span>
    10701079</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code>
    10711080</em></span>
    1072 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530860"></a>
     1081</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537397"></a>
    10731082
    10741083config backend (G)
    1075 </h3></div></div></div><a class="indexterm" name="id2530861"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1084</h3></div></div></div><a class="indexterm" name="id2537398"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10761085                This controls the backend for storing the configuration.
    10771086                Possible values are <span class="emphasis"><em>file</em></span> (the default)
    10781087                and <span class="emphasis"><em>registry</em></span>.
    1079                 When <a class="link" href="smb.conf.5.html#CONFIGBACKEND">config backend = registry</a>
     1088                When <a class="link" href="smb.conf.5.html#CONFIGBACKEND" target="_top">config backend = registry</a>
    10801089                 is encountered while loading <span class="emphasis"><em>smb.conf</em></span>,
    10811090                the configuration read so far is dropped and the global
    … …  
    10911100</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code>
    10921101</em></span>
    1093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2530960"></a>
     1102</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537486"></a>
    10941103
    10951104config file (G)
    1096 </h3></div></div></div><a class="indexterm" name="id2530961"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
     1105</h3></div></div></div><a class="indexterm" name="id2537487"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
    10971106        to use, instead of the default (usually <code class="filename">smb.conf</code>).
    10981107        There is a chicken and egg problem here as this option is set
    … …  
    11041113        clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code>
    11051114</em></span>
    1106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531030"></a>
     1115</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537552"></a>
    11071116
    11081117copy (S)
    1109 </h3></div></div></div><a class="indexterm" name="id2531031"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
     1118</h3></div></div></div><a class="indexterm" name="id2537553"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
    11101119        entries. The specified service is simply duplicated under the
    11111120        current service's name. Any parameters specified in the current
    … …  
    11171126</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code>
    11181127</em></span>
    1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531097"></a>
     1128</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537614"></a>
    11201129
    11211130<a name="CREATEMODE"></a>create mode
    1122 </h3></div></div></div><a class="indexterm" name="id2531098"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531129"></a>
     1131</h3></div></div></div><a class="indexterm" name="id2537615"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537641"></a>
    11231132
    11241133create mask (S)
    1125 </h3></div></div></div><a class="indexterm" name="id2531130"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1134</h3></div></div></div><a class="indexterm" name="id2537642"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11261135        When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
    11271136        UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
    … …  
    11331142        </p><p>
    11341143        Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the
    1135         <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> parameter which is set to 000 by default.
    1136         </p><p>
    1137         This parameter does not affect directory masks. See the parameter <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a>
     1144        <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> parameter which is set to 000 by default.
     1145        </p><p>
     1146        This parameter does not affect directory masks. See the parameter <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>
    11381147        for details.
    11391148        </p><p>
    11401149        Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the
    1141         administrator wishes to enforce a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#SECURITYMASK">security mask</a>.
     1150        administrator wishes to enforce a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#SECURITYMASK" target="_top">security mask</a>.
    11421151        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0744</code>
    11431152</em></span>
    11441153</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code>
    11451154</em></span>
    1146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531266"></a>
     1155</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537762"></a>
    11471156
    11481157csc policy (S)
    1149 </h3></div></div></div><a class="indexterm" name="id2531268"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1158</h3></div></div></div><a class="indexterm" name="id2537763"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11501159        This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline
    11511160        caching will cache the files in the share. The valid values are: manual, documents, programs, disable.
    … …  
    11541163        </p><p>
    11551164        For example, shares containing roaming profiles can have offline caching disabled using
    1156         <a class="link" href="smb.conf.5.html#CSCPOLICY">csc policy = disable</a>.
     1165        <a class="link" href="smb.conf.5.html#CSCPOLICY" target="_top">csc policy = disable</a>.
    11571166        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">manual</code>
    11581167</em></span>
    11591168</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code>
    11601169</em></span>
    1161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531352"></a>
     1170</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537837"></a>
    11621171
    11631172ctdbd socket (G)
    1164 </h3></div></div></div><a class="indexterm" name="id2531353"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
     1173</h3></div></div></div><a class="indexterm" name="id2537838"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
    11651174        you need to tell Samba where ctdbd listens on its unix domain
    11661175        socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which
    … …  
    11701179</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code>
    11711180</em></span>
    1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531418"></a>
     1181</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537897"></a>
    11731182
    11741183cups options (S)
    1175 </h3></div></div></div><a class="indexterm" name="id2531419"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    1176     This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is
     1184</h3></div></div></div><a class="indexterm" name="id2537898"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1185    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is
    11771186    set to <code class="constant">cups</code>.  Its value is a free form string of options
    11781187    passed directly to the cups library. 
    … …  
    11951204</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code>
    11961205</em></span>
    1197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531535"></a>
     1206</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537995"></a>
    11981207
    11991208cups server (G)
    1200 </h3></div></div></div><a class="indexterm" name="id2531536"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    1201     This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">cups</code>.
     1209</h3></div></div></div><a class="indexterm" name="id2537996"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1210    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    12021211    </p><p>
    12031212   If set, this option overrides the ServerName option in the CUPS <code class="filename">client.conf</code>. This is
    … …  
    12121221</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code>
    12131222</em></span>
    1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531643"></a>
     1223</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538093"></a>
    12151224
    12161225deadtime (G)
    1217 </h3></div></div></div><a class="indexterm" name="id2531644"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
     1226</h3></div></div></div><a class="indexterm" name="id2538094"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
    12181227    represents the number of minutes of inactivity before a connection
    12191228    is considered dead, and it is disconnected. The deadtime only takes
    … …  
    12271236</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code>
    12281237</em></span>
    1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531725"></a>
     1238</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538170"></a>
    12301239
    12311240debug class (G)
    1232 </h3></div></div></div><a class="indexterm" name="id2531726"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1241</h3></div></div></div><a class="indexterm" name="id2538171"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12331242    With this boolean parameter enabled, the debug class (DBGC_CLASS)
    12341243    will be displayed in the debug header.
    12351244    </p><p>
    12361245    For more information about currently available debug classes, see
    1237     section about <a class="link" href="smb.conf.5.html#LOGLEVEL">log level</a>.
     1246    section about <a class="link" href="smb.conf.5.html#LOGLEVEL" target="_top">log level</a>.
    12381247    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code>
    12391248</em></span>
    1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531784"></a>
     1249</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538222"></a>
    12411250
    12421251debug hires timestamp (G)
    1243 </h3></div></div></div><a class="indexterm" name="id2531785"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1252</h3></div></div></div><a class="indexterm" name="id2538223"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12441253    Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this
    12451254    boolean parameter adds microsecond resolution to the timestamp  message header when turned on.
    12461255    </p><p>
    1247     Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect.
     1256    Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> must be on for this to have an effect.
    12481257    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">no</code>
    12491258</em></span>
    1250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531845"></a>
     1259</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538276"></a>
    12511260
    12521261debug pid (G)
    1253 </h3></div></div></div><a class="indexterm" name="id2531846"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1262</h3></div></div></div><a class="indexterm" name="id2538277"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12541263    When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which
    12551264    message. This boolean parameter is adds the process-id to the timestamp message headers in the
    12561265    logfile when turned on.
    12571266    </p><p>
    1258     Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect.
     1267    Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> must be on for this to have an effect.
    12591268    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code>
    12601269</em></span>
    1261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531914"></a>
     1270</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538338"></a>
    12621271
    12631272debug prefix timestamp (G)
    1264 </h3></div></div></div><a class="indexterm" name="id2531915"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1273</h3></div></div></div><a class="indexterm" name="id2538339"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12651274    With this option enabled, the timestamp message header is prefixed to the debug message without the
    1266     filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a>
     1275    filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a>
    12671276    parameter. This gives timestamps to the messages without adding an additional line.
    12681277    </p><p>
    1269     Note that this parameter overrides the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> parameter.
     1278    Note that this parameter overrides the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> parameter.
    12701279    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code>
    12711280</em></span>
    1272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2531987"></a>
     1281</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538402"></a>
    12731282
    12741283<a name="TIMESTAMPLOGS"></a>timestamp logs
    1275 </h3></div></div></div><a class="indexterm" name="id2531988"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532019"></a>
     1284</h3></div></div></div><a class="indexterm" name="id2538403"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538429"></a>
    12761285
    12771286debug timestamp (G)
    1278 </h3></div></div></div><a class="indexterm" name="id2532020"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1287</h3></div></div></div><a class="indexterm" name="id2538430"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12791288    Samba debug log messages are timestamped by default. If you are running at a high
    1280     <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a> these timestamps can be distracting. This
     1289    <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This
    12811290    boolean parameter allows timestamping to be turned off.
    12821291        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code>
    12831292</em></span>
    1284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532075"></a>
     1293</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538477"></a>
    12851294
    12861295debug uid (G)
    1287 </h3></div></div></div><a class="indexterm" name="id2532076"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1296</h3></div></div></div><a class="indexterm" name="id2538478"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12881297    Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the
    12891298    current euid, egid, uid and gid to the timestamp message headers in the log file if turned on.
    12901299    </p><p>
    1291     Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP">debug timestamp</a> must be on for this to have an effect.
     1300    Note that the parameter <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> must be on for this to have an effect.
    12921301    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code>
    12931302</em></span>
    1294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532134"></a>
     1303</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538531"></a>
    12951304
    12961305default case (S)
    1297 </h3></div></div></div><a class="indexterm" name="id2532136"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>.
    1298         Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code>
    1299 </em></span>
    1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532199"></a>
     1306</h3></div></div></div><a class="indexterm" name="id2538532"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
     1307        Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code>
     1308</em></span>
     1309</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538585"></a>
    13011310
    13021311default devmode (S)
    1303 </h3></div></div></div><a class="indexterm" name="id2532200"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE">printable</a> services.
     1312</h3></div></div></div><a class="indexterm" name="id2538586"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
    13041313    When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
    13051314    server has a Device Mode which defines things such as paper size and
    … …  
    13241333</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code>
    13251334</em></span>
    1326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532296"></a>
     1335</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538673"></a>
    13271336
    13281337<a name="DEFAULT"></a>default
    1329 </h3></div></div></div><a class="indexterm" name="id2532297"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532328"></a>
     1338</h3></div></div></div><a class="indexterm" name="id2538674"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538700"></a>
    13301339
    13311340default service (G)
    1332 </h3></div></div></div><a class="indexterm" name="id2532329"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
     1341</h3></div></div></div><a class="indexterm" name="id2538701"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
    13331342        which will be connected to if the service actually requested cannot
    13341343        be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span>
    … …  
    13361345        parameter is not given, attempting to connect to a nonexistent
    13371346        service results in an error.</p><p>
    1338         Typically the default service would be a <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a>, <a class="link" href="smb.conf.5.html#READ-ONLY">read-only</a> service.</p><p>Also note that the apparent service name will be changed to equal
     1347        Typically the default service would be a <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a>, <a class="link" href="smb.conf.5.html#READ-ONLY" target="_top">read-only</a> service.</p><p>Also note that the apparent service name will be changed to equal
    13391348        that of the requested service, this is very useful as it allows you to use macros like <em class="parameter"><code>%S</code></em> to make a wildcard service.
    13401349        </p><p>Note also that any "_" characters in the name of the service
    … …  
    13441353</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code>
    13451354</em></span>
    1346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532442"></a>
     1355</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538801"></a>
    13471356
    13481357defer sharing violations (G)
    1349 </h3></div></div></div><a class="indexterm" name="id2532443"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1358</h3></div></div></div><a class="indexterm" name="id2538802"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13501359        Windows allows specifying how a file will be shared with
    13511360        other processes when it is opened. Sharing violations occur when
    … …  
    13601369        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code>
    13611370</em></span>
    1362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532501"></a>
     1371</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538856"></a>
    13631372
    13641373delete group script (G)
    1365 </h3></div></div></div><a class="indexterm" name="id2532502"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1374</h3></div></div></div><a class="indexterm" name="id2538857"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    13661375        be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted.
    13671376        It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. 
    … …  
    13691378        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code>
    13701379</em></span>
    1371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532562"></a>
     1380</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538912"></a>
    13721381
    13731382deleteprinter command (G)
    1374 </h3></div></div></div><a class="indexterm" name="id2532563"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
     1383</h3></div></div></div><a class="indexterm" name="id2538913"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
    13751384    support for Windows NT/2000 clients in Samba 2.2, it is now
    13761385    possible to delete a printer at run time by issuing the
    13771386    DeletePrinter() RPC call.</p><p>For a Samba host this means that the printer must be
    13781387    physically deleted from the underlying printing system.  The
    1379     <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> defines a script to be run which
     1388    <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND" target="_top">deleteprinter command</a> defines a script to be run which
    13801389    will perform the necessary operations for removing the printer
    13811390    from the print system and from <code class="filename">smb.conf</code>.
    1382     </p><p>The <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> is
    1383     automatically called with only one parameter: <a class="link" href="smb.conf.5.html#PRINTERNAME">printer name</a>.
    1384         </p><p>Once the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a> has
     1391    </p><p>The <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND" target="_top">deleteprinter command</a> is
     1392    automatically called with only one parameter: <a class="link" href="smb.conf.5.html#PRINTERNAME" target="_top">printer name</a>.
     1393        </p><p>Once the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND" target="_top">deleteprinter command</a> has
    13851394    been executed, <code class="literal">smbd</code> will reparse the <code class="filename">
    13861395    smb.conf</code> to check that the associated printer no longer exists.
    … …  
    13901399</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code>
    13911400</em></span>
    1392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532713"></a>
     1401</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539040"></a>
    13931402
    13941403delete readonly (S)
    1395 </h3></div></div></div><a class="indexterm" name="id2532714"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
     1404</h3></div></div></div><a class="indexterm" name="id2539041"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
    13961405        This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such
    13971406        as rcs, where UNIX file ownership prevents changing file
    13981407        permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code>
    13991408</em></span>
    1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532762"></a>
     1409</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539085"></a>
    14011410
    14021411delete share command (G)
    1403 </h3></div></div></div><a class="indexterm" name="id2532764"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1412</h3></div></div></div><a class="indexterm" name="id2539086"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14041413        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    14051414        Manager.  The <em class="parameter"><code>delete share command</code></em> is used to define an external
    14061415        program or script which will remove an existing service definition from
    1407         <code class="filename">smb.conf</code>.  In order to successfully execute the
    1408         <em class="parameter"><code>delete share command</code></em>, <code class="literal">smbd</code>
    1409         requires that the administrator be connected using a root account (i.e.  uid == 0).
    1410         </p><p>
    1411     If the connected account has <code class="literal">SeDiskOperatorPrivilege</code>, scripts defined in
    1412     <em class="parameter"><code>change share</code></em> parameter are executed as root.
    1413     </p><p>
     1416        <code class="filename">smb.conf</code>.
     1417        </p><p>In order to successfully execute the
     1418        <em class="parameter"><code>delete share command</code></em>,
     1419        <code class="literal">smbd</code>       requires that the administrator
     1420        connects using a root account (i.e.  uid == 0) or has the
     1421        <code class="literal">SeDiskOperatorPrivilege</code>.
     1422        Scripts defined in the <em class="parameter"><code>delete share command</code></em>
     1423        parameter are executed as root.
     1424        </p><p>
    14141425        When executed, <code class="literal">smbd</code> will automatically invoke the
    14151426        <em class="parameter"><code>delete share command</code></em> with two parameters.
    … …  
    14201431                        </p></li></ul></div><p>
    14211432        This parameter is only used to remove file shares.  To delete printer shares,
    1422         see the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND">deleteprinter command</a>.
     1433        see the <a class="link" href="smb.conf.5.html#DELETEPRINTERCOMMAND" target="_top">deleteprinter command</a>.
    14231434        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal"></code>
    14241435</em></span>
    14251436</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code>
    14261437</em></span>
    1427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2532934"></a>
     1438</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539237"></a>
    14281439
    14291440delete user from group script (G)
    1430 </h3></div></div></div><a class="indexterm" name="id2532935"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
     1441</h3></div></div></div><a class="indexterm" name="id2539238"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
    14311442        a user is removed from a group using the Windows NT domain administration
    14321443        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>.
    … …  
    14371448</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code>
    14381449</em></span>
    1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533019"></a>
     1450</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539316"></a>
    14401451
    14411452delete user script (G)
    1442 </h3></div></div></div><a class="indexterm" name="id2533020"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1453</h3></div></div></div><a class="indexterm" name="id2539317"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    14431454        be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users
    14441455        with remote RPC (NT) tools.
    … …  
    14491460</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code>
    14501461</em></span>
    1451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533101"></a>
     1462</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539393"></a>
    14521463
    14531464delete veto files (S)
    1454 </h3></div></div></div><a class="indexterm" name="id2533102"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
     1465</h3></div></div></div><a class="indexterm" name="id2539394"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
    14551466        delete a directory that contains one or more vetoed directories
    1456         (see the <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a>
     1467        (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a>
    14571468        option).  If this option is set to <code class="constant">no</code> (the default) then if a vetoed
    14581469        directory contains any non-vetoed files or directories then the
    … …  
    14621473        serving systems such as NetAtalk which create meta-files within
    14631474        directories you might normally veto DOS/Windows users from seeing
    1464         (e.g. <code class="filename">.AppleDouble</code>)</p><p>Setting <a class="link" href="smb.conf.5.html#DELETEVETOFILES">delete veto files = yes</a> allows these
     1475        (e.g. <code class="filename">.AppleDouble</code>)</p><p>Setting <a class="link" href="smb.conf.5.html#DELETEVETOFILES" target="_top">delete veto files = yes</a> allows these
    14651476        directories to be  transparently deleted when the parent directory
    14661477        is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code>
    14671478</em></span>
    1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533199"></a>
     1479</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539478"></a>
    14691480
    14701481dfree cache time (S)
    1471 </h3></div></div></div><a class="indexterm" name="id2533200"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1482</h3></div></div></div><a class="indexterm" name="id2539479"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14721483        The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem
    14731484        occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur
    … …  
    14771488        This is a new parameter introduced in Samba version 3.0.21.  It specifies in seconds the time that smbd will
    14781489        cache the output of a disk free query. If set to zero (the default) no caching is done. This allows a heavily
    1479         loaded server to prevent rapid spawning of <a class="link" href="smb.conf.5.html#DFREECOMMAND">dfree command</a> scripts increasing the load.
     1490        loaded server to prevent rapid spawning of <a class="link" href="smb.conf.5.html#DFREECOMMAND" target="_top">dfree command</a> scripts increasing the load.
    14801491        </p><p>
    14811492        By default this parameter is zero, meaning no caching will be done.
    14821493        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code>
    14831494</em></span>
    1484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533281"></a>
     1495</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539551"></a>
    14851496
    14861497dfree command (S)
    1487 </h3></div></div></div><a class="indexterm" name="id2533282"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1498</h3></div></div></div><a class="indexterm" name="id2539552"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14881499        The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a
    14891500        problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may
    … …  
    14961507        </p><p>
    14971508        In Samba version 3.0.21 this parameter has been changed to be a per-share parameter, and in addition the
    1498         parameter <a class="link" href="smb.conf.5.html#DFREECACHETIME">dfree cache time</a> was added to allow the output of this script to be cached
     1509        parameter <a class="link" href="smb.conf.5.html#DFREECACHETIME" target="_top">dfree cache time</a> was added to allow the output of this script to be cached
    14991510        for systems under heavy load.
    15001511        </p><p>
    … …  
    15231534        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code>
    15241535</em></span>
    1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533414"></a>
     1536</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539672"></a>
    15261537
    15271538<a name="DIRECTORYMODE"></a>directory mode
    1528 </h3></div></div></div><a class="indexterm" name="id2533415"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533446"></a>
     1539</h3></div></div></div><a class="indexterm" name="id2539674"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539699"></a>
    15291540
    15301541directory mask (S)
    1531 </h3></div></div></div><a class="indexterm" name="id2533447"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
     1542</h3></div></div></div><a class="indexterm" name="id2539700"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
    15321543    used when converting DOS modes to UNIX modes when creating UNIX
    15331544    directories.</p><p>When a directory is created, the necessary permissions are
    … …  
    15401551    and 'other' write bits from the UNIX mode, allowing only the
    15411552    user who owns the directory to modify it.</p><p>Following this Samba will bit-wise 'OR' the UNIX mode
    1542     created from this parameter with the value of the <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> parameter.
     1553    created from this parameter with the value of the <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> parameter.
    15431554    This parameter is set to 000 by default (i.e. no extra mode bits are added).</p><p>Note that this parameter does not apply to permissions
    15441555    set by Windows NT/2000 ACL editors. If the administrator wishes to enforce
    1545     a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK">directory security mask</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0755</code>
     1556    a mask on access control lists also, they need to set the <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK" target="_top">directory security mask</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0755</code>
    15461557</em></span>
    15471558</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code>
    15481559</em></span>
    1549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533564"></a>
     1560</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539805"></a>
    15501561
    15511562directory security mask (S)
    1552 </h3></div></div></div><a class="indexterm" name="id2533565"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
     1563</h3></div></div></div><a class="indexterm" name="id2539806"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
    15531564    will be set when a Windows NT client is manipulating the UNIX
    15541565    permission on a directory using the native NT security dialog
    15551566    box.</p><p>
    15561567        This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
    1557         any bits not in this mask.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCEDIRECTORYSECURITYMODE">force  directory security mode</a>, which works similar like this one but uses logical OR instead of AND.
     1568        any bits not in this mask.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCEDIRECTORYSECURITYMODE" target="_top">force  directory security mode</a>, which works similar like this one but uses logical OR instead of AND.
    15581569        Essentially, zero bits in this mask are a set of bits that will always be set to zero.
    15591570        </p><p>
    … …  
    15701581</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code>
    15711582</em></span>
    1572 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533674"></a>
     1583</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539905"></a>
    15731584
    15741585disable netbios (G)
    1575 </h3></div></div></div><a class="indexterm" name="id2533675"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
     1586</h3></div></div></div><a class="indexterm" name="id2539906"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
    15761587    in Samba. Netbios is the only available form of browsing in
    15771588    all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to
    … …  
    15791590        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code>
    15801591</em></span>
    1581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533723"></a>
     1592</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539951"></a>
    15821593
    15831594disable spoolss (G)
    1584 </h3></div></div></div><a class="indexterm" name="id2533724"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
     1595</h3></div></div></div><a class="indexterm" name="id2539952"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
    15851596    for the SPOOLSS set of MS-RPC's and will yield identical behavior
    15861597    as Samba 2.0.x.  Windows NT/2000 clients will downgrade to using
    … …  
    15941605</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code>
    15951606</em></span>
    1596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533779"></a>
     1607</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540002"></a>
    15971608
    15981609display charset (G)
    1599 </h3></div></div></div><a class="indexterm" name="id2533780"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1610</h3></div></div></div><a class="indexterm" name="id2540003"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16001611        Specifies the charset that samba will use to print messages to stdout and stderr.
    16011612        The default value is "LOCALE", which means automatically set, depending on the
    16021613        current locale. The value should generally be the same as the value of the parameter
    1603         <a class="link" href="smb.conf.5.html#UNIXCHARSET">unix charset</a>.
     1614        <a class="link" href="smb.conf.5.html#UNIXCHARSET" target="_top">unix charset</a>.
    16041615        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">"LOCALE" or "ASCII" (depending on the system)</code>
    16051616</em></span>
    16061617</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code>
    16071618</em></span>
    1608 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533855"></a>
     1619</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540069"></a>
    16091620
    16101621dmapi support (S)
    1611 </h3></div></div></div><a class="indexterm" name="id2533856"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
     1622</h3></div></div></div><a class="indexterm" name="id2540070"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
    16121623        determine whether a file is offline or not. This would typically
    16131624        be used in conjunction with a hierarchical storage system that
    … …  
    16241635        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code>
    16251636</em></span>
    1626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533918"></a>
     1637</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540128"></a>
    16271638
    16281639dns proxy (G)
    1629 </h3></div></div></div><a class="indexterm" name="id2533919"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
     1640</h3></div></div></div><a class="indexterm" name="id2540129"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
    16301641        finding that a NetBIOS name has not been registered, should treat the
    16311642        NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server
    … …  
    16361647        action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code>
    16371648</em></span>
    1638 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533986"></a>
     1649</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540191"></a>
    16391650
    16401651domain logons (G)
    1641 </h3></div></div></div><a class="indexterm" name="id2533988"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1652</h3></div></div></div><a class="indexterm" name="id2540192"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16421653        If set to <code class="constant">yes</code>, the Samba server will
    16431654        provide the netlogon service for Windows 9X network logons for the
    1644         <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> it is in.
     1655        <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> it is in.
    16451656        This will also cause the Samba server to act as a domain
    16461657        controller for NT4 style domain services. For more details on
    … …  
    16491660        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code>
    16501661</em></span>
    1651 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534048"></a>
     1662</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540244"></a>
    16521663
    16531664domain master (G)
    1654 </h3></div></div></div><a class="indexterm" name="id2534049"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1665</h3></div></div></div><a class="indexterm" name="id2540246"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16551666        Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable
    16561667        WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a
    16571668        special domain specific NetBIOS name that identifies it as a domain master browser for its given
    1658         <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a>. Local master browsers in the same <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> on
     1669        <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a>. Local master browsers in the same <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> on
    16591670        broadcast-isolated subnets will give this <code class="literal">nmbd</code> their local browse lists,
    16601671        and then ask <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> for a
    … …  
    16631674        broadcast-isolated subnet.
    16641675        </p><p>
    1665         Note that Windows NT Primary Domain Controllers expect to be able to claim this <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> specific special NetBIOS name that identifies them as domain master browsers for that
    1666         <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> by default (i.e. there is no way to prevent a Windows NT PDC from attempting
     1676        Note that Windows NT Primary Domain Controllers expect to be able to claim this <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> specific special NetBIOS name that identifies them as domain master browsers for that
     1677        <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> by default (i.e. there is no way to prevent a Windows NT PDC from attempting
    16671678        to do this). This means that if this parameter is set and <code class="literal">nmbd</code> claims the
    1668         special name for a <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> before a Windows NT PDC is able to do so then cross
     1679        special name for a <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> before a Windows NT PDC is able to do so then cross
    16691680        subnet browsing will behave strangely and may fail.
    16701681        </p><p>
    1671         If <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons = yes</a>, then the default behavior is to enable the
    1672         <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master</a> parameter.  If <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons</a> is not enabled (the
    1673         default setting), then neither will <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master</a> be enabled by default.
    1674         </p><p>
    1675         When <a class="link" href="smb.conf.5.html#DOMAINLOGONS">domain logons = Yes</a> the default setting for this parameter is
    1676         Yes, with the result that Samba will be a PDC. If <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master = No</a>,
     1682        If <a class="link" href="smb.conf.5.html#DOMAINLOGONS" target="_top">domain logons = yes</a>, then the default behavior is to enable the
     1683        <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master</a> parameter.  If <a class="link" href="smb.conf.5.html#DOMAINLOGONS" target="_top">domain logons</a> is not enabled (the
     1684        default setting), then neither will <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master</a> be enabled by default.
     1685        </p><p>
     1686        When <a class="link" href="smb.conf.5.html#DOMAINLOGONS" target="_top">domain logons = Yes</a> the default setting for this parameter is
     1687        Yes, with the result that Samba will be a PDC. If <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master = No</a>,
    16771688        Samba will function as a BDC. In general, this parameter should be set to 'No' only on a BDC.
    16781689        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code>
    16791690</em></span>
    1680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534278"></a>
     1691</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540436"></a>
    16811692
    16821693dont descend (S)
    1683 </h3></div></div></div><a class="indexterm" name="id2534279"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
     1694</h3></div></div></div><a class="indexterm" name="id2540437"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
    16841695        (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not
    16851696        of interest to clients or are infinitely deep (recursive). This
    … …  
    16921703</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code>
    16931704</em></span>
    1694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534363"></a>
     1705</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540514"></a>
    16951706
    16961707dos charset (G)
    1697 </h3></div></div></div><a class="indexterm" name="id2534364"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
     1708</h3></div></div></div><a class="indexterm" name="id2540515"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
    16981709        the same charset as they do. This option specifies which
    16991710        charset Samba should talk to DOS clients.
    17001711        </p><p>The default depends on which charsets you have installed.
    17011712        Samba tries to use charset 850 but falls back to ASCII in
    1702         case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534407"></a>
     1713        case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540555"></a>
    17031714
    17041715dos filemode (S)
    1705 </h3></div></div></div><a class="indexterm" name="id2534408"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
     1716</h3></div></div></div><a class="indexterm" name="id2540556"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
    17061717        UNIX-like behavior where only the owner of a file/directory is
    17071718        able to change the permissions on it.  However, this behavior
    … …  
    17141725        file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code>
    17151726</em></span>
    1716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534458"></a>
     1727</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540602"></a>
    17171728
    17181729dos filetime resolution (S)
    1719 </h3></div></div></div><a class="indexterm" name="id2534459"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
     1730</h3></div></div></div><a class="indexterm" name="id2540603"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
    17201731        granularity on time resolution is two seconds. Setting this parameter
    17211732        for a share causes Samba to round the reported time down to the
    … …  
    17321743        happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code>
    17331744</em></span>
    1734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534526"></a>
     1745</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540665"></a>
    17351746
    17361747dos filetimes (S)
    1737 </h3></div></div></div><a class="indexterm" name="id2534527"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
     1748</h3></div></div></div><a class="indexterm" name="id2540666"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
    17381749        file they can change the timestamp on it. Under POSIX semantics,
    17391750        only the owner of the file or root may change the timestamp. By
    … …  
    17491760        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code>
    17501761</em></span>
    1751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534597"></a>
     1762</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540731"></a>
    17521763
    17531764ea support (S)
    1754 </h3></div></div></div><a class="indexterm" name="id2534598"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
     1765</h3></div></div></div><a class="indexterm" name="id2540732"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
    17551766    attributes on a share. In order to enable this parameter the underlying filesystem exported by
    17561767    the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the
    … …  
    17591770                extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code>
    17601771</em></span>
    1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534654"></a>
     1772</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540784"></a>
    17621773
    17631774enable asu support (G)
    1764 </h3></div></div></div><a class="indexterm" name="id2534655"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
     1775</h3></div></div></div><a class="indexterm" name="id2540785"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
    17651776    require some special accomodations such as creating a builting [ADMIN$]
    17661777    share that only supports IPC connections.  The has been the default
    … …  
    17701781    an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code>
    17711782</em></span>
    1772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534703"></a>
     1783</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540829"></a>
    17731784
    17741785enable privileges (G)
    1775 </h3></div></div></div><a class="indexterm" name="id2534704"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1786</h3></div></div></div><a class="indexterm" name="id2540830"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17761787        This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
    17771788         <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools.  This parameter is
    … …  
    17861797        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code>
    17871798</em></span>
    1788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534769"></a>
     1799</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540889"></a>
    17891800
    17901801encrypt passwords (G)
    1791 </h3></div></div></div><a class="indexterm" name="id2534770"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
     1802</h3></div></div></div><a class="indexterm" name="id2540890"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
    17921803    will be negotiated with the client. Note that Windows NT 4.0 SP3 and
    17931804    above and also Windows 98 will by default expect encrypted passwords
    … …  
    18081819    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> must either
    18091820    have access to a local <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> file (see the <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a> program for information on how to set up
    1810     and maintain this file), or set the <a class="link" href="smb.conf.5.html#SECURITY">security = [server|domain|ads]</a> parameter which
     1821    and maintain this file), or set the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = [server|domain|ads]</a> parameter which
    18111822    causes <code class="literal">smbd</code> to authenticate against another
    18121823        server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code>
    18131824</em></span>
    1814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534881"></a>
     1825</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540994"></a>
    18151826
    18161827enhanced browsing (G)
    1817 </h3></div></div></div><a class="indexterm" name="id2534882"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
     1828</h3></div></div></div><a class="indexterm" name="id2540995"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
    18181829        cross-subnet browse propagation that have been added in Samba
    18191830        but which are not standard in Microsoft implementations. 
    … …  
    18281839        cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code>
    18291840</em></span>
    1830 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534952"></a>
     1841</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541055"></a>
    18311842
    18321843enumports command (G)
    1833 </h3></div></div></div><a class="indexterm" name="id2534953"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
     1844</h3></div></div></div><a class="indexterm" name="id2541056"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
    18341845    to UNIX hosts.  Under Windows NT/2000 print servers, a port
    18351846    is associated with a port monitor and generally takes the form of
    … …  
    18481859</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code>
    18491860</em></span>
    1850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535042"></a>
     1861</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541136"></a>
    18511862
    18521863eventlog list (G)
    1853 </h3></div></div></div><a class="indexterm" name="id2535043"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
     1864</h3></div></div></div><a class="indexterm" name="id2541137"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
    18541865    report to the Microsoft EventViewer utility.  The listed
    18551866    eventlogs will be associated with tdb file on disk in the
    … …  
    18641875</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code>
    18651876</em></span>
    1866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535121"></a>
     1877</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541209"></a>
    18671878
    18681879fake directory create times (S)
    1869 </h3></div></div></div><a class="indexterm" name="id2535122"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
     1880</h3></div></div></div><a class="indexterm" name="id2541210"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
    18701881        time for all files and directories. This is not the same as the
    18711882        ctime - status change time - that Unix keeps, so Samba by default
    … …  
    18891900        will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code>
    18901901</em></span>
    1891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535201"></a>
     1902</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541285"></a>
    18921903
    18931904fake oplocks (S)
    1894 </h3></div></div></div><a class="indexterm" name="id2535202"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
     1905</h3></div></div></div><a class="indexterm" name="id2541286"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
    18951906        from a server to locally cache file operations. If a server grants
    18961907        an oplock (opportunistic lock) then the client is free to assume
    … …  
    18991910        file open/close operations. This can give enormous performance benefits.
    19001911        </p><p>When you set <code class="literal">fake oplocks = yes</code>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will
    1901         always grant oplock requests no matter how many clients are using the file.</p><p>It is generally much better to use the real <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a> support rather
     1912        always grant oplock requests no matter how many clients are using the file.</p><p>It is generally much better to use the real <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> support rather
    19021913        than this parameter.</p><p>If you enable this option on all read-only shares or
    19031914        shares that you know will only be accessed from one client at a
    … …  
    19081919        this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code>
    19091920</em></span>
    1910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535293"></a>
     1921</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541369"></a>
    19111922
    19121923follow symlinks (S)
    1913 </h3></div></div></div><a class="indexterm" name="id2535294"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1924</h3></div></div></div><a class="indexterm" name="id2541370"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    19141925        This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>       from following symbolic links in a particular share. Setting this
    19151926        parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being
    … …  
    19211932        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code>
    19221933</em></span>
    1923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535368"></a>
     1934</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541439"></a>
    19241935
    19251936force create mode (S)
    1926 </h3></div></div></div><a class="indexterm" name="id2535369"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     1937</h3></div></div></div><a class="indexterm" name="id2541440"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    19271938    permissions that will <span class="emphasis"><em>always</em></span> be set on a
    19281939    file created by Samba. This is done by bitwise 'OR'ing these bits onto
    … …  
    19361947</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code>
    19371948</em></span>
    1938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535448"></a>
     1949</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541512"></a>
    19391950
    19401951force directory mode (S)
    1941 </h3></div></div></div><a class="indexterm" name="id2535449"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     1952</h3></div></div></div><a class="indexterm" name="id2541513"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    19421953    permissions that will <span class="emphasis"><em>always</em></span> be set on a directory
    19431954    created by Samba. This is done by bitwise 'OR'ing these bits onto the
    … …  
    19521963</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code>
    19531964</em></span>
    1954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535530"></a>
     1965</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541587"></a>
    19551966
    19561967force directory security mode (S)
    1957 </h3></div></div></div><a class="indexterm" name="id2535531"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1968</h3></div></div></div><a class="indexterm" name="id2541588"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    19581969        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    19591970        the UNIX permission on a directory using the native NT security dialog box.
    19601971        </p><p>
    19611972        This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this
    1962         mask that the user may have modified to be on.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK">directory security mask</a>, which works in a similar manner to this one, but uses a logical AND instead
     1973        mask that the user may have modified to be on.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#DIRECTORYSECURITYMASK" target="_top">directory security mask</a>, which works in a similar manner to this one, but uses a logical AND instead
    19631974        of an OR.
    19641975        </p><p>
    … …  
    19761987</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code>
    19771988</em></span>
    1978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535634"></a>
     1989</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541683"></a>
    19791990
    19801991<a name="GROUP"></a>group
    1981 </h3></div></div></div><a class="indexterm" name="id2535635"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535666"></a>
     1992</h3></div></div></div><a class="indexterm" name="id2541684"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541710"></a>
    19821993
    19831994force group (S)
    1984 </h3></div></div></div><a class="indexterm" name="id2535667"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
     1995</h3></div></div></div><a class="indexterm" name="id2541711"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
    19851996    assigned as the default primary group for all users connecting
    19861997    to this service. This is useful for sharing files by ensuring
    … …  
    20002011    primary group assigned to sys when accessing this Samba share. All
    20012012    other users will retain their ordinary primary group.</p><p>
    2002         If the <a class="link" href="smb.conf.5.html#FORCEUSER">force user</a> parameter is also set the group specified in
     2013        If the <a class="link" href="smb.conf.5.html#FORCEUSER" target="_top">force user</a> parameter is also set the group specified in
    20032014    <em class="parameter"><code>force group</code></em> will override the primary group
    20042015    set in <em class="parameter"><code>force user</code></em>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal"></code>
    … …  
    20062017</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code>
    20072018</em></span>
    2008 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535781"></a>
     2019</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541815"></a>
    20092020
    20102021force printername (S)
    2011 </h3></div></div></div><a class="indexterm" name="id2535782"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
     2022</h3></div></div></div><a class="indexterm" name="id2541816"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
    20122023    each printer in <code class="filename">smb.conf</code> has two
    20132024    associated names which can be used by the client.  The first
    … …  
    20322043    folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code>
    20332044</em></span>
    2034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535872"></a>
     2045</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541900"></a>
    20352046
    20362047force security mode (S)
    2037 </h3></div></div></div><a class="indexterm" name="id2535874"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2048</h3></div></div></div><a class="indexterm" name="id2541901"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20382049        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    20392050    the UNIX permission on a file using the native NT security dialog box.
    20402051        </p><p>
    20412052        This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this
    2042         mask that the user may have modified to be on.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#SECURITYMASK">security mask</a>, which works similar like this one but uses logical AND instead of OR.
     2053        mask that the user may have modified to be on.  Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#SECURITYMASK" target="_top">security mask</a>, which works similar like this one but uses logical AND instead of OR.
    20432054        </p><p>
    20442055        Essentially, one bits in this mask may be treated as a set of bits that, when modifying security on a file,
    … …  
    20552066</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code>
    20562067</em></span>
    2057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535974"></a>
     2068</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542000"></a>
    20582069
    20592070force unknown acl user (S)
    2060 </h3></div></div></div><a class="indexterm" name="id2535975"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2071</h3></div></div></div><a class="indexterm" name="id2542002"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20612072    If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or
    20622073    representation of a user or group id) as the owner or group owner of the file will be silently
    … …  
    20722083    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code>
    20732084</em></span>
    2074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536036"></a>
     2085</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542063"></a>
    20752086
    20762087force user (S)
    2077 </h3></div></div></div><a class="indexterm" name="id2536037"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
     2088</h3></div></div></div><a class="indexterm" name="id2542064"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
    20782089    assigned as the default user for all users connecting to this service.
    20792090    This is useful for sharing files. You should also use it carefully
    … …  
    20892100</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code>
    20902101</em></span>
    2091 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536112"></a>
     2102</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542139"></a>
    20922103
    20932104fstype (S)
    2094 </h3></div></div></div><a class="indexterm" name="id2536113"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2105</h3></div></div></div><a class="indexterm" name="id2542140"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20952106        This parameter allows the administrator to configure the string that specifies the type of filesystem a share
    20962107        is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    21022113</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code>
    21032114</em></span>
    2104 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536194"></a>
     2115</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542221"></a>
    21052116
    21062117get quota command (G)
    2107 </h3></div></div></div><a class="indexterm" name="id2536195"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
     2118</h3></div></div></div><a class="indexterm" name="id2542222"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
    21082119        whenever there is no operating system API available from the OS that
    21092120        samba can use.</p><p>This option is only available you have compiled Samba with the
    … …  
    21182129</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code>
    21192130</em></span>
    2120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536380"></a>
     2131</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542408"></a>
    21212132
    21222133getwd cache (G)
    2123 </h3></div></div></div><a class="indexterm" name="id2536381"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
     2134</h3></div></div></div><a class="indexterm" name="id2542409"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
    21242135    caching algorithm will be used to reduce the time taken for getwd()
    21252136    calls. This can have a significant impact on performance, especially
    2126     when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code>
    2127 </em></span>
    2128 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536440"></a>
     2137    when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code>
     2138</em></span>
     2139</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542468"></a>
    21292140
    21302141guest account (G)
    2131 </h3></div></div></div><a class="indexterm" name="id2536441"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
    2132     to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> (see below). Whatever privileges this
     2142</h3></div></div></div><a class="indexterm" name="id2542470"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
     2143    to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this
    21332144    user has will be available to any client connecting to the guest service.
    21342145    This user must exist in the password file, but does not require
    … …  
    21472158</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code>
    21482159</em></span>
    2149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536548"></a>
     2160</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542576"></a>
    21502161
    21512162<a name="PUBLIC"></a>public
    2152 </h3></div></div></div><a class="indexterm" name="id2536549"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536579"></a>
     2163</h3></div></div></div><a class="indexterm" name="id2542577"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542607"></a>
    21532164
    21542165guest ok (S)
    2155 </h3></div></div></div><a class="indexterm" name="id2536580"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2166</h3></div></div></div><a class="indexterm" name="id2542608"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    21562167    a service, then no password is required to connect to the service.
    2157     Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p><p>This paramater nullifies the benifits of setting
    2158     <a class="link" href="smb.conf.5.html#RESTRICTANONYMOUS">restrict anonymous = 2</a>
    2159         </p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option.
     2168    Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This paramater nullifies the benifits of setting
     2169    <a class="link" href="smb.conf.5.html#RESTRICTANONYMOUS" target="_top">restrict anonymous = 2</a>
     2170        </p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option.
    21602171        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code>
    21612172</em></span>
    2162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536668"></a>
     2173</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542696"></a>
    21632174
    21642175<a name="ONLYGUEST"></a>only guest
    2165 </h3></div></div></div><a class="indexterm" name="id2536669"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536700"></a>
     2176</h3></div></div></div><a class="indexterm" name="id2542697"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542728"></a>
    21662177
    21672178guest only (S)
    2168 </h3></div></div></div><a class="indexterm" name="id2536701"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2179</h3></div></div></div><a class="indexterm" name="id2542730"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    21692180    a service, then only guest connections to the service are permitted.
    2170     This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY">security</a> for more information about this option.
     2181    This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option.
    21712182        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code>
    21722183</em></span>
    2173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536772"></a>
     2184</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542801"></a>
    21742185
    21752186hide dot files (S)
    2176 </h3></div></div></div><a class="indexterm" name="id2536773"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
     2187</h3></div></div></div><a class="indexterm" name="id2542802"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
    21772188        files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code>
    21782189</em></span>
    2179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536815"></a>
     2190</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542844"></a>
    21802191
    21812192hide files (S)
    2182 </h3></div></div></div><a class="indexterm" name="id2536816"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
     2193</h3></div></div></div><a class="indexterm" name="id2542845"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
    21832194        visible but are accessible.  The DOS 'hidden' attribute is applied
    21842195        to any files or directories that match.</p><p>Each entry in the list must be separated by a '/',
    … …  
    22022213# no file are hidden</code>
    22032214</em></span>
    2204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536903"></a>
     2215</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542932"></a>
    22052216
    22062217hide special files (S)
    2207 </h3></div></div></div><a class="indexterm" name="id2536904"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2218</h3></div></div></div><a class="indexterm" name="id2542933"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22082219        This parameter prevents clients from seeing special files such as sockets, devices and
    22092220        fifo's in directory listings.
    22102221        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code>
    22112222</em></span>
    2212 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536946"></a>
     2223</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542975"></a>
    22132224
    22142225hide unreadable (S)
    2215 </h3></div></div></div><a class="indexterm" name="id2536947"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
     2226</h3></div></div></div><a class="indexterm" name="id2542976"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
    22162227                existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code>
    22172228</em></span>
    2218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536989"></a>
     2229</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543017"></a>
    22192230
    22202231hide unwriteable files (S)
    2221 </h3></div></div></div><a class="indexterm" name="id2536990"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2232</h3></div></div></div><a class="indexterm" name="id2543018"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22222233    This parameter prevents clients from seeing the existance of files that cannot be written to.
    22232234    Defaults to off. Note that unwriteable directories are shown as usual.
    22242235    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code>
    22252236</em></span>
    2226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537033"></a>
     2237</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543062"></a>
    22272238
    22282239homedir map (G)
    2229 </h3></div></div></div><a class="indexterm" name="id2537034"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    2230         If <a class="link" href="smb.conf.5.html#NISHOMEDIR">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting       as a Win95/98 <em class="parameter"><code>logon server</code></em>
     2240</h3></div></div></div><a class="indexterm" name="id2543063"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2241        If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting         as a Win95/98 <em class="parameter"><code>logon server</code></em>
    22312242        then this parameter specifies the NIS (or YP) map from which the server for the user's  home directory should be extracted. 
    22322243        At present, only the Sun auto.home map format is understood. The form of the map is:
    … …  
    22422253</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code>
    22432254</em></span>
    2244 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537145"></a>
     2255</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543175"></a>
    22452256
    22462257host msdfs (G)
    2247 </h3></div></div></div><a class="indexterm" name="id2537146"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2258</h3></div></div></div><a class="indexterm" name="id2543176"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22482259        If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse
    22492260        Dfs trees hosted on the server.
    22502261        </p><p>
    2251         See also the <a class="link" href="smb.conf.5.html#MSDFSROOT">msdfs root</a> share  level  parameter.  For more  information  on
     2262        See also the <a class="link" href="smb.conf.5.html#MSDFSROOT" target="_top">msdfs root</a> share  level  parameter.  For more  information  on
    22522263        setting  up a Dfs tree on Samba, refer to the MSFDS chapter in the book Samba3-HOWTO.
    22532264        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code>
    22542265</em></span>
    2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537209"></a>
     2266</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543239"></a>
    22562267
    22572268hostname lookups (G)
    2258 </h3></div></div></div><a class="indexterm" name="id2537210"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
     2269</h3></div></div></div><a class="indexterm" name="id2543240"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
    22592270    hostname lookups or use the ip addresses instead. An example place
    22602271    where hostname lookups are currently used is when checking
    … …  
    22642275</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code>
    22652276</em></span>
    2266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537283"></a>
     2277</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543312"></a>
    22672278
    22682279<a name="ALLOWHOSTS"></a>allow hosts
    2269 </h3></div></div></div><a class="indexterm" name="id2537284"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537314"></a>
     2280</h3></div></div></div><a class="indexterm" name="id2543314"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543345"></a>
    22702281
    22712282hosts allow (S)
    2272 </h3></div></div></div><a class="indexterm" name="id2537316"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
     2283</h3></div></div></div><a class="indexterm" name="id2543346"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
    22732284    set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will
    22742285    apply to all services, regardless of whether the individual
    … …  
    22802291    page may not be present on your system, so a brief description will
    22812292    be given here also.</p><p>Note that the localhost address 127.0.0.1 will always
    2282     be allowed access unless specifically denied by a <a class="link" href="smb.conf.5.html#HOSTSDENY">hosts deny</a> option.</p><p>You can also specify hosts by network/netmask pairs and
     2293    be allowed access unless specifically denied by a <a class="link" href="smb.conf.5.html#HOSTSDENY" target="_top">hosts deny</a> option.</p><p>You can also specify hosts by network/netmask pairs and
    22832294    by netgroup names if your system supports netgroups. The
    22842295    <span class="emphasis"><em>EXCEPT</em></span> keyword can also be used to limit a
    … …  
    22902301</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code>
    22912302</em></span>
    2292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537516"></a>
     2303</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543547"></a>
    22932304
    22942305<a name="DENYHOSTS"></a>deny hosts
    2295 </h3></div></div></div><a class="indexterm" name="id2537517"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537548"></a>
     2306</h3></div></div></div><a class="indexterm" name="id2543548"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543578"></a>
    22962307
    22972308hosts deny (S)
    2298 </h3></div></div></div><a class="indexterm" name="id2537549"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
     2309</h3></div></div></div><a class="indexterm" name="id2543579"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
    22992310    - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to
    23002311    services unless the specific services have their own lists to override
    … …  
    23032314        In the event that it is necessary to deny all by default, use the keyword
    23042315        ALL (or the netmask <code class="literal">0.0.0.0/0</code>) and then explicitly specify
    2305         to the <a class="link" href="smb.conf.5.html#HOSTSALLOW">hosts allow = hosts allow</a> parameter those hosts
     2316        to the <a class="link" href="smb.conf.5.html#HOSTSALLOW" target="_top">hosts allow = hosts allow</a> parameter those hosts
    23062317        that should be permitted access.
    23072318        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">
    … …  
    23102321</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code>
    23112322</em></span>
    2312 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537650"></a>
     2323</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543680"></a>
    23132324
    23142325idmap alloc backend (G)
    2315 </h3></div></div></div><a class="indexterm" name="id2537651"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2326</h3></div></div></div><a class="indexterm" name="id2543681"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23162327        The idmap alloc backend provides a plugin interface for Winbind to use
    23172328        when allocating Unix uids/gids for Windows SIDs.  This option is
    2318         to be used in conjunction with the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a>
     2329        to be used in conjunction with the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a>
    23192330        parameter and refers to the name of the idmap module which will provide
    23202331        the id allocation functionality.  Please refer to the man page
    … …  
    23222333        the allocation feature.  The most common plugins are the tdb (<a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>)
    23232334        and ldap (<a class="citerefentry" href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>) libraries.
    2324         </p><p>Also refer to the <a class="link" href="smb.conf.5.html#IDMAPALLOCCONFIG">idmap alloc config</a> option.
     2335        </p><p>Also refer to the <a class="link" href="smb.conf.5.html#IDMAPALLOCCONFIG" target="_top">idmap alloc config</a> option.
    23252336        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code>
    23262337</em></span>
    2327 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537747"></a>
     2338</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543779"></a>
    23282339
    23292340idmap alloc config (G)
    2330 </h3></div></div></div><a class="indexterm" name="id2537748"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2341</h3></div></div></div><a class="indexterm" name="id2543780"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23312342        The idmap alloc config prefix provides a means of managing settings
    2332         for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc backend</a>
     2343        for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a>
    23332344        parameter.  Refer to the man page for each idmap plugin regarding
    23342345        specific configuration details.
    2335         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537792"></a>
     2346        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543823"></a>
    23362347
    23372348idmap backend (G)
    2338 </h3></div></div></div><a class="indexterm" name="id2537793"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2349</h3></div></div></div><a class="indexterm" name="id2543824"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23392350        The idmap backend provides a plugin interface for Winbind to use
    23402351        varying backends to store SID/uid/gid mapping tables.  This
    23412352        option is mutually exclusive with the newer and more flexible
    2342         <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> parameter. The main difference
     2353        <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a> parameter. The main difference
    23432354        between the "idmap backend" and the "idmap domains"
    23442355        is that the former only allows one backend for all domains while the
    … …  
    23492360        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code>
    23502361</em></span>
    2351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537886"></a>
     2362</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543918"></a>
    23522363
    23532364idmap cache time (G)
    2354 </h3></div></div></div><a class="indexterm" name="id2537888"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2365</h3></div></div></div><a class="indexterm" name="id2543919"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    23552366        idmap interface will cache positive SID/uid/gid query results.
    23562367        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">900</code>
    23572368</em></span>
    2358 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537930"></a>
     2369</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543962"></a>
    23592370
    23602371idmap config (G)
    2361 </h3></div></div></div><a class="indexterm" name="id2537931"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2372</h3></div></div></div><a class="indexterm" name="id2543963"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23622373        The idmap config prefix provides a means of managing each domain
    2363         defined by the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> option using Samba's
     2374        defined by the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a> option using Samba's
    23642375        parametric option support. The idmap config prefix should be
    23652376        followed by the name of the domain, a colon, and a setting specific to
    … …  
    23752386                </p></dd><dt><span class="term">readonly = [yes|no]</span></dt><dd><p>
    23762387                        Mark the domain as readonly which means that no attempts to
    2377                         allocate a uid or gid (by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND">idmap alloc     backend</a>) for any user or group in that domain
     2388                        allocate a uid or gid (by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc     backend</a>) for any user or group in that domain
    23782389                        will be attempted.
    23792390                </p></dd></dl></div><p>
    … …  
    23922403        idmap config TRUSTEDDOMAINS:default = yes
    23932404        idmap config TRUSTEDDOMAINS:range   = 1000 - 9999
    2394         </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538066"></a>
     2405        </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544099"></a>
    23952406
    23962407idmap domains (G)
    2397 </h3></div></div></div><a class="indexterm" name="id2538067"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2408</h3></div></div></div><a class="indexterm" name="id2544100"></a><a name="IDMAPDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23982409        The idmap domains option defines a list of Windows domains which will each
    23992410        have a separately configured backend for managing Winbind's SID/uid/gid
    2400         tables.  This parameter is mutually exclusive with the older <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a> option.
     2411        tables.  This parameter is mutually exclusive with the older <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a> option.
    24012412        </p><p>
    24022413        Values consist of the short domain name for Winbind's primary or collection
    … …  
    24042415        domain backend for any domain not explicitly listed.
    24052416        </p><p>
    2406         Refer to the <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> for details about
     2417        Refer to the <a class="link" href="smb.conf.5.html#IDMAPCONFIG" target="_top">idmap config</a> for details about
    24072418        managing the SID/uid/gid backend for each domain.
    24082419        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap domains</code></em> = <code class="literal">default AD CORP</code>
    24092420</em></span>
    2410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538151"></a>
     2421</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544183"></a>
    24112422
    24122423<a name="WINBINDGID"></a>winbind gid
    2413 </h3></div></div></div><a class="indexterm" name="id2538152"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538182"></a>
     2424</h3></div></div></div><a class="indexterm" name="id2544184"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544216"></a>
    24142425
    24152426idmap gid (G)
    2416 </h3></div></div></div><a class="indexterm" name="id2538183"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
     2427</h3></div></div></div><a class="indexterm" name="id2544217"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
    24172428        that are allocated for the purpose of mapping UNX groups to NT group
    24182429        SIDs. This range of group ids should have no
    24192430        existing local or NIS groups within it as strange conflicts can
    2420         occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> options.
     2431        occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG" target="_top">idmap config</a> options.
    24212432        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal"></code>
    24222433</em></span>
    24232434</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code>
    24242435</em></span>
    2425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538280"></a>
     2436</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544314"></a>
    24262437
    24272438idmap negative cache time (G)
    2428 </h3></div></div></div><a class="indexterm" name="id2538281"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2439</h3></div></div></div><a class="indexterm" name="id2544315"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    24292440        idmap interface will cache negative SID/uid/gid query results.
    24302441        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code>
    24312442</em></span>
    2432 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538324"></a>
     2443</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544358"></a>
    24332444
    24342445<a name="WINBINDUID"></a>winbind uid
    2435 </h3></div></div></div><a class="indexterm" name="id2538325"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538355"></a>
     2446</h3></div></div></div><a class="indexterm" name="id2544360"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544390"></a>
    24362447
    24372448idmap uid (G)
    2438 </h3></div></div></div><a class="indexterm" name="id2538356"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2449</h3></div></div></div><a class="indexterm" name="id2544392"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24392450        The idmap uid parameter specifies the range of user ids that are
    24402451        allocated for use in mapping UNIX users to NT user SIDs. This
    24412452        range of ids should have no existing local
    2442         or NIS users within it as strange conflicts can occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG">idmap config</a> options.
     2453        or NIS users within it as strange conflicts can occur otherwise.</p><p>See also the <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a>, <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a>, and <a class="link" href="smb.conf.5.html#IDMAPCONFIG" target="_top">idmap config</a> options.
    24432454        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal"></code>
    24442455</em></span>
    24452456</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code>
    24462457</em></span>
    2447 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538453"></a>
     2458</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544488"></a>
    24482459
    24492460include (G)
    2450 </h3></div></div></div><a class="indexterm" name="id2538454"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2461</h3></div></div></div><a class="indexterm" name="id2544489"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24512462        This allows you to include one config file inside another.  The file is included literally, as though typed
    24522463        in place.
    … …  
    24662477</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code>
    24672478</em></span>
    2468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538554"></a>
     2479</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544589"></a>
    24692480
    24702481inherit acls (S)
    2471 </h3></div></div></div><a class="indexterm" name="id2538555"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
     2482</h3></div></div></div><a class="indexterm" name="id2544590"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
    24722483    exist on parent directories, they are always honored when creating a
    24732484    new file or subdirectory in these parent directories. The default
    … …  
    24772488</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code>
    24782489</em></span>
    2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538601"></a>
     2490</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544636"></a>
    24802491
    24812492inherit owner (S)
    2482 </h3></div></div></div><a class="indexterm" name="id2538602"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
     2493</h3></div></div></div><a class="indexterm" name="id2544637"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
    24832494        is normally governed by effective uid of the connected user.
    24842495        This option allows the Samba administrator to specify that
    … …  
    24892500        roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code>
    24902501</em></span>
    2491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538654"></a>
     2502</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544689"></a>
    24922503
    24932504inherit permissions (S)
    2494 </h3></div></div></div><a class="indexterm" name="id2538655"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    2495         The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>,
    2496         <a class="link" href="smb.conf.5.html#DIRECTORYMASK">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE">force directory mode</a> but the boolean inherit permissions parameter overrides this.
     2505</h3></div></div></div><a class="indexterm" name="id2544690"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2506        The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>,
     2507        <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this.
    24972508        </p><p>New directories inherit the mode of the parent directory,
    24982509    including bits such as setgid.</p><p>
    24992510        New files inherit their read/write bits from the parent directory.  Their execute bits continue to be
    2500         determined by <a class="link" href="smb.conf.5.html#MAPARCHIVE">map archive</a>, <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPSYSTEM">map system</a> as usual.
     2511        determined by <a class="link" href="smb.conf.5.html#MAPARCHIVE" target="_top">map archive</a>, <a class="link" href="smb.conf.5.html#MAPHIDDEN" target="_top">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPSYSTEM" target="_top">map system</a> as usual.
    25012512        </p><p>Note that the setuid bit is <span class="emphasis"><em>never</em></span> set via
    25022513    inheritance (the code explicitly prohibits this).</p><p>This can be particularly useful on large systems with
    … …  
    25042515    share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code>
    25052516</em></span>
    2506 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538801"></a>
     2517</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544838"></a>
    25072518
    25082519interfaces (G)
    2509 </h3></div></div></div><a class="indexterm" name="id2538802"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
     2520</h3></div></div></div><a class="indexterm" name="id2544839"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
    25102521        network interfaces list that Samba will use for browsing, name
    25112522        registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query
    … …  
    25312542</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code>
    25322543</em></span>
    2533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538918"></a>
     2544</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544955"></a>
    25342545
    25352546invalid users (S)
    2536 </h3></div></div></div><a class="indexterm" name="id2538919"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
     2547</h3></div></div></div><a class="indexterm" name="id2544956"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
    25372548    to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span>
    25382549    check to absolutely ensure an improper setting does not breach
    … …  
    25542565</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code>
    25552566</em></span>
    2556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539031"></a>
     2567</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545069"></a>
    25572568
    25582569iprint server (G)
    2559 </h3></div></div></div><a class="indexterm" name="id2539032"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    2560     This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING">printing</a> is set to <code class="constant">iprint</code>.
     2570</h3></div></div></div><a class="indexterm" name="id2545070"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2571    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>.
    25612572    </p><p>
    25622573   If set, this option overrides the ServerName option in the CUPS <code class="filename">client.conf</code>. This is
    … …  
    25662577</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code>
    25672578</em></span>
    2568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539118"></a>
     2579</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545155"></a>
    25692580
    25702581keepalive (G)
    2571 </h3></div></div></div><a class="indexterm" name="id2539119"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
     2582</h3></div></div></div><a class="indexterm" name="id2545156"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
    25722583    the number of seconds between <em class="parameter"><code>keepalive</code></em>
    25732584    packets. If this parameter is zero, no keepalive packets will be
    25742585    sent. Keepalive packets, if sent, allow the server to tell whether
    25752586    a client is still present and responding.</p><p>Keepalives should, in general, not be needed if the socket
    2576     has the SO_KEEPALIVE attribute set on it by default. (see <a class="link" href="smb.conf.5.html#SOCKETOPTIONS">socket options</a>).
     2587    has the SO_KEEPALIVE attribute set on it by default. (see <a class="link" href="smb.conf.5.html#SOCKETOPTIONS" target="_top">socket options</a>).
    25772588Basically you should only use this option if you strike difficulties.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">300</code>
    25782589</em></span>
    25792590</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code>
    25802591</em></span>
    2581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539205"></a>
     2592</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545243"></a>
    25822593
    25832594kernel change notify (S)
    2584 </h3></div></div></div><a class="indexterm" name="id2539206"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
     2595</h3></div></div></div><a class="indexterm" name="id2545244"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
    25852596        kernel for change notifications in directories so that
    25862597        SMB clients can refresh whenever the data on the server changes.
    … …  
    25892600        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code>
    25902601</em></span>
    2591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539254"></a>
     2602</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545293"></a>
    25922603
    25932604kernel oplocks (G)
    2594 </h3></div></div></div><a class="indexterm" name="id2539256"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a>
     2605</h3></div></div></div><a class="indexterm" name="id2545294"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    25952606        (currently only IRIX and the Linux 2.4 kernel), this parameter
    25962607        allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks
    … …  
    26022613        You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code>
    26032614</em></span>
    2604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539342"></a>
     2615</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545381"></a>
    26052616
    26062617lanman auth (G)
    2607 </h3></div></div></div><a class="indexterm" name="id2539343"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     2618</h3></div></div></div><a class="indexterm" name="id2545382"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    26082619    authenticate users or permit password changes
    26092620    using the LANMAN password hash. If disabled, only clients which support NT
    … …  
    26222633    special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code>
    26232634</em></span>
    2624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539435"></a>
     2635</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545474"></a>
    26252636
    26262637large readwrite (G)
    2627 </h3></div></div></div><a class="indexterm" name="id2539436"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     2638</h3></div></div></div><a class="indexterm" name="id2545475"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
    26282639    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k
    26292640    streaming read and write varient SMB requests introduced with
    … …  
    26342645        tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code>
    26352646</em></span>
    2636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539491"></a>
     2647</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545530"></a>
    26372648
    26382649ldap admin dn (G)
    2639 </h3></div></div></div><a class="indexterm" name="id2539492"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    2640         The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> defines the Distinguished  Name (DN) name used by Samba to contact
    2641         the ldap server when retreiving  user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> is used
     2650</h3></div></div></div><a class="indexterm" name="id2545531"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2651        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished  Name (DN) name used by Samba to contact
     2652        the ldap server when retreiving  user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used
    26422653        in conjunction with the admin dn password stored in the <code class="filename">private/secrets.tdb</code>
    26432654        file.  See the <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>
    26442655        man page for more information on how  to accomplish this.
    26452656        </p><p>
    2646         The <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap  suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN">ldap admin dn</a>.
    2647         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539600"></a>
     2657        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap  suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>.
     2658        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545639"></a>
    26482659
    26492660ldap connection timeout (G)
    2650 </h3></div></div></div><a class="indexterm" name="id2539601"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2661</h3></div></div></div><a class="indexterm" name="id2545640"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26512662        This parameter tells the LDAP library calls which timeout in seconds
    26522663        they should honor during initial connection establishments to LDAP servers.
    … …  
    26552666        timeouts are over. This feature must be supported by your LDAP library.
    26562667        </p><p>
    2657         This parameter is different from <a class="link" href="smb.conf.5.html#LDAPTIMEOUT">ldap timeout</a>
     2668        This parameter is different from <a class="link" href="smb.conf.5.html#LDAPTIMEOUT" target="_top">ldap timeout</a>
    26582669        which affects operations on LDAP servers using an existing connection
    26592670        and not establishing an initial connection.
    26602671        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code>
    26612672</em></span>
    2662 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539665"></a>
     2673</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545704"></a>
    26632674
    26642675ldap debug level (G)
    2665 </h3></div></div></div><a class="indexterm" name="id2539666"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2676</h3></div></div></div><a class="indexterm" name="id2545706"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26662677                This parameter controls the debug level of the LDAP library
    26672678                calls. In the case of OpenLDAP, it is the same
    … …  
    26802691</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code>
    26812692</em></span>
    2682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539752"></a>
     2693</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545792"></a>
    26832694
    26842695ldap debug threshold (G)
    2685 </h3></div></div></div><a class="indexterm" name="id2539753"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2696</h3></div></div></div><a class="indexterm" name="id2545794"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26862697                This parameter controls the Samba debug level at which
    26872698                the ldap library debug output is
    … …  
    26922703</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code>
    26932704</em></span>
    2694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539819"></a>
     2705</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545860"></a>
    26952706
    26962707ldap delete dn (G)
    2697 </h3></div></div></div><a class="indexterm" name="id2539820"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
     2708</h3></div></div></div><a class="indexterm" name="id2545861"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
    26982709        operation in the ldapsam deletes the complete entry or only the attributes
    26992710        specific to Samba.
    27002711        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code>
    27012712</em></span>
    2702 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539863"></a>
     2713</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545904"></a>
    27032714
    27042715ldap group suffix (G)
    2705 </h3></div></div></div><a class="indexterm" name="id2539864"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
     2716</h3></div></div></div><a class="indexterm" name="id2545905"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
    27062717        used for groups when these are added to the LDAP directory.
    2707         If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    2708         <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal"></code>
     2718        If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
     2719        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> string so use a partial DN.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal"></code>
    27092720</em></span>
    27102721</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code>
    27112722</em></span>
    2712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539946"></a>
     2723</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545988"></a>
    27132724
    27142725ldap idmap suffix (G)
    2715 </h3></div></div></div><a class="indexterm" name="id2539947"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2726</h3></div></div></div><a class="indexterm" name="id2545989"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27162727        This parameters specifies the suffix that is used when storing idmap mappings. If this parameter
    2717         is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead.  The suffix
    2718         string is pre-pended to the <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN.
     2728        is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
     2729        string is pre-pended to the <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> string so use a partial DN.
    27192730        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal"></code>
    27202731</em></span>
    27212732</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code>
    27222733</em></span>
    2723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540029"></a>
     2734</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546070"></a>
    27242735
    27252736ldap machine suffix (G)
    2726 </h3></div></div></div><a class="indexterm" name="id2540030"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2737</h3></div></div></div><a class="indexterm" name="id2546071"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27272738        It specifies where machines should be added to the ldap tree.  If this parameter is unset, the value of
    2728         <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    2729         <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN.
     2739        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
     2740        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> string so use a partial DN.
    27302741        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal"></code>
    27312742</em></span>
    27322743</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code>
    27332744</em></span>
    2734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540111"></a>
     2745</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546153"></a>
    27352746
    27362747ldap passwd sync (G)
    2737 </h3></div></div></div><a class="indexterm" name="id2540112"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2748</h3></div></div></div><a class="indexterm" name="id2546154"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27382749        This option is used to define whether or not Samba should sync the LDAP password with the NT
    27392750        and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
    27402751        change via SAMBA. 
    27412752        </p><p>
    2742         The <a class="link" href="smb.conf.5.html#LDAPPASSWDSYNC">ldap passwd sync</a> can be set to one of three values:
     2753        The <a class="link" href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">ldap passwd sync</a> can be set to one of three values:
    27432754        </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Yes</code></em>  =  Try
    27442755                        to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>No</code></em> = Update NT and
    … …  
    27462757                        the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code>
    27472758</em></span>
    2748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540211"></a>
     2759</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546254"></a>
    27492760
    27502761ldap replication sleep (G)
    2751 </h3></div></div></div><a class="indexterm" name="id2540212"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2762</h3></div></div></div><a class="indexterm" name="id2546255"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27522763        When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server.
    27532764        This server then replicates our changes back to the 'local' server, however the replication might take some seconds,
    … …  
    27622773        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code>
    27632774</em></span>
    2764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540275"></a>
     2775</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546317"></a>
    27652776
    27662777ldapsam:editposix (G)
    2767 </h3></div></div></div><a class="indexterm" name="id2540276"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2778</h3></div></div></div><a class="indexterm" name="id2546318"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27682779        Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller
    27692780        eliminating the need to set up custom scripts to add and manage the posix users and groups. This option
    … …  
    27782789        the smb.conf ldap options must be properly configured.
    27792790
    2780         The typical ldap setup used with the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a> option
    2781         is usually sufficient to use <a class="link" href="smb.conf.5.html#LDAPSAM:EDITPOSIX">ldapsam:editposix = yes</a> as well.
     2791        The typical ldap setup used with the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED" target="_top">ldapsam:trusted = yes</a> option
     2792        is usually sufficient to use <a class="link" href="smb.conf.5.html#LDAPSAM:EDITPOSIX" target="_top">ldapsam:editposix = yes</a> as well.
    27822793        </p><p>
    27832794        An example configuration can be the following:
    … …  
    28432854        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code>
    28442855</em></span>
    2845 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540412"></a>
     2856</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546454"></a>
    28462857
    28472858ldapsam:trusted (G)
    2848 </h3></div></div></div><a class="indexterm" name="id2540413"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2859</h3></div></div></div><a class="indexterm" name="id2546455"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28492860        By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
    28502861        access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
    … …  
    28542865        are used to deal with user and group attributes lack such optimization.
    28552866        </p><p>
    2856         To make Samba scale well in large environments, the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a>
     2867        To make Samba scale well in large environments, the <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED" target="_top">ldapsam:trusted = yes</a>
    28572868        option assumes that the complete user and group database that is relevant to Samba is stored in LDAP with the
    28582869        standard posixAccount/posixGroup attributes. It further assumes that the Samba auxiliary object classes are
    28592870        stored together with the POSIX data in the same LDAP object. If these assumptions are met,
    2860         <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED">ldapsam:trusted = yes</a> can be activated and Samba can bypass the
     2871        <a class="link" href="smb.conf.5.html#LDAPSAM:TRUSTED" target="_top">ldapsam:trusted = yes</a> can be activated and Samba can bypass the
    28612872        NSS system to query user group memberships. Optimized LDAP queries can greatly speed up domain logon and
    28622873        administration tasks. Depending on the size of the LDAP database a factor of 100 or more for common queries
    … …  
    28642875        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code>
    28652876</em></span>
    2866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540500"></a>
     2877</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546543"></a>
    28672878
    28682879ldap ssl (G)
    2869 </h3></div></div></div><a class="indexterm" name="id2540502"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     2880</h3></div></div></div><a class="indexterm" name="id2546544"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    28702881        use SSL when connecting to the ldap server
    28712882        This is <span class="emphasis"><em>NOT</em></span> related to
    2872         Samba's previous SSL support which was enabled by specifying the
    2873          <code class="literal">--with-ssl</code> option to the <code class="filename">configure</code>
    2874         script.</p><p>The <a class="link" href="smb.conf.5.html#LDAPSSL">ldap ssl</a> can be set to one of three values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never
    2875                         use SSL when querying the directory.</p></li><li><p><em class="parameter"><code>Start_tls</code></em> = Use
    2876                         the LDAPv3 StartTLS extended operation (RFC2830) for
    2877                         communicating with the directory server.</p></li><li><p><em class="parameter"><code>On</code></em>  = Use SSL
    2878                         on the ldaps port when contacting the <em class="parameter"><code>ldap server</code></em>. Only available when the
    2879                         backwards-compatiblity <code class="literal">--with-ldapsam</code> option is specified
    2880                 to configure. See <a class="link" href="smb.conf.5.html#PASSDBBACKEND">passdb backend</a></p>.
    2881                 </li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start_tls</code>
    2882 </em></span>
    2883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540640"></a>
     2883        Samba's previous SSL support which was enabled by specifying the
     2884        <code class="literal">--with-ssl</code> option to the
     2885        <code class="filename">configure</code>
     2886        script.</p><p>LDAP connections should be secured where possible. This may be
     2887        done setting either this parameter to
     2888        <em class="parameter"><code>Start_tls</code></em>
     2889        or by specifying <em class="parameter"><code>ldaps://</code></em> in
     2890        the URL argument of <a class="link" href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend</a>.</p><p>The <a class="link" href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a> can be set to one of
     2891        two values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never
     2892                        use SSL when querying the directory.</p></li><li><p><em class="parameter"><code>Start_tls</code></em> = Use
     2893                        the LDAPv3 StartTLS extended operation (RFC2830) for
     2894                        communicating with the directory server.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">no</code>
     2895</em></span>
     2896</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546675"></a>
    28842897
    28852898ldap suffix (G)
    2886 </h3></div></div></div><a class="indexterm" name="id2540641"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
    2887         The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX">ldap user suffix</a>,
    2888          <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX">ldap machine suffix</a>, and the
    2889          <a class="link" href="smb.conf.5.html#LDAPIDMAPSUFFIX">ldap idmap suffix</a>. Each of these should be given only a DN relative to the
    2890          <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a>.
     2899</h3></div></div></div><a class="indexterm" name="id2546676"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
     2900        The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>,
     2901         <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the
     2902         <a class="link" href="smb.conf.5.html#LDAPIDMAPSUFFIX" target="_top">ldap idmap suffix</a>. Each of these should be given only a DN relative to the
     2903         <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a>.
    28912904        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal"></code>
    28922905</em></span>
    28932906</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code>
    28942907</em></span>
    2895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540762"></a>
     2908</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546798"></a>
    28962909
    28972910ldap timeout (G)
    2898 </h3></div></div></div><a class="indexterm" name="id2540763"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    2899         When Samba connects to an ldap server that server may be down or unreachable. To prevent Samba from hanging whilst
    2900         waiting for the connection this parameter specifies in seconds how long Samba should wait before failing the
    2901         connect. The default is to only wait fifteen seconds for the ldap server to respond to the connect request.
     2911</h3></div></div></div><a class="indexterm" name="id2546799"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2912        This parameter defines the number of seconds that Samba should use as timeout for LDAP operations.
    29022913        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code>
    29032914</em></span>
    2904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540809"></a>
     2915</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546840"></a>
    29052916
    29062917ldap user suffix (G)
    2907 </h3></div></div></div><a class="indexterm" name="id2540810"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2918</h3></div></div></div><a class="indexterm" name="id2546841"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29082919        This parameter specifies where users are added to the tree. If this parameter is unset,
    2909         the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> will be used instead.  The suffix
    2910         string is pre-pended to the  <a class="link" href="smb.conf.5.html#LDAPSUFFIX">ldap suffix</a> string so use a partial DN.
     2920        the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
     2921        string is pre-pended to the  <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> string so use a partial DN.
    29112922        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal"></code>
    29122923</em></span>
    29132924</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code>
    29142925</em></span>
    2915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540890"></a>
     2926</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546922"></a>
    29162927
    29172928level2 oplocks (S)
    2918 </h3></div></div></div><a class="indexterm" name="id2540891"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
     2929</h3></div></div></div><a class="indexterm" name="id2546923"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
    29192930        level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients
    29202931        that have an oplock on a file to downgrade from a read-write oplock
    … …  
    29302941        delete any read-ahead caches.</p><p>It is recommended that this parameter be turned on to
    29312942        speed access to shared executables.</p><p>For more discussions on level2 oplocks see the CIFS spec.</p><p>
    2932         Currently, if <a class="link" href="smb.conf.5.html#KERNELOPLOCKS">kernel oplocks</a> are supported then
     2943        Currently, if <a class="link" href="smb.conf.5.html#KERNELOPLOCKS" target="_top">kernel oplocks</a> are supported then
    29332944        level2 oplocks are not granted (even if this parameter is set to
    2934         <code class="constant">yes</code>).  Note also, the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a>
     2945        <code class="constant">yes</code>).  Note also, the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    29352946        parameter must be set to <code class="constant">yes</code> on this share in order for
    29362947        this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code>
    29372948</em></span>
    2938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540998"></a>
     2949</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547029"></a>
    29392950
    29402951lm announce (G)
    2941 </h3></div></div></div><a class="indexterm" name="id2540999"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
     2952</h3></div></div></div><a class="indexterm" name="id2547030"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
    29422953        broadcasts that are needed by OS/2 clients in order for them to see
    29432954        the Samba server in their browse list. This parameter can have three
    … …  
    29472958        broadcasts. If set to <code class="constant">yes</code> Samba will produce
    29482959        Lanman announce broadcasts at a frequency set by the parameter
    2949         <a class="link" href="smb.conf.5.html#LMINTERVAL">lm interval</a>. If set to <code class="constant">auto</code>
     2960        <a class="link" href="smb.conf.5.html#LMINTERVAL" target="_top">lm interval</a>. If set to <code class="constant">auto</code>
    29502961        Samba will not send Lanman announce broadcasts by default but will
    29512962        listen for them. If it hears such a broadcast on the wire it will
    29522963        then start sending them at a frequency set by the parameter
    2953         <a class="link" href="smb.conf.5.html#LMINTERVAL">lm interval</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">auto</code>
     2964        <a class="link" href="smb.conf.5.html#LMINTERVAL" target="_top">lm interval</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">auto</code>
    29542965</em></span>
    29552966</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code>
    29562967</em></span>
    2957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541120"></a>
     2968</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547151"></a>
    29582969
    29592970lm interval (G)
    2960 </h3></div></div></div><a class="indexterm" name="id2541121"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
     2971</h3></div></div></div><a class="indexterm" name="id2547152"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
    29612972        broadcasts needed by OS/2 clients (see the
    2962                 <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a> parameter) then this
     2973                <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this
    29632974        parameter defines the frequency in seconds with which they will be
    29642975        made.  If this is set to zero then no Lanman announcements will be
    2965         made despite the setting of the <a class="link" href="smb.conf.5.html#LMANNOUNCE">lm announce</a>
     2976        made despite the setting of the <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a>
    29662977        parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">60</code>
    29672978</em></span>
    29682979</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code>
    29692980</em></span>
    2970 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541204"></a>
     2981</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547235"></a>
    29712982
    29722983load printers (G)
    2973 </h3></div></div></div><a class="indexterm" name="id2541205"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
     2984</h3></div></div></div><a class="indexterm" name="id2547236"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
    29742985    printers in the printcap will be loaded for browsing by default.
    2975     See the <a class="link" href="smb.conf.5.html#PRINTERS">printers</a> section for
     2986    See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for
    29762987    more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code>
    29772988</em></span>
    2978 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541260"></a>
     2989</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547291"></a>
    29792990
    29802991local master (G)
    2981 </h3></div></div></div><a class="indexterm" name="id2541261"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
     2992</h3></div></div></div><a class="indexterm" name="id2547292"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
    29822993        on a subnet. If set to <code class="constant">no</code> then <code class="literal">
    29832994        nmbd</code> will not attempt to become a local master browser
    … …  
    29893000master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code>
    29903001</em></span>
    2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541360"></a>
     3002</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547391"></a>
    29923003
    29933004<a name="LOCKDIR"></a>lock dir
    2994 </h3></div></div></div><a class="indexterm" name="id2541362"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541392"></a>
     3005</h3></div></div></div><a class="indexterm" name="id2547392"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547423"></a>
    29953006
    29963007lock directory (G)
    2997 </h3></div></div></div><a class="indexterm" name="id2541394"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
     3008</h3></div></div></div><a class="indexterm" name="id2547424"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
    29983009        files will be placed.  The lock files are used to implement the
    2999         <a class="link" href="smb.conf.5.html#MAXCONNECTIONS">max connections</a> option.
     3010        <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option.
    30003011        </p><p>
    30013012                Note: This option can not be set inside registry
    … …  
    30053016</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code>
    30063017</em></span>
    3007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541471"></a>
     3018</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547502"></a>
    30083019
    30093020locking (S)
    3010 </h3></div></div></div><a class="indexterm" name="id2541472"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
     3021</h3></div></div></div><a class="indexterm" name="id2547503"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
    30113022        performed by the server in response to lock requests from the
    30123023        client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock
    … …  
    30183029        is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a
    30193030        specific service, as lack of locking may result in data corruption.
    3020         You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541547"></a>
     3031        You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547577"></a>
    30213032
    30223033lock spin count (G)
    3023 </h3></div></div></div><a class="indexterm" name="id2541548"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
     3034</h3></div></div></div><a class="indexterm" name="id2547578"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
    30243035        The functionality it contolled is now controlled by the parameter
    3025         <a class="link" href="smb.conf.5.html#LOCKSPINTIME">lock spin time</a>.
     3036        <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>.
    30263037        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code>
    30273038</em></span>
    3028 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541603"></a>
     3039</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547633"></a>
    30293040
    30303041lock spin time (G)
    3031 </h3></div></div></div><a class="indexterm" name="id2541604"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should
     3042</h3></div></div></div><a class="indexterm" name="id2547634"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should
    30323043        keep waiting to see if a failed lock request can
    30333044        be granted. This parameter has changed in default
    30343045        value from Samba 3.0.23 from 10 to 200. The associated
    3035         <a class="link" href="smb.conf.5.html#LOCKSPINCOUNT">lock spin count</a> parameter is
     3046        <a class="link" href="smb.conf.5.html#LOCKSPINCOUNT" target="_top">lock spin count</a> parameter is
    30363047        no longer used in Samba 3.0.24. You should not need
    30373048        to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code>
    30383049</em></span>
    3039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541662"></a>
     3050</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547691"></a>
    30403051
    30413052log file (G)
    3042 </h3></div></div></div><a class="indexterm" name="id2541663"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3053</h3></div></div></div><a class="indexterm" name="id2547692"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30433054    This option allows you to override the name of the Samba log file (also known as the debug file).
    30443055    </p><p>
    … …  
    30463057    </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code>
    30473058</em></span>
    3048 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541714"></a>
     3059</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547744"></a>
    30493060
    30503061<a name="DEBUGLEVEL"></a>debuglevel
    3051 </h3></div></div></div><a class="indexterm" name="id2541715"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541745"></a>
     3062</h3></div></div></div><a class="indexterm" name="id2547745"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547775"></a>
    30523063
    30533064log level (G)
    3054 </h3></div></div></div><a class="indexterm" name="id2541746"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3065</h3></div></div></div><a class="indexterm" name="id2547776"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30553066    The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
    30563067    <code class="filename">smb.conf</code> file.
    … …  
    30633074</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code>
    30643075</em></span>
    3065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541977"></a>
     3076</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548008"></a>
    30663077
    30673078logon drive (G)
    3068 </h3></div></div></div><a class="indexterm" name="id2541978"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3079</h3></div></div></div><a class="indexterm" name="id2548009"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30693080        This parameter specifies the local path to which the home directory will be
    3070         connected (see <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a>) and is only used by NT
     3081        connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT
    30713082        Workstations.
    30723083        </p><p>
    … …  
    30763087</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code>
    30773088</em></span>
    3078 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542052"></a>
     3089</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548083"></a>
    30793090
    30803091logon home (G)
    3081 </h3></div></div></div><a class="indexterm" name="id2542053"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3092</h3></div></div></div><a class="indexterm" name="id2548084"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30823093        This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 
    30833094        It allows you to do
    … …  
    30983109         <code class="literal">net use /home</code> but use the whole string when dealing with profiles.
    30993110        </p><p>
    3100         Note that in prior versions of Samba, the <a class="link" href="smb.conf.5.html#LOGONPATH">logon path</a> was returned rather than
     3111        Note that in prior versions of Samba, the <a class="link" href="smb.conf.5.html#LOGONPATH" target="_top">logon path</a> was returned rather than
    31013112        <em class="parameter"><code>logon home</code></em>.  This broke <code class="literal">net use /home</code>
    31023113        but allowed profiles outside the home directory. The current implementation is correct, and can be used for
    31033114        profiles if you use the above trick.
    31043115        </p><p>
    3105         Disable this feature by setting <a class="link" href="smb.conf.5.html#LOGONHOME">logon home = ""</a> - using the empty string.
     3116        Disable this feature by setting <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home = ""</a> - using the empty string.
    31063117        </p><p>
    31073118        This option is only useful if Samba is set up as a logon server.
    … …  
    31103121</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code>
    31113122</em></span>
    3112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542216"></a>
     3123</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548247"></a>
    31133124
    31143125logon path (G)
    3115 </h3></div></div></div><a class="indexterm" name="id2542217"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3126</h3></div></div></div><a class="indexterm" name="id2548248"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31163127        This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are
    31173128        stored.  Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming
    31183129        profiles.  To find out how to handle roaming profiles for Win 9X system, see the
    3119         <a class="link" href="smb.conf.5.html#LOGONHOME">logon home</a> parameter.
     3130        <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a> parameter.
    31203131        </p><p>
    31213132        This option takes the standard substitutions, allowing you to have separate logon scripts for each user or
    … …  
    31463157        </p></div><p>Note that this option is only useful if Samba is set up as a domain controller.</p><p>
    31473158        Disable the use of roaming profiles by setting the value of this parameter to the empty string. For
    3148         example, <a class="link" href="smb.conf.5.html#LOGONPATH">logon path = ""</a>. Take note that even if the default setting
     3159        example, <a class="link" href="smb.conf.5.html#LOGONPATH" target="_top">logon path = ""</a>. Take note that even if the default setting
    31493160        in the smb.conf file is the empty string, any value specified in the user account settings in the passdb
    31503161        backend will over-ride the effect of setting this parameter to null. Disabling of all roaming profile use
    … …  
    31573168        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code>
    31583169</em></span>
    3159 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542385"></a>
     3170</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548421"></a>
    31603171
    31613172logon script (G)
    3162 </h3></div></div></div><a class="indexterm" name="id2542386"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3173</h3></div></div></div><a class="indexterm" name="id2548422"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31633174        This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file
    31643175        (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in.  The file
    … …  
    31663177        </p><p>
    31673178        The script must be a relative path to the <em class="parameter"><code>[netlogon]</code></em> service.  If the [netlogon]
    3168         service specifies a <a class="link" href="smb.conf.5.html#PATH">path</a> of <code class="filename">/usr/local/samba/netlogon</code>, and <a class="link" href="smb.conf.5.html#LOGONSCRIPT">logon  script = STARTUP.BAT</a>, then the file that will be downloaded is:
     3179        service specifies a <a class="link" href="smb.conf.5.html#PATH" target="_top">path</a> of <code class="filename">/usr/local/samba/netlogon</code>, and <a class="link" href="smb.conf.5.html#LOGONSCRIPT" target="_top">logon  script = STARTUP.BAT</a>, then the file that will be downloaded is:
    31693180</p><pre class="programlisting">
    31703181        /usr/local/samba/netlogon/STARTUP.BAT
    … …  
    31913202</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code>
    31923203</em></span>
    3193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542554"></a>
     3204</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548590"></a>
    31943205
    31953206lppause command (S)
    3196 </h3></div></div></div><a class="indexterm" name="id2542556"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3207</h3></div></div></div><a class="indexterm" name="id2548591"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    31973208    executed on the server host in order to stop printing or spooling
    31983209    a specific print job.</p><p>This command should be a program or script which takes
    … …  
    32093220    in the lppause command as the PATH may not be available to the server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">
    32103221# Currently no default value is given to
    3211     this string, unless the value of the <a class="link" href="smb.conf.5.html#PRINTING">printing</a>
     3222    this string, unless the value of the <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a>
    32123223    parameter is <code class="constant">SYSV</code>, in which case the default is :
    32133224    <code class="literal">lp -i %p-%j -H hold</code> or if the value of the
    … …  
    32183229</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code>
    32193230</em></span>
    3220 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542702"></a>
     3231</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548738"></a>
    32213232
    32223233lpq cache time (G)
    3223 </h3></div></div></div><a class="indexterm" name="id2542703"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
     3234</h3></div></div></div><a class="indexterm" name="id2548739"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
    32243235        for to prevent the <code class="literal">lpq</code> command being called too
    32253236        often. A separate cache is kept for each variation of the <code class="literal">
    … …  
    32343245</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code>
    32353246</em></span>
    3236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542822"></a>
     3247</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548857"></a>
    32373248
    32383249lpq command (S)
    3239 </h3></div></div></div><a class="indexterm" name="id2542823"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3250</h3></div></div></div><a class="indexterm" name="id2548858"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    32403251    executed on the server host in order to obtain <code class="literal">lpq
    32413252    </code>-style printer status information.</p><p>This command should be a program or script which
    … …  
    32593270</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code>
    32603271</em></span>
    3261 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542948"></a>
     3272</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548983"></a>
    32623273
    32633274lpresume command (S)
    3264 </h3></div></div></div><a class="indexterm" name="id2542949"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3275</h3></div></div></div><a class="indexterm" name="id2548984"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    32653276    executed on the server host in order to restart or continue
    32663277    printing or spooling a specific print job.</p><p>This command should be a program or script which takes
    32673278    a printer name and job number to resume the print job. See
    3268     also the <a class="link" href="smb.conf.5.html#LPPAUSECOMMAND">lppause command</a> parameter.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
     3279    also the <a class="link" href="smb.conf.5.html#LPPAUSECOMMAND" target="_top">lppause command</a> parameter.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
    32693280    is put in its place. A <em class="parameter"><code>%j</code></em> is replaced with
    32703281    the job number (an integer).</p><p>Note that it is good practice to include the absolute path
    32713282    in the <em class="parameter"><code>lpresume command</code></em> as the PATH may not
    3272     be available to the server.</p><p>See also the <a class="link" href="smb.conf.5.html#PRINTING">printing</a> parameter.</p><p>Default: Currently no default value is given
     3283    be available to the server.</p><p>See also the <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> parameter.</p><p>Default: Currently no default value is given
    32733284    to this string, unless the value of the <em class="parameter"><code>printing</code></em>
    32743285    parameter is <code class="constant">SYSV</code>, in which case the default is:</p><p><code class="literal">lp -i %p-%j -H resume</code></p><p>or if the value of the <em class="parameter"><code>printing</code></em> parameter
    32753286    is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code>
    32763287</em></span>
    3277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543100"></a>
     3288</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549136"></a>
    32783289
    32793290lprm command (S)
    3280 </h3></div></div></div><a class="indexterm" name="id2543101"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3291</h3></div></div></div><a class="indexterm" name="id2549138"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    32813292    executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes
    32823293    a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
    … …  
    32953306        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code>
    32963307</em></span>
    3297 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543187"></a>
     3308</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549224"></a>
    32983309
    32993310machine password timeout (G)
    3300 </h3></div></div></div><a class="indexterm" name="id2543188"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    3301         If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter) then periodically a running smbd process will try and change
     3311</h3></div></div></div><a class="indexterm" name="id2549225"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3312        If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change
    33023313        the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb
    33033314        </code>.  This parameter specifies how often this password will be changed, in seconds. The default is one
    … …  
    33053316        </p><p>
    33063317        See also <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>,
    3307         and the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a> parameter.
     3318        and the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter.
    33083319        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code>
    33093320</em></span>
    3310 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543275"></a>
     3321</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549312"></a>
    33113322
    33123323magic output (S)
    3313 </h3></div></div></div><a class="indexterm" name="id2543276"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3324</h3></div></div></div><a class="indexterm" name="id2549313"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33143325        This parameter specifies the name of a file which will contain output created by a magic script (see the
    3315         <a class="link" href="smb.conf.5.html#MAGICSCRIPT">magic script</a> parameter below).
     3326        <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below).
    33163327        </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script
    33173328        </code></em> in the same directory the output file content is undefined.
    … …  
    33203331</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code>
    33213332</em></span>
    3322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543359"></a>
     3333</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549396"></a>
    33233334
    33243335magic script (S)
    3325 </h3></div></div></div><a class="indexterm" name="id2543360"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
     3336</h3></div></div></div><a class="indexterm" name="id2549397"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
    33263337        if opened, will be executed by the server when the file is closed.
    33273338        This allows a UNIX script to be sent to the Samba host and
    … …  
    33293340        completion assuming that the user has the appropriate level
    33303341        of privilege and the file permissions allow the deletion.</p><p>If the script generates output, output will be sent to
    3331         the file specified by the <a class="link" href="smb.conf.5.html#MAGICOUTPUT">magic output</a>
     3342        the file specified by the <a class="link" href="smb.conf.5.html#MAGICOUTPUT" target="_top">magic output</a>
    33323343        parameter (see above).</p><p>Note that some shells are unable to interpret scripts
    33333344        containing CR/LF instead of CR as
    … …  
    33393350</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code>
    33403351</em></span>
    3341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543464"></a>
     3352</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549501"></a>
    33423353
    33433354mangled names (S)
    3344 </h3></div></div></div><a class="indexterm" name="id2543465"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
     3355</h3></div></div></div><a class="indexterm" name="id2549502"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
    33453356        should be mapped to DOS-compatible names ("mangled") and made visible,
    3346         or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a> for
     3357        or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for
    33473358        details on how to control the mangling process.</p><p>If mangling is used then the mangling algorithm is as follows:</p><div class="itemizedlist"><ul type="disc"><li><p>The first (up to) five alphanumeric characters
    33483359                        before the rightmost dot of the filename are preserved, forced
    … …  
    33543365                        only if it contains any upper case characters or is longer than three
    33553366                        characters.</p><p>Note that the character to use may be specified using
    3356                                 the <a class="link" href="smb.conf.5.html#MANGLINGCHAR">mangling char</a>
     3367                                the <a class="link" href="smb.conf.5.html#MANGLINGCHAR" target="_top">mangling char</a>
    33573368                        option, if you don't like '~'.</p></li><li><p>Files whose UNIX name begins with a dot will be
    33583369                        presented as DOS hidden files. The mangled name will be created as
    … …  
    33673378        do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code>
    33683379</em></span>
    3369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543601"></a>
     3380</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549638"></a>
    33703381
    33713382mangle prefix (G)
    3372 </h3></div></div></div><a class="indexterm" name="id2543602"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
     3383</h3></div></div></div><a class="indexterm" name="id2549639"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
    33733384        characters from the original name used when generating
    33743385        the mangled names. A larger value will give a weaker
    … …  
    33803391</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code>
    33813392</em></span>
    3382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543667"></a>
     3393</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549705"></a>
    33833394
    33843395mangling char (S)
    3385 </h3></div></div></div><a class="indexterm" name="id2543668"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
    3386         the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING">name mangling</a>. The
     3396</h3></div></div></div><a class="indexterm" name="id2549706"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
     3397        the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The
    33873398        default is a '~' but this may interfere with some software. Use this option to set
    33883399        it to whatever you prefer. This is effective only when mangling method is hash.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">~</code>
    … …  
    33903401</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code>
    33913402</em></span>
    3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543745"></a>
     3403</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549782"></a>
    33933404
    33943405mangling method (G)
    3395 </h3></div></div></div><a class="indexterm" name="id2543746"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
     3406</h3></div></div></div><a class="indexterm" name="id2549783"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
    33963407        the mangled names. Can take two different values, "hash" and
    33973408        "hash2". "hash" is the algorithm that was used
    … …  
    34043415</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code>
    34053416</em></span>
    3406 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543812"></a>
     3417</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549850"></a>
    34073418
    34083419map acl inherit (S)
    3409 </h3></div></div></div><a class="indexterm" name="id2543813"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
     3420</h3></div></div></div><a class="indexterm" name="id2549851"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
    34103421    access control entry flags stored in Windows ACLs into an extended attribute
    34113422    called user.SAMBA_PAI. This parameter only takes effect if Samba is being run
    … …  
    34153426    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code>
    34163427</em></span>
    3417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543869"></a>
     3428</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549913"></a>
    34183429
    34193430map archive (S)
    3420 </h3></div></div></div><a class="indexterm" name="id2543870"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3431</h3></div></div></div><a class="indexterm" name="id2549914"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34213432        This controls whether the DOS archive attribute
    34223433        should be mapped to the UNIX owner execute bit.  The DOS archive bit
    … …  
    34263437        be quite annoying for shared source code, documents, etc...
    34273438        </p><p>
    3428         Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>   parameter to be set such that owner
     3439        Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>     parameter to be set such that owner
    34293440        execute bit is not masked out (i.e. it must include 100). See the parameter
    3430         <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> for details.
     3441        <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> for details.
    34313442        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code>
    34323443</em></span>
    3433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543944"></a>
     3444</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549989"></a>
    34343445
    34353446map hidden (S)
    3436 </h3></div></div></div><a class="indexterm" name="id2543945"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3447</h3></div></div></div><a class="indexterm" name="id2549990"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34373448        This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
    34383449        </p><p>
    3439         Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> to be set such that the world execute
    3440         bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>
     3450        Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> to be set such that the world execute
     3451        bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>
    34413452        for details.
    3442         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544002"></a>
     3453        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550046"></a>
    34433454
    34443455map read only (S)
    3445 </h3></div></div></div><a class="indexterm" name="id2544003"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3456</h3></div></div></div><a class="indexterm" name="id2550047"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34463457        This controls how the DOS read only attribute should be mapped from a UNIX filesystem.
    34473458        </p><p>
    34483459        This parameter can take three different values, which tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> how to display the read only attribute on files, where either
    3449         <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> is set to <code class="constant">No</code>, or no extended attribute is
    3450         present. If <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> is set to <code class="constant">yes</code> then this
     3460        <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> is set to <code class="constant">No</code>, or no extended attribute is
     3461        present. If <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> is set to <code class="constant">yes</code> then this
    34513462        parameter is <span class="emphasis"><em>ignored</em></span>. This is a new parameter introduced in Samba version 3.0.21.
    34523463        </p><p>The three settings are :</p><div class="itemizedlist"><ul type="disc"><li><p>
    … …  
    34653476                </p></li><li><p>
    34663477                <code class="constant">No</code> - The read only DOS attribute is unaffected by permissions, and can only be set by
    3467                 the <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES">store dos attributes</a> method. This may be useful for exporting mounted CDs.
     3478                the <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> method. This may be useful for exporting mounted CDs.
    34683479                </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code>
    34693480</em></span>
    3470 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544166"></a>
     3481</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550203"></a>
    34713482
    34723483map system (S)
    3473 </h3></div></div></div><a class="indexterm" name="id2544168"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3484</h3></div></div></div><a class="indexterm" name="id2550204"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34743485        This controls whether DOS style system files should be mapped to the UNIX group execute bit.
    34753486        </p><p>
    3476         Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a>   to be set such that the group
     3487        Note that this requires the <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>     to be set such that the group
    34773488        execute bit is not masked out (i.e. it must include 010). See the parameter
    3478         <a class="link" href="smb.conf.5.html#CREATEMASK">create mask</a> for details.
     3489        <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> for details.
    34793490        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code>
    34803491</em></span>
    3481 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544236"></a>
     3492</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550272"></a>
    34823493
    34833494map to guest (G)
    3484 </h3></div></div></div><a class="indexterm" name="id2544237"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY">SECURITY =
     3495</h3></div></div></div><a class="indexterm" name="id2550273"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
    34853496    security</a> modes other than <em class="parameter"><code>security = share</code></em>
    34863497    and <em class="parameter"><code>security = server</code></em>
    … …  
    34923503            logins with an invalid password are rejected, unless the username
    34933504            does not exist, in which case it is treated as a guest login and
    3494             mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins
     3505            mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins
    34953506            with an invalid password are treated as a guest login and mapped
    3496             into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>. Note that
     3507            into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>. Note that
    34973508            this can cause problems as it means that any user incorrectly typing
    34983509            their password will be silently logged on as "guest" - and
    … …  
    35243535</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code>
    35253536</em></span>
    3526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544475"></a>
     3537</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550512"></a>
    35273538
    35283539max connections (S)
    3529 </h3></div></div></div><a class="indexterm" name="id2544476"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
     3540</h3></div></div></div><a class="indexterm" name="id2550513"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
    35303541    If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections
    35313542    will be refused if this number of connections to the service are already open. A value
    35323543    of zero mean an unlimited number of connections may be made.</p><p>Record lock files are used to implement this feature. The lock files will be stored in
    3533     the directory specified by the <a class="link" href="smb.conf.5.html#LOCKDIRECTORY">lock directory</a> option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">0</code>
     3544    the directory specified by the <a class="link" href="smb.conf.5.html#LOCKDIRECTORY" target="_top">lock directory</a> option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">0</code>
    35343545</em></span>
    35353546</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code>
    35363547</em></span>
    3537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544561"></a>
     3548</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550598"></a>
    35383549
    35393550max disk size (G)
    3540 </h3></div></div></div><a class="indexterm" name="id2544562"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
     3551</h3></div></div></div><a class="indexterm" name="id2550599"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
    35413552    on the apparent size of disks. If you set this option to 100
    35423553    then all shares will appear to be not larger than 100 MB in
    … …  
    35523563</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code>
    35533564</em></span>
    3554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544653"></a>
     3565</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550690"></a>
    35553566
    35563567max log size (G)
    3557 </h3></div></div></div><a class="indexterm" name="id2544654"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3568</h3></div></div></div><a class="indexterm" name="id2550691"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35583569    This option (an integer in kilobytes) specifies the max size the log file should grow to.
    35593570    Samba periodically checks the size and if it is exceeded it will rename the file, adding
    … …  
    35643575</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code>
    35653576</em></span>
    3566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544724"></a>
     3577</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550761"></a>
    35673578
    35683579max mux (G)
    3569 </h3></div></div></div><a class="indexterm" name="id2544725"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
     3580</h3></div></div></div><a class="indexterm" name="id2550762"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
    35703581    outstanding simultaneous SMB operations that Samba tells the client
    35713582        it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code>
    35723583</em></span>
    3573 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544768"></a>
     3584</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550804"></a>
    35743585
    35753586max open files (G)
    3576 </h3></div></div></div><a class="indexterm" name="id2544769"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3587</h3></div></div></div><a class="indexterm" name="id2550805"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    35773588    open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file
    35783589    serving process may have open for a client at any one time. The
    … …  
    35823593    this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code>
    35833594</em></span>
    3584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544828"></a>
     3595</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550864"></a>
    35853596
    35863597max print jobs (S)
    3587 </h3></div></div></div><a class="indexterm" name="id2544829"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3598</h3></div></div></div><a class="indexterm" name="id2550866"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    35883599    jobs allowable in a Samba printer queue at any given moment.
    35893600    If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client.
    … …  
    35923603</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code>
    35933604</em></span>
    3594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544898"></a>
     3605</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550934"></a>
    35953606
    35963607<a name="PROTOCOL"></a>protocol
    3597 </h3></div></div></div><a class="indexterm" name="id2544899"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544930"></a>
     3608</h3></div></div></div><a class="indexterm" name="id2550935"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550967"></a>
    35983609
    35993610max protocol (G)
    3600 </h3></div></div></div><a class="indexterm" name="id2544931"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
     3611</h3></div></div></div><a class="indexterm" name="id2550968"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
    36013612    protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No
    36023613            concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on
    … …  
    36103621</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code>
    36113622</em></span>
    3612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545054"></a>
     3623</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551092"></a>
    36133624
    36143625max reported print jobs (S)
    3615 </h3></div></div></div><a class="indexterm" name="id2545055"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3626</h3></div></div></div><a class="indexterm" name="id2551093"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    36163627    This parameter limits the maximum number of jobs displayed in a port monitor for
    36173628    Samba printer queue at any given moment. If this number is exceeded, the excess
    … …  
    36223633</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code>
    36233634</em></span>
    3624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545118"></a>
     3635</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551156"></a>
    36253636
    36263637max smbd processes (G)
    3627 </h3></div></div></div><a class="indexterm" name="id2545119"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
     3638</h3></div></div></div><a class="indexterm" name="id2551157"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
    36283639    as a stopgap to prevent degrading service to clients in the event that the server has insufficient
    36293640    resources to handle more than this number of connections.  Remember that under normal operating
    … …  
    36333644</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code>
    36343645</em></span>
    3635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545200"></a>
     3646</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551237"></a>
    36363647
    36373648max stat cache size (G)
    3638 </h3></div></div></div><a class="indexterm" name="id2545201"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
     3649</h3></div></div></div><a class="indexterm" name="id2551238"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
    36393650          <em class="parameter"><code>stat cache</code></em> being used
    36403651          to speed up case insensitive name mappings. It represents
    … …  
    36473658</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code>
    36483659</em></span>
    3649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545269"></a>
     3660</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551307"></a>
    36503661
    36513662max ttl (G)
    3652 </h3></div></div></div><a class="indexterm" name="id2545270"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
     3663</h3></div></div></div><a class="indexterm" name="id2551308"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
    36533664    of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is
    36543665    requesting a name using either a broadcast packet or from a WINS server. You should
    36553666        never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code>
    36563667</em></span>
    3657 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545328"></a>
     3668</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551366"></a>
    36583669
    36593670max wins ttl (G)
    3660 </h3></div></div></div><a class="indexterm" name="id2545329"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
    3661         (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the maximum
     3671</h3></div></div></div><a class="indexterm" name="id2551367"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
     3672        (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum
    36623673    'time to live' of NetBIOS names that <code class="literal">nmbd</code>
    36633674    will grant will be (in seconds). You should never need to change this
    36643675        parameter.  The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code>
    36653676</em></span>
    3666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545400"></a>
     3677</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551438"></a>
    36673678
    36683679max xmit (G)
    3669 </h3></div></div></div><a class="indexterm" name="id2545401"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
     3680</h3></div></div></div><a class="indexterm" name="id2551439"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
    36703681    that will be negotiated by Samba. The default is 16644, which
    36713682    matches the behavior of Windows 2000.  A value below 2048 is likely to cause problems.
    … …  
    36753686</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code>
    36763687</em></span>
    3677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545462"></a>
     3688</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551501"></a>
    36783689
    36793690message command (G)
    3680 </h3></div></div></div><a class="indexterm" name="id2545464"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
     3691</h3></div></div></div><a class="indexterm" name="id2551502"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
    36813692        server receives a WinPopup style message.</p><p>This would normally be a command that would
    36823693        deliver the message somehow. How this is to be done is
    … …  
    37173728</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &amp;</code>
    37183729</em></span>
    3719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545672"></a>
     3730</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551711"></a>
    37203731
    37213732min print space (S)
    3722 </h3></div></div></div><a class="indexterm" name="id2545674"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
     3733</h3></div></div></div><a class="indexterm" name="id2551712"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
    37233734    space that must be available before a user will be able to spool
    37243735    a print job. It is specified in kilobytes. The default is 0, which
    … …  
    37273738</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code>
    37283739</em></span>
    3729 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545735"></a>
     3740</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551773"></a>
    37303741
    37313742min protocol (G)
    3732 </h3></div></div></div><a class="indexterm" name="id2545736"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
     3743</h3></div></div></div><a class="indexterm" name="id2551774"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
    37333744    lowest SMB protocol dialect than Samba will support.  Please refer
    3734     to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL">max protocol</a>
     3745    to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a>
    37353746    parameter for a list of valid protocol names and a brief description
    37363747    of each.  You may also wish to refer to the C source code in
    37373748    <code class="filename">source/smbd/negprot.c</code> for a listing of known protocol
    37383749    dialects supported by clients.</p><p>If you are viewing this parameter as a security measure, you should
    3739     also refer to the <a class="link" href="smb.conf.5.html#LANMANAUTH">lanman auth</a> parameter.  Otherwise, you should never need
     3750    also refer to the <a class="link" href="smb.conf.5.html#LANMANAUTH" target="_top">lanman auth</a> parameter.  Otherwise, you should never need
    37403751    to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">CORE</code>
    37413752</em></span>
    37423753</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code>
    37433754</em></span>
    3744 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545833"></a>
     3755</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551871"></a>
    37453756
    37463757min receivefile size (G)
    3747 </h3></div></div></div><a class="indexterm" name="id2545834"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
     3758</h3></div></div></div><a class="indexterm" name="id2551872"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
    37483759SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will
    37493760be passed to any underlying kernel recvfile or splice system call (if there is no such
    … …  
    37543765nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code>
    37553766</em></span>
    3756 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545902"></a>
     3767</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551953"></a>
    37573768
    37583769min wins ttl (G)
    3759 </h3></div></div></div><a class="indexterm" name="id2545903"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
    3760     when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT">wins support = yes</a>) what the minimum 'time to live'
     3770</h3></div></div></div><a class="indexterm" name="id2551954"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
     3771    when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live'
    37613772    of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in
    37623773    seconds). You should never need to change this parameter.  The default
    37633774    is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code>
    37643775</em></span>
    3765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545972"></a>
     3776</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552023"></a>
    37663777
    37673778msdfs proxy (S)
    3768 </h3></div></div></div><a class="indexterm" name="id2545973"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
     3779</h3></div></div></div><a class="indexterm" name="id2552024"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
    37693780        stand-in for another CIFS share whose location is specified by
    37703781        the value of the parameter. When clients attempt to connect to
    37713782        this share, they are redirected to the proxied share using
    37723783        the SMB-Dfs protocol.</p><p>Only Dfs roots can act as proxy shares. Take a look at the
    3773         <a class="link" href="smb.conf.5.html#MSDFSROOT">msdfs root</a> and <a class="link" href="smb.conf.5.html#HOSTMSDFS">host msdfs</a>
     3784        <a class="link" href="smb.conf.5.html#MSDFSROOT" target="_top">msdfs root</a> and <a class="link" href="smb.conf.5.html#HOSTMSDFS" target="_top">host msdfs</a>
    37743785        options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code>
    37753786</em></span>
    3776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546051"></a>
     3787</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552101"></a>
    37773788
    37783789msdfs root (S)
    3779 </h3></div></div></div><a class="indexterm" name="id2546052"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
     3790</h3></div></div></div><a class="indexterm" name="id2552102"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
    37803791        share as a Dfs root and allows clients to browse the
    37813792        distributed file system tree rooted at the share directory.
    … …  
    37853796        Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code>
    37863797</em></span>
    3787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546106"></a>
     3798</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552156"></a>
    37883799
    37893800name cache timeout (G)
    3790 </h3></div></div></div><a class="indexterm" name="id2546107"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
     3801</h3></div></div></div><a class="indexterm" name="id2552157"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
    37913802    entries in samba's hostname resolve cache time out. If
    37923803    the timeout is set to 0. the caching is disabled.
    … …  
    37953806</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code>
    37963807</em></span>
    3797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546167"></a>
     3808</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552217"></a>
    37983809
    37993810name resolve order (G)
    3800 </h3></div></div></div><a class="indexterm" name="id2546168"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
     3811</h3></div></div></div><a class="indexterm" name="id2552218"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
    38013812    suite to determine what naming services to use and in what order
    38023813    to resolve host names to IP addresses. Its main purpose to is to
    … …  
    38163827                _ldap._tcp.domain.
    38173828        </p></li><li><p><code class="constant">wins</code> : Query a name with
    3818             the IP address listed in the <a class="link" href="smb.conf.5.html#WINSSERVER">WINSSERVER</a> parameter.  If no WINS server has
     3829            the IP address listed in the <a class="link" href="smb.conf.5.html#WINSSERVER" target="_top">WINSSERVER</a> parameter.  If no WINS server has
    38193830            been specified this method will be ignored.</p></li><li><p><code class="constant">bcast</code> : Do a broadcast on
    3820             each of the known local interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES">interfaces</a>
     3831            each of the known local interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a>
    38213832            parameter. This is the least reliable of the name resolution
    38223833            methods as it depends on the target host being on a locally
    … …  
    38293840</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code>
    38303841</em></span>
    3831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546368"></a>
     3842</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552420"></a>
    38323843
    38333844netbios aliases (G)
    3834 </h3></div></div></div><a class="indexterm" name="id2546369"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
     3845</h3></div></div></div><a class="indexterm" name="id2552421"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
    38353846        advertise as additional names by which the Samba server is known. This allows one machine
    38363847        to appear in browse lists under multiple names. If a machine is acting as a browse server
    … …  
    38423853</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code>
    38433854</em></span>
    3844 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546434"></a>
     3855</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552493"></a>
    38453856
    38463857netbios name (G)
    3847 </h3></div></div></div><a class="indexterm" name="id2546435"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3858</h3></div></div></div><a class="indexterm" name="id2552494"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38483859                This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component
    38493860                of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of
    … …  
    38583869</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code>
    38593870</em></span>
    3860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546516"></a>
     3871</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552574"></a>
    38613872
    38623873netbios scope (G)
    3863 </h3></div></div></div><a class="indexterm" name="id2546517"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
     3874</h3></div></div></div><a class="indexterm" name="id2552575"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
    38643875        operate under. This should not be set unless every machine
    38653876        on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code>
    38663877</em></span>
    3867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546558"></a>
     3878</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552617"></a>
    38683879
    38693880nis homedir (G)
    3870 </h3></div></div></div><a class="indexterm" name="id2546560"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
     3881</h3></div></div></div><a class="indexterm" name="id2552618"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
    38713882        UNIX systems that use an automounter, the user's home directory
    38723883        will often be mounted on a workstation on demand from a remote
    … …  
    38823893        server. When Samba is returning the home share to the client, it
    38833894        will consult the NIS map specified in
    3884         <a class="link" href="smb.conf.5.html#HOMEDIRMAP">homedir map</a> and return the server
     3895        <a class="link" href="smb.conf.5.html#HOMEDIRMAP" target="_top">homedir map</a> and return the server
    38853896        listed there.</p><p>Note that for this option to work there must be a working
    38863897        NIS system and the Samba server with this option must also
    38873898        be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code>
    38883899</em></span>
    3889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546638"></a>
     3900</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552697"></a>
    38903901
    38913902nt acl support (S)
    3892 </h3></div></div></div><a class="indexterm" name="id2546640"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
     3903</h3></div></div></div><a class="indexterm" name="id2552698"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
    38933904    UNIX permissions into Windows NT access control lists.  The UNIX
    38943905    permissions considered are the the traditional UNIX owner and
    … …  
    38973908    releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code>
    38983909</em></span>
    3899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546693"></a>
     3910</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552752"></a>
    39003911
    39013912ntlm auth (G)
    3902 </h3></div></div></div><a class="indexterm" name="id2546694"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     3913</h3></div></div></div><a class="indexterm" name="id2552753"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    39033914    authenticate users using the NTLM encrypted password response.
    39043915    If disabled, either the lanman password hash or an NTLMv2 response
    … …  
    39083919        special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code>
    39093920</em></span>
    3910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546757"></a>
     3921</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552816"></a>
    39113922
    39123923nt pipe support (G)
    3913 </h3></div></div></div><a class="indexterm" name="id2546758"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
     3924</h3></div></div></div><a class="indexterm" name="id2552817"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
    39143925    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT
    39153926    clients to connect to the NT SMB specific <code class="constant">IPC$</code>
    … …  
    39173928        alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code>
    39183929</em></span>
    3919 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546814"></a>
     3930</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552872"></a>
    39203931
    39213932nt status support (G)
    3922 </h3></div></div></div><a class="indexterm" name="id2546815"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
     3933</h3></div></div></div><a class="indexterm" name="id2552873"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
    39233934    support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone.
    39243935    If this option is set to <code class="constant">no</code> then Samba offers
    … …  
    39263937    reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code>
    39273938</em></span>
    3928 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546875"></a>
     3939</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552933"></a>
    39293940
    39303941null passwords (G)
    3931 </h3></div></div></div><a class="indexterm" name="id2546876"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
    3932 </em></span>
    3933 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546928"></a>
     3942</h3></div></div></div><a class="indexterm" name="id2552934"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
     3943</em></span>
     3944</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552987"></a>
    39343945
    39353946obey pam restrictions (G)
    3936 </h3></div></div></div><a class="indexterm" name="id2546929"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
     3947</h3></div></div></div><a class="indexterm" name="id2552988"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
    39373948    (i.e. --with-pam), this parameter will control whether or not Samba
    39383949    should obey PAM's account and session management directives.  The
    39393950    default behavior is to use PAM for clear text authentication only
    39403951    and to ignore any account or session management.  Note that Samba
    3941     always ignores PAM for authentication in the case of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords = yes</a>.  The reason
     3952    always ignores PAM for authentication in the case of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = yes</a>.  The reason
    39423953    is that PAM modules cannot support the challenge/response
    39433954    authentication mechanism needed in the presence of SMB password encryption.
    39443955</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code>
    39453956</em></span>
    3946 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546992"></a>
     3957</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553058"></a>
    39473958
    39483959only user (S)
    3949 </h3></div></div></div><a class="indexterm" name="id2546993"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
     3960</h3></div></div></div><a class="indexterm" name="id2553059"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
    39503961    connections with usernames not in the <em class="parameter"><code>user</code></em>
    39513962    list will be allowed. By default this option is disabled so that a
    … …  
    39533964    this parameter will force the server to only use the login
    39543965    names from the <em class="parameter"><code>user</code></em> list and is only really
    3955     useful in <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> level security.</p><p>Note that this also means Samba won't try to deduce
     3966    useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = share</a> level security.</p><p>Note that this also means Samba won't try to deduce
    39563967    usernames from the service name. This can be annoying for
    39573968    the [homes] section. To get around this you could use <code class="literal">user =
    … …  
    39603971    name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code>
    39613972</em></span>
    3962 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547081"></a>
     3973</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553147"></a>
    39633974
    39643975oplock break wait time (G)
    3965 </h3></div></div></div><a class="indexterm" name="id2547082"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3976</h3></div></div></div><a class="indexterm" name="id2553148"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39663977        This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too
    39673978        quickly when that client issues an SMB that can cause an oplock break request, then the network client can
    … …  
    39723983        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code>
    39733984</em></span>
    3974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547136"></a>
     3985</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553200"></a>
    39753986
    39763987oplock contention limit (S)
    3977 </h3></div></div></div><a class="indexterm" name="id2547137"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3988</h3></div></div></div><a class="indexterm" name="id2553202"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39783989        This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the
    39793990        granting of oplocks under multiple client contention for the same file.
    … …  
    39873998        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code>
    39883999</em></span>
    3989 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547217"></a>
     4000</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553283"></a>
    39904001
    39914002oplocks (S)
    3992 </h3></div></div></div><a class="indexterm" name="id2547218"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4003</h3></div></div></div><a class="indexterm" name="id2553284"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39934004        This boolean option tells <code class="literal">smbd</code> whether to
    39944005        issue oplocks (opportunistic locks) to file open requests on this
    … …  
    40024013        </p><p>
    40034014        Oplocks may be selectively turned off on certain files with a share. See
    4004         the <a class="link" href="smb.conf.5.html#VETOOPLOCKFILES">veto oplock files</a> parameter. On some systems
     4015        the <a class="link" href="smb.conf.5.html#VETOOPLOCKFILES" target="_top">veto oplock files</a> parameter. On some systems
    40054016        oplocks are recognized by the underlying operating system. This
    40064017        allows data synchronization between all access to oplocked files,
    40074018        whether it be via Samba or NFS or a local UNIX process. See the
    4008         <a class="link" href="smb.conf.5.html#KERNELOPLOCKS">kernel oplocks</a> parameter for details.
     4019        <a class="link" href="smb.conf.5.html#KERNELOPLOCKS" target="_top">kernel oplocks</a> parameter for details.
    40094020        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code>
    40104021</em></span>
    4011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547317"></a>
     4022</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553383"></a>
    40124023
    40134024os2 driver map (G)
    4014 </h3></div></div></div><a class="indexterm" name="id2547318"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
     4025</h3></div></div></div><a class="indexterm" name="id2553384"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
    40154026    path to a file containing a mapping of Windows NT printer driver
    40164027    names to OS/2 printer driver names.  The format is:</p><p>&lt;nt driver name&gt; = &lt;os2 driver name&gt;.&lt;device name&gt;</p><p>For example, a valid entry using the HP LaserJet 5
    … …  
    40224033    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code>
    40234034</em></span>
    4024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547384"></a>
     4035</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553450"></a>
    40254036
    40264037os level (G)
    4027 </h3></div></div></div><a class="indexterm" name="id2547385"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4038</h3></div></div></div><a class="indexterm" name="id2553451"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    40284039        This integer value controls what level Samba advertises itself as for browse elections. The value of this
    4029         parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> in the local broadcast area.
     4040        parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area.
    40304041</p><p><span class="emphasis"><em>
    40314042        Note:</em></span> By default, Samba will win a local master browsing election over all Microsoft operating
    … …  
    40414052</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code>
    40424053</em></span>
    4043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547492"></a>
     4054</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553549"></a>
    40444055
    40454056pam password change (G)
    4046 </h3></div></div></div><a class="indexterm" name="id2547493"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
     4057</h3></div></div></div><a class="indexterm" name="id2553550"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
    40474058    this parameter, it is possible to use PAM's password change control
    40484059    flag for Samba.  If enabled, then PAM will be used for password
    40494060    changes when requested by an SMB client instead of the program listed in
    4050     <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a>.
     4061    <a class="link" href="smb.conf.5.html#PASSWDPROGRAM" target="_top">passwd program</a>.
    40514062    It should be possible to enable this without changing your
    4052     <a class="link" href="smb.conf.5.html#PASSWDCHAT">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code>
    4053 </em></span>
    4054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547564"></a>
     4063    <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code>
     4064</em></span>
     4065</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553622"></a>
    40554066
    40564067panic action (G)
    4057 </h3></div></div></div><a class="indexterm" name="id2547565"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
     4068</h3></div></div></div><a class="indexterm" name="id2553623"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
    40584069        system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>      crashes. This is usually used to
    40594070        draw attention to the fact that a problem occurred.
    … …  
    40624073</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code>
    40634074</em></span>
    4064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547640"></a>
     4075</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553698"></a>
    40654076
    40664077paranoid server security (G)
    4067 </h3></div></div></div><a class="indexterm" name="id2547641"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
     4078</h3></div></div></div><a class="indexterm" name="id2553699"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
    40684079    users with a bad passowrd. When this option is enabled, samba will not
    40694080    use a broken NT 4.x server as password server, but instead complain
    … …  
    40734084    bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code>
    40744085</em></span>
    4075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547691"></a>
     4086</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553749"></a>
    40764087
    40774088passdb backend (G)
    4078 </h3></div></div></div><a class="indexterm" name="id2547692"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
     4089</h3></div></div></div><a class="indexterm" name="id2553750"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
    40794090    will be used for storing user and possibly group information.  This allows
    40804091    you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location'
    … …  
    40854096                </p></li><li><p><code class="literal">tdbsam</code> - The TDB based password storage
    40864097                backend.  Takes a path to the TDB as an optional argument (defaults to passdb.tdb
    4087                 in the <a class="link" href="smb.conf.5.html#PRIVATEDIR">private dir</a> directory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb
     4098                in the <a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a> directory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb
    40884099                backend.  Takes an LDAP URL as an optional argument (defaults to
    40894100                <code class="literal">ldap://localhost</code>)</p><p>LDAP connections should be secured where possible.  This may be done using either
    4090                 Start-TLS (see <a class="link" href="smb.conf.5.html#LDAPSSL">ldap ssl</a>) or by
     4101                Start-TLS (see <a class="link" href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a>) or by
    40914102                specifying <em class="parameter"><code>ldaps://</code></em> in
    40924103                the URL argument. </p><p>Multiple servers may also be specified in double-quotes.
    … …  
    41094120</pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code>
    41104121</em></span>
    4111 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547846"></a>
     4122</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553906"></a>
    41124123
    41134124passdb expand explicit (G)
    4114 </h3></div></div></div><a class="indexterm" name="id2547848"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4125</h3></div></div></div><a class="indexterm" name="id2553907"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41154126        This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We
    41164127        used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable
    … …  
    41184129    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code>
    41194130</em></span>
    4120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547893"></a>
     4131</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553953"></a>
    41214132
    41224133passwd chat debug (G)
    4123 </h3></div></div></div><a class="indexterm" name="id2547894"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
     4134</h3></div></div></div><a class="indexterm" name="id2553954"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
    41244135    parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
    41254136    strings passed to and received from the passwd chat are printed
    41264137    in the <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> log with a
    4127     <a class="link" href="smb.conf.5.html#DEBUGLEVEL">debug level</a>
     4138    <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a>
    41284139    of 100. This is a dangerous option as it will allow plaintext passwords
    41294140    to be seen in the <code class="literal">smbd</code> log. It is available to help
    … …  
    41314142    when calling the <em class="parameter"><code>passwd program</code></em> and should
    41324143    be turned off after this has been done. This option has no effect if the
    4133     <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE">pam password change</a>
     4144    <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE" target="_top">pam password change</a>
    41344145        parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code>
    41354146</em></span>
    4136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547996"></a>
     4147</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554056"></a>
    41374148
    41384149passwd chat timeout (G)
    4139 </h3></div></div></div><a class="indexterm" name="id2547997"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
     4150</h3></div></div></div><a class="indexterm" name="id2554057"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
    41404151    answer from a passwd chat script being run. Once the initial answer is received
    41414152    the subsequent answers must be received in one tenth of this time. The default it
    41424153    two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code>
    41434154</em></span>
    4144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548041"></a>
     4155</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554101"></a>
    41454156
    41464157passwd chat (G)
    4147 </h3></div></div></div><a class="indexterm" name="id2548042"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
     4158</h3></div></div></div><a class="indexterm" name="id2554102"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
    41484159    conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing
    41494160    program to change the user's password. The string describes a
    41504161    sequence of response-receive pairs that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> uses to determine what to send to the
    4151     <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a> and what to expect back. If the expected output is not
     4162    <a class="link" href="smb.conf.5.html#PASSWDPROGRAM" target="_top">passwd program</a> and what to expect back. If the expected output is not
    41524163    received then the password is not changed.</p><p>This chat sequence is often quite site specific, depending
    41534164    on what local methods are used for password control (such as NIS
    4154     etc).</p><p>Note that this parameter only is used if the <a class="link" href="smb.conf.5.html#UNIXPASSWORDSYNC">unix password sync</a> parameter is set  to <code class="constant">yes</code>. This sequence is
     4165    etc).</p><p>Note that this parameter only is used if the <a class="link" href="smb.conf.5.html#UNIXPASSWORDSYNC" target="_top">unix password sync</a> parameter is set  to <code class="constant">yes</code>. This sequence is
    41554166    then called <span class="emphasis"><em>AS ROOT</em></span> when the SMB password  in the
    41564167    smbpasswd file is being changed, without access to the old password
    41574168    cleartext. This means that root must be able to reset the user's password without
    41584169    knowing the text of the previous password. In the presence of
    4159     NIS/YP,  this means that the <a class="link" href="smb.conf.5.html#PASSWDPROGRAM">passwd program</a> must
     4170    NIS/YP,  this means that the <a class="link" href="smb.conf.5.html#PASSWDPROGRAM" target="_top">passwd program</a> must
    41604171    be executed on the NIS master.
    41614172    </p><p>The string can contain the macro <em class="parameter"><code>%n</code></em> which is substituted
    41624173    for the new password.  The old passsword (<em class="parameter"><code>%o</code></em>) is only available when
    4163     <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords</a> has been disabled.
     4174    <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords</a> has been disabled.
    41644175    The chat sequence can also contain the standard macros
    41654176    \n, \r, \t and \s to give line-feed, carriage-return, tab
    … …  
    41694180    string.</p><p>If the send string in any part of the chat sequence  is a full
    41704181    stop ".",  then no string is sent. Similarly,  if the
    4171     expect string is a full stop then no string is expected.</p><p>If the <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE">pam password change</a> parameter is set to <code class="constant">yes</code>, the
     4182    expect string is a full stop then no string is expected.</p><p>If the <a class="link" href="smb.conf.5.html#PAMPASSWORDCHANGE" target="_top">pam password change</a> parameter is set to <code class="constant">yes</code>, the
    41724183        chat pairs may be matched in any order, and success is determined by the PAM result, not any particular
    41734184        output. The \n macro is ignored for PAM conversions.
    … …  
    41764187</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code>
    41774188</em></span>
    4178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548246"></a>
     4189</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554307"></a>
    41794190
    41804191passwd program (G)
    4181 </h3></div></div></div><a class="indexterm" name="id2548247"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
     4192</h3></div></div></div><a class="indexterm" name="id2554308"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
    41824193    UNIX user passwords.  Any occurrences of <em class="parameter"><code>%u</code></em>
    41834194    will be replaced with the user name. The user name is checked for
    … …  
    42004211</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code>
    42014212</em></span>
    4202 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548381"></a>
     4213</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554442"></a>
    42034214
    42044215password level (G)
    4205 </h3></div></div></div><a class="indexterm" name="id2548382"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
     4216</h3></div></div></div><a class="indexterm" name="id2554443"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
    42064217    with mixed-case passwords.  One offending client is Windows for
    42074218    Workgroups, which for some reason forces passwords to upper
    … …  
    42214232    made - the password as is and the password in all-lower case.</p><p>This parameter is used only when using plain-text passwords. It is
    42224233    not at all used when encrypted passwords as in use (that is the default
    4223     since samba-3.0.0). Use this only when <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords = No</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">0</code>
     4234    since samba-3.0.0). Use this only when <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = No</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">0</code>
    42244235</em></span>
    42254236</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code>
    42264237</em></span>
    4227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548518"></a>
     4238</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554579"></a>
    42284239
    42294240password server (G)
    4230 </h3></div></div></div><a class="indexterm" name="id2548519"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
     4241</h3></div></div></div><a class="indexterm" name="id2554580"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
    42314242    or Active Directory domain controller with this option,
    42324243    and using <code class="literal">security = [ads|domain|server]</code>
    … …  
    42404251    have no effect on password servers for Windows NT 4.0 domains or netbios
    42414252    connections.</p><p>If parameter is a name, it is looked up using the
    4242     parameter <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER">name resolve order</a> and so may resolved
     4253    parameter <a class="link" href="smb.conf.5.html#NAMERESOLVEORDER" target="_top">name resolve order</a> and so may resolved
    42434254    by any method and order described in that parameter.</p><p>The password server must be a machine capable of using
    42444255    the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in
    … …  
    42884299</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code>
    42894300</em></span>
    4290 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548816"></a>
     4301</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554878"></a>
    42914302
    42924303<a name="DIRECTORY"></a>directory
    4293 </h3></div></div></div><a class="indexterm" name="id2548817"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548848"></a>
     4304</h3></div></div></div><a class="indexterm" name="id2554879"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554909"></a>
    42944305
    42954306path (S)
    4296 </h3></div></div></div><a class="indexterm" name="id2548849"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
     4307</h3></div></div></div><a class="indexterm" name="id2554910"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
    42974308        the user of the service is to be given access. In the case of
    42984309        printable services, this is where print data will spool prior to
    … …  
    43064317        will be replaced by the NetBIOS name of the machine they are
    43074318        connecting from. These replacements are very useful for setting
    4308         up pseudo home directories for users.</p><p>Note that this path will be based on <a class="link" href="smb.conf.5.html#ROOTDIR">root dir</a>
     4319        up pseudo home directories for users.</p><p>Note that this path will be based on <a class="link" href="smb.conf.5.html#ROOTDIR" target="_top">root dir</a>
    43094320         if one was specified.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal"></code>
    43104321</em></span>
    43114322</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code>
    43124323</em></span>
    4313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548952"></a>
     4324</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555013"></a>
    43144325
    43154326pid directory (G)
    4316 </h3></div></div></div><a class="indexterm" name="id2548953"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4327</h3></div></div></div><a class="indexterm" name="id2555014"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43174328        This option specifies the directory where pid files will be placed. 
    43184329        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code>
    … …  
    43204331</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code>
    43214332</em></span>
    4322 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549011"></a>
     4333</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555073"></a>
    43234334
    43244335posix locking (S)
    4325 </h3></div></div></div><a class="indexterm" name="id2549012"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4336</h3></div></div></div><a class="indexterm" name="id2555074"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43264337        The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    43274338        daemon maintains an database of file locks obtained by SMB clients. The default behavior is
    … …  
    43314342        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code>
    43324343</em></span>
    4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549067"></a>
     4344</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555128"></a>
    43344345
    43354346postexec (S)
    4336 </h3></div></div></div><a class="indexterm" name="id2549068"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
     4347</h3></div></div></div><a class="indexterm" name="id2555130"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
    43374348        whenever the service is disconnected. It takes the usual
    43384349        substitutions. The command may be run as the root on some
    … …  
    43424353</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    43434354</em></span>
    4344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549140"></a>
     4355</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555201"></a>
    43454356
    43464357preexec close (S)
    4347 </h3></div></div></div><a class="indexterm" name="id2549141"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    4348         This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC">preexec</a>
     4358</h3></div></div></div><a class="indexterm" name="id2555202"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4359        This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a>
    43494360        should close the service being connected to.
    43504361        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code>
    43514362</em></span>
    4352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549194"></a>
     4363</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555256"></a>
    43534364
    43544365<a name="EXEC"></a>exec
    4355 </h3></div></div></div><a class="indexterm" name="id2549195"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549225"></a>
     4366</h3></div></div></div><a class="indexterm" name="id2555257"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555288"></a>
    43564367
    43574368preexec (S)
    4358 </h3></div></div></div><a class="indexterm" name="id2549226"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
     4369</h3></div></div></div><a class="indexterm" name="id2555289"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
    43594370        the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome
    43604371        message every time they log in. Maybe a message of the day? Here
    … …  
    43634374        /usr/local/samba/bin/smbclient -M %m -I %I' &amp; </code>
    43644375        </p><p>Of course, this could get annoying after a while :-)</p><p>
    4365         See also <a class="link" href="smb.conf.5.html#PREEXECCLOSE">preexec close</a> and <a class="link" href="smb.conf.5.html#POSTEXEC">postexec</a>.
     4376        See also <a class="link" href="smb.conf.5.html#PREEXECCLOSE" target="_top">preexec close</a> and <a class="link" href="smb.conf.5.html#POSTEXEC" target="_top">postexec</a>.
    43664377        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal"></code>
    43674378</em></span>
    43684379</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    43694380</em></span>
    4370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549333"></a>
     4381</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555396"></a>
    43714382
    43724383<a name="PREFEREDMASTER"></a>prefered master
    4373 </h3></div></div></div><a class="indexterm" name="id2549334"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549366"></a>
     4384</h3></div></div></div><a class="indexterm" name="id2555397"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555428"></a>
    43744385
    43754386preferred master (G)
    4376 </h3></div></div></div><a class="indexterm" name="id2549367"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4387</h3></div></div></div><a class="indexterm" name="id2555430"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43774388        This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser  for its workgroup.
    43784389        </p><p>
    43794390        If this is set to <code class="constant">yes</code>, on startup, <code class="literal">nmbd</code> will force
    43804391        an election, and it will have a slight advantage in winning the election.  It is recommended that this
    4381         parameter is used in conjunction with <a class="link" href="smb.conf.5.html#DOMAINMASTER">domain master = yes</a>, so that
     4392        parameter is used in conjunction with <a class="link" href="smb.conf.5.html#DOMAINMASTER" target="_top">domain master = yes</a>, so that
    43824393        <code class="literal">nmbd</code> can guarantee becoming a domain master.
    43834394        </p><p>
    … …  
    43884399        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code>
    43894400</em></span>
    4390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549459"></a>
     4401</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555522"></a>
    43914402
    43924403preload modules (G)
    4393 </h3></div></div></div><a class="indexterm" name="id2549460"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
     4404</h3></div></div></div><a class="indexterm" name="id2555523"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
    43944405        be loaded into smbd before a client connects. This improves
    43954406        the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code>
    … …  
    43974408</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code>
    43984409</em></span>
    4399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549520"></a>
     4410</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555583"></a>
    44004411
    44014412<a name="AUTOSERVICES"></a>auto services
    4402 </h3></div></div></div><a class="indexterm" name="id2549521"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549553"></a>
     4413</h3></div></div></div><a class="indexterm" name="id2555584"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555616"></a>
    44034414
    44044415preload (G)
    4405 </h3></div></div></div><a class="indexterm" name="id2549554"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
     4416</h3></div></div></div><a class="indexterm" name="id2555617"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
    44064417        automatically added to the browse lists. This is most useful
    44074418        for homes and printers services that would otherwise not be
    44084419        visible.</p><p>
    44094420        Note that if you just want all printers in your
    4410         printcap file loaded then the <a class="link" href="smb.conf.5.html#LOADPRINTERS">load printers</a>
     4421        printcap file loaded then the <a class="link" href="smb.conf.5.html#LOADPRINTERS" target="_top">load printers</a>
    44114422         option is easier.
    44124423        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal"></code>
    … …  
    44144425</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code>
    44154426</em></span>
    4416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549631"></a>
     4427</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555694"></a>
    44174428
    44184429preserve case (S)
    4419 </h3></div></div></div><a class="indexterm" name="id2549632"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4430</h3></div></div></div><a class="indexterm" name="id2555695"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44204431        This controls if new filenames are created with the case that the client passes, or if
    4421         they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>.
     4432        they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
    44224433        </p><p>
    44234434        See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a> for a fuller discussion.
    44244435        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code>
    44254436</em></span>
    4426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549697"></a>
     4437</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555760"></a>
    44274438
    44284439<a name="PRINTOK"></a>print ok
    4429 </h3></div></div></div><a class="indexterm" name="id2549698"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549728"></a>
     4440</h3></div></div></div><a class="indexterm" name="id2555761"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555791"></a>
    44304441
    44314442printable (S)
    4432 </h3></div></div></div><a class="indexterm" name="id2549729"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
     4443</h3></div></div></div><a class="indexterm" name="id2555792"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
    44334444    clients may open, write to and submit spool files on the directory
    44344445    specified for the service. </p><p>Note that a printable service will ALWAYS allow writing
    44354446    to the service path (user privileges permitting) via the spooling
    4436     of print data. The <a class="link" href="smb.conf.5.html#READONLY">read only</a> parameter controls only non-printing access to
     4447    of print data. The <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> parameter controls only non-printing access to
    44374448    the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code>
    44384449</em></span>
    4439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549791"></a>
     4450</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555854"></a>
    44404451
    44414452printcap cache time (G)
    4442 </h3></div></div></div><a class="indexterm" name="id2549792"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
     4453</h3></div></div></div><a class="indexterm" name="id2555855"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
    44434454    subsystem is again asked for the known printers.  If the value
    44444455    is greater than 60 the initial waiting time is set to 60 seconds
    … …  
    44504461</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code>
    44514462</em></span>
    4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549859"></a>
     4463</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555923"></a>
    44534464
    44544465<a name="PRINTCAP"></a>printcap
    4455 </h3></div></div></div><a class="indexterm" name="id2549860"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549892"></a>
     4466</h3></div></div></div><a class="indexterm" name="id2555924"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555956"></a>
    44564467
    44574468printcap name (G)
    4458 </h3></div></div></div><a class="indexterm" name="id2549893"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4469</h3></div></div></div><a class="indexterm" name="id2555957"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44594470        This parameter may be used to override the compiled-in default printcap name used by the server (usually
    44604471        <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this.
    44614472        </p><p>
    44624473        To use the CUPS printing interface set <code class="literal">printcap name = cups </code>. This should
    4463         be supplemented by an addtional setting <a class="link" href="smb.conf.5.html#PRINTING">printing = cups</a> in the [global]
     4474        be supplemented by an addtional setting <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing = cups</a> in the [global]
    44644475        section.  <code class="literal">printcap name = cups</code> will use the  "dummy" printcap
    44654476        created by CUPS, as specified in your CUPS configuration file.
    … …  
    44914502</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code>
    44924503</em></span>
    4493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550076"></a>
     4504</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556140"></a>
    44944505
    44954506print command (S)
    4496 </h3></div></div></div><a class="indexterm" name="id2550077"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
     4507</h3></div></div></div><a class="indexterm" name="id2556142"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
    44974508    a service, this command will be used via a <code class="literal">system()</code>
    44984509    call to process the spool file. Typically the command specified will
    … …  
    45174528    be created but not processed and (most importantly) not removed.</p><p>Note that printing may fail on some UNIXes from the
    45184529    <code class="constant">nobody</code> account. If this happens then create
    4519     an alternative guest account that can print and set the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>
     4530    an alternative guest account that can print and set the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>
    45204531    in the [global] section.</p><p>You can form quite complex print commands by realizing
    45214532    that they are just passed to a shell. For example the following
    … …  
    45244535    /tmp/print.log; lpr -P %p %s; rm %s</code></p><p>You may have to vary this command considerably depending
    45254536    on how you normally print files on your system. The default for
    4526     the parameter varies depending on the setting of the <a class="link" href="smb.conf.5.html#PRINTING">printing</a>
     4537    the parameter varies depending on the setting of the <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a>
    45274538        parameter.</p><p>Default: For <code class="literal">printing = BSD, AIX, QNX, LPRNG
    45284539    or PLP :</code></p><p><code class="literal">print command = lpr -r -P%p %s</code></p><p>For <code class="literal">printing = SYSV or HPUX :</code></p><p><code class="literal">print command = lp -c -d%p %s; rm %s</code></p><p>For <code class="literal">printing = SOFTQ :</code></p><p><code class="literal">print command = lp -d%p -s %s; rm %s</code></p><p>For printing = CUPS :   If SAMBA is compiled against
    4529     libcups, then <a class="link" href="smb.conf.5.html#PRINTCAP">printcap = cups</a>
     4540    libcups, then <a class="link" href="smb.conf.5.html#PRINTCAP" target="_top">printcap = cups</a>
    45304541    uses the CUPS API to
    45314542    submit jobs, etc.  Otherwise it maps to the System V
    … …  
    45364547        set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code>
    45374548</em></span>
    4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550346"></a>
     4549</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556410"></a>
    45394550
    45404551printer admin (S)
    4541 </h3></div></div></div><a class="indexterm" name="id2550347"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4552</h3></div></div></div><a class="indexterm" name="id2556411"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    45424553        This lists users who can do anything to printers
    45434554        via the remote administration interfaces offered
    … …  
    45554566</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code>
    45564567</em></span>
    4557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550416"></a>
     4568</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556479"></a>
    45584569
    45594570<a name="PRINTER"></a>printer
    4560 </h3></div></div></div><a class="indexterm" name="id2550417"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550447"></a>
     4571</h3></div></div></div><a class="indexterm" name="id2556480"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556511"></a>
    45614572
    45624573printer name (S)
    4563 </h3></div></div></div><a class="indexterm" name="id2550448"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4574</h3></div></div></div><a class="indexterm" name="id2556512"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    45644575        This parameter specifies the name of the printer to which print jobs spooled through a printable service
    45654576        will be sent.
    … …  
    45684579        does not have its own printer name specified.
    45694580        </p><p>
    4570         The default value of the <a class="link" href="smb.conf.5.html#PRINTERNAME">printer name</a> may be <code class="literal">lp</code> on many
     4581        The default value of the <a class="link" href="smb.conf.5.html#PRINTERNAME" target="_top">printer name</a> may be <code class="literal">lp</code> on many
    45714582        systems.
    45724583        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">none</code>
    … …  
    45744585</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code>
    45754586</em></span>
    4576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550535"></a>
     4587</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556599"></a>
    45774588
    45784589printing (S)
    4579 </h3></div></div></div><a class="indexterm" name="id2550536"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
     4590</h3></div></div></div><a class="indexterm" name="id2556600"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
    45804591    interpreted on your system. It also affects the  default values for
    45814592    the <em class="parameter"><code>print command</code></em>,  <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and  <em class="parameter"><code>lprm command</code></em> if specified in the
    … …  
    45914602    the value for the <em class="parameter"><code>printing</code></em> option since it will
    45924603    reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section">
    4593     [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550670"></a>
     4604    [printers]</a> section.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printing</code></em> = <code class="literal">Depends on the operating system, see
     4605<code class="literal">testparm -v.</code></code>
     4606</em></span>
     4607</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556752"></a>
    45944608
    45954609printjob username (S)
    4596 </h3></div></div></div><a class="indexterm" name="id2550671"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
     4610</h3></div></div></div><a class="indexterm" name="id2556753"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
    45974611    passed to the printing system. Usually, the username is sent,
    45984612    but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code>
    … …  
    46004614</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code>
    46014615</em></span>
    4602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550731"></a>
     4616</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556814"></a>
    46034617
    46044618private dir (G)
    4605 </h3></div></div></div><a class="indexterm" name="id2550732"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
     4619</h3></div></div></div><a class="indexterm" name="id2556815"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
    46064620    smbd will use for storing such files as <code class="filename">smbpasswd</code>
    46074621    and <code class="filename">secrets.tdb</code>.
    46084622</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code>
    46094623</em></span>
    4610 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550785"></a>
     4624</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556868"></a>
    46114625
    46124626profile acls (S)
    4613 </h3></div></div></div><a class="indexterm" name="id2550786"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4627</h3></div></div></div><a class="indexterm" name="id2556869"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46144628        This boolean parameter was added to fix the problems that people have been
    46154629        having with storing user profiles on Samba shares from Windows 2000 or
    … …  
    46394653        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code>
    46404654</em></span>
    4641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550858"></a>
     4655</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556951"></a>
    46424656
    46434657queuepause command (S)
    4644 </h3></div></div></div><a class="indexterm" name="id2550859"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4658</h3></div></div></div><a class="indexterm" name="id2556952"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    46454659    executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
    46464660    a printer name as its only parameter and stops the printer queue,
    … …  
    46534667        server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code>
    46544668</em></span>
    4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550934"></a>
     4669</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557028"></a>
    46564670
    46574671queueresume command (S)
    4658 </h3></div></div></div><a class="indexterm" name="id2550935"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4672</h3></div></div></div><a class="indexterm" name="id2557029"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    46594673    executed on the server host in order to resume the printer queue. It
    46604674    is the command to undo the behavior that is caused by the
    4661     previous parameter (<a class="link" href="smb.conf.5.html#QUEUEPAUSECOMMAND">queuepause command</a>).</p><p>This command should be a program or script which takes
     4675    previous parameter (<a class="link" href="smb.conf.5.html#QUEUEPAUSECOMMAND" target="_top">queuepause command</a>).</p><p>This command should be a program or script which takes
    46624676    a printer name as its only parameter and resumes the printer queue,
    46634677    such that queued jobs are resubmitted to the printer.</p><p>This command is not supported by Windows for Workgroups,
    … …  
    46714685</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code>
    46724686</em></span>
    4673 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551036"></a>
     4687</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557131"></a>
    46744688
    46754689read list (S)
    4676 </h3></div></div></div><a class="indexterm" name="id2551038"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4690</h3></div></div></div><a class="indexterm" name="id2557132"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46774691        This is a list of users that are given read-only access to a service. If the connecting user is in this list
    4678         then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set
    4679         to. The list can include group names using the syntax described in the <a class="link" href="smb.conf.5.html#INVALIDUSERS">invalid users</a>
     4692        then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set
     4693        to. The list can include group names using the syntax described in the <a class="link" href="smb.conf.5.html#INVALIDUSERS" target="_top">invalid users</a>
    46804694        parameter.
    4681         </p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in
     4695        </p><p>This parameter will not work with the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = share</a> in
    46824696    Samba 3.0.  This is by design.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal"></code>
    46834697</em></span>
    46844698</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code>
    46854699</em></span>
    4686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551136"></a>
     4700</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557231"></a>
    46874701
    46884702read only (S)
    4689 </h3></div></div></div><a class="indexterm" name="id2551137"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
     4703</h3></div></div></div><a class="indexterm" name="id2557232"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
    46904704    of a service may not create or modify files in the service's
    46914705    directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>)
    … …  
    46934707    (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code>
    46944708</em></span>
    4695 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551213"></a>
     4709</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557308"></a>
    46964710
    46974711read raw (G)
    4698 </h3></div></div></div><a class="indexterm" name="id2551214"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     4712</h3></div></div></div><a class="indexterm" name="id2557309"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    46994713    will support the raw read SMB requests when transferring data
    47004714    to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in
    … …  
    47054719        tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code>
    47064720</em></span>
    4707 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551273"></a>
     4721</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557368"></a>
    47084722
    47094723realm (G)
    4710 </h3></div></div></div><a class="indexterm" name="id2551274"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
     4724</h3></div></div></div><a class="indexterm" name="id2557369"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
    47114725        used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It
    47124726        is usually set to the DNS name of the kerberos server.
    … …  
    47154729</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code>
    47164730</em></span>
    4717 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551338"></a>
     4731</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557433"></a>
    47184732
    47194733registry shares (G)
    4720 </h3></div></div></div><a class="indexterm" name="id2551339"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4734</h3></div></div></div><a class="indexterm" name="id2557434"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47214735        This turns on or off support for share definitions read from
    47224736        registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take
    … …  
    47334747</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code>
    47344748</em></span>
    4735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551424"></a>
     4749</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557519"></a>
    47364750
    47374751remote announce (G)
    4738 </h3></div></div></div><a class="indexterm" name="id2551425"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4752</h3></div></div></div><a class="indexterm" name="id2557520"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47394753        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself
    47404754        to arbitrary IP addresses with an arbitrary workgroup name.
    … …  
    47504764        the above line would cause <code class="literal">nmbd</code> to announce itself
    47514765        to the two given IP addresses using the given workgroup names. If you leave out the
    4752         workgroup name then the one given in the <a class="link" href="smb.conf.5.html#WORKGROUP">workgroup</a> parameter
     4766        workgroup name then the one given in the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> parameter
    47534767        is used instead.
    47544768        </p><p>
    … …  
    47604774        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code>
    47614775</em></span>
    4762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551529"></a>
     4776</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557624"></a>
    47634777
    47644778remote browse sync (G)
    4765 </h3></div></div></div><a class="indexterm" name="id2551530"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4779</h3></div></div></div><a class="indexterm" name="id2557625"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47664780        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
    47674781        synchronization of browse lists with the master browser of a Samba
    … …  
    47904804        is in fact the browse master on its segment.
    47914805        </p><p>
    4792         The <a class="link" href="smb.conf.5.html#REMOTEBROWSESYNC">remote browse sync</a> may be used on networks
     4806        The <a class="link" href="smb.conf.5.html#REMOTEBROWSESYNC" target="_top">remote browse sync</a> may be used on networks
    47934807        where there is no WINS server, and may be used on disjoint networks where
    47944808        each network has its own WINS server.
    47954809        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code>
    47964810</em></span>
    4797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551642"></a>
     4811</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557737"></a>
    47984812
    47994813rename user script (G)
    4800 </h3></div></div></div><a class="indexterm" name="id2551643"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4814</h3></div></div></div><a class="indexterm" name="id2557738"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48014815        This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below.
    48024816        </p><p>
    … …  
    48164830        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code>
    48174831</em></span>
    4818 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551731"></a>
     4832</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557827"></a>
    48194833
    48204834reset on zero vc (G)
    4821 </h3></div></div></div><a class="indexterm" name="id2551732"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4835</h3></div></div></div><a class="indexterm" name="id2557828"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48224836        This boolean option controls whether an incoming session setup
    48234837        should kill other connections coming from the same IP. This matches
    … …  
    48384852        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code>
    48394853</em></span>
    4840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551784"></a>
     4854</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557880"></a>
    48414855
    48424856restrict anonymous (G)
    4843 </h3></div></div></div><a class="indexterm" name="id2551785"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
     4857</h3></div></div></div><a class="indexterm" name="id2557881"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
    48444858    group list information is returned for an anonymous connection.
    48454859    and mirrors the effects of the
    … …  
    48614875        </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    48624876    The security advantage of using restrict anonymous = 2 is removed
    4863     by setting <a class="link" href="smb.conf.5.html#GUESTOK">guest ok = yes</a> on any share.
     4877    by setting <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a> on any share.
    48644878        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code>
    48654879</em></span>
    4866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551876"></a>
     4880</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557964"></a>
    48674881
    48684882<a name="ROOT"></a>root
    4869 </h3></div></div></div><a class="indexterm" name="id2551877"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551909"></a>
     4883</h3></div></div></div><a class="indexterm" name="id2557965"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557997"></a>
    48704884
    48714885<a name="ROOTDIR"></a>root dir
    4872 </h3></div></div></div><a class="indexterm" name="id2551910"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551940"></a>
     4886</h3></div></div></div><a class="indexterm" name="id2557998"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558029"></a>
    48734887
    48744888root directory (G)
    4875 </h3></div></div></div><a class="indexterm" name="id2551942"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
     4889</h3></div></div></div><a class="indexterm" name="id2558030"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
    48764890    Change its root directory) to this directory on startup. This is
    48774891    not strictly necessary for secure operation. Even without it the
    … …  
    48804894    parts of the filesystem, or attempts to use ".." in file names
    48814895    to access other directories (depending on the setting of the
    4882         <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS">wide smbconfoptions</a> parameter).
     4896        <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter).
    48834897    </p><p>Adding a <em class="parameter"><code>root directory</code></em> entry other
    48844898    than "/" adds an extra level of security, but at a price. It
    … …  
    48964910</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code>
    48974911</em></span>
    4898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552064"></a>
     4912</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558153"></a>
    48994913
    49004914root postexec (S)
    4901 </h3></div></div></div><a class="indexterm" name="id2552066"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4915</h3></div></div></div><a class="indexterm" name="id2558154"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49024916        This is the same as the <em class="parameter"><code>postexec</code></em>
    49034917        parameter except that the command is run as root. This is useful for
    … …  
    49054919        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code>
    49064920</em></span>
    4907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552113"></a>
     4921</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558202"></a>
    49084922
    49094923root preexec close (S)
    4910 </h3></div></div></div><a class="indexterm" name="id2552114"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
     4924</h3></div></div></div><a class="indexterm" name="id2558203"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
    49114925        </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code>
    49124926</em></span>
    4913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552162"></a>
     4927</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558250"></a>
    49144928
    49154929root preexec (S)
    4916 </h3></div></div></div><a class="indexterm" name="id2552163"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4930</h3></div></div></div><a class="indexterm" name="id2558251"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49174931        This is the same as the <em class="parameter"><code>preexec</code></em>
    49184932        parameter except that the command is run as root. This is useful for
    … …  
    49204934        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code>
    49214935</em></span>
    4922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552210"></a>
     4936</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558298"></a>
    49234937
    49244938security mask (S)
    4925 </h3></div></div></div><a class="indexterm" name="id2552211"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4939</h3></div></div></div><a class="indexterm" name="id2558299"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49264940        This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    49274941        UNIX permission on a file using the native NT security dialog box.
    49284942        </p><p>
    49294943        This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
    4930         any bits not in this mask. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCESECURITYMODE">force  security mode</a>, which works in a manner similar to this one but uses a logical OR instead of an AND.
     4944        any bits not in this mask. Make sure not to mix up this parameter with <a class="link" href="smb.conf.5.html#FORCESECURITYMODE" target="_top">force  security mode</a>, which works in a manner similar to this one but uses a logical OR instead of an AND.
    49314945        </p><p>
    49324946        Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
    … …  
    49424956</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code>
    49434957</em></span>
    4944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552316"></a>
     4958</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558405"></a>
    49454959
    49464960security (G)
    4947 </h3></div></div></div><a class="indexterm" name="id2552317"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
     4961</h3></div></div></div><a class="indexterm" name="id2558406"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
    49484962    Samba and is one of the most important settings in the <code class="filename">
    49494963    smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to
    … …  
    49694983    is commonly used for a shared printer server. It is more difficult
    49704984    to setup guest shares with <code class="literal">security = user</code>, see
    4971     the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a>parameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em>
     4985    the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a>parameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em>
    49724986    hybrid mode</em></span> where it is offers both user and share
    4973     level security under different <a class="link" href="smb.conf.5.html#NETBIOSALIASES">NetBIOS aliases</a>. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server they
     4987    level security under different <a class="link" href="smb.conf.5.html#NETBIOSALIASES" target="_top">NetBIOS aliases</a>. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server they
    49744988    need not log onto the server with a valid username and password before
    49754989    attempting to connect to a shared resource (although modern clients
    … …  
    49844998    techniques to determine the correct UNIX user to use on behalf
    49854999    of the client.</p><p>A list of possible UNIX usernames to match with the given
    4986     client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY">guest only</a> parameter is set, then all the other
    4987             stages are missed and only the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a> username is checked.
     5000    client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> parameter is set, then all the other
     5001            stages are missed and only the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a> username is checked.
    49885002            </p></li><li><p>Is a username is sent with the share connection
    4989             request, then this username (after mapping - see <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a>),
     5003            request, then this username (after mapping - see <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a>),
    49905004            is added as a potential username.
    49915005            </p></li><li><p>If the client did a previous <span class="emphasis"><em>logon
    … …  
    49965010            </p></li><li><p>The NetBIOS name of the client is added to
    49975011            the list as a potential username.
    4998             </p></li><li><p>Any users on the <a class="link" href="smb.conf.5.html#USER">user</a> list are added as potential usernames.
     5012            </p></li><li><p>Any users on the <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> list are added as potential usernames.
    49995013            </p></li></ul></div><p>If the <em class="parameter"><code>guest only</code></em> parameter is
    50005014    not set, then this list is then tried with the supplied password.
    … …  
    50085022    NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSUSER"></a><span class="emphasis"><em>SECURITY = USER</em></span></p><p>This is the default security setting in Samba 3.0.
    50095023    With user-level security a client must first "log-on" with a
    5010     valid username and password (which can be mapped using the <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a>
    5011     parameter). Encrypted passwords (see the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter) can also
    5012     be used in this security mode. Parameters such as <a class="link" href="smb.conf.5.html#USER">user</a> and <a class="link" href="smb.conf.5.html#GUESTONLY">guest only</a> if set   are then applied and
     5024    valid username and password (which can be mapped using the <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a>
     5025    parameter). Encrypted passwords (see the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS" target="_top">encrypted passwords</a> parameter) can also
     5026    be used in this security mode. Parameters such as <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> and <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> if set       are then applied and
    50135027    may change the UNIX user to use on this connection, but only after
    50145028    the user has been successfully authenticated.</p><p><span class="emphasis"><em>Note</em></span> that the name of the resource being
    … …  
    50165030    the server has successfully authenticated the client. This is why
    50175031    guest shares don't work in user level security without allowing
    5018     the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.
    5019     See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSDOMAIN"></a><span class="emphasis"><em>SECURITY = DOMAIN</em></span></p><p>This mode will only work correctly if <a class="citerefentry" href="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a> has been used to add this
    5020     machine into a Windows NT Domain. It expects the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a>
     5032    the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.
     5033    See the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p><a name="SECURITYEQUALSDOMAIN"></a><span class="emphasis"><em>SECURITY = DOMAIN</em></span></p><p>This mode will only work correctly if <a class="citerefentry" href="net.8.html"><span class="citerefentry"><span class="refentrytitle">net</span>(8)</span></a> has been used to add this
     5034    machine into a Windows NT Domain. It expects the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS" target="_top">encrypted passwords</a>
    50215035        parameter to be set to <code class="constant">yes</code>. In this
    50225036    mode Samba will try to validate the username/password by passing
    … …  
    50325046    the server has successfully authenticated the client. This is why
    50335047    guest shares don't work in user level security without allowing
    5034     the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.
    5035     See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">
    5036     NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> parameter and
    5037          the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSSERVER"></a><span class="emphasis"><em>SECURITY = SERVER</em></span></p><p>
     5048    the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.
     5049    See the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">
     5050    NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER" target="_top">password server</a> parameter and
     5051         the <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS" target="_top">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSSERVER"></a><span class="emphasis"><em>SECURITY = SERVER</em></span></p><p>
    50385052        In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an
    50395053        NT box. If this fails it will revert to <code class="literal">security = user</code>. It expects the
    5040         <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter to be set to <code class="constant">yes</code>, unless the remote
     5054        <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS" target="_top">encrypted passwords</a> parameter to be set to <code class="constant">yes</code>, unless the remote
    50415055        server does not support them.  However note that if encrypted passwords have been negotiated then Samba cannot
    50425056        revert back to checking the UNIX password file, it must have a valid <code class="filename">smbpasswd</code> file to check users against. See the chapter about the User Database in
    … …  
    50585072    the server has successfully authenticated the client. This is why
    50595073    guest shares don't work in user level security without allowing
    5060     the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT">guest account</a>.
    5061     See the <a class="link" href="smb.conf.5.html#MAPTOGUEST">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">
    5062     NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> parameter and the
    5063         <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSADS"></a><span class="emphasis"><em>SECURITY = ADS</em></span></p><p>In this mode, Samba will act as a domain member in an ADS realm. To operate
     5074    the server to automatically map unknown users into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.
     5075    See the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a> parameter for details on doing this.</p><p>See also the section <a class="link" href="#VALIDATIONSECT" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION">
     5076    NOTE ABOUT USERNAME/PASSWORD VALIDATION</a>.</p><p>See also the <a class="link" href="smb.conf.5.html#PASSWORDSERVER" target="_top">password server</a> parameter and the
     5077        <a class="link" href="smb.conf.5.html#ENCRYPTEDPASSWORDS" target="_top">encrypted passwords</a> parameter.</p><p><a name="SECURITYEQUALSADS"></a><span class="emphasis"><em>SECURITY = ADS</em></span></p><p>In this mode, Samba will act as a domain member in an ADS realm. To operate
    50645078                in this mode, the machine running Samba will need to have Kerberos installed
    50655079                and configured and Samba will need to be joined to the ADS realm using the
    … …  
    50695083</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code>
    50705084</em></span>
    5071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553195"></a>
     5085</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559289"></a>
    50725086
    50735087server schannel (G)
    5074 </h3></div></div></div><a class="indexterm" name="id2553196"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5088</h3></div></div></div><a class="indexterm" name="id2559290"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50755089        This controls whether the server offers or even demands the use of the netlogon schannel.
    5076         <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
     5090        <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
    50775091        This is only the case for Windows NT4 before SP4.
    50785092        </p><p>
    … …  
    50835097</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code>
    50845098</em></span>
    5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553311"></a>
     5099</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559405"></a>
    50865100
    50875101server signing (G)
    5088 </h3></div></div></div><a class="indexterm" name="id2553312"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires
     5102</h3></div></div></div><a class="indexterm" name="id2559406"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires
    50895103    the client it talks to to use SMB signing. Possible values
    50905104    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    … …  
    50945108        to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code>
    50955109</em></span>
    5096 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553372"></a>
     5110</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559466"></a>
    50975111
    50985112server string (G)
    5099 </h3></div></div></div><a class="indexterm" name="id2553373"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
     5113</h3></div></div></div><a class="indexterm" name="id2559467"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
    51005114        manager and next to the IPC connection in <code class="literal">net view</code>. It
    51015115        can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next
    … …  
    51065120</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code>
    51075121</em></span>
    5108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553464"></a>
     5122</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559558"></a>
    51095123
    51105124set directory (S)
    5111 </h3></div></div></div><a class="indexterm" name="id2553465"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5125</h3></div></div></div><a class="indexterm" name="id2559559"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51125126        If <code class="literal">set directory = no</code>, then        users of the
    51135127        service may not use the setdir command to change directory.
    … …  
    51185132        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code>
    51195133</em></span>
    5120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553524"></a>
     5134</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559618"></a>
    51215135
    51225136set primary group script (G)
    5123 </h3></div></div></div><a class="indexterm" name="id2553525"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
     5137</h3></div></div></div><a class="indexterm" name="id2559619"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
    51245138        primary group in addition to the auxiliary groups.  This script
    51255139        sets the primary group in the unix userdatase when an
    … …  
    51335147</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code>
    51345148</em></span>
    5135 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553606"></a>
     5149</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559700"></a>
    51365150
    51375151set quota command (G)
    5138 </h3></div></div></div><a class="indexterm" name="id2553607"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
     5152</h3></div></div></div><a class="indexterm" name="id2559701"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
    51395153        whenever there is no operating system API available from the OS that
    51405154        samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or
    … …  
    51465160</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code>
    51475161</em></span>
    5148 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553769"></a>
     5162</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559863"></a>
    51495163
    51505164share modes (S)
    5151 </h3></div></div></div><a class="indexterm" name="id2553770"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
     5165</h3></div></div></div><a class="indexterm" name="id2559864"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
    51525166        the <em class="parameter"><code>share modes</code></em> during a file open. These
    51535167        modes are used by clients to gain exclusive read or write access
    … …  
    51625176        off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code>
    51635177</em></span>
    5164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553863"></a>
     5178</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559956"></a>
    51655179
    51665180short preserve case (S)
    5167 </h3></div></div></div><a class="indexterm" name="id2553864"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5181</h3></div></div></div><a class="indexterm" name="id2559957"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51685182        This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
    5169         suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE">default case</a>.
    5170         This  option can be use with <a class="link" href="smb.conf.5.html#PRESERVECASE">preserve case = yes</a> to permit long filenames
     5183        suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
     5184        This  option can be use with <a class="link" href="smb.conf.5.html#PRESERVECASE" target="_top">preserve case = yes</a> to permit long filenames
    51715185        to retain their case, while short names are lowered.
    51725186        </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code>
    51735187</em></span>
    5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553942"></a>
     5188</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560036"></a>
    51755189
    51765190show add printer wizard (G)
    5177 </h3></div></div></div><a class="indexterm" name="id2553943"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
     5191</h3></div></div></div><a class="indexterm" name="id2560037"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
    51785192    for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
    51795193    appear on Samba hosts in the share listing.  Normally this folder will
    … …  
    51935207                administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code>
    51945208</em></span>
    5195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554026"></a>
     5209</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560120"></a>
    51965210
    51975211shutdown script (G)
    5198 </h3></div></div></div><a class="indexterm" name="id2554027"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
     5212</h3></div></div></div><a class="indexterm" name="id2560121"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
    51995213         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should
    52005214        start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    … …  
    52215235</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code>
    52225236</em></span>
    5223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554179"></a>
     5237</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560273"></a>
    52245238
    52255239smb encrypt (S)
    5226 </h3></div></div></div><a class="indexterm" name="id2554180"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
     5240</h3></div></div></div><a class="indexterm" name="id2560274"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
    52275241    extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
    52285242    SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
    … …  
    52475261    and signing all the data.
    52485262    </p><p>If SMB encryption is selected, Windows style SMB signing (see
    5249     the <a class="link" href="smb.conf.5.html#SERVERSIGNING">server signing</a> option) is no longer necessary,
     5263    the <a class="link" href="smb.conf.5.html#SERVERSIGNING" target="_top">server signing</a> option) is no longer necessary,
    52505264    as the GSSAPI flags use select both signing and sealing of the data.
    52515265    </p><p>When set to auto, SMB encryption is offered, but not enforced.
    … …  
    52535267    to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code>
    52545268</em></span>
    5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554286"></a>
     5269</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560379"></a>
    52565270
    52575271smb passwd file (G)
    5258 </h3></div></div></div><a class="indexterm" name="id2554287"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
     5272</h3></div></div></div><a class="indexterm" name="id2560380"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
    52595273    default the path to the smbpasswd file  is compiled into Samba.</p><p>
    52605274    An example of use is:
    … …  
    52645278    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code>
    52655279</em></span>
    5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554339"></a>
     5280</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560433"></a>
    52675281
    52685282smb ports (G)
    5269 </h3></div></div></div><a class="indexterm" name="id2554340"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
    5270 </em></span>
    5271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554381"></a>
     5283</h3></div></div></div><a class="indexterm" name="id2560434"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
     5284</em></span>
     5285</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560475"></a>
    52725286
    52735287socket address (G)
    5274 </h3></div></div></div><a class="indexterm" name="id2554382"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
    5275         address Samba will listen for connections on. This is used to
    5276         support multiple virtual interfaces on the one server, each
    5277         with a different configuration.</p><p>By default Samba will accept connections on any
     5288</h3></div></div></div><a class="indexterm" name="id2560476"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
     5289        address Samba will listen for connections on. This is used to
     5290        support multiple virtual interfaces on the one server, each
     5291        with a different configuration.</p><p>Setting this option should never be necessary on usual Samba
     5292        servers running only one nmbd.</p><p>By default Samba will accept connections on any
    52785293                address.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal"></code>
    52795294</em></span>
    52805295</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code>
    52815296</em></span>
    5282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554446"></a>
     5297</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560545"></a>
    52835298
    52845299socket options (G)
    5285 </h3></div></div></div><a class="indexterm" name="id2554447"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
     5300</h3></div></div></div><a class="indexterm" name="id2560546"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
    52865301    to be used when talking with the client.</p><p>Socket options are controls on the networking layer
    52875302    of the operating systems which allow the connection to be
    … …  
    53115326</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code>
    53125327</em></span>
    5313 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554657"></a>
     5328</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560755"></a>
    53145329
    53155330stat cache (G)
    5316 </h3></div></div></div><a class="indexterm" name="id2554658"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
     5331</h3></div></div></div><a class="indexterm" name="id2560756"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
    53175332        speed up case insensitive name mappings. You should never need
    53185333        to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code>
    53195334</em></span>
    5320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554708"></a>
     5335</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560807"></a>
    53215336
    53225337store dos attributes (S)
    5323 </h3></div></div></div><a class="indexterm" name="id2554709"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5338</h3></div></div></div><a class="indexterm" name="id2560808"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    53245339        If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
    53255340        READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
    5326         as occurs with <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY">map readonly</a>).  When set, DOS
     5341        as occurs with <a class="link" href="smb.conf.5.html#MAPHIDDEN" target="_top">map hidden</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY" target="_top">map readonly</a>).  When set, DOS
    53275342        attributes will be stored onto an extended attribute in the UNIX filesystem, associated with the file or
    5328         directory.  For no other mapping to occur as a fall-back, the parameters <a class="link" href="smb.conf.5.html#MAPHIDDEN">map hidden</a>,
    5329         <a class="link" href="smb.conf.5.html#MAPSYSTEM">map system</a>, <a class="link" href="smb.conf.5.html#MAPARCHIVE">map archive</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY">map  readonly</a> must be set to off.  This parameter writes the DOS attributes as a string into the extended
     5343        directory.  For no other mapping to occur as a fall-back, the parameters <a class="link" href="smb.conf.5.html#MAPHIDDEN" target="_top">map hidden</a>,
     5344        <a class="link" href="smb.conf.5.html#MAPSYSTEM" target="_top">map system</a>, <a class="link" href="smb.conf.5.html#MAPARCHIVE" target="_top">map archive</a> and <a class="link" href="smb.conf.5.html#MAPREADONLY" target="_top">map  readonly</a> must be set to off.  This parameter writes the DOS attributes as a string into the extended
    53305345        attribute named "user.DOSATTRIB". This extended attribute is explicitly hidden from smbd clients requesting an
    53315346        EA list. On Linux the filesystem must have been mounted with the mount option user_xattr in order for
    … …  
    53335348        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code>
    53345349</em></span>
    5335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554829"></a>
     5350</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560928"></a>
    53365351
    53375352strict allocate (S)
    5338 </h3></div></div></div><a class="indexterm" name="id2554830"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
     5353</h3></div></div></div><a class="indexterm" name="id2560930"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
    53395354    disk space allocation in the server. When this is set to <code class="constant">yes</code>
    53405355    the server will change from UNIX behaviour of not committing real
    … …  
    53485363    of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>
    53495364</em></span>
    5350 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554900"></a>
     5365</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560999"></a>
    53515366
    53525367strict locking (S)
    5353 </h3></div></div></div><a class="indexterm" name="id2554901"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5368</h3></div></div></div><a class="indexterm" name="id2561000"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    53545369        This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>,
    53555370        the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
    … …  
    53675382        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code>
    53685383</em></span>
    5369 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554979"></a>
     5384</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561078"></a>
    53705385
    53715386strict sync (S)
    5372 </h3></div></div></div><a class="indexterm" name="id2554980"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
     5387</h3></div></div></div><a class="indexterm" name="id2561079"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
    53735388    shell) seem to confuse flushing buffer contents to disk with doing
    53745389    a sync to disk. Under UNIX, a sync call forces the process to be
    … …  
    53845399    reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code>
    53855400</em></span>
    5386 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555044"></a>
     5401</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561143"></a>
    53875402
    53885403svcctl list (G)
    5389 </h3></div></div></div><a class="indexterm" name="id2555045"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
     5404</h3></div></div></div><a class="indexterm" name="id2561144"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
    53905405    will use for starting and stopping Unix services via the Win32
    53915406    ServiceControl API.  This allows Windows administrators to
    … …  
    54005415</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code>
    54015416</em></span>
    5402 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555129"></a>
     5417</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561228"></a>
    54035418
    54045419sync always (S)
    5405 </h3></div></div></div><a class="indexterm" name="id2555130"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
     5420</h3></div></div></div><a class="indexterm" name="id2561230"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
    54065421    whether writes will always be written to stable storage before
    54075422    the write call returns. If this is <code class="constant">no</code> then the server will be
    … …  
    54145429    any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code>
    54155430</em></span>
    5416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555200"></a>
     5431</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561299"></a>
    54175432
    54185433syslog only (G)
    5419 </h3></div></div></div><a class="indexterm" name="id2555201"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5434</h3></div></div></div><a class="indexterm" name="id2561300"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54205435    If this parameter is set then Samba debug messages are logged into the system
    54215436    syslog only, and not to the debug log files. There still will be some
    … …  
    54235438    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code>
    54245439</em></span>
    5425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555247"></a>
     5440</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561347"></a>
    54265441
    54275442syslog (G)
    5428 </h3></div></div></div><a class="indexterm" name="id2555248"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5443</h3></div></div></div><a class="indexterm" name="id2561348"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54295444    This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
    54305445    Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto
    … …  
    54375452    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code>
    54385453</em></span>
    5439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555317"></a>
     5454</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561417"></a>
    54405455
    54415456template homedir (G)
    5442 </h3></div></div></div><a class="indexterm" name="id2555318"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5457</h3></div></div></div><a class="indexterm" name="id2561418"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    54435458        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon  uses this
    54445459        parameter to fill in the home directory for that user. If the
    … …  
    54485463        is substituted with the user's Windows  NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code>
    54495464</em></span>
    5450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555383"></a>
     5465</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561483"></a>
    54515466
    54525467template shell (G)
    5453 </h3></div></div></div><a class="indexterm" name="id2555384"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5468</h3></div></div></div><a class="indexterm" name="id2561484"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    54545469        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
    5455         parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555422"></a>
     5470        parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561522"></a>
    54565471
    54575472time offset (G)
    5458 </h3></div></div></div><a class="indexterm" name="id2555423"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
     5473</h3></div></div></div><a class="indexterm" name="id2561523"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
    54595474        to the normal GMT to local time conversion. This is useful if
    54605475        you are serving a lot of PCs that have incorrect daylight
    … …  
    54635478</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code>
    54645479</em></span>
    5465 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555482"></a>
     5480</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561582"></a>
    54665481
    54675482time server (G)
    5468 </h3></div></div></div><a class="indexterm" name="id2555483"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
     5483</h3></div></div></div><a class="indexterm" name="id2561583"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
    54695484clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code>
    54705485</em></span>
    5471 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555532"></a>
     5486</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561632"></a>
    54725487
    54735488unix charset (G)
    5474 </h3></div></div></div><a class="indexterm" name="id2555533"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
     5489</h3></div></div></div><a class="indexterm" name="id2561633"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
    54755490                Samba runs on uses. Samba needs to know this in order to be able to
    54765491                convert text to the charsets other SMB clients use.
    … …  
    54815496</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code>
    54825497</em></span>
    5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555598"></a>
     5498</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561698"></a>
    54845499
    54855500unix extensions (G)
    5486 </h3></div></div></div><a class="indexterm" name="id2555599"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5501</h3></div></div></div><a class="indexterm" name="id2561699"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    54875502    implments the CIFS UNIX extensions, as defined by HP.
    54885503    These extensions enable Samba to better serve UNIX CIFS clients
    … …  
    54915506    no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code>
    54925507</em></span>
    5493 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555645"></a>
     5508</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561746"></a>
    54945509
    54955510unix password sync (G)
    5496 </h3></div></div></div><a class="indexterm" name="id2555646"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5511</h3></div></div></div><a class="indexterm" name="id2561747"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    54975512    attempts to synchronize the UNIX password with the SMB password
    54985513    when the encrypted SMB password in the smbpasswd file is changed.
    … …  
    55035518        access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code>
    55045519</em></span>
    5505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555706"></a>
     5520</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561807"></a>
    55065521
    55075522update encrypted (G)
    5508 </h3></div></div></div><a class="indexterm" name="id2555708"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5523</h3></div></div></div><a class="indexterm" name="id2561808"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    55095524        This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
    55105525        password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
    … …  
    55165531        in the smbpasswd file this parameter should be set to <code class="constant">no</code>.
    55175532        </p><p>
    5518         In order for this parameter to be operative the <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt passwords</a> parameter must
    5519     be set to <code class="constant">no</code>. The default value of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS">encrypt  passwords = Yes</a>. Note: This must be set to <code class="constant">no</code> for this <a class="link" href="smb.conf.5.html#UPDATEENCRYPTED">update encrypted</a> to work.
     5533        In order for this parameter to be operative the <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords</a> parameter must
     5534    be set to <code class="constant">no</code>. The default value of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt  passwords = Yes</a>. Note: This must be set to <code class="constant">no</code> for this <a class="link" href="smb.conf.5.html#UPDATEENCRYPTED" target="_top">update encrypted</a> to work.
    55205535        </p><p>
    55215536        Note that even when this parameter is set a user authenticating to <code class="literal">smbd</code>
    … …  
    55245539        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code>
    55255540</em></span>
    5526 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555825"></a>
     5541</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561925"></a>
    55275542
    55285543use client driver (S)
    5529 </h3></div></div></div><a class="indexterm" name="id2555826"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
     5544</h3></div></div></div><a class="indexterm" name="id2561926"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
    55305545    clients.  It has no effect on Windows 95/98/ME clients.  When
    55315546    serving a printer to Windows NT/2000 clients without first installing
    … …  
    55525567        server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code>
    55535568</em></span>
    5554 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555917"></a>
     5569</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562018"></a>
    55555570
    55565571use kerberos keytab (G)
    5557 </h3></div></div></div><a class="indexterm" name="id2555918"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5572</h3></div></div></div><a class="indexterm" name="id2562019"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>
    55585573        Specifies whether Samba should attempt to maintain service principals in the systems
    55595574        keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>.
    … …  
    55675582        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code>
    55685583</em></span>
    5569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555985"></a>
     5584</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562086"></a>
    55705585
    55715586use mmap (G)
    5572 </h3></div></div></div><a class="indexterm" name="id2555986"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
     5587</h3></div></div></div><a class="indexterm" name="id2562087"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
    55735588    depend on mmap working correctly on the running system. Samba requires a coherent
    55745589    mmap/read-write system memory cache. Currently only HPUX does not have such a
    … …  
    55795594    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code>
    55805595</em></span>
    5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556038"></a>
     5596</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562138"></a>
    55825597
    55835598username level (G)
    5584 </h3></div></div></div><a class="indexterm" name="id2556039"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
     5599</h3></div></div></div><a class="indexterm" name="id2562139"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
    55855600    the real UNIX username, as many DOS clients send an all-uppercase
    55865601    username. By default Samba tries all lowercase, followed by the
    … …  
    55975612</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code>
    55985613</em></span>
    5599 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556119"></a>
     5614</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562220"></a>
    56005615
    56015616username map script (G)
    5602 </h3></div></div></div><a class="indexterm" name="id2556120"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
    5603         <a class="link" href="smb.conf.5.html#USERNAMEMAP">username map</a> parameter.  This parameter
     5617</h3></div></div></div><a class="indexterm" name="id2562221"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
     5618        <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter.  This parameter
    56045619        specifies and external program or script that must accept a single
    56055620        command line option (the username transmitted in the authentication
    … …  
    56115626</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code>
    56125627</em></span>
    5613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556195"></a>
     5628</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562297"></a>
    56145629
    56155630username map (G)
    5616 </h3></div></div></div><a class="indexterm" name="id2556196"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5631</h3></div></div></div><a class="indexterm" name="id2562298"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56175632        This option allows you to specify a file containing a mapping of usernames from the clients to the server.
    56185633        This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
    … …  
    56705685        <code class="constant">fred</code> is remapped to <code class="constant">mary</code> then you will actually be connecting to
    56715686        \\server\mary and will need to supply a password suitable for <code class="constant">mary</code> not
    5672         <code class="constant">fred</code>. The only exception to this is the username passed to the <a class="link" href="smb.conf.5.html#PASSWORDSERVER">password server</a> (if you have one). The password server will receive whatever username the client
     5687        <code class="constant">fred</code>. The only exception to this is the username passed to the <a class="link" href="smb.conf.5.html#PASSWORDSERVER" target="_top">password server</a> (if you have one). The password server will receive whatever username the client
    56735688        supplies without  modification.
    56745689    </p><p>
    … …  
    56985713# no username map</code>
    56995714</em></span>
    5700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556476"></a>
     5715</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562576"></a>
    57015716
    57025717<a name="USER"></a>user
    5703 </h3></div></div></div><a class="indexterm" name="id2556477"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556508"></a>
     5718</h3></div></div></div><a class="indexterm" name="id2562578"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562608"></a>
    57045719
    57055720<a name="USERS"></a>users
    5706 </h3></div></div></div><a class="indexterm" name="id2556509"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556539"></a>
     5721</h3></div></div></div><a class="indexterm" name="id2562610"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562640"></a>
    57075722
    57085723username (S)
    5709 </h3></div></div></div><a class="indexterm" name="id2556540"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
     5724</h3></div></div></div><a class="indexterm" name="id2562641"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
    57105725    list, in which case the supplied password will be tested against
    57115726    each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when
    … …  
    57265741    telnet session. The daemon runs as the user that they log in as,
    57275742    so they cannot do anything that user cannot do.</p><p>To restrict a service to a particular set of users you
    5728     can use the <a class="link" href="smb.conf.5.html#VALIDUSERS">valid users</a> parameter.</p><p>If any of the usernames begin with a '@' then the name
     5743    can use the <a class="link" href="smb.conf.5.html#VALIDUSERS" target="_top">valid users</a> parameter.</p><p>If any of the usernames begin with a '@' then the name
    57295744    will be looked up first in the NIS netgroups list (if Samba
    57305745    is compiled with netgroup support), followed by a lookup in
    … …  
    57455760</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code>
    57465761</em></span>
    5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556709"></a>
     5762</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562810"></a>
    57485763
    57495764usershare allow guests (G)
    5750 </h3></div></div></div><a class="indexterm" name="id2556710"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
     5765</h3></div></div></div><a class="indexterm" name="id2562812"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
    57515766        to be accessed by non-authenticated users or not. It is the equivalent
    57525767        of allowing people who can create a share the option of setting
    … …  
    57555770        is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code>
    57565771</em></span>
    5757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556762"></a>
     5772</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562863"></a>
    57585773
    57595774usershare max shares (G)
    5760 </h3></div></div></div><a class="indexterm" name="id2556763"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
     5775</h3></div></div></div><a class="indexterm" name="id2562864"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
    57615776        that are allowed to be created by users belonging to the group owning the
    57625777        usershare directory. If set to zero (the default) user defined shares are ignored.
    57635778        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code>
    57645779</em></span>
    5765 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556808"></a>
     5780</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562908"></a>
    57665781
    57675782usershare owner only (G)
    5768 </h3></div></div></div><a class="indexterm" name="id2556809"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
     5783</h3></div></div></div><a class="indexterm" name="id2562909"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
    57695784        a user defined shares must be owned by the user creating the
    57705785        user defined share or not. If set to True (the default) then
    … …  
    57765791        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code>
    57775792</em></span>
    5778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556857"></a>
     5793</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562958"></a>
    57795794
    57805795usershare path (G)
    5781 </h3></div></div></div><a class="indexterm" name="id2556858"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
     5796</h3></div></div></div><a class="indexterm" name="id2562959"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
    57825797        filesystem used to store the user defined share definition files.
    57835798        This directory must be owned by root, and have no access for
    … …  
    58005815        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code>
    58015816</em></span>
    5802 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556928"></a>
     5817</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563029"></a>
    58035818
    58045819usershare prefix allow list (G)
    5805 </h3></div></div></div><a class="indexterm" name="id2556929"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     5820</h3></div></div></div><a class="indexterm" name="id2563030"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    58065821        the root of which are allowed to be exported by user defined share definitions.
    58075822        If the pathname exported doesn't start with one of the strings in this
    … …  
    58185833</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code>
    58195834</em></span>
    5820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557001"></a>
     5835</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563102"></a>
    58215836
    58225837usershare prefix deny list (G)
    5823 </h3></div></div></div><a class="indexterm" name="id2557002"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     5838</h3></div></div></div><a class="indexterm" name="id2563103"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    58245839        the root of which are NOT allowed to be exported by user defined share definitions.
    58255840        If the pathname exported starts with one of the strings in this
    … …  
    58375852</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code>
    58385853</em></span>
    5839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557076"></a>
     5854</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563176"></a>
    58405855
    58415856usershare template share (G)
    5842 </h3></div></div></div><a class="indexterm" name="id2557077"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
     5857</h3></div></div></div><a class="indexterm" name="id2563177"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
    58435858        such as path, guest ok etc. This parameter allows usershares to
    58445859        "cloned" from an existing share. If "usershare template share"
    … …  
    58555870</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code>
    58565871</em></span>
    5857 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557148"></a>
     5872</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563249"></a>
    58585873
    58595874use sendfile (S)
    5860 </h3></div></div></div><a class="indexterm" name="id2557149"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
     5875</h3></div></div></div><a class="indexterm" name="id2563250"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
    58615876    system call is supported by the underlying operating system, then some SMB read calls
    58625877    (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
    … …  
    58675882    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code>
    58685883</em></span>
    5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557205"></a>
     5884</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563307"></a>
    58705885
    58715886use spnego (G)
    5872 </h3></div></div></div><a class="indexterm" name="id2557206"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
     5887</h3></div></div></div><a class="indexterm" name="id2563308"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
    58735888    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    58745889    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
    … …  
    58785893        disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code>
    58795894</em></span>
    5880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557255"></a>
     5895</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563356"></a>
    58815896
    58825897utmp directory (G)
    5883 </h3></div></div></div><a class="indexterm" name="id2557256"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
     5898</h3></div></div></div><a class="indexterm" name="id2563357"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
    58845899        been configured and compiled with the option <code class="literal">
    58855900        --with-utmp</code>. It specifies a directory pathname that is
    … …  
    58935908</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code>
    58945909</em></span>
    5895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557333"></a>
     5910</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563434"></a>
    58965911
    58975912utmp (G)
    5898 </h3></div></div></div><a class="indexterm" name="id2557334"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5913</h3></div></div></div><a class="indexterm" name="id2563435"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    58995914        This boolean parameter is only available if Samba has been configured and compiled 
    59005915        with the option <code class="literal">--with-utmp</code>. If set to
    … …  
    59085923        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code>
    59095924</em></span>
    5910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557396"></a>
     5925</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563497"></a>
    59115926
    59125927valid users (S)
    5913 </h3></div></div></div><a class="indexterm" name="id2557397"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5928</h3></div></div></div><a class="indexterm" name="id2563498"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59145929    This is a list of users that should be allowed to login to this service. Names starting with
    59155930    '@', '+' and  '&amp;' are interpreted using the same rules as described in the
    … …  
    59275942</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code>
    59285943</em></span>
    5929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557487"></a>
     5944</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563588"></a>
    59305945
    59315946-valid (S)
    5932 </h3></div></div></div><a class="indexterm" name="id2557488"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
     5947</h3></div></div></div><a class="indexterm" name="id2563589"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
    59335948        valid and thus can be used. When this parameter is set to false,
    59345949        the share will be in no way visible nor accessible.
    … …  
    59395954        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code>
    59405955</em></span>
    5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557536"></a>
     5956</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563638"></a>
    59425957
    59435958veto files (S)
    5944 </h3></div></div></div><a class="indexterm" name="id2557537"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5959</h3></div></div></div><a class="indexterm" name="id2563639"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59455960        This is a list of files and directories that are neither visible nor accessible.  Each entry in
    59465961        the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
    … …  
    59505965        unix directory  separator '/'.
    59515966        </p><p>
    5952         Note that the <a class="link" href="smb.conf.5.html#CASESENSITIVE">case sensitive</a> option is applicable in vetoing files.
     5967        Note that the <a class="link" href="smb.conf.5.html#CASESENSITIVE" target="_top">case sensitive</a> option is applicable in vetoing files.
    59535968        </p><p>
    59545969        One feature of the veto files parameter that it is important to be aware of is Samba's behaviour when
    59555970        trying to delete a directory. If a directory that is to be deleted contains nothing but veto files this
    5956         deletion will <span class="emphasis"><em>fail</em></span> unless you also set the <a class="link" href="smb.conf.5.html#DELETEVETOFILES">delete veto files</a>
     5971        deletion will <span class="emphasis"><em>fail</em></span> unless you also set the <a class="link" href="smb.conf.5.html#DELETEVETOFILES" target="_top">delete veto files</a>
    59575972        parameter to <em class="parameter"><code>yes</code></em>.
    59585973        </p><p>
    … …  
    59735988        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code>
    59745989</em></span>
    5975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557655"></a>
     5990</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563757"></a>
    59765991
    59775992veto oplock files (S)
    5978 </h3></div></div></div><a class="indexterm" name="id2557656"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    5979         This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS">oplocks</a>
     5993</h3></div></div></div><a class="indexterm" name="id2563758"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5994        This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    59805995        parameter is turned on for a share. It allows the Samba administrator
    59815996        to selectively turn off the granting of oplocks on selected files that
    59825997        match a wildcarded list, similar to the wildcarded list used in the
    5983         <a class="link" href="smb.conf.5.html#VETOFILES">veto files</a> parameter.
     5998        <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a> parameter.
    59845999        </p><p>
    59856000        You might want to do this on files that you know will be heavily contended
    … …  
    59976012# No files are vetoed for oplock grants</code>
    59986013</em></span>
    5999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557748"></a>
     6014</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563850"></a>
    60006015
    60016016<a name="VFSOBJECT"></a>vfs object
    6002 </h3></div></div></div><a class="indexterm" name="id2557749"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557780"></a>
     6017</h3></div></div></div><a class="indexterm" name="id2563851"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563882"></a>
    60036018
    60046019vfs objects (S)
    6005 </h3></div></div></div><a class="indexterm" name="id2557781"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
     6020</h3></div></div></div><a class="indexterm" name="id2563883"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
    60066021        are used for Samba VFS I/O operations.  By default, normal
    60076022        disk I/O operations are used but these can be overloaded
    … …  
    60106025</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code>
    60116026</em></span>
    6012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557840"></a>
     6027</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563942"></a>
    60136028
    60146029volume (S)
    6015 </h3></div></div></div><a class="indexterm" name="id2557841"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
     6030</h3></div></div></div><a class="indexterm" name="id2563943"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
    60166031        returned for a share. Useful for CDROMs with installation programs
    60176032        that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal">
    60186033# the name of the share</code>
    60196034</em></span>
    6020 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557884"></a>
     6035</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563985"></a>
    60216036
    60226037wide links (S)
    6023 </h3></div></div></div><a class="indexterm" name="id2557885"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
     6038</h3></div></div></div><a class="indexterm" name="id2563986"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
    60246039        in the UNIX file system may be followed by the server. Links
    60256040        that point to areas within the directory tree exported by the
    … …  
    60296044        that Samba has to  do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code>
    60306045</em></span>
    6031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557936"></a>
     6046</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564038"></a>
    60326047
    60336048winbind cache time (G)
    6034 </h3></div></div></div><a class="indexterm" name="id2557937"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6049</h3></div></div></div><a class="indexterm" name="id2564039"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    60356050        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache
    60366051        user and group information before querying a Windows NT server
    60376052        again.</p><p>
    60386053        This does not apply to authentication requests, these are always
    6039         evaluated in real time unless the <a class="link" href="smb.conf.5.html#WINBINDOFFLINELOGON">winbind   offline logon</a> option has been enabled.
     6054        evaluated in real time unless the <a class="link" href="smb.conf.5.html#WINBINDOFFLINELOGON" target="_top">winbind   offline logon</a> option has been enabled.
    60406055        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code>
    60416056</em></span>
    6042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558007"></a>
     6057</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564109"></a>
    60436058
    60446059winbind enum groups (G)
    6045 </h3></div></div></div><a class="indexterm" name="id2558008"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
     6060</h3></div></div></div><a class="indexterm" name="id2564110"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
    60466061        the enumeration of groups through the <code class="literal">setgrent()</code>,
    60476062        <code class="literal">getgrent()</code> and
    … …  
    60516066        call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
    60526067</em></span>
    6053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558098"></a>
     6068</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564200"></a>
    60546069
    60556070winbind enum users (G)
    6056 </h3></div></div></div><a class="indexterm" name="id2558099"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
     6071</h3></div></div></div><a class="indexterm" name="id2564201"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
    60576072        necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>,
    60586073         <code class="literal">getpwent()</code> and
    … …  
    60666081        usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code>
    60676082</em></span>
    6068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558191"></a>
     6083</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564293"></a>
    60696084
    60706085winbind expand groups (G)
    6071 </h3></div></div></div><a class="indexterm" name="id2558192"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
     6086</h3></div></div></div><a class="indexterm" name="id2564294"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
    60726087              will traverse when flattening nested group memberships
    60736088              of Windows domain groups.  This is different from the
    6074               <a class="link" href="smb.conf.5.html#WINBINDNESTEDGROUPS">winbind nested groups</a> option
     6089              <a class="link" href="smb.conf.5.html#WINBINDNESTEDGROUPS" target="_top">winbind nested groups</a> option
    60756090              which implements the Windows NT4 model of local group
    60766091              nesting.  The "winbind expand groups"
    … …  
    60816096         incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code>
    60826097</em></span>
    6083 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558260"></a>
     6098</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564362"></a>
    60846099
    60856100winbind nested groups (G)
    6086 </h3></div></div></div><a class="indexterm" name="id2558261"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
     6101</h3></div></div></div><a class="indexterm" name="id2564363"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
    60876102                 groups. Nested groups are also called local groups or
    60886103                 aliases. They work like their counterparts in Windows: Nested
    … …  
    60926107                 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code>
    60936108</em></span>
    6094 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558309"></a>
     6109</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564412"></a>
    60956110
    60966111winbind normalize names (G)
    6097 </h3></div></div></div><a class="indexterm" name="id2558310"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
     6112</h3></div></div></div><a class="indexterm" name="id2564413"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
    60986113        whitespace in user and group names with an underscore (_) character.
    60996114        For example, whether the name "Space Kadet" should be
    … …  
    61076122</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code>
    61086123</em></span>
    6109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558376"></a>
     6124</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564478"></a>
    61106125
    61116126winbind nss info (G)
    6112 </h3></div></div></div><a class="indexterm" name="id2558377"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
     6127</h3></div></div></div><a class="indexterm" name="id2564479"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
    61136128        Service Information to construct a user's home directory and login shell.
    61146129        Currently the following settings are available:
    … …  
    61326147</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code>
    61336148</em></span>
    6134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558495"></a>
     6149</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564598"></a>
    61356150
    61366151winbind offline logon (G)
    6137 </h3></div></div></div><a class="indexterm" name="id2558496"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
     6152</h3></div></div></div><a class="indexterm" name="id2564599"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
    61386153        allow to login with the <em class="parameter"><code>pam_winbind</code></em>
    61396154        module using Cached Credentials. If enabled, winbindd will store user credentials
    … …  
    61436158</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code>
    61446159</em></span>
    6145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558564"></a>
     6160</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564667"></a>
    61466161
    61476162winbind refresh tickets (G)
    6148 </h3></div></div></div><a class="indexterm" name="id2558565"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
     6163</h3></div></div></div><a class="indexterm" name="id2564668"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
    61496164        retrieved using the <em class="parameter"><code>pam_winbind</code></em> module.
    61506165
    … …  
    61536168</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code>
    61546169</em></span>
    6155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558631"></a>
     6170</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564733"></a>
    61566171
    61576172winbind rpc only (G)
    6158 </h3></div></div></div><a class="indexterm" name="id2558632"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6173</h3></div></div></div><a class="indexterm" name="id2564734"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    61596174        Setting this parameter to <code class="literal">yes</code> forces
    61606175        winbindd to use RPC instead of LDAP to retrieve information from Domain
    … …  
    61626177        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code>
    61636178</em></span>
    6164 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558680"></a>
     6179</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564782"></a>
    61656180
    61666181winbind separator (G)
    6167 </h3></div></div></div><a class="indexterm" name="id2558681"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
     6182</h3></div></div></div><a class="indexterm" name="id2564783"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
    61686183        used when listing a username of the form of <em class="replaceable"><code>DOMAIN
    61696184        </code></em>\<em class="replaceable"><code>user</code></em>.  This parameter
    … …  
    61766191</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code>
    61776192</em></span>
    6178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558767"></a>
     6193</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564869"></a>
    61796194
    61806195winbind trusted domains only (G)
    6181 </h3></div></div></div><a class="indexterm" name="id2558768"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6196</h3></div></div></div><a class="indexterm" name="id2564870"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    61826197        This parameter is designed to allow Samba servers that are members
    61836198        of a Samba controlled domain to use UNIX accounts distributed via NIS,
    … …  
    61876202        </p><p>
    61886203        This parameter is now deprecated in favor of the newer idmap_nss backend.
    6189         Refer to the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS">idmap domains</a> smb.conf option and
     6204        Refer to the <a class="link" href="smb.conf.5.html#IDMAPDOMAINS" target="_top">idmap domains</a> smb.conf option and
    61906205        the <a class="citerefentry" href="idmap_nss.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_nss</span>(8)</span></a> man page for more information.
    61916206        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code>
    61926207</em></span>
    6193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558846"></a>
     6208</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564948"></a>
    61946209
    61956210winbind use default domain (G)
    6196 </h3></div></div></div><a class="indexterm" name="id2558847"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
     6211</h3></div></div></div><a class="indexterm" name="id2564949"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
    61976212         <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 
    61986213        without domain component in their username. Users without a domain
    … …  
    62046219</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code>
    62056220</em></span>
    6206 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558919"></a>
     6221</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565021"></a>
    62076222
    62086223wins hook (G)
    6209 </h3></div></div></div><a class="indexterm" name="id2558920"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
     6224</h3></div></div></div><a class="indexterm" name="id2565022"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
    62106225        allows you to call an external program for all changes to the
    62116226        WINS database. The primary use for this option is to allow the
    … …  
    62286243                        empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update
    62296244        program <code class="literal">nsupdate</code> is provided in the examples
    6230         directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559025"></a>
     6245        directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565127"></a>
    62316246
    62326247wins proxy (G)
    6233 </h3></div></div></div><a class="indexterm" name="id2559026"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
     6248</h3></div></div></div><a class="indexterm" name="id2565128"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
    62346249        queries on behalf of  other hosts. You may need to set this
    62356250        to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code>
    62366251</em></span>
    6237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559080"></a>
     6252</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565182"></a>
    62386253
    62396254wins server (G)
    6240 </h3></div></div></div><a class="indexterm" name="id2559081"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
     6255</h3></div></div></div><a class="indexterm" name="id2565183"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
    62416256        address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on
    62426257        your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a
    … …  
    62576272</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code>
    62586273</em></span>
    6259 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559190"></a>
     6274</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565292"></a>
    62606275
    62616276wins support (G)
    6262 </h3></div></div></div><a class="indexterm" name="id2559191"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
     6277</h3></div></div></div><a class="indexterm" name="id2565294"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
    62636278        not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and
    62646279        you wish a particular <code class="literal">nmbd</code> to be your WINS server.
    … …  
    62666281        on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code>
    62676282</em></span>
    6268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559260"></a>
     6283</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565362"></a>
    62696284
    62706285workgroup (G)
    6271 </h3></div></div></div><a class="indexterm" name="id2559261"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
     6286</h3></div></div></div><a class="indexterm" name="id2565363"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
    62726287        appear to be in when queried by clients. Note that this parameter
    62736288        also controls the Domain name used with
    6274         the <a class="link" href="smb.conf.5.html#SECURITY">security = domain</a>
     6289        the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a>
    62756290                setting.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">WORKGROUP</code>
    62766291</em></span>
    62776292</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code>
    62786293</em></span>
    6279 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559332"></a>
     6294</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565434"></a>
    62806295
    62816296<a name="WRITABLE"></a>writable
    6282 </h3></div></div></div><a class="indexterm" name="id2559333"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559363"></a>
     6297</h3></div></div></div><a class="indexterm" name="id2565435"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565466"></a>
    62836298
    62846299writeable (S)
    6285 </h3></div></div></div><a class="indexterm" name="id2559364"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
    6286 </em></span>
    6287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559414"></a>
     6300</h3></div></div></div><a class="indexterm" name="id2565467"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
     6301</em></span>
     6302</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565517"></a>
    62886303
    62896304write cache size (S)
    6290 </h3></div></div></div><a class="indexterm" name="id2559415"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
     6305</h3></div></div></div><a class="indexterm" name="id2565518"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
    62916306    Samba will create an in-memory cache for each oplocked file
    62926307    (it does <span class="emphasis"><em>not</em></span> do this for
    … …  
    63066321#  for a 256k cache size per file</code>
    63076322</em></span>
    6308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559497"></a>
     6323</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565600"></a>
    63096324
    63106325write list (S)
    6311 </h3></div></div></div><a class="indexterm" name="id2559498"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6326</h3></div></div></div><a class="indexterm" name="id2565601"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63126327    This is a list of users that are given read-write access to a service. If the
    63136328    connecting user is in this list then they will be given write access, no matter
    6314     what the <a class="link" href="smb.conf.5.html#READONLY">read only</a> option is set to. The list can
     6329    what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set to. The list can
    63156330    include group names using the @group syntax.
    63166331    </p><p>
    … …  
    63196334    </p><p>
    63206335    By design, this parameter will not work with the
    6321     <a class="link" href="smb.conf.5.html#SECURITY">security = share</a> in Samba 3.0.
     6336    <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = share</a> in Samba 3.0.
    63226337    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal"></code>
    63236338</em></span>
    63246339</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code>
    63256340</em></span>
    6326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559591"></a>
     6341</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565694"></a>
    63276342
    63286343write raw (G)
    6329 </h3></div></div></div><a class="indexterm" name="id2559592"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     6344</h3></div></div></div><a class="indexterm" name="id2565695"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    63306345    will support raw write SMB's when transferring data from clients.
    63316346    You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code>
    63326347</em></span>
    6333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559634"></a>
     6348</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565738"></a>
    63346349
    63356350wtmp directory (G)
    6336 </h3></div></div></div><a class="indexterm" name="id2559635"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6351</h3></div></div></div><a class="indexterm" name="id2565739"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63376352        This parameter is only available if Samba has been configured and compiled with the option <code class="literal">
    63386353        --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
    … …  
    63466361</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code>
    63476362</em></span>
    6348 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2559718"></a><h2>WARNINGS</h2><p>
     6363</p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2565821"></a><h2>WARNINGS</h2><p>
    63496364        Although the configuration file permits service names to contain spaces, your client software may not.
    63506365        Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
    … …  
    63596374        care when designing these sections. In particular, ensure that the permissions on spool directories are
    63606375        correct.
    6361         </p></div><div class="refsect1" lang="en"><a name="id2559768"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2559779"></a><h2>SEE ALSO</h2><p>
    6362         <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2559858"></a><h2>AUTHOR</h2><p>
     6376        </p></div><div class="refsect1" lang="en"><a name="id2565871"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2565882"></a><h2>SEE ALSO</h2><p>
     6377        <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2565962"></a><h2>AUTHOR</h2><p>
    63636378        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
    63646379        by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note: See TracChangeset for help on using the changeset viewer.