- Timestamp:
- May 27, 2009, 11:39:15 AM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.2.x/docs/htmldocs/manpages/smb.conf.5.html
r231 r233 388 388 discovered at close time, which is too late for the Windows user tools to display an error message 389 389 to the user. The symptom of this is files that appear to have been deleted "magically" re-appearing 390 on a Windows explorer ref ersh. This is an extremely advanced protocol option which should not390 on a Windows explorer refresh. This is an extremely advanced protocol option which should not 391 391 need to be changed. This parameter was introduced in its final form in 3.0.21, an earlier version 392 392 with slightly different semantics was introduced in 3.0.20. That older version is not documented here. … … 952 952 weaker LANMAN password hash. If disabled, only server which support NT 953 953 password hashes (e.g. Windows NT/2000, Samba, etc... but not 954 Windows 95/98) will be able to be connected from the Samba client.</p><p>The LANMAN encrypted response is easily broken, due to it 's954 Windows 95/98) will be able to be connected from the Samba client.</p><p>The LANMAN encrypted response is easily broken, due to its 955 955 case-insensitive nature, and the choice of algorithm. Clients 956 956 without Windows 95/98 servers are advised to disable 957 this option. </p><p>Disabling this option will also disable the <code class="literal">client plaintext auth</code> option </p><p>Likewise, if the <code class="literal">client ntlmv2957 this option. </p><p>Disabling this option will also disable the <code class="literal">client plaintext auth</code> option.</p><p>Likewise, if the <code class="literal">client ntlmv2 958 958 auth</code> parameter is enabled, then only NTLMv2 logins will be 959 959 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code> … … 1027 1027 1028 1028 client signing (G) 1029 </h3></div></div></div><a class="indexterm" name="id2537122"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client offers or requires 1030 the server it talks to to use SMB signing. Possible values 1029 </h3></div></div></div><a class="indexterm" name="id2537122"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 1031 1030 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 1032 1031 and <span class="emphasis"><em>disabled</em></span>. … … 1036 1035 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 1037 1036 </em></span> 1038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253717 6"></a>1037 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537175"></a> 1039 1038 1040 1039 client use spnego (G) 1041 </h3></div></div></div><a class="indexterm" name="id253717 7"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try1040 </h3></div></div></div><a class="indexterm" name="id2537176"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 1042 1041 to use Simple and Protected NEGOciation (as specified by rfc2478) with 1043 1042 supporting servers (including WindowsXP, Windows2000 and Samba … … 1045 1044 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 1046 1045 </em></span> 1047 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253721 8"></a>1046 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537217"></a> 1048 1047 1049 1048 cluster addresses (G) 1050 </h3></div></div></div><a class="indexterm" name="id253721 9"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses1049 </h3></div></div></div><a class="indexterm" name="id2537218"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses 1051 1050 nmbd will register with a WINS server. These addresses are not 1052 1051 necessarily present on all nodes simultaneously, but they will … … 1057 1056 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code> 1058 1057 </em></span> 1059 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253727 4"></a>1058 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537273"></a> 1060 1059 1061 1060 clustering (G) 1062 </h3></div></div></div><a class="indexterm" name="id253727 5"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact1061 </h3></div></div></div><a class="indexterm" name="id2537274"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact 1063 1062 ctdb for accessing its tdb files and use ctdb as a backend 1064 1063 for its messaging backend. … … 1070 1069 1071 1070 comment (S) 1072 </h3></div></div></div><a class="indexterm" name="id253732 4"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share1071 </h3></div></div></div><a class="indexterm" name="id2537323"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 1073 1072 when a client does a queries the server, either via the network 1074 1073 neighborhood or via <code class="literal">net view</code> to list what shares … … 1079 1078 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 1080 1079 </em></span> 1081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253739 7"></a>1080 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537396"></a> 1082 1081 1083 1082 config backend (G) 1084 </h3></div></div></div><a class="indexterm" name="id253739 8"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>1083 </h3></div></div></div><a class="indexterm" name="id2537397"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1085 1084 This controls the backend for storing the configuration. 1086 1085 Possible values are <span class="emphasis"><em>file</em></span> (the default) … … 1153 1152 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 1154 1153 </em></span> 1155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253776 2"></a>1154 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537761"></a> 1156 1155 1157 1156 csc policy (S) 1158 </h3></div></div></div><a class="indexterm" name="id253776 3"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>1157 </h3></div></div></div><a class="indexterm" name="id2537762"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 1159 1158 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 1160 1159 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 1247 1246 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code> 1248 1247 </em></span> 1249 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253822 2"></a>1248 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538221"></a> 1250 1249 1251 1250 debug hires timestamp (G) 1252 </h3></div></div></div><a class="indexterm" name="id253822 3"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1251 </h3></div></div></div><a class="indexterm" name="id2538222"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1253 1252 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 1254 1253 boolean parameter adds microsecond resolution to the timestamp message header when turned on. … … 1279 1278 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 1280 1279 </em></span> 1281 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253840 2"></a>1280 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538401"></a> 1282 1281 1283 1282 <a name="TIMESTAMPLOGS"></a>timestamp logs 1284 </h3></div></div></div><a class="indexterm" name="id253840 3"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538429"></a>1283 </h3></div></div></div><a class="indexterm" name="id2538402"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538428"></a> 1285 1284 1286 1285 debug timestamp (G) 1287 </h3></div></div></div><a class="indexterm" name="id25384 30"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1286 </h3></div></div></div><a class="indexterm" name="id2538429"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1288 1287 Samba debug log messages are timestamped by default. If you are running at a high 1289 1288 <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This … … 1291 1290 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 1292 1291 </em></span> 1293 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253847 7"></a>1292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538476"></a> 1294 1293 1295 1294 debug uid (G) … … 1301 1300 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 1302 1301 </em></span> 1303 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253853 1"></a>1302 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538530"></a> 1304 1303 1305 1304 default case (S) 1306 </h3></div></div></div><a class="indexterm" name="id253853 2"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.1305 </h3></div></div></div><a class="indexterm" name="id2538531"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. 1307 1306 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1308 1307 </em></span> 1309 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253858 5"></a>1308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538584"></a> 1310 1309 1311 1310 default devmode (S) 1312 </h3></div></div></div><a class="indexterm" name="id253858 6"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.1311 </h3></div></div></div><a class="indexterm" name="id2538585"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services. 1313 1312 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 1314 1313 server has a Device Mode which defines things such as paper size and … … 1333 1332 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 1334 1333 </em></span> 1335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253867 3"></a>1334 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538672"></a> 1336 1335 1337 1336 <a name="DEFAULT"></a>default 1338 </h3></div></div></div><a class="indexterm" name="id253867 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538700"></a>1337 </h3></div></div></div><a class="indexterm" name="id2538673"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538699"></a> 1339 1338 1340 1339 default service (G) 1341 </h3></div></div></div><a class="indexterm" name="id253870 1"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service1340 </h3></div></div></div><a class="indexterm" name="id2538700"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 1342 1341 which will be connected to if the service actually requested cannot 1343 1342 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 1399 1398 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1400 1399 </em></span> 1401 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25390 40"></a>1400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539039"></a> 1402 1401 1403 1402 delete readonly (S) 1404 </h3></div></div></div><a class="indexterm" name="id253904 1"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted.1403 </h3></div></div></div><a class="indexterm" name="id2539040"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1405 1404 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1406 1405 as rcs, where UNIX file ownership prevents changing file 1407 1406 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1408 1407 </em></span> 1409 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253908 5"></a>1408 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539084"></a> 1410 1409 1411 1410 delete share command (G) … … 1436 1435 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1437 1436 </em></span> 1438 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253923 7"></a>1437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539236"></a> 1439 1438 1440 1439 delete user from group script (G) 1441 </h3></div></div></div><a class="indexterm" name="id253923 8"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when1440 </h3></div></div></div><a class="indexterm" name="id2539237"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1442 1441 a user is removed from a group using the Windows NT domain administration 1443 1442 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. … … 1460 1459 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1461 1460 </em></span> 1462 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253939 3"></a>1461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539392"></a> 1463 1462 1464 1463 delete veto files (S) … … 1537 1536 1538 1537 <a name="DIRECTORYMODE"></a>directory mode 1539 </h3></div></div></div><a class="indexterm" name="id253967 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539699"></a>1538 </h3></div></div></div><a class="indexterm" name="id2539673"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539699"></a> 1540 1539 1541 1540 directory mask (S) … … 1558 1557 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1559 1558 </em></span> 1560 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id253980 5"></a>1559 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539804"></a> 1561 1560 1562 1561 directory security mask (S) 1563 </h3></div></div></div><a class="indexterm" name="id253980 6"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits1562 </h3></div></div></div><a class="indexterm" name="id2539805"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1564 1563 will be set when a Windows NT client is manipulating the UNIX 1565 1564 permission on a directory using the native NT security dialog … … 1617 1616 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1618 1617 </em></span> 1619 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254006 9"></a>1618 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540068"></a> 1620 1619 1621 1620 dmapi support (S) 1622 </h3></div></div></div><a class="indexterm" name="id25400 70"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to1621 </h3></div></div></div><a class="indexterm" name="id2540069"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1623 1622 determine whether a file is offline or not. This would typically 1624 1623 be used in conjunction with a hierarchical storage system that … … 1635 1634 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1636 1635 </em></span> 1637 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254012 8"></a>1636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540127"></a> 1638 1637 1639 1638 dns proxy (G) 1640 </h3></div></div></div><a class="indexterm" name="id254012 9"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and1639 </h3></div></div></div><a class="indexterm" name="id2540128"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1641 1640 finding that a NetBIOS name has not been registered, should treat the 1642 1641 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1663 1662 1664 1663 domain master (G) 1665 </h3></div></div></div><a class="indexterm" name="id254024 6"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>1664 </h3></div></div></div><a class="indexterm" name="id2540245"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1666 1665 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1667 1666 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a … … 1689 1688 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1690 1689 </em></span> 1691 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254043 6"></a>1690 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540435"></a> 1692 1691 1693 1692 dont descend (S) 1694 </h3></div></div></div><a class="indexterm" name="id254043 7"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems1693 </h3></div></div></div><a class="indexterm" name="id2540436"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1695 1694 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1696 1695 of interest to clients or are infinitely deep (recursive). This … … 1703 1702 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1704 1703 </em></span> 1705 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254051 4"></a>1704 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540513"></a> 1706 1705 1707 1706 dos charset (G) 1708 </h3></div></div></div><a class="indexterm" name="id254051 5"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has1707 </h3></div></div></div><a class="indexterm" name="id2540514"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1709 1708 the same charset as they do. This option specifies which 1710 1709 charset Samba should talk to DOS clients. 1711 1710 </p><p>The default depends on which charsets you have installed. 1712 1711 Samba tries to use charset 850 but falls back to ASCII in 1713 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254055 5"></a>1712 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540554"></a> 1714 1713 1715 1714 dos filemode (S) … … 1725 1724 file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1726 1725 </em></span> 1727 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254060 2"></a>1726 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540601"></a> 1728 1727 1729 1728 dos filetime resolution (S) 1730 </h3></div></div></div><a class="indexterm" name="id254060 3"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest1729 </h3></div></div></div><a class="indexterm" name="id2540602"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1731 1730 granularity on time resolution is two seconds. Setting this parameter 1732 1731 for a share causes Samba to round the reported time down to the … … 1760 1759 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1761 1760 </em></span> 1762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254073 1"></a>1761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540730"></a> 1763 1762 1764 1763 ea support (S) 1765 </h3></div></div></div><a class="indexterm" name="id254073 2"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended1764 </h3></div></div></div><a class="indexterm" name="id2540731"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1766 1765 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1767 1766 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1774 1773 enable asu support (G) 1775 1774 </h3></div></div></div><a class="indexterm" name="id2540785"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1776 require some special accomodations such as creating a builtin g[ADMIN$]1775 require some special accomodations such as creating a builtin [ADMIN$] 1777 1776 share that only supports IPC connections. The has been the default 1778 1777 behavior in smbd for many years. However, certain Microsoft applications … … 1781 1780 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1782 1781 </em></span> 1783 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254082 9"></a>1782 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540828"></a> 1784 1783 1785 1784 enable privileges (G) 1786 </h3></div></div></div><a class="indexterm" name="id25408 30"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>1785 </h3></div></div></div><a class="indexterm" name="id2540829"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1787 1786 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1788 1787 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1823 1822 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1824 1823 </em></span> 1825 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254099 4"></a>1824 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540993"></a> 1826 1825 1827 1826 enhanced browsing (G) 1828 </h3></div></div></div><a class="indexterm" name="id254099 5"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to1827 </h3></div></div></div><a class="indexterm" name="id2540994"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1829 1828 cross-subnet browse propagation that have been added in Samba 1830 1829 but which are not standard in Microsoft implementations. … … 1835 1834 synchronization with all currently known DMBs.</p><p>You may wish to disable this option if you have a problem with empty 1836 1835 workgroups not disappearing from browse lists. Due to the restrictions 1837 of the browse protocols these enhancements can cause a empty workgroup1836 of the browse protocols, these enhancements can cause a empty workgroup 1838 1837 to stay around forever which can be annoying.</p><p>In general you should leave this option enabled as it makes 1839 1838 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> … … 1859 1858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 1860 1859 </em></span> 1861 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254113 6"></a>1860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541135"></a> 1862 1861 1863 1862 eventlog list (G) 1864 </h3></div></div></div><a class="indexterm" name="id254113 7"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will1863 </h3></div></div></div><a class="indexterm" name="id2541136"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 1865 1864 report to the Microsoft EventViewer utility. The listed 1866 1865 eventlogs will be associated with tdb file on disk in the … … 1875 1874 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 1876 1875 </em></span> 1877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254120 9"></a>1876 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541208"></a> 1878 1877 1879 1878 fake directory create times (S) … … 1900 1899 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 1901 1900 </em></span> 1902 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254128 5"></a>1901 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541284"></a> 1903 1902 1904 1903 fake oplocks (S) 1905 </h3></div></div></div><a class="indexterm" name="id254128 6"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission1904 </h3></div></div></div><a class="indexterm" name="id2541285"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 1906 1905 from a server to locally cache file operations. If a server grants 1907 1906 an oplock (opportunistic lock) then the client is free to assume … … 1919 1918 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 1920 1919 </em></span> 1921 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254136 9"></a>1920 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541368"></a> 1922 1921 1923 1922 follow symlinks (S) 1924 </h3></div></div></div><a class="indexterm" name="id25413 70"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>1923 </h3></div></div></div><a class="indexterm" name="id2541369"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1925 1924 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1926 1925 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being … … 1932 1931 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 1933 1932 </em></span> 1934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254143 9"></a>1933 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541438"></a> 1935 1934 1936 1935 force create mode (S) 1937 </h3></div></div></div><a class="indexterm" name="id25414 40"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1936 </h3></div></div></div><a class="indexterm" name="id2541439"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1938 1937 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1939 1938 file created by Samba. This is done by bitwise 'OR'ing these bits onto … … 1963 1962 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 1964 1963 </em></span> 1965 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254158 7"></a>1964 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541586"></a> 1966 1965 1967 1966 force directory security mode (S) 1968 </h3></div></div></div><a class="indexterm" name="id254158 8"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>1967 </h3></div></div></div><a class="indexterm" name="id2541587"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1969 1968 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 1970 1969 the UNIX permission on a directory using the native NT security dialog box. … … 2069 2068 2070 2069 force unknown acl user (S) 2071 </h3></div></div></div><a class="indexterm" name="id254200 2"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>2070 </h3></div></div></div><a class="indexterm" name="id2542001"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2072 2071 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 2073 2072 representation of a user or group id) as the owner or group owner of the file will be silently … … 2140 2139 2141 2140 guest account (G) 2142 </h3></div></div></div><a class="indexterm" name="id25424 70"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access2141 </h3></div></div></div><a class="indexterm" name="id2542469"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 2143 2142 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this 2144 2143 user has will be available to any client connecting to the guest service. … … 2171 2170 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 2172 2171 </em></span> 2173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254269 6"></a>2172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542695"></a> 2174 2173 2175 2174 <a name="ONLYGUEST"></a>only guest 2176 </h3></div></div></div><a class="indexterm" name="id254269 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542728"></a>2175 </h3></div></div></div><a class="indexterm" name="id2542696"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542728"></a> 2177 2176 2178 2177 guest only (S) 2179 </h3></div></div></div><a class="indexterm" name="id25427 30"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2178 </h3></div></div></div><a class="indexterm" name="id2542729"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2180 2179 a service, then only guest connections to the service are permitted. 2181 2180 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option. 2182 2181 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 2183 2182 </em></span> 2184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254280 1"></a>2183 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542800"></a> 2185 2184 2186 2185 hide dot files (S) 2187 </h3></div></div></div><a class="indexterm" name="id254280 2"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether2186 </h3></div></div></div><a class="indexterm" name="id2542801"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 2188 2187 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 2189 2188 </em></span> 2190 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254284 4"></a>2189 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542843"></a> 2191 2190 2192 2191 hide files (S) 2193 </h3></div></div></div><a class="indexterm" name="id254284 5"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not2192 </h3></div></div></div><a class="indexterm" name="id2542844"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 2194 2193 visible but are accessible. The DOS 'hidden' attribute is applied 2195 2194 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 2213 2212 # no file are hidden</code> 2214 2213 </em></span> 2215 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254293 2"></a>2214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542931"></a> 2216 2215 2217 2216 hide special files (S) 2218 </h3></div></div></div><a class="indexterm" name="id254293 3"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2217 </h3></div></div></div><a class="indexterm" name="id2542932"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2219 2218 This parameter prevents clients from seeing special files such as sockets, devices and 2220 2219 fifo's in directory listings. 2221 2220 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 2222 2221 </em></span> 2223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254297 5"></a>2222 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542974"></a> 2224 2223 2225 2224 hide unreadable (S) … … 2253 2252 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 2254 2253 </em></span> 2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254317 5"></a>2254 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543174"></a> 2256 2255 2257 2256 host msdfs (G) 2258 </h3></div></div></div><a class="indexterm" name="id254317 6"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>2257 </h3></div></div></div><a class="indexterm" name="id2543175"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2259 2258 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 2260 2259 Dfs trees hosted on the server. … … 2264 2263 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 2265 2264 </em></span> 2266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254323 9"></a>2265 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543238"></a> 2267 2266 2268 2267 hostname lookups (G) 2269 </h3></div></div></div><a class="indexterm" name="id25432 40"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)2268 </h3></div></div></div><a class="indexterm" name="id2543239"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 2270 2269 hostname lookups or use the ip addresses instead. An example place 2271 2270 where hostname lookups are currently used is when checking … … 2278 2277 2279 2278 <a name="ALLOWHOSTS"></a>allow hosts 2280 </h3></div></div></div><a class="indexterm" name="id254331 4"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543345"></a>2279 </h3></div></div></div><a class="indexterm" name="id2543313"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543344"></a> 2281 2280 2282 2281 hosts allow (S) 2283 </h3></div></div></div><a class="indexterm" name="id254334 6"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited2282 </h3></div></div></div><a class="indexterm" name="id2543345"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 2284 2283 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 2285 2284 apply to all services, regardless of whether the individual … … 2301 2300 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 2302 2301 </em></span> 2303 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254354 7"></a>2302 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543546"></a> 2304 2303 2305 2304 <a name="DENYHOSTS"></a>deny hosts … … 2336 2335 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 2337 2336 </em></span> 2338 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254377 9"></a>2337 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543778"></a> 2339 2338 2340 2339 idmap alloc config (G) 2341 </h3></div></div></div><a class="indexterm" name="id25437 80"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2340 </h3></div></div></div><a class="indexterm" name="id2543779"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2342 2341 The idmap alloc config prefix provides a means of managing settings 2343 2342 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a> … … 2422 2421 2423 2422 <a name="WINBINDGID"></a>winbind gid 2424 </h3></div></div></div><a class="indexterm" name="id2544184"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254421 6"></a>2423 </h3></div></div></div><a class="indexterm" name="id2544184"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544215"></a> 2425 2424 2426 2425 idmap gid (G) 2427 </h3></div></div></div><a class="indexterm" name="id254421 7"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids2426 </h3></div></div></div><a class="indexterm" name="id2544216"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 2428 2427 that are allocated for the purpose of mapping UNX groups to NT group 2429 2428 SIDs. This range of group ids should have no … … 2444 2443 2445 2444 <a name="WINBINDUID"></a>winbind uid 2446 </h3></div></div></div><a class="indexterm" name="id25443 60"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544390"></a>2445 </h3></div></div></div><a class="indexterm" name="id2544359"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544390"></a> 2447 2446 2448 2447 idmap uid (G) 2449 </h3></div></div></div><a class="indexterm" name="id254439 2"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>2448 </h3></div></div></div><a class="indexterm" name="id2544391"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 2450 2449 The idmap uid parameter specifies the range of user ids that are 2451 2450 allocated for use in mapping UNIX users to NT user SIDs. This … … 2456 2455 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 2457 2456 </em></span> 2458 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254448 8"></a>2457 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544487"></a> 2459 2458 2460 2459 include (G) 2461 </h3></div></div></div><a class="indexterm" name="id254448 9"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>2460 </h3></div></div></div><a class="indexterm" name="id2544488"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2462 2461 This allows you to include one config file inside another. The file is included literally, as though typed 2463 2462 in place. … … 2477 2476 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 2478 2477 </em></span> 2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254458 9"></a>2478 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544588"></a> 2480 2479 2481 2480 inherit acls (S) 2482 </h3></div></div></div><a class="indexterm" name="id25445 90"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls2481 </h3></div></div></div><a class="indexterm" name="id2544589"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 2483 2482 exist on parent directories, they are always honored when creating a 2484 2483 new file or subdirectory in these parent directories. The default … … 2488 2487 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 2489 2488 </em></span> 2490 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254463 6"></a>2489 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544635"></a> 2491 2490 2492 2491 inherit owner (S) 2493 </h3></div></div></div><a class="indexterm" name="id254463 7"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories2492 </h3></div></div></div><a class="indexterm" name="id2544636"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 2494 2493 is normally governed by effective uid of the connected user. 2495 2494 This option allows the Samba administrator to specify that … … 2500 2499 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 2501 2500 </em></span> 2502 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254468 9"></a>2501 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544688"></a> 2503 2502 2504 2503 inherit permissions (S) … … 2565 2564 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 2566 2565 </em></span> 2567 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254506 9"></a>2566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545068"></a> 2568 2567 2569 2568 iprint server (G) … … 2590 2589 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 2591 2590 </em></span> 2592 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254524 3"></a>2591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545242"></a> 2593 2592 2594 2593 kernel change notify (S) 2595 </h3></div></div></div><a class="indexterm" name="id254524 4"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the2594 </h3></div></div></div><a class="indexterm" name="id2545243"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 2596 2595 kernel for change notifications in directories so that 2597 2596 SMB clients can refresh whenever the data on the server changes. … … 2600 2599 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 2601 2600 </em></span> 2602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254529 3"></a>2601 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545292"></a> 2603 2602 2604 2603 kernel oplocks (G) 2605 </h3></div></div></div><a class="indexterm" name="id254529 4"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>2604 </h3></div></div></div><a class="indexterm" name="id2545293"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 2606 2605 (currently only IRIX and the Linux 2.4 kernel), this parameter 2607 2606 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks … … 2621 2620 password hashes (e.g. Windows NT/2000 clients, smbclient, but not 2622 2621 Windows 95/98 or the MS DOS network client) will be able to 2623 connect to the Samba host.</p><p>The LANMAN encrypted response is easily broken, due to it 's2622 connect to the Samba host.</p><p>The LANMAN encrypted response is easily broken, due to its 2624 2623 case-insensitive nature, and the choice of algorithm. Servers 2625 2624 without Windows 95/98/ME or MS DOS clients are advised to disable … … 2633 2632 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code> 2634 2633 </em></span> 2635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254547 4"></a>2634 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545473"></a> 2636 2635 2637 2636 large readwrite (G) 2638 </h3></div></div></div><a class="indexterm" name="id254547 5"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not2637 </h3></div></div></div><a class="indexterm" name="id2545474"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2639 2638 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2640 2639 streaming read and write varient SMB requests introduced with … … 2674 2673 2675 2674 ldap debug level (G) 2676 </h3></div></div></div><a class="indexterm" name="id254570 6"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>2675 </h3></div></div></div><a class="indexterm" name="id2545705"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2677 2676 This parameter controls the debug level of the LDAP library 2678 2677 calls. In the case of OpenLDAP, it is the same … … 2694 2693 2695 2694 ldap debug threshold (G) 2696 </h3></div></div></div><a class="indexterm" name="id254579 4"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>2695 </h3></div></div></div><a class="indexterm" name="id2545793"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2697 2696 This parameter controls the Samba debug level at which 2698 2697 the ldap library debug output is … … 2721 2720 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2722 2721 </em></span> 2723 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254598 8"></a>2722 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545987"></a> 2724 2723 2725 2724 ldap idmap suffix (G) 2726 </h3></div></div></div><a class="indexterm" name="id254598 9"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2725 </h3></div></div></div><a class="indexterm" name="id2545988"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2727 2726 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2728 2727 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix … … 2743 2742 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2744 2743 </em></span> 2745 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254615 3"></a>2744 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546152"></a> 2746 2745 2747 2746 ldap passwd sync (G) 2748 </h3></div></div></div><a class="indexterm" name="id254615 4"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>2747 </h3></div></div></div><a class="indexterm" name="id2546153"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2749 2748 This option is used to define whether or not Samba should sync the LDAP password with the NT 2750 2749 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password … … 2757 2756 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 2758 2757 </em></span> 2759 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254625 4"></a>2758 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546253"></a> 2760 2759 2761 2760 ldap replication sleep (G) 2762 </h3></div></div></div><a class="indexterm" name="id254625 5"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>2761 </h3></div></div></div><a class="indexterm" name="id2546254"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2763 2762 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 2764 2763 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 2906 2905 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 2907 2906 </em></span> 2908 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254679 8"></a>2907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546797"></a> 2909 2908 2910 2909 ldap timeout (G) 2911 </h3></div></div></div><a class="indexterm" name="id254679 9"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2910 </h3></div></div></div><a class="indexterm" name="id2546798"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2912 2911 This parameter defines the number of seconds that Samba should use as timeout for LDAP operations. 2913 2912 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> … … 2924 2923 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 2925 2924 </em></span> 2926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254692 2"></a>2925 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546921"></a> 2927 2926 2928 2927 level2 oplocks (S) 2929 </h3></div></div></div><a class="indexterm" name="id254692 3"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports2928 </h3></div></div></div><a class="indexterm" name="id2546922"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports 2930 2929 level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients 2931 2930 that have an oplock on a file to downgrade from a read-write oplock … … 2947 2946 this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code> 2948 2947 </em></span> 2949 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254702 9"></a>2948 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547028"></a> 2950 2949 2951 2950 lm announce (G) 2952 </h3></div></div></div><a class="indexterm" name="id25470 30"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce2951 </h3></div></div></div><a class="indexterm" name="id2547029"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 2953 2952 broadcasts that are needed by OS/2 clients in order for them to see 2954 2953 the Samba server in their browse list. This parameter can have three … … 2966 2965 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 2967 2966 </em></span> 2968 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254715 1"></a>2967 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547150"></a> 2969 2968 2970 2969 lm interval (G) 2971 </h3></div></div></div><a class="indexterm" name="id254715 2"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce2970 </h3></div></div></div><a class="indexterm" name="id2547151"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 2972 2971 broadcasts needed by OS/2 clients (see the 2973 2972 <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this … … 3016 3015 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 3017 3016 </em></span> 3018 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254750 2"></a>3017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547501"></a> 3019 3018 3020 3019 locking (S) 3021 </h3></div></div></div><a class="indexterm" name="id254750 3"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be3020 </h3></div></div></div><a class="indexterm" name="id2547502"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 3022 3021 performed by the server in response to lock requests from the 3023 3022 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 3037 3036 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 3038 3037 </em></span> 3039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254763 3"></a>3038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547632"></a> 3040 3039 3041 3040 lock spin time (G) … … 3057 3056 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 3058 3057 </em></span> 3059 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254774 4"></a>3058 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547743"></a> 3060 3059 3061 3060 <a name="DEBUGLEVEL"></a>debuglevel 3062 </h3></div></div></div><a class="indexterm" name="id254774 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547775"></a>3061 </h3></div></div></div><a class="indexterm" name="id2547744"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547774"></a> 3063 3062 3064 3063 log level (G) 3065 </h3></div></div></div><a class="indexterm" name="id254777 6"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>3064 </h3></div></div></div><a class="indexterm" name="id2547775"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3066 3065 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 3067 3066 <code class="filename">smb.conf</code> file. … … 3087 3086 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 3088 3087 </em></span> 3089 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254808 3"></a>3088 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548082"></a> 3090 3089 3091 3090 logon home (G) 3092 </h3></div></div></div><a class="indexterm" name="id254808 4"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>3091 </h3></div></div></div><a class="indexterm" name="id2548083"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3093 3092 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 3094 3093 It allows you to do … … 3168 3167 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 3169 3168 </em></span> 3170 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25484 21"></a>3169 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548416"></a> 3171 3170 3172 3171 logon script (G) 3173 </h3></div></div></div><a class="indexterm" name="id25484 22"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>3172 </h3></div></div></div><a class="indexterm" name="id2548417"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3174 3173 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 3175 3174 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 3202 3201 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 3203 3202 </em></span> 3204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25485 90"></a>3203 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548585"></a> 3205 3204 3206 3205 lppause command (S) 3207 </h3></div></div></div><a class="indexterm" name="id25485 91"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3206 </h3></div></div></div><a class="indexterm" name="id2548586"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3208 3207 executed on the server host in order to stop printing or spooling 3209 3208 a specific print job.</p><p>This command should be a program or script which takes … … 3229 3228 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 3230 3229 </em></span> 3231 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254873 8"></a>3230 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548733"></a> 3232 3231 3233 3232 lpq cache time (G) 3234 </h3></div></div></div><a class="indexterm" name="id254873 9"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached3233 </h3></div></div></div><a class="indexterm" name="id2548734"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 3235 3234 for to prevent the <code class="literal">lpq</code> command being called too 3236 3235 often. A separate cache is kept for each variation of the <code class="literal"> … … 3245 3244 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 3246 3245 </em></span> 3247 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254885 7"></a>3246 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548852"></a> 3248 3247 3249 3248 lpq command (S) 3250 </h3></div></div></div><a class="indexterm" name="id254885 8"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3249 </h3></div></div></div><a class="indexterm" name="id2548853"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3251 3250 executed on the server host in order to obtain <code class="literal">lpq 3252 3251 </code>-style printer status information.</p><p>This command should be a program or script which … … 3270 3269 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 3271 3270 </em></span> 3272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25489 83"></a>3271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548978"></a> 3273 3272 3274 3273 lpresume command (S) 3275 </h3></div></div></div><a class="indexterm" name="id25489 84"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3274 </h3></div></div></div><a class="indexterm" name="id2548979"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3276 3275 executed on the server host in order to restart or continue 3277 3276 printing or spooling a specific print job.</p><p>This command should be a program or script which takes … … 3286 3285 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3287 3286 </em></span> 3288 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254913 6"></a>3287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549131"></a> 3289 3288 3290 3289 lprm command (S) 3291 </h3></div></div></div><a class="indexterm" name="id254913 8"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3290 </h3></div></div></div><a class="indexterm" name="id2549132"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3292 3291 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 3293 3292 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 3306 3305 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 3307 3306 </em></span> 3308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25492 24"></a>3307 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549218"></a> 3309 3308 3310 3309 machine password timeout (G) 3311 </h3></div></div></div><a class="indexterm" name="id254922 5"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3310 </h3></div></div></div><a class="indexterm" name="id2549220"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3312 3311 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change 3313 3312 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb … … 3319 3318 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 3320 3319 </em></span> 3321 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25493 12"></a>3320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549306"></a> 3322 3321 3323 3322 magic output (S) 3324 </h3></div></div></div><a class="indexterm" name="id25493 13"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3323 </h3></div></div></div><a class="indexterm" name="id2549307"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3325 3324 This parameter specifies the name of a file which will contain output created by a magic script (see the 3326 3325 <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below). … … 3331 3330 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 3332 3331 </em></span> 3333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254939 6"></a>3332 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549390"></a> 3334 3333 3335 3334 magic script (S) 3336 </h3></div></div></div><a class="indexterm" name="id254939 7"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,3335 </h3></div></div></div><a class="indexterm" name="id2549391"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 3337 3336 if opened, will be executed by the server when the file is closed. 3338 3337 This allows a UNIX script to be sent to the Samba host and … … 3350 3349 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 3351 3350 </em></span> 3352 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549 501"></a>3351 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549496"></a> 3353 3352 3354 3353 mangled names (S) 3355 </h3></div></div></div><a class="indexterm" name="id2549 502"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX3354 </h3></div></div></div><a class="indexterm" name="id2549497"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 3356 3355 should be mapped to DOS-compatible names ("mangled") and made visible, 3357 3356 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for … … 3378 3377 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 3379 3378 </em></span> 3380 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254963 8"></a>3379 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549633"></a> 3381 3380 3382 3381 mangle prefix (G) 3383 </h3></div></div></div><a class="indexterm" name="id254963 9"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix3382 </h3></div></div></div><a class="indexterm" name="id2549634"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 3384 3383 characters from the original name used when generating 3385 3384 the mangled names. A larger value will give a weaker … … 3391 3390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 3392 3391 </em></span> 3393 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254970 5"></a>3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549700"></a> 3394 3393 3395 3394 mangling char (S) 3396 </h3></div></div></div><a class="indexterm" name="id254970 6"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as3395 </h3></div></div></div><a class="indexterm" name="id2549701"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3397 3396 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The 3398 3397 default is a '~' but this may interfere with some software. Use this option to set … … 3401 3400 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 3402 3401 </em></span> 3403 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25497 82"></a>3402 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549777"></a> 3404 3403 3405 3404 mangling method (G) 3406 </h3></div></div></div><a class="indexterm" name="id25497 83"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating3405 </h3></div></div></div><a class="indexterm" name="id2549778"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 3407 3406 the mangled names. Can take two different values, "hash" and 3408 3407 "hash2". "hash" is the algorithm that was used … … 3415 3414 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 3416 3415 </em></span> 3417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25498 50"></a>3416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549844"></a> 3418 3417 3419 3418 map acl inherit (S) 3420 </h3></div></div></div><a class="indexterm" name="id25498 51"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'3419 </h3></div></div></div><a class="indexterm" name="id2549845"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3421 3420 access control entry flags stored in Windows ACLs into an extended attribute 3422 3421 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 3426 3425 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 3427 3426 </em></span> 3428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25499 13"></a>3427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549908"></a> 3429 3428 3430 3429 map archive (S) 3431 </h3></div></div></div><a class="indexterm" name="id25499 14"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3430 </h3></div></div></div><a class="indexterm" name="id2549909"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3432 3431 This controls whether the DOS archive attribute 3433 3432 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 3442 3441 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 3443 3442 </em></span> 3444 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id254998 9"></a>3443 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549984"></a> 3445 3444 3446 3445 map hidden (S) 3447 </h3></div></div></div><a class="indexterm" name="id25499 90"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>3446 </h3></div></div></div><a class="indexterm" name="id2549985"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3448 3447 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 3449 3448 </p><p> … … 3451 3450 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> 3452 3451 for details. 3453 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255004 6"></a>3452 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550041"></a> 3454 3453 3455 3454 map read only (S) 3456 </h3></div></div></div><a class="indexterm" name="id255004 7"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>3455 </h3></div></div></div><a class="indexterm" name="id2550042"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3457 3456 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 3458 3457 </p><p> … … 3479 3478 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code> 3480 3479 </em></span> 3481 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550 203"></a>3480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550198"></a> 3482 3481 3483 3482 map system (S) 3484 </h3></div></div></div><a class="indexterm" name="id2550 204"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>3483 </h3></div></div></div><a class="indexterm" name="id2550199"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 3485 3484 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 3486 3485 </p><p> … … 3490 3489 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 3491 3490 </em></span> 3492 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25502 72"></a>3491 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550267"></a> 3493 3492 3494 3493 map to guest (G) 3495 </h3></div></div></div><a class="indexterm" name="id25502 73"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =3494 </h3></div></div></div><a class="indexterm" name="id2550268"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY = 3496 3495 security</a> modes other than <em class="parameter"><code>security = share</code></em> 3497 3496 and <em class="parameter"><code>security = server</code></em> … … 3535 3534 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 3536 3535 </em></span> 3537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25505 12"></a>3536 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550507"></a> 3538 3537 3539 3538 max connections (S) 3540 </h3></div></div></div><a class="indexterm" name="id25505 13"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.3539 </h3></div></div></div><a class="indexterm" name="id2550508"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3541 3540 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 3542 3541 will be refused if this number of connections to the service are already open. A value … … 3546 3545 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 3547 3546 </em></span> 3548 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255059 8"></a>3547 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550593"></a> 3549 3548 3550 3549 max disk size (G) 3551 </h3></div></div></div><a class="indexterm" name="id255059 9"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit3550 </h3></div></div></div><a class="indexterm" name="id2550594"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 3552 3551 on the apparent size of disks. If you set this option to 100 3553 3552 then all shares will appear to be not larger than 100 MB in … … 3563 3562 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 3564 3563 </em></span> 3565 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25506 90"></a>3564 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550685"></a> 3566 3565 3567 3566 max log size (G) 3568 </h3></div></div></div><a class="indexterm" name="id25506 91"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3567 </h3></div></div></div><a class="indexterm" name="id2550686"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3569 3568 This option (an integer in kilobytes) specifies the max size the log file should grow to. 3570 3569 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 3575 3574 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 3576 3575 </em></span> 3577 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25507 61"></a>3576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550756"></a> 3578 3577 3579 3578 max mux (G) 3580 </h3></div></div></div><a class="indexterm" name="id25507 62"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of3579 </h3></div></div></div><a class="indexterm" name="id2550757"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 3581 3580 outstanding simultaneous SMB operations that Samba tells the client 3582 3581 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 3583 3582 </em></span> 3584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550 804"></a>3583 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550799"></a> 3585 3584 3586 3585 max open files (G) 3587 </h3></div></div></div><a class="indexterm" name="id255080 5"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3586 </h3></div></div></div><a class="indexterm" name="id2550800"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3588 3587 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3589 3588 serving process may have open for a client at any one time. The … … 3593 3592 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code> 3594 3593 </em></span> 3595 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25508 64"></a>3594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550859"></a> 3596 3595 3597 3596 max print jobs (S) 3598 </h3></div></div></div><a class="indexterm" name="id255086 6"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3597 </h3></div></div></div><a class="indexterm" name="id2550860"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3599 3598 jobs allowable in a Samba printer queue at any given moment. 3600 3599 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. … … 3603 3602 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 3604 3603 </em></span> 3605 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25509 34"></a>3604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550929"></a> 3606 3605 3607 3606 <a name="PROTOCOL"></a>protocol 3608 </h3></div></div></div><a class="indexterm" name="id255093 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550967"></a>3607 </h3></div></div></div><a class="indexterm" name="id2550930"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550962"></a> 3609 3608 3610 3609 max protocol (G) 3611 </h3></div></div></div><a class="indexterm" name="id255096 8"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest3610 </h3></div></div></div><a class="indexterm" name="id2550963"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 3612 3611 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No 3613 3612 concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on … … 3621 3620 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 3622 3621 </em></span> 3623 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25510 92"></a>3622 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551087"></a> 3624 3623 3625 3624 max reported print jobs (S) 3626 </h3></div></div></div><a class="indexterm" name="id25510 93"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>3625 </h3></div></div></div><a class="indexterm" name="id2551088"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3627 3626 This parameter limits the maximum number of jobs displayed in a port monitor for 3628 3627 Samba printer queue at any given moment. If this number is exceeded, the excess … … 3633 3632 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 3634 3633 </em></span> 3635 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255115 6"></a>3634 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551151"></a> 3636 3635 3637 3636 max smbd processes (G) 3638 </h3></div></div></div><a class="indexterm" name="id255115 7"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended3637 </h3></div></div></div><a class="indexterm" name="id2551152"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3639 3638 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 3640 3639 resources to handle more than this number of connections. Remember that under normal operating … … 3644 3643 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 3645 3644 </em></span> 3646 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255123 7"></a>3645 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551232"></a> 3647 3646 3648 3647 max stat cache size (G) 3649 </h3></div></div></div><a class="indexterm" name="id255123 8"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any3648 </h3></div></div></div><a class="indexterm" name="id2551233"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3650 3649 <em class="parameter"><code>stat cache</code></em> being used 3651 3650 to speed up case insensitive name mappings. It represents … … 3658 3657 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 3659 3658 </em></span> 3660 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255130 7"></a>3659 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551302"></a> 3661 3660 3662 3661 max ttl (G) 3663 </h3></div></div></div><a class="indexterm" name="id255130 8"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'3662 </h3></div></div></div><a class="indexterm" name="id2551303"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3664 3663 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 3665 3664 requesting a name using either a broadcast packet or from a WINS server. You should 3666 3665 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 3667 3666 </em></span> 3668 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255136 6"></a>3667 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551361"></a> 3669 3668 3670 3669 max wins ttl (G) 3671 </h3></div></div></div><a class="indexterm" name="id255136 7"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server3670 </h3></div></div></div><a class="indexterm" name="id2551362"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3672 3671 (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum 3673 3672 'time to live' of NetBIOS names that <code class="literal">nmbd</code> … … 3675 3674 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 3676 3675 </em></span> 3677 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255143 8"></a>3676 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551433"></a> 3678 3677 3679 3678 max xmit (G) 3680 </h3></div></div></div><a class="indexterm" name="id255143 9"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size3679 </h3></div></div></div><a class="indexterm" name="id2551434"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 3681 3680 that will be negotiated by Samba. The default is 16644, which 3682 3681 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 3686 3685 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 3687 3686 </em></span> 3688 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551 501"></a>3687 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551495"></a> 3689 3688 3690 3689 message command (G) 3691 </h3></div></div></div><a class="indexterm" name="id2551 502"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the3690 </h3></div></div></div><a class="indexterm" name="id2551496"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 3692 3691 server receives a WinPopup style message.</p><p>This would normally be a command that would 3693 3692 deliver the message somehow. How this is to be done is … … 3728 3727 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 3729 3728 </em></span> 3730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25517 11"></a>3729 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551705"></a> 3731 3730 3732 3731 min print space (S) 3733 </h3></div></div></div><a class="indexterm" name="id25517 12"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk3732 </h3></div></div></div><a class="indexterm" name="id2551706"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 3734 3733 space that must be available before a user will be able to spool 3735 3734 a print job. It is specified in kilobytes. The default is 0, which … … 3738 3737 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 3739 3738 </em></span> 3740 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25517 73"></a>3739 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551768"></a> 3741 3740 3742 3741 min protocol (G) 3743 </h3></div></div></div><a class="indexterm" name="id25517 74"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the3742 </h3></div></div></div><a class="indexterm" name="id2551769"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 3744 3743 lowest SMB protocol dialect than Samba will support. Please refer 3745 3744 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a> … … 3753 3752 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 3754 3753 </em></span> 3755 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25518 71"></a>3754 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551866"></a> 3756 3755 3757 3756 min receivefile size (G) 3758 </h3></div></div></div><a class="indexterm" name="id25518 72"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming3757 </h3></div></div></div><a class="indexterm" name="id2551867"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming 3759 3758 SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will 3760 3759 be passed to any underlying kernel recvfile or splice system call (if there is no such … … 3765 3764 nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code> 3766 3765 </em></span> 3767 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25519 53"></a>3766 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551947"></a> 3768 3767 3769 3768 min wins ttl (G) 3770 </h3></div></div></div><a class="indexterm" name="id25519 54"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>3769 </h3></div></div></div><a class="indexterm" name="id2551948"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 3771 3770 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live' 3772 3771 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in … … 3774 3773 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 3775 3774 </em></span> 3776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25520 23"></a>3775 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552018"></a> 3777 3776 3778 3777 msdfs proxy (S) 3779 </h3></div></div></div><a class="indexterm" name="id25520 24"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a3778 </h3></div></div></div><a class="indexterm" name="id2552019"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 3780 3779 stand-in for another CIFS share whose location is specified by 3781 3780 the value of the parameter. When clients attempt to connect to … … 3785 3784 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 3786 3785 </em></span> 3787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552 101"></a>3786 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552096"></a> 3788 3787 3789 3788 msdfs root (S) 3790 </h3></div></div></div><a class="indexterm" name="id2552 102"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the3789 </h3></div></div></div><a class="indexterm" name="id2552097"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 3791 3790 share as a Dfs root and allows clients to browse the 3792 3791 distributed file system tree rooted at the share directory. … … 3796 3795 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 3797 3796 </em></span> 3798 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255215 6"></a>3797 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552151"></a> 3799 3798 3800 3799 name cache timeout (G) 3801 </h3></div></div></div><a class="indexterm" name="id255215 7"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before3800 </h3></div></div></div><a class="indexterm" name="id2552152"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 3802 3801 entries in samba's hostname resolve cache time out. If 3803 3802 the timeout is set to 0. the caching is disabled. … … 3806 3805 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 3807 3806 </em></span> 3808 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255221 7"></a>3807 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552212"></a> 3809 3808 3810 3809 name resolve order (G) 3811 </h3></div></div></div><a class="indexterm" name="id255221 8"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba3810 </h3></div></div></div><a class="indexterm" name="id2552213"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 3812 3811 suite to determine what naming services to use and in what order 3813 3812 to resolve host names to IP addresses. Its main purpose to is to … … 3840 3839 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 3841 3840 </em></span> 3842 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25524 20"></a>3841 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552414"></a> 3843 3842 3844 3843 netbios aliases (G) 3845 </h3></div></div></div><a class="indexterm" name="id25524 21"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will3844 </h3></div></div></div><a class="indexterm" name="id2552415"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 3846 3845 advertise as additional names by which the Samba server is known. This allows one machine 3847 3846 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 3853 3852 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 3854 3853 </em></span> 3855 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25524 93"></a>3854 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552488"></a> 3856 3855 3857 3856 netbios name (G) 3858 </h3></div></div></div><a class="indexterm" name="id25524 94"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>3857 </h3></div></div></div><a class="indexterm" name="id2552489"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3859 3858 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 3860 3859 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 3869 3868 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 3870 3869 </em></span> 3871 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25525 74"></a>3870 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552569"></a> 3872 3871 3873 3872 netbios scope (G) 3874 </h3></div></div></div><a class="indexterm" name="id255257 5"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will3873 </h3></div></div></div><a class="indexterm" name="id2552570"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 3875 3874 operate under. This should not be set unless every machine 3876 3875 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 3877 3876 </em></span> 3878 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255261 7"></a>3877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552612"></a> 3879 3878 3880 3879 nis homedir (G) 3881 </h3></div></div></div><a class="indexterm" name="id255261 8"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For3880 </h3></div></div></div><a class="indexterm" name="id2552613"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 3882 3881 UNIX systems that use an automounter, the user's home directory 3883 3882 will often be mounted on a workstation on demand from a remote … … 3898 3897 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 3899 3898 </em></span> 3900 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255269 7"></a>3899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552692"></a> 3901 3900 3902 3901 nt acl support (S) 3903 </h3></div></div></div><a class="indexterm" name="id255269 8"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map3902 </h3></div></div></div><a class="indexterm" name="id2552693"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3904 3903 UNIX permissions into Windows NT access control lists. The UNIX 3905 3904 permissions considered are the the traditional UNIX owner and … … 3908 3907 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 3909 3908 </em></span> 3910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25527 52"></a>3909 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552746"></a> 3911 3910 3912 3911 ntlm auth (G) 3913 </h3></div></div></div><a class="indexterm" name="id25527 53"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to3912 </h3></div></div></div><a class="indexterm" name="id2552748"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 3914 3913 authenticate users using the NTLM encrypted password response. 3915 3914 If disabled, either the lanman password hash or an NTLMv2 response … … 3919 3918 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 3920 3919 </em></span> 3921 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255281 6"></a>3920 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552810"></a> 3922 3921 3923 3922 nt pipe support (G) 3924 </h3></div></div></div><a class="indexterm" name="id255281 7"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether3923 </h3></div></div></div><a class="indexterm" name="id2552812"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 3925 3924 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 3926 3925 clients to connect to the NT SMB specific <code class="constant">IPC$</code> … … 3928 3927 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 3929 3928 </em></span> 3930 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25528 72"></a>3929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552866"></a> 3931 3930 3932 3931 nt status support (G) 3933 </h3></div></div></div><a class="indexterm" name="id25528 73"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status3932 </h3></div></div></div><a class="indexterm" name="id2552867"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 3934 3933 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 3935 3934 If this option is set to <code class="constant">no</code> then Samba offers … … 3937 3936 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 3938 3937 </em></span> 3939 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25529 33"></a>3938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552928"></a> 3940 3939 3941 3940 null passwords (G) 3942 </h3></div></div></div><a class="indexterm" name="id25529 34"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>3943 </em></span> 3944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255298 7"></a>3941 </h3></div></div></div><a class="indexterm" name="id2552929"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 3942 </em></span> 3943 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552981"></a> 3945 3944 3946 3945 obey pam restrictions (G) 3947 </h3></div></div></div><a class="indexterm" name="id255298 8"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support3946 </h3></div></div></div><a class="indexterm" name="id2552982"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 3948 3947 (i.e. --with-pam), this parameter will control whether or not Samba 3949 3948 should obey PAM's account and session management directives. The … … 3955 3954 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 3956 3955 </em></span> 3957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255305 8"></a>3956 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553052"></a> 3958 3957 3959 3958 only user (S) 3960 </h3></div></div></div><a class="indexterm" name="id255305 9"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether3959 </h3></div></div></div><a class="indexterm" name="id2553053"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 3961 3960 connections with usernames not in the <em class="parameter"><code>user</code></em> 3962 3961 list will be allowed. By default this option is disabled so that a … … 3971 3970 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 3972 3971 </em></span> 3973 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255314 7"></a>3972 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553141"></a> 3974 3973 3975 3974 oplock break wait time (G) 3976 </h3></div></div></div><a class="indexterm" name="id255314 8"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>3975 </h3></div></div></div><a class="indexterm" name="id2553142"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3977 3976 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 3978 3977 quickly when that client issues an SMB that can cause an oplock break request, then the network client can … … 3983 3982 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 3984 3983 </em></span> 3985 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553 200"></a>3984 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553195"></a> 3986 3985 3987 3986 oplock contention limit (S) 3988 </h3></div></div></div><a class="indexterm" name="id2553 202"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>3987 </h3></div></div></div><a class="indexterm" name="id2553196"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3989 3988 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 3990 3989 granting of oplocks under multiple client contention for the same file. … … 3998 3997 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 3999 3998 </em></span> 4000 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25532 83"></a>3999 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553278"></a> 4001 4000 4002 4001 oplocks (S) 4003 </h3></div></div></div><a class="indexterm" name="id25532 84"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>4002 </h3></div></div></div><a class="indexterm" name="id2553279"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4004 4003 This boolean option tells <code class="literal">smbd</code> whether to 4005 4004 issue oplocks (opportunistic locks) to file open requests on this … … 4020 4019 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 4021 4020 </em></span> 4022 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25533 83"></a>4021 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553377"></a> 4023 4022 4024 4023 os2 driver map (G) 4025 </h3></div></div></div><a class="indexterm" name="id25533 84"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute4024 </h3></div></div></div><a class="indexterm" name="id2553378"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 4026 4025 path to a file containing a mapping of Windows NT printer driver 4027 4026 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 4033 4032 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 4034 4033 </em></span> 4035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25534 50"></a>4034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553444"></a> 4036 4035 4037 4036 os level (G) 4038 </h3></div></div></div><a class="indexterm" name="id25534 51"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4037 </h3></div></div></div><a class="indexterm" name="id2553446"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4039 4038 This integer value controls what level Samba advertises itself as for browse elections. The value of this 4040 4039 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area. … … 4052 4051 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 4053 4052 </em></span> 4054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255354 9"></a>4053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553544"></a> 4055 4054 4056 4055 pam password change (G) 4057 </h3></div></div></div><a class="indexterm" name="id25535 50"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,4056 </h3></div></div></div><a class="indexterm" name="id2553545"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 4058 4057 this parameter, it is possible to use PAM's password change control 4059 4058 flag for Samba. If enabled, then PAM will be used for password … … 4063 4062 <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 4064 4063 </em></span> 4065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25536 22"></a>4064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553617"></a> 4066 4065 4067 4066 panic action (G) 4068 </h3></div></div></div><a class="indexterm" name="id25536 23"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a4067 </h3></div></div></div><a class="indexterm" name="id2553618"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 4069 4068 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 4070 4069 draw attention to the fact that a problem occurred. … … 4073 4072 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 4074 4073 </em></span> 4075 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255369 8"></a>4074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553693"></a> 4076 4075 4077 4076 paranoid server security (G) 4078 </h3></div></div></div><a class="indexterm" name="id255369 9"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest4077 </h3></div></div></div><a class="indexterm" name="id2553694"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 4079 4078 users with a bad passowrd. When this option is enabled, samba will not 4080 4079 use a broken NT 4.x server as password server, but instead complain … … 4084 4083 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 4085 4084 </em></span> 4086 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255374 9"></a>4085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553744"></a> 4087 4086 4088 4087 passdb backend (G) 4089 </h3></div></div></div><a class="indexterm" name="id25537 50"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend4088 </h3></div></div></div><a class="indexterm" name="id2553745"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 4090 4089 will be used for storing user and possibly group information. This allows 4091 4090 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' … … 4120 4119 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code> 4121 4120 </em></span> 4122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255390 6"></a>4121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553901"></a> 4123 4122 4124 4123 passdb expand explicit (G) 4125 </h3></div></div></div><a class="indexterm" name="id255390 7"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4124 </h3></div></div></div><a class="indexterm" name="id2553902"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4126 4125 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 4127 4126 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 4129 4128 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 4130 4129 </em></span> 4131 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25539 53"></a>4130 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553948"></a> 4132 4131 4133 4132 passwd chat debug (G) 4134 </h3></div></div></div><a class="indexterm" name="id25539 54"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script4133 </h3></div></div></div><a class="indexterm" name="id2553949"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 4135 4134 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 4136 4135 strings passed to and received from the passwd chat are printed … … 4145 4144 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 4146 4145 </em></span> 4147 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255405 6"></a>4146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554051"></a> 4148 4147 4149 4148 passwd chat timeout (G) 4150 </h3></div></div></div><a class="indexterm" name="id255405 7"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial4149 </h3></div></div></div><a class="indexterm" name="id2554052"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 4151 4150 answer from a passwd chat script being run. Once the initial answer is received 4152 4151 the subsequent answers must be received in one tenth of this time. The default it 4153 4152 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 4154 4153 </em></span> 4155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554 101"></a>4154 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554096"></a> 4156 4155 4157 4156 passwd chat (G) 4158 </h3></div></div></div><a class="indexterm" name="id2554 102"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>4157 </h3></div></div></div><a class="indexterm" name="id2554097"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 4159 4158 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 4160 4159 program to change the user's password. The string describes a … … 4187 4186 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 4188 4187 </em></span> 4189 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255430 7"></a>4188 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554302"></a> 4190 4189 4191 4190 passwd program (G) 4192 </h3></div></div></div><a class="indexterm" name="id255430 8"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set4191 </h3></div></div></div><a class="indexterm" name="id2554303"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 4193 4192 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 4194 4193 will be replaced with the user name. The user name is checked for … … 4211 4210 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 4212 4211 </em></span> 4213 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25544 42"></a>4212 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554437"></a> 4214 4213 4215 4214 password level (G) 4216 </h3></div></div></div><a class="indexterm" name="id25544 43"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty4215 </h3></div></div></div><a class="indexterm" name="id2554438"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 4217 4216 with mixed-case passwords. One offending client is Windows for 4218 4217 Workgroups, which for some reason forces passwords to upper … … 4236 4235 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 4237 4236 </em></span> 4238 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255457 9"></a>4237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554574"></a> 4239 4238 4240 4239 password server (G) 4241 </h3></div></div></div><a class="indexterm" name="id25545 80"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server4240 </h3></div></div></div><a class="indexterm" name="id2554575"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 4242 4241 or Active Directory domain controller with this option, 4243 4242 and using <code class="literal">security = [ads|domain|server]</code> 4244 it is possible to get Samba to4243 it is possible to get Samba 4245 4244 to do all its username/password validation using a specific remote server.</p><p>This option sets the name or IP address of the password server to use. 4246 4245 New syntax has been added to support defining the port to use when connecting … … 4299 4298 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code> 4300 4299 </em></span> 4301 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255487 8"></a>4300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554872"></a> 4302 4301 4303 4302 <a name="DIRECTORY"></a>directory 4304 </h3></div></div></div><a class="indexterm" name="id255487 9"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554909"></a>4303 </h3></div></div></div><a class="indexterm" name="id2554873"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554903"></a> 4305 4304 4306 4305 path (S) 4307 </h3></div></div></div><a class="indexterm" name="id25549 10"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which4306 </h3></div></div></div><a class="indexterm" name="id2554904"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 4308 4307 the user of the service is to be given access. In the case of 4309 4308 printable services, this is where print data will spool prior to … … 4322 4321 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 4323 4322 </em></span> 4324 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25550 13"></a>4323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555007"></a> 4325 4324 4326 4325 pid directory (G) 4327 </h3></div></div></div><a class="indexterm" name="id25550 14"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4326 </h3></div></div></div><a class="indexterm" name="id2555008"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4328 4327 This option specifies the directory where pid files will be placed. 4329 4328 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 4331 4330 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 4332 4331 </em></span> 4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25550 73"></a>4332 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555068"></a> 4334 4333 4335 4334 posix locking (S) 4336 </h3></div></div></div><a class="indexterm" name="id25550 74"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>4335 </h3></div></div></div><a class="indexterm" name="id2555069"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4337 4336 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4338 4337 daemon maintains an database of file locks obtained by SMB clients. The default behavior is … … 4342 4341 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 4343 4342 </em></span> 4344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255512 8"></a>4343 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555123"></a> 4345 4344 4346 4345 postexec (S) 4347 </h3></div></div></div><a class="indexterm" name="id25551 30"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run4346 </h3></div></div></div><a class="indexterm" name="id2555124"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 4348 4347 whenever the service is disconnected. It takes the usual 4349 4348 substitutions. The command may be run as the root on some … … 4353 4352 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 4354 4353 </em></span> 4355 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555 201"></a>4354 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555196"></a> 4356 4355 4357 4356 preexec close (S) 4358 </h3></div></div></div><a class="indexterm" name="id2555 202"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>4357 </h3></div></div></div><a class="indexterm" name="id2555197"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4359 4358 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a> 4360 4359 should close the service being connected to. 4361 4360 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4362 4361 </em></span> 4363 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255525 6"></a>4362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555251"></a> 4364 4363 4365 4364 <a name="EXEC"></a>exec 4366 </h3></div></div></div><a class="indexterm" name="id255525 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555288"></a>4365 </h3></div></div></div><a class="indexterm" name="id2555252"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555282"></a> 4367 4366 4368 4367 preexec (S) 4369 </h3></div></div></div><a class="indexterm" name="id255528 9"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever4368 </h3></div></div></div><a class="indexterm" name="id2555283"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 4370 4369 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 4371 4370 message every time they log in. Maybe a message of the day? Here … … 4379 4378 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 4380 4379 </em></span> 4381 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255539 6"></a>4380 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555390"></a> 4382 4381 4383 4382 <a name="PREFEREDMASTER"></a>prefered master 4384 </h3></div></div></div><a class="indexterm" name="id255539 7"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555428"></a>4383 </h3></div></div></div><a class="indexterm" name="id2555391"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555424"></a> 4385 4384 4386 4385 preferred master (G) 4387 </h3></div></div></div><a class="indexterm" name="id25554 30"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>4386 </h3></div></div></div><a class="indexterm" name="id2555425"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4388 4387 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4389 4388 </p><p> … … 4399 4398 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 4400 4399 </em></span> 4401 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25555 22"></a>4400 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555517"></a> 4402 4401 4403 4402 preload modules (G) 4404 </h3></div></div></div><a class="indexterm" name="id25555 23"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should4403 </h3></div></div></div><a class="indexterm" name="id2555518"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4405 4404 be loaded into smbd before a client connects. This improves 4406 4405 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> … … 4408 4407 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4409 4408 </em></span> 4410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25555 83"></a>4409 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555578"></a> 4411 4410 4412 4411 <a name="AUTOSERVICES"></a>auto services 4413 </h3></div></div></div><a class="indexterm" name="id25555 84"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555616"></a>4412 </h3></div></div></div><a class="indexterm" name="id2555579"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555610"></a> 4414 4413 4415 4414 preload (G) 4416 </h3></div></div></div><a class="indexterm" name="id255561 7"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be4415 </h3></div></div></div><a class="indexterm" name="id2555611"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 4417 4416 automatically added to the browse lists. This is most useful 4418 4417 for homes and printers services that would otherwise not be … … 4425 4424 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 4426 4425 </em></span> 4427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25556 94"></a>4426 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555688"></a> 4428 4427 4429 4428 preserve case (S) 4430 </h3></div></div></div><a class="indexterm" name="id25556 95"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4429 </h3></div></div></div><a class="indexterm" name="id2555689"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4431 4430 This controls if new filenames are created with the case that the client passes, or if 4432 4431 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 4435 4434 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 4436 4435 </em></span> 4437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25557 60"></a>4436 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555755"></a> 4438 4437 4439 4438 <a name="PRINTOK"></a>print ok 4440 </h3></div></div></div><a class="indexterm" name="id25557 61"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555791"></a>4439 </h3></div></div></div><a class="indexterm" name="id2555756"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555786"></a> 4441 4440 4442 4441 printable (S) 4443 </h3></div></div></div><a class="indexterm" name="id25557 92"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then4442 </h3></div></div></div><a class="indexterm" name="id2555787"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4444 4443 clients may open, write to and submit spool files on the directory 4445 4444 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing … … 4448 4447 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 4449 4448 </em></span> 4450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25558 54"></a>4449 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555849"></a> 4451 4450 4452 4451 printcap cache time (G) 4453 </h3></div></div></div><a class="indexterm" name="id255585 5"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing4452 </h3></div></div></div><a class="indexterm" name="id2555850"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4454 4453 subsystem is again asked for the known printers. If the value 4455 4454 is greater than 60 the initial waiting time is set to 60 seconds … … 4461 4460 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 4462 4461 </em></span> 4463 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25559 23"></a>4462 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555918"></a> 4464 4463 4465 4464 <a name="PRINTCAP"></a>printcap 4466 </h3></div></div></div><a class="indexterm" name="id25559 24"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555956"></a>4465 </h3></div></div></div><a class="indexterm" name="id2555919"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555951"></a> 4467 4466 4468 4467 printcap name (G) 4469 </h3></div></div></div><a class="indexterm" name="id255595 7"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4468 </h3></div></div></div><a class="indexterm" name="id2555952"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4470 4469 This parameter may be used to override the compiled-in default printcap name used by the server (usually 4471 4470 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. … … 4502 4501 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 4503 4502 </em></span> 4504 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25561 40"></a>4503 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556135"></a> 4505 4504 4506 4505 print command (S) 4507 </h3></div></div></div><a class="indexterm" name="id25561 42"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to4506 </h3></div></div></div><a class="indexterm" name="id2556136"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 4508 4507 a service, this command will be used via a <code class="literal">system()</code> 4509 4508 call to process the spool file. Typically the command specified will … … 4547 4546 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 4548 4547 </em></span> 4549 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25564 10"></a>4548 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556405"></a> 4550 4549 4551 4550 printer admin (S) 4552 </h3></div></div></div><a class="indexterm" name="id25564 11"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>4551 </h3></div></div></div><a class="indexterm" name="id2556406"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 4553 4552 This lists users who can do anything to printers 4554 4553 via the remote administration interfaces offered … … 4566 4565 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 4567 4566 </em></span> 4568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255647 9"></a>4567 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556474"></a> 4569 4568 4570 4569 <a name="PRINTER"></a>printer 4571 </h3></div></div></div><a class="indexterm" name="id25564 80"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556511"></a>4570 </h3></div></div></div><a class="indexterm" name="id2556475"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556505"></a> 4572 4571 4573 4572 printer name (S) 4574 </h3></div></div></div><a class="indexterm" name="id25565 12"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4573 </h3></div></div></div><a class="indexterm" name="id2556506"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4575 4574 This parameter specifies the name of the printer to which print jobs spooled through a printable service 4576 4575 will be sent. … … 4585 4584 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 4586 4585 </em></span> 4587 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255659 9"></a>4586 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556593"></a> 4588 4587 4589 4588 printing (S) 4590 </h3></div></div></div><a class="indexterm" name="id2556 600"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is4589 </h3></div></div></div><a class="indexterm" name="id2556594"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 4591 4590 interpreted on your system. It also affects the default values for 4592 4591 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 4605 4604 <code class="literal">testparm -v.</code></code> 4606 4605 </em></span> 4607 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25567 52"></a>4606 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556747"></a> 4608 4607 4609 4608 printjob username (S) 4610 </h3></div></div></div><a class="indexterm" name="id25567 53"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4609 </h3></div></div></div><a class="indexterm" name="id2556748"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4611 4610 passed to the printing system. Usually, the username is sent, 4612 4611 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4614 4613 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4615 4614 </em></span> 4616 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25568 14"></a>4615 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556808"></a> 4617 4616 4618 4617 private dir (G) 4619 </h3></div></div></div><a class="indexterm" name="id25568 15"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4618 </h3></div></div></div><a class="indexterm" name="id2556809"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4620 4619 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4621 4620 and <code class="filename">secrets.tdb</code>. 4622 4621 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4623 4622 </em></span> 4624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255686 8"></a>4623 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556862"></a> 4625 4624 4626 4625 profile acls (S) 4627 </h3></div></div></div><a class="indexterm" name="id255686 9"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4626 </h3></div></div></div><a class="indexterm" name="id2556863"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4628 4627 This boolean parameter was added to fix the problems that people have been 4629 4628 having with storing user profiles on Samba shares from Windows 2000 or … … 4653 4652 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4654 4653 </em></span> 4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25569 51"></a>4654 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556946"></a> 4656 4655 4657 4656 queuepause command (S) 4658 </h3></div></div></div><a class="indexterm" name="id25569 52"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4657 </h3></div></div></div><a class="indexterm" name="id2556947"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4659 4658 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4660 4659 a printer name as its only parameter and stops the printer queue, … … 4667 4666 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4668 4667 </em></span> 4669 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255702 8"></a>4668 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557023"></a> 4670 4669 4671 4670 queueresume command (S) 4672 </h3></div></div></div><a class="indexterm" name="id255702 9"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4671 </h3></div></div></div><a class="indexterm" name="id2557024"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4673 4672 executed on the server host in order to resume the printer queue. It 4674 4673 is the command to undo the behavior that is caused by the … … 4685 4684 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4686 4685 </em></span> 4687 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25571 31"></a>4686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557126"></a> 4688 4687 4689 4688 read list (S) 4690 </h3></div></div></div><a class="indexterm" name="id25571 32"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>4689 </h3></div></div></div><a class="indexterm" name="id2557127"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4691 4690 This is a list of users that are given read-only access to a service. If the connecting user is in this list 4692 4691 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set … … 4698 4697 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 4699 4698 </em></span> 4700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25572 31"></a>4699 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557225"></a> 4701 4700 4702 4701 read only (S) 4703 </h3></div></div></div><a class="indexterm" name="id25572 32"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users4702 </h3></div></div></div><a class="indexterm" name="id2557226"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 4704 4703 of a service may not create or modify files in the service's 4705 4704 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 4707 4706 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 4708 4707 </em></span> 4709 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255730 8"></a>4708 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557302"></a> 4710 4709 4711 4710 read raw (G) 4712 </h3></div></div></div><a class="indexterm" name="id255730 9"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server4711 </h3></div></div></div><a class="indexterm" name="id2557303"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4713 4712 will support the raw read SMB requests when transferring data 4714 4713 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 4719 4718 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 4720 4719 </em></span> 4721 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255736 8"></a>4720 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557362"></a> 4722 4721 4723 4722 realm (G) 4724 </h3></div></div></div><a class="indexterm" name="id255736 9"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is4723 </h3></div></div></div><a class="indexterm" name="id2557363"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4725 4724 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 4726 4725 is usually set to the DNS name of the kerberos server. … … 4729 4728 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 4730 4729 </em></span> 4731 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25574 33"></a>4730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557427"></a> 4732 4731 4733 4732 registry shares (G) 4734 </h3></div></div></div><a class="indexterm" name="id25574 34"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>4733 </h3></div></div></div><a class="indexterm" name="id2557428"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4735 4734 This turns on or off support for share definitions read from 4736 4735 registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take … … 4747 4746 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code> 4748 4747 </em></span> 4749 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255751 9"></a>4748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557513"></a> 4750 4749 4751 4750 remote announce (G) 4752 </h3></div></div></div><a class="indexterm" name="id25575 20"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>4753 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself4751 </h3></div></div></div><a class="indexterm" name="id2557514"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4752 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself 4754 4753 to arbitrary IP addresses with an arbitrary workgroup name. 4755 4754 </p><p> … … 4764 4763 the above line would cause <code class="literal">nmbd</code> to announce itself 4765 4764 to the two given IP addresses using the given workgroup names. If you leave out the 4766 workgroup name then the one given in the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> parameter4765 workgroup name, then the one given in the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> parameter 4767 4766 is used instead. 4768 4767 </p><p> … … 4774 4773 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 4775 4774 </em></span> 4776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25576 24"></a>4775 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557619"></a> 4777 4776 4778 4777 remote browse sync (G) 4779 </h3></div></div></div><a class="indexterm" name="id255762 5"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>4778 </h3></div></div></div><a class="indexterm" name="id2557620"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4780 4779 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4781 4780 synchronization of browse lists with the master browser of a Samba … … 4809 4808 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 4810 4809 </em></span> 4811 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255773 7"></a>4810 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557732"></a> 4812 4811 4813 4812 rename user script (G) 4814 </h3></div></div></div><a class="indexterm" name="id255773 8"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>4813 </h3></div></div></div><a class="indexterm" name="id2557733"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4815 4814 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4816 4815 </p><p> … … 4830 4829 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 4831 4830 </em></span> 4832 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255782 7"></a>4831 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557822"></a> 4833 4832 4834 4833 reset on zero vc (G) 4835 </h3></div></div></div><a class="indexterm" name="id255782 8"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>4834 </h3></div></div></div><a class="indexterm" name="id2557823"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4836 4835 This boolean option controls whether an incoming session setup 4837 4836 should kill other connections coming from the same IP. This matches … … 4852 4851 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 4853 4852 </em></span> 4854 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25578 80"></a>4853 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557875"></a> 4855 4854 4856 4855 restrict anonymous (G) 4857 </h3></div></div></div><a class="indexterm" name="id25578 81"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and4856 </h3></div></div></div><a class="indexterm" name="id2557876"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 4858 4857 group list information is returned for an anonymous connection. 4859 4858 and mirrors the effects of the … … 4878 4877 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 4879 4878 </em></span> 4880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25579 64"></a>4879 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557959"></a> 4881 4880 4882 4881 <a name="ROOT"></a>root 4883 </h3></div></div></div><a class="indexterm" name="id255796 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557997"></a>4882 </h3></div></div></div><a class="indexterm" name="id2557960"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557992"></a> 4884 4883 4885 4884 <a name="ROOTDIR"></a>root dir 4886 </h3></div></div></div><a class="indexterm" name="id255799 8"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558029"></a>4885 </h3></div></div></div><a class="indexterm" name="id2557993"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558023"></a> 4887 4886 4888 4887 root directory (G) 4889 </h3></div></div></div><a class="indexterm" name="id25580 30"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.4888 </h3></div></div></div><a class="indexterm" name="id2558024"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4890 4889 Change its root directory) to this directory on startup. This is 4891 4890 not strictly necessary for secure operation. Even without it the … … 4910 4909 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 4911 4910 </em></span> 4912 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25581 53"></a>4911 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558147"></a> 4913 4912 4914 4913 root postexec (S) 4915 </h3></div></div></div><a class="indexterm" name="id25581 54"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4914 </h3></div></div></div><a class="indexterm" name="id2558148"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4916 4915 This is the same as the <em class="parameter"><code>postexec</code></em> 4917 4916 parameter except that the command is run as root. This is useful for … … 4919 4918 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 4920 4919 </em></span> 4921 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558 202"></a>4920 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558196"></a> 4922 4921 4923 4922 root preexec close (S) 4924 </h3></div></div></div><a class="indexterm" name="id2558 203"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close4923 </h3></div></div></div><a class="indexterm" name="id2558197"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 4925 4924 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 4926 4925 </em></span> 4927 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25582 50"></a>4926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558244"></a> 4928 4927 4929 4928 root preexec (S) 4930 </h3></div></div></div><a class="indexterm" name="id25582 51"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4929 </h3></div></div></div><a class="indexterm" name="id2558246"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4931 4930 This is the same as the <em class="parameter"><code>preexec</code></em> 4932 4931 parameter except that the command is run as root. This is useful for … … 4934 4933 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 4935 4934 </em></span> 4936 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255829 8"></a>4935 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558293"></a> 4937 4936 4938 4937 security mask (S) 4939 </h3></div></div></div><a class="indexterm" name="id255829 9"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>4938 </h3></div></div></div><a class="indexterm" name="id2558294"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 4940 4939 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 4941 4940 UNIX permission on a file using the native NT security dialog box. … … 4956 4955 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 4957 4956 </em></span> 4958 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558 405"></a>4957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558399"></a> 4959 4958 4960 4959 security (G) 4961 </h3></div></div></div><a class="indexterm" name="id255840 6"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to4960 </h3></div></div></div><a class="indexterm" name="id2558400"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 4962 4961 Samba and is one of the most important settings in the <code class="filename"> 4963 4962 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 4983 4982 is commonly used for a shared printer server. It is more difficult 4984 4983 to setup guest shares with <code class="literal">security = user</code>, see 4985 the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a> parameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em>4984 the <a class="link" href="smb.conf.5.html#MAPTOGUEST" target="_top">map to guest</a> parameter for details.</p><p>It is possible to use <code class="literal">smbd</code> in a <span class="emphasis"><em> 4986 4985 hybrid mode</em></span> where it is offers both user and share 4987 level security under different <a class="link" href="smb.conf.5.html#NETBIOSALIASES" target="_top">NetBIOS aliases</a>. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server they4986 level security under different <a class="link" href="smb.conf.5.html#NETBIOSALIASES" target="_top">NetBIOS aliases</a>. </p><p>The different settings will now be explained.</p><p><a name="SECURITYEQUALSSHARE"></a><span class="emphasis"><em>SECURITY = SHARE</em></span></p><p>When clients connect to a share level security server, they 4988 4987 need not log onto the server with a valid username and password before 4989 4988 attempting to connect to a shared resource (although modern clients … … 5065 5064 Samba server may fail (from a single client, till it disconnects). 5066 5065 </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of 5067 view <code class="literal">security = server</code> is the5066 view, <code class="literal">security = server</code> is the 5068 5067 same as <code class="literal">security = user</code>. It 5069 5068 only affects how the server deals with the authentication, it does … … 5083 5082 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 5084 5083 </em></span> 5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255928 9"></a>5084 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559284"></a> 5086 5085 5087 5086 server schannel (G) 5088 </h3></div></div></div><a class="indexterm" name="id25592 90"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>5087 </h3></div></div></div><a class="indexterm" name="id2559285"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 5089 5088 This controls whether the server offers or even demands the use of the netlogon schannel. 5090 5089 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. 5091 5090 This is only the case for Windows NT4 before SP4. 5092 5091 </p><p> 5093 Please note that with this set to <code class="literal">no</code> you will have to apply the WindowsXP5092 Please note that with this set to <code class="literal">no</code>, you will have to apply the WindowsXP 5094 5093 <code class="filename">WinXP_SignOrSeal.reg</code> registry patch found in the docs/registry subdirectory of the Samba distribution tarball. 5095 5094 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">auto</code> … … 5097 5096 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 5098 5097 </em></span> 5099 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255940 5"></a>5098 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559400"></a> 5100 5099 5101 5100 server signing (G) 5102 </h3></div></div></div><a class="indexterm" name="id2559406"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires 5103 the client it talks to to use SMB signing. Possible values 5101 </h3></div></div></div><a class="indexterm" name="id2559401"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 5104 5102 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 5105 5103 and <span class="emphasis"><em>disabled</em></span>. … … 5108 5106 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 5109 5107 </em></span> 5110 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255946 6"></a>5108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559460"></a> 5111 5109 5112 5110 server string (G) 5113 </h3></div></div></div><a class="indexterm" name="id255946 7"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print5111 </h3></div></div></div><a class="indexterm" name="id2559462"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 5114 5112 manager and next to the IPC connection in <code class="literal">net view</code>. It 5115 5113 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 5120 5118 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 5121 5119 </em></span> 5122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255955 8"></a>5120 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559552"></a> 5123 5121 5124 5122 set directory (S) 5125 </h3></div></div></div><a class="indexterm" name="id255955 9"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>5123 </h3></div></div></div><a class="indexterm" name="id2559553"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5126 5124 If <code class="literal">set directory = no</code>, then users of the 5127 5125 service may not use the setdir command to change directory. … … 5132 5130 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 5133 5131 </em></span> 5134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255961 8"></a>5132 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559612"></a> 5135 5133 5136 5134 set primary group script (G) 5137 </h3></div></div></div><a class="indexterm" name="id255961 9"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a5135 </h3></div></div></div><a class="indexterm" name="id2559613"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 5138 5136 primary group in addition to the auxiliary groups. This script 5139 5137 sets the primary group in the unix userdatase when an … … 5147 5145 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 5148 5146 </em></span> 5149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559 700"></a>5147 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559694"></a> 5150 5148 5151 5149 set quota command (G) 5152 </h3></div></div></div><a class="indexterm" name="id2559 701"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used5150 </h3></div></div></div><a class="indexterm" name="id2559695"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 5153 5151 whenever there is no operating system API available from the OS that 5154 5152 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 5160 5158 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 5161 5159 </em></span> 5162 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25598 63"></a>5160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559857"></a> 5163 5161 5164 5162 share modes (S) 5165 </h3></div></div></div><a class="indexterm" name="id25598 64"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of5163 </h3></div></div></div><a class="indexterm" name="id2559858"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 5166 5164 the <em class="parameter"><code>share modes</code></em> during a file open. These 5167 5165 modes are used by clients to gain exclusive read or write access … … 5176 5174 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 5177 5175 </em></span> 5178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id255995 6"></a>5176 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559950"></a> 5179 5177 5180 5178 short preserve case (S) 5181 </h3></div></div></div><a class="indexterm" name="id255995 7"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>5179 </h3></div></div></div><a class="indexterm" name="id2559952"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5182 5180 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 5183 5181 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 5186 5184 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 5187 5185 </em></span> 5188 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256003 6"></a>5186 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560030"></a> 5189 5187 5190 5188 show add printer wizard (G) 5191 </h3></div></div></div><a class="indexterm" name="id256003 7"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support5189 </h3></div></div></div><a class="indexterm" name="id2560031"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 5192 5190 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 5193 5191 appear on Samba hosts in the share listing. Normally this folder will … … 5207 5205 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 5208 5206 </em></span> 5209 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25601 20"></a>5207 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560114"></a> 5210 5208 5211 5209 shutdown script (G) 5212 </h3></div></div></div><a class="indexterm" name="id25601 21"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5210 </h3></div></div></div><a class="indexterm" name="id2560115"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5213 5211 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5214 5212 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, … … 5235 5233 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5236 5234 </em></span> 5237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25602 73"></a>5235 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560267"></a> 5238 5236 5239 5237 smb encrypt (S) 5240 </h3></div></div></div><a class="indexterm" name="id25602 74"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5238 </h3></div></div></div><a class="indexterm" name="id2560268"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5241 5239 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5242 5240 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5247 5245 supported by Samba 3.2 smbclient, and hopefully soon Linux CIFSFS 5248 5246 and MacOS/X clients. Windows clients do not support this feature. 5249 </p><p>This controls whether the server offers or requires 5250 the client it talks to to use SMB encryption. Possible values 5247 </p><p>This controls whether the remote client is allowed or required to use SMB encryption. Possible values 5251 5248 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 5252 5249 and <span class="emphasis"><em>disabled</em></span>. This may be set on a per-share … … 5267 5264 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5268 5265 </em></span> 5269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256037 9"></a>5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560373"></a> 5270 5267 5271 5268 smb passwd file (G) 5272 </h3></div></div></div><a class="indexterm" name="id25603 80"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5269 </h3></div></div></div><a class="indexterm" name="id2560374"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5273 5270 default the path to the smbpasswd file is compiled into Samba.</p><p> 5274 5271 An example of use is: … … 5278 5275 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5279 5276 </em></span> 5280 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25604 33"></a>5277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560427"></a> 5281 5278 5282 5279 smb ports (G) 5283 </h3></div></div></div><a class="indexterm" name="id25604 34"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5284 </em></span> 5285 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25604 75"></a>5280 </h3></div></div></div><a class="indexterm" name="id2560428"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5281 </em></span> 5282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560469"></a> 5286 5283 5287 5284 socket address (G) 5288 </h3></div></div></div><a class="indexterm" name="id256047 6"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5285 </h3></div></div></div><a class="indexterm" name="id2560470"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5289 5286 address Samba will listen for connections on. This is used to 5290 5287 support multiple virtual interfaces on the one server, each … … 5295 5292 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5296 5293 </em></span> 5297 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25605 45"></a>5294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560539"></a> 5298 5295 5299 5296 socket options (G) 5300 </h3></div></div></div><a class="indexterm" name="id256054 6"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5297 </h3></div></div></div><a class="indexterm" name="id2560540"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5301 5298 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5302 5299 of the operating systems which allow the connection to be … … 5326 5323 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5327 5324 </em></span> 5328 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25607 55"></a>5325 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560749"></a> 5329 5326 5330 5327 stat cache (G) 5331 </h3></div></div></div><a class="indexterm" name="id256075 6"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5328 </h3></div></div></div><a class="indexterm" name="id2560750"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5332 5329 speed up case insensitive name mappings. You should never need 5333 5330 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5334 5331 </em></span> 5335 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256080 7"></a>5332 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560801"></a> 5336 5333 5337 5334 store dos attributes (S) 5338 </h3></div></div></div><a class="indexterm" name="id256080 8"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5335 </h3></div></div></div><a class="indexterm" name="id2560802"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5339 5336 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5340 5337 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5348 5345 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5349 5346 </em></span> 5350 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256092 8"></a>5347 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560922"></a> 5351 5348 5352 5349 strict allocate (S) 5353 </h3></div></div></div><a class="indexterm" name="id25609 30"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5350 </h3></div></div></div><a class="indexterm" name="id2560923"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5354 5351 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5355 5352 the server will change from UNIX behaviour of not committing real … … 5363 5360 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 5364 5361 </em></span> 5365 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256099 9"></a>5362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560993"></a> 5366 5363 5367 5364 strict locking (S) 5368 </h3></div></div></div><a class="indexterm" name="id256 1000"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5365 </h3></div></div></div><a class="indexterm" name="id2560994"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5369 5366 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5370 5367 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5373 5370 When strict locking is set to Auto (the default), the server performs file lock checks only on non-oplocked files. 5374 5371 As most Windows redirectors perform file locking checks locally on oplocked files this is a good trade off for 5375 i nproved performance.5372 improved performance. 5376 5373 </p><p> 5377 5374 When strict locking is disabled, the server performs file lock checks only when the client explicitly asks for them. … … 5382 5379 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5383 5380 </em></span> 5384 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256107 8"></a>5381 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561072"></a> 5385 5382 5386 5383 strict sync (S) 5387 </h3></div></div></div><a class="indexterm" name="id256107 9"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5384 </h3></div></div></div><a class="indexterm" name="id2561073"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5388 5385 shell) seem to confuse flushing buffer contents to disk with doing 5389 5386 a sync to disk. Under UNIX, a sync call forces the process to be … … 5399 5396 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5400 5397 </em></span> 5401 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25611 43"></a>5398 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561137"></a> 5402 5399 5403 5400 svcctl list (G) 5404 </h3></div></div></div><a class="indexterm" name="id25611 44"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5401 </h3></div></div></div><a class="indexterm" name="id2561138"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5405 5402 will use for starting and stopping Unix services via the Win32 5406 5403 ServiceControl API. This allows Windows administrators to … … 5415 5412 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5416 5413 </em></span> 5417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256122 8"></a>5414 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561222"></a> 5418 5415 5419 5416 sync always (S) 5420 </h3></div></div></div><a class="indexterm" name="id25612 30"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5417 </h3></div></div></div><a class="indexterm" name="id2561223"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5421 5418 whether writes will always be written to stable storage before 5422 5419 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5429 5426 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5430 5427 </em></span> 5431 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256129 9"></a>5428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561293"></a> 5432 5429 5433 5430 syslog only (G) 5434 </h3></div></div></div><a class="indexterm" name="id2561 300"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5431 </h3></div></div></div><a class="indexterm" name="id2561294"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5435 5432 If this parameter is set then Samba debug messages are logged into the system 5436 5433 syslog only, and not to the debug log files. There still will be some … … 5438 5435 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5439 5436 </em></span> 5440 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256134 7"></a>5437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561341"></a> 5441 5438 5442 5439 syslog (G) 5443 </h3></div></div></div><a class="indexterm" name="id256134 8"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5440 </h3></div></div></div><a class="indexterm" name="id2561342"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5444 5441 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5445 5442 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5452 5449 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5453 5450 </em></span> 5454 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256141 7"></a>5451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561411"></a> 5455 5452 5456 5453 template homedir (G) 5457 </h3></div></div></div><a class="indexterm" name="id256141 8"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5454 </h3></div></div></div><a class="indexterm" name="id2561412"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5458 5455 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5459 5456 parameter to fill in the home directory for that user. If the … … 5463 5460 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5464 5461 </em></span> 5465 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25614 83"></a>5462 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561477"></a> 5466 5463 5467 5464 template shell (G) 5468 </h3></div></div></div><a class="indexterm" name="id25614 84"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5465 </h3></div></div></div><a class="indexterm" name="id2561478"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5469 5466 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5470 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25615 22"></a>5467 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561516"></a> 5471 5468 5472 5469 time offset (G) 5473 </h3></div></div></div><a class="indexterm" name="id25615 23"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5470 </h3></div></div></div><a class="indexterm" name="id2561517"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5474 5471 to the normal GMT to local time conversion. This is useful if 5475 5472 you are serving a lot of PCs that have incorrect daylight … … 5478 5475 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5479 5476 </em></span> 5480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25615 82"></a>5477 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561576"></a> 5481 5478 5482 5479 time server (G) 5483 </h3></div></div></div><a class="indexterm" name="id25615 83"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5480 </h3></div></div></div><a class="indexterm" name="id2561577"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5484 5481 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5485 5482 </em></span> 5486 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25616 32"></a>5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561626"></a> 5487 5484 5488 5485 unix charset (G) 5489 </h3></div></div></div><a class="indexterm" name="id25616 33"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5486 </h3></div></div></div><a class="indexterm" name="id2561627"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5490 5487 Samba runs on uses. Samba needs to know this in order to be able to 5491 5488 convert text to the charsets other SMB clients use. … … 5496 5493 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5497 5494 </em></span> 5498 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256169 8"></a>5495 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561692"></a> 5499 5496 5500 5497 unix extensions (G) 5501 </h3></div></div></div><a class="indexterm" name="id256169 9"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5498 </h3></div></div></div><a class="indexterm" name="id2561693"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5502 5499 implments the CIFS UNIX extensions, as defined by HP. 5503 5500 These extensions enable Samba to better serve UNIX CIFS clients … … 5506 5503 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5507 5504 </em></span> 5508 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256174 6"></a>5505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561740"></a> 5509 5506 5510 5507 unix password sync (G) 5511 </h3></div></div></div><a class="indexterm" name="id256174 7"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5508 </h3></div></div></div><a class="indexterm" name="id2561741"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5512 5509 attempts to synchronize the UNIX password with the SMB password 5513 5510 when the encrypted SMB password in the smbpasswd file is changed. … … 5518 5515 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5519 5516 </em></span> 5520 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256180 7"></a>5517 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561801"></a> 5521 5518 5522 5519 update encrypted (G) 5523 </h3></div></div></div><a class="indexterm" name="id256180 8"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>5520 </h3></div></div></div><a class="indexterm" name="id2561802"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5524 5521 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5525 5522 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to 5526 5523 migrate from plaintext password authentication (users authenticate with plaintext password over the 5527 wire, and are checked against a UNIX account atabase) to encrypted password authentication (the SMB5524 wire, and are checked against a UNIX account database) to encrypted password authentication (the SMB 5528 5525 challenge/response authentication mechanism) without forcing all users to re-enter their passwords via 5529 5526 smbpasswd at the time the change is made. This is a convenience option to allow the change over to encrypted … … 5534 5531 be set to <code class="constant">no</code>. The default value of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = Yes</a>. Note: This must be set to <code class="constant">no</code> for this <a class="link" href="smb.conf.5.html#UPDATEENCRYPTED" target="_top">update encrypted</a> to work. 5535 5532 </p><p> 5536 Note that even when this parameter is set a user authenticating to <code class="literal">smbd</code>5533 Note that even when this parameter is set, a user authenticating to <code class="literal">smbd</code> 5537 5534 must still enter a valid password in order to connect correctly, and to update their hashed (smbpasswd) 5538 5535 passwords. 5539 5536 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5540 5537 </em></span> 5541 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25619 25"></a>5538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561919"></a> 5542 5539 5543 5540 use client driver (S) 5544 </h3></div></div></div><a class="indexterm" name="id256192 6"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005541 </h3></div></div></div><a class="indexterm" name="id2561920"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5545 5542 clients. It has no effect on Windows 95/98/ME clients. When 5546 5543 serving a printer to Windows NT/2000 clients without first installing … … 5563 5560 to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped 5564 5561 to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() 5565 call to succeed. <span class="emphasis"><em>This parameter MUST not be ableenabled5562 call to succeed. <span class="emphasis"><em>This parameter MUST not be enabled 5566 5563 on a print share which has valid print driver installed on the Samba 5567 5564 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5568 5565 </em></span> 5569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25620 18"></a>5566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562000"></a> 5570 5567 5571 5568 use kerberos keytab (G) 5572 </h3></div></div></div><a class="indexterm" name="id25620 19"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5569 </h3></div></div></div><a class="indexterm" name="id2562001"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5573 5570 Specifies whether Samba should attempt to maintain service principals in the systems 5574 5571 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5582 5579 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5583 5580 </em></span> 5584 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25620 86"></a>5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562068"></a> 5585 5582 5586 5583 use mmap (G) 5587 </h3></div></div></div><a class="indexterm" name="id25620 87"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can5584 </h3></div></div></div><a class="indexterm" name="id2562070"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5588 5585 depend on mmap working correctly on the running system. Samba requires a coherent 5589 5586 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5594 5591 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5595 5592 </em></span> 5596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25621 38"></a>5593 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562120"></a> 5597 5594 5598 5595 username level (G) 5599 </h3></div></div></div><a class="indexterm" name="id25621 39"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at5596 </h3></div></div></div><a class="indexterm" name="id2562122"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5600 5597 the real UNIX username, as many DOS clients send an all-uppercase 5601 5598 username. By default Samba tries all lowercase, followed by the … … 5612 5609 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5613 5610 </em></span> 5614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25622 20"></a>5611 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562202"></a> 5615 5612 5616 5613 username map script (G) 5617 </h3></div></div></div><a class="indexterm" name="id25622 21"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5614 </h3></div></div></div><a class="indexterm" name="id2562203"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5618 5615 <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter. This parameter 5619 5616 specifies and external program or script that must accept a single … … 5626 5623 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5627 5624 </em></span> 5628 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25622 97"></a>5625 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562279"></a> 5629 5626 5630 5627 username map (G) 5631 </h3></div></div></div><a class="indexterm" name="id25622 98"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5628 </h3></div></div></div><a class="indexterm" name="id2562280"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5632 5629 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5633 5630 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5713 5710 # no username map</code> 5714 5711 </em></span> 5715 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25625 76"></a>5712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562559"></a> 5716 5713 5717 5714 <a name="USER"></a>user 5718 </h3></div></div></div><a class="indexterm" name="id25625 78"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562608"></a>5715 </h3></div></div></div><a class="indexterm" name="id2562560"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562591"></a> 5719 5716 5720 5717 <a name="USERS"></a>users 5721 </h3></div></div></div><a class="indexterm" name="id2562 610"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562640"></a>5718 </h3></div></div></div><a class="indexterm" name="id2562592"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562623"></a> 5722 5719 5723 5720 username (S) 5724 </h3></div></div></div><a class="indexterm" name="id25626 41"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited5721 </h3></div></div></div><a class="indexterm" name="id2562624"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 5725 5722 list, in which case the supplied password will be tested against 5726 5723 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 5760 5757 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5761 5758 </em></span> 5762 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 810"></a>5759 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562793"></a> 5763 5760 5764 5761 usershare allow guests (G) 5765 </h3></div></div></div><a class="indexterm" name="id2562 812"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5762 </h3></div></div></div><a class="indexterm" name="id2562794"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5766 5763 to be accessed by non-authenticated users or not. It is the equivalent 5767 5764 of allowing people who can create a share the option of setting 5768 5765 <em class="parameter"><code>guest ok = yes</code></em> in a share 5769 definition. Due to the security sensitive nature of thisthe default5766 definition. Due to its security sensitive nature, the default 5770 5767 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5771 5768 </em></span> 5772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25628 63"></a>5769 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562845"></a> 5773 5770 5774 5771 usershare max shares (G) 5775 </h3></div></div></div><a class="indexterm" name="id25628 64"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5772 </h3></div></div></div><a class="indexterm" name="id2562846"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5776 5773 that are allowed to be created by users belonging to the group owning the 5777 5774 usershare directory. If set to zero (the default) user defined shares are ignored. 5778 5775 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5779 5776 </em></span> 5780 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 908"></a>5777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562891"></a> 5781 5778 5782 5779 usershare owner only (G) 5783 </h3></div></div></div><a class="indexterm" name="id2562 909"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5780 </h3></div></div></div><a class="indexterm" name="id2562892"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5784 5781 a user defined shares must be owned by the user creating the 5785 5782 user defined share or not. If set to True (the default) then … … 5791 5788 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 5792 5789 </em></span> 5793 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25629 58"></a>5790 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562941"></a> 5794 5791 5795 5792 usershare path (G) 5796 </h3></div></div></div><a class="indexterm" name="id25629 59"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the5793 </h3></div></div></div><a class="indexterm" name="id2562942"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 5797 5794 filesystem used to store the user defined share definition files. 5798 5795 This directory must be owned by root, and have no access for … … 5815 5812 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 5816 5813 </em></span> 5817 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25630 29"></a>5814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563012"></a> 5818 5815 5819 5816 usershare prefix allow list (G) 5820 </h3></div></div></div><a class="indexterm" name="id25630 30"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5817 </h3></div></div></div><a class="indexterm" name="id2563013"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5821 5818 the root of which are allowed to be exported by user defined share definitions. 5822 If the pathname exported doesn't start with one of the strings in this5823 list the user defined share will not be allowed. This allows the Samba5819 If the pathname to be exported doesn't start with one of the strings in this 5820 list, the user defined share will not be allowed. This allows the Samba 5824 5821 administrator to restrict the directories on the system that can be 5825 5822 exported by user defined shares. … … 5833 5830 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5834 5831 </em></span> 5835 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 102"></a>5832 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563084"></a> 5836 5833 5837 5834 usershare prefix deny list (G) 5838 </h3></div></div></div><a class="indexterm" name="id2563 103"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5835 </h3></div></div></div><a class="indexterm" name="id2563085"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5839 5836 the root of which are NOT allowed to be exported by user defined share definitions. 5840 5837 If the pathname exported starts with one of the strings in this … … 5852 5849 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 5853 5850 </em></span> 5854 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25631 76"></a>5851 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563159"></a> 5855 5852 5856 5853 usershare template share (G) 5857 </h3></div></div></div><a class="indexterm" name="id25631 77"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters5858 such as path, guest ok etc. This parameter allows usershares to5854 </h3></div></div></div><a class="indexterm" name="id2563160"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 5855 such as path, guest ok, etc. This parameter allows usershares to 5859 5856 "cloned" from an existing share. If "usershare template share" 5860 5857 is set to the name of an existing share, then all usershares … … 5870 5867 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 5871 5868 </em></span> 5872 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25632 49"></a>5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563232"></a> 5873 5870 5874 5871 use sendfile (S) 5875 </h3></div></div></div><a class="indexterm" name="id25632 50"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5872 </h3></div></div></div><a class="indexterm" name="id2563233"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5876 5873 system call is supported by the underlying operating system, then some SMB read calls 5877 5874 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5882 5879 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5883 5880 </em></span> 5884 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 307"></a>5881 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563289"></a> 5885 5882 5886 5883 use spnego (G) 5887 </h3></div></div></div><a class="indexterm" name="id2563 308"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5884 </h3></div></div></div><a class="indexterm" name="id2563290"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5888 5885 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5889 5886 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5893 5890 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5894 5891 </em></span> 5895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25633 56"></a>5892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563339"></a> 5896 5893 5897 5894 utmp directory (G) 5898 </h3></div></div></div><a class="indexterm" name="id25633 57"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5895 </h3></div></div></div><a class="indexterm" name="id2563340"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5899 5896 been configured and compiled with the option <code class="literal"> 5900 5897 --with-utmp</code>. It specifies a directory pathname that is … … 5908 5905 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 5909 5906 </em></span> 5910 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25634 34"></a>5907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563417"></a> 5911 5908 5912 5909 utmp (G) 5913 </h3></div></div></div><a class="indexterm" name="id25634 35"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>5910 </h3></div></div></div><a class="indexterm" name="id2563418"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5914 5911 This boolean parameter is only available if Samba has been configured and compiled 5915 5912 with the option <code class="literal">--with-utmp</code>. If set to … … 5923 5920 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 5924 5921 </em></span> 5925 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25634 97"></a>5922 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563480"></a> 5926 5923 5927 5924 valid users (S) 5928 </h3></div></div></div><a class="indexterm" name="id25634 98"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>5925 </h3></div></div></div><a class="indexterm" name="id2563481"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 5929 5926 This is a list of users that should be allowed to login to this service. Names starting with 5930 5927 '@', '+' and '&' are interpreted using the same rules as described in the … … 5942 5939 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 5943 5940 </em></span> 5944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25635 88"></a>5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563571"></a> 5945 5942 5946 5943 -valid (S) 5947 </h3></div></div></div><a class="indexterm" name="id25635 89"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is5944 </h3></div></div></div><a class="indexterm" name="id2563572"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5948 5945 valid and thus can be used. When this parameter is set to false, 5949 5946 the share will be in no way visible nor accessible. … … 5954 5951 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 5955 5952 </em></span> 5956 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25636 38"></a>5953 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563621"></a> 5957 5954 5958 5955 veto files (S) 5959 </h3></div></div></div><a class="indexterm" name="id25636 39"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5956 </h3></div></div></div><a class="indexterm" name="id2563622"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5960 5957 This is a list of files and directories that are neither visible nor accessible. Each entry in 5961 5958 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 5988 5985 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 5989 5986 </em></span> 5990 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25637 57"></a>5987 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563739"></a> 5991 5988 5992 5989 veto oplock files (S) 5993 </h3></div></div></div><a class="indexterm" name="id25637 58"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5990 </h3></div></div></div><a class="indexterm" name="id2563740"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5994 5991 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 5995 5992 parameter is turned on for a share. It allows the Samba administrator … … 6012 6009 # No files are vetoed for oplock grants</code> 6013 6010 </em></span> 6014 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25638 50"></a>6011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563832"></a> 6015 6012 6016 6013 <a name="VFSOBJECT"></a>vfs object 6017 </h3></div></div></div><a class="indexterm" name="id25638 51"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563882"></a>6014 </h3></div></div></div><a class="indexterm" name="id2563834"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563864"></a> 6018 6015 6019 6016 vfs objects (S) 6020 </h3></div></div></div><a class="indexterm" name="id25638 83"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which6017 </h3></div></div></div><a class="indexterm" name="id2563866"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 6021 6018 are used for Samba VFS I/O operations. By default, normal 6022 6019 disk I/O operations are used but these can be overloaded … … 6025 6022 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6026 6023 </em></span> 6027 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25639 42"></a>6024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563924"></a> 6028 6025 6029 6026 volume (S) 6030 </h3></div></div></div><a class="indexterm" name="id25639 43"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label6027 </h3></div></div></div><a class="indexterm" name="id2563926"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 6031 6028 returned for a share. Useful for CDROMs with installation programs 6032 6029 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 6033 6030 # the name of the share</code> 6034 6031 </em></span> 6035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25639 85"></a>6032 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563968"></a> 6036 6033 6037 6034 wide links (S) 6038 </h3></div></div></div><a class="indexterm" name="id25639 86"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6035 </h3></div></div></div><a class="indexterm" name="id2563969"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6039 6036 in the UNIX file system may be followed by the server. Links 6040 6037 that point to areas within the directory tree exported by the … … 6044 6041 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 6045 6042 </em></span> 6046 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25640 38"></a>6043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564020"></a> 6047 6044 6048 6045 winbind cache time (G) 6049 </h3></div></div></div><a class="indexterm" name="id25640 39"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6046 </h3></div></div></div><a class="indexterm" name="id2564021"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6050 6047 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6051 6048 user and group information before querying a Windows NT server … … 6055 6052 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6056 6053 </em></span> 6057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564 109"></a>6054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564092"></a> 6058 6055 6059 6056 winbind enum groups (G) 6060 </h3></div></div></div><a class="indexterm" name="id2564 110"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6057 </h3></div></div></div><a class="indexterm" name="id2564093"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6061 6058 the enumeration of groups through the <code class="literal">setgrent()</code>, 6062 6059 <code class="literal">getgrent()</code> and … … 6066 6063 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6067 6064 </em></span> 6068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564 200"></a>6065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564182"></a> 6069 6066 6070 6067 winbind enum users (G) 6071 </h3></div></div></div><a class="indexterm" name="id2564 201"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be6068 </h3></div></div></div><a class="indexterm" name="id2564184"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 6072 6069 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 6073 6070 <code class="literal">getpwent()</code> and … … 6081 6078 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6082 6079 </em></span> 6083 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25642 93"></a>6080 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564276"></a> 6084 6081 6085 6082 winbind expand groups (G) 6086 </h3></div></div></div><a class="indexterm" name="id25642 94"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6083 </h3></div></div></div><a class="indexterm" name="id2564277"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6087 6084 will traverse when flattening nested group memberships 6088 6085 of Windows domain groups. This is different from the … … 6096 6093 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 6097 6094 </em></span> 6098 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25643 62"></a>6095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564345"></a> 6099 6096 6100 6097 winbind nested groups (G) 6101 </h3></div></div></div><a class="indexterm" name="id25643 63"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested6098 </h3></div></div></div><a class="indexterm" name="id2564346"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 6102 6099 groups. Nested groups are also called local groups or 6103 6100 aliases. They work like their counterparts in Windows: Nested … … 6107 6104 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6108 6105 </em></span> 6109 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564 412"></a>6106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564395"></a> 6110 6107 6111 6108 winbind normalize names (G) 6112 </h3></div></div></div><a class="indexterm" name="id2564 413"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6109 </h3></div></div></div><a class="indexterm" name="id2564396"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6113 6110 whitespace in user and group names with an underscore (_) character. 6114 6111 For example, whether the name "Space Kadet" should be … … 6122 6119 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 6123 6120 </em></span> 6124 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25644 78"></a>6121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564461"></a> 6125 6122 6126 6123 winbind nss info (G) 6127 </h3></div></div></div><a class="indexterm" name="id25644 79"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name6124 </h3></div></div></div><a class="indexterm" name="id2564462"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 6128 6125 Service Information to construct a user's home directory and login shell. 6129 6126 Currently the following settings are available: … … 6147 6144 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 6148 6145 </em></span> 6149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25645 98"></a>6146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564580"></a> 6150 6147 6151 6148 winbind offline logon (G) 6152 </h3></div></div></div><a class="indexterm" name="id25645 99"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6149 </h3></div></div></div><a class="indexterm" name="id2564581"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6153 6150 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6154 6151 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6158 6155 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 6159 6156 </em></span> 6160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25646 67"></a>6157 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564650"></a> 6161 6158 6162 6159 winbind refresh tickets (G) 6163 </h3></div></div></div><a class="indexterm" name="id25646 68"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets6160 </h3></div></div></div><a class="indexterm" name="id2564651"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 6164 6161 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 6165 6162 … … 6168 6165 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6169 6166 </em></span> 6170 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25647 33"></a>6167 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564716"></a> 6171 6168 6172 6169 winbind rpc only (G) 6173 </h3></div></div></div><a class="indexterm" name="id25647 34"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6170 </h3></div></div></div><a class="indexterm" name="id2564717"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6174 6171 Setting this parameter to <code class="literal">yes</code> forces 6175 6172 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6177 6174 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 6178 6175 </em></span> 6179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25647 82"></a>6176 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564765"></a> 6180 6177 6181 6178 winbind separator (G) 6182 </h3></div></div></div><a class="indexterm" name="id25647 83"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character6179 </h3></div></div></div><a class="indexterm" name="id2564766"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 6183 6180 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 6184 6181 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 6191 6188 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6192 6189 </em></span> 6193 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25648 69"></a>6190 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564852"></a> 6194 6191 6195 6192 winbind trusted domains only (G) 6196 </h3></div></div></div><a class="indexterm" name="id25648 70"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6193 </h3></div></div></div><a class="indexterm" name="id2564853"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6197 6194 This parameter is designed to allow Samba servers that are members 6198 6195 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6206 6203 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6207 6204 </em></span> 6208 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25649 48"></a>6205 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564931"></a> 6209 6206 6210 6207 winbind use default domain (G) 6211 </h3></div></div></div><a class="indexterm" name="id25649 49"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6208 </h3></div></div></div><a class="indexterm" name="id2564932"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6212 6209 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6213 6210 without domain component in their username. Users without a domain … … 6219 6216 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 6220 6217 </em></span> 6221 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25650 21"></a>6218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565004"></a> 6222 6219 6223 6220 wins hook (G) 6224 </h3></div></div></div><a class="indexterm" name="id25650 22"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this6221 </h3></div></div></div><a class="indexterm" name="id2565005"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 6225 6222 allows you to call an external program for all changes to the 6226 6223 WINS database. The primary use for this option is to allow the … … 6243 6240 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6244 6241 program <code class="literal">nsupdate</code> is provided in the examples 6245 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25651 27"></a>6242 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565110"></a> 6246 6243 6247 6244 wins proxy (G) 6248 </h3></div></div></div><a class="indexterm" name="id25651 28"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6245 </h3></div></div></div><a class="indexterm" name="id2565111"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6249 6246 queries on behalf of other hosts. You may need to set this 6250 6247 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6251 6248 </em></span> 6252 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25651 82"></a>6249 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565165"></a> 6253 6250 6254 6251 wins server (G) 6255 </h3></div></div></div><a class="indexterm" name="id25651 83"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6252 </h3></div></div></div><a class="indexterm" name="id2565166"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6256 6253 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6257 6254 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6272 6269 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6273 6270 </em></span> 6274 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25652 92"></a>6271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565275"></a> 6275 6272 6276 6273 wins support (G) 6277 </h3></div></div></div><a class="indexterm" name="id25652 94"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6274 </h3></div></div></div><a class="indexterm" name="id2565276"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6278 6275 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6279 6276 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6281 6278 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6282 6279 </em></span> 6283 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25653 62"></a>6280 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565345"></a> 6284 6281 6285 6282 workgroup (G) 6286 </h3></div></div></div><a class="indexterm" name="id25653 63"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6283 </h3></div></div></div><a class="indexterm" name="id2565346"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6287 6284 appear to be in when queried by clients. Note that this parameter 6288 6285 also controls the Domain name used with … … 6292 6289 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6293 6290 </em></span> 6294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25654 34"></a>6291 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565417"></a> 6295 6292 6296 6293 <a name="WRITABLE"></a>writable 6297 </h3></div></div></div><a class="indexterm" name="id25654 35"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565466"></a>6294 </h3></div></div></div><a class="indexterm" name="id2565418"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565449"></a> 6298 6295 6299 6296 writeable (S) 6300 </h3></div></div></div><a class="indexterm" name="id25654 67"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>6301 </em></span> 6302 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25655 17"></a>6297 </h3></div></div></div><a class="indexterm" name="id2565450"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code> 6298 </em></span> 6299 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565500"></a> 6303 6300 6304 6301 write cache size (S) 6305 </h3></div></div></div><a class="indexterm" name="id25655 18"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6302 </h3></div></div></div><a class="indexterm" name="id2565501"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6306 6303 Samba will create an in-memory cache for each oplocked file 6307 6304 (it does <span class="emphasis"><em>not</em></span> do this for … … 6321 6318 # for a 256k cache size per file</code> 6322 6319 </em></span> 6323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565 600"></a>6320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565583"></a> 6324 6321 6325 6322 write list (S) 6326 </h3></div></div></div><a class="indexterm" name="id2565 601"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6323 </h3></div></div></div><a class="indexterm" name="id2565584"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6327 6324 This is a list of users that are given read-write access to a service. If the 6328 6325 connecting user is in this list then they will be given write access, no matter … … 6339 6336 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6340 6337 </em></span> 6341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25656 94"></a>6338 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565676"></a> 6342 6339 6343 6340 write raw (G) 6344 </h3></div></div></div><a class="indexterm" name="id25656 95"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6341 </h3></div></div></div><a class="indexterm" name="id2565678"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6345 6342 will support raw write SMB's when transferring data from clients. 6346 6343 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6347 6344 </em></span> 6348 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25657 38"></a>6345 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565720"></a> 6349 6346 6350 6347 wtmp directory (G) 6351 </h3></div></div></div><a class="indexterm" name="id25657 39"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6348 </h3></div></div></div><a class="indexterm" name="id2565721"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6352 6349 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6353 6350 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6361 6358 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6362 6359 </em></span> 6363 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id25658 21"></a><h2>WARNINGS</h2><p>6360 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2565804"></a><h2>WARNINGS</h2><p> 6364 6361 Although the configuration file permits service names to contain spaces, your client software may not. 6365 6362 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6374 6371 care when designing these sections. In particular, ensure that the permissions on spool directories are 6375 6372 correct. 6376 </p></div><div class="refsect1" lang="en"><a name="id25658 71"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2565882"></a><h2>SEE ALSO</h2><p>6377 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id25659 62"></a><h2>AUTHOR</h2><p>6373 </p></div><div class="refsect1" lang="en"><a name="id2565854"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2565865"></a><h2>SEE ALSO</h2><p> 6374 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2565944"></a><h2>AUTHOR</h2><p> 6378 6375 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6379 6376 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
