Changeset 272 for branches/samba-3.2.x/docs/htmldocs/manpages
- Timestamp:
- Jun 16, 2009, 5:52:30 PM (16 years ago)
- Location:
- branches/samba-3.2.x/docs/htmldocs/manpages
- Files:
-
- 3 edited
-
index.html (modified) (1 diff)
-
net.8.html (modified) (18 diffs)
-
smb.conf.5.html (modified) (53 diffs)
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.2.x/docs/htmldocs/manpages/index.html
r231 r272 26 26 names 27 27 </p></dd><dt><span class="term"><a class="ulink" href="ntlm_auth.1.html" target="_top">ntlm_auth(1)</a></span></dt><dd><p>tool to allow external access to Winbind's NTLM authentication function 28 </p></dd><dt><span class="term"><a class="ulink" href="pam_winbind. 7.html" target="_top">pam_winbind(7)</a></span></dt><dd><p>PAM module for Winbind28 </p></dd><dt><span class="term"><a class="ulink" href="pam_winbind.8.html" target="_top">pam_winbind(8)</a></span></dt><dd><p>PAM module for Winbind 29 29 </p></dd><dt><span class="term"><a class="ulink" href="pdbedit.8.html" target="_top">pdbedit(8)</a></span></dt><dd><p>manage the SAM database (Database of Samba Users) 30 30 </p></dd><dt><span class="term"><a class="ulink" href="profiles.1.html" target="_top">profiles(1)</a></span></dt><dd><p>A utility to report and change SIDs in registry files -
branches/samba-3.2.x/docs/htmldocs/manpages/net.8.html
r231 r272 1 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>net</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="net.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>net — Tool for administration of Samba and remote 2 2 CIFS servers. 3 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">net</code> {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V] </p></div></div><div class="refsect1" lang="en"><a name="id2483409"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The Samba net utility is meant to work just like the net utility3 </p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">net</code> {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V] [--request-timeout seconds]</p></div></div><div class="refsect1" lang="en"><a name="id2483532"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The Samba net utility is meant to work just like the net utility 4 4 available for windows and DOS. The first argument should be used 5 5 to specify the protocol to use when executing a certain command. … … 8 8 argument is omitted, net will try to determine it automatically. 9 9 Not all commands are available on all protocols. 10 </p></div><div class="refsect1" lang="en"><a name="id24835 52"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options.10 </p></div><div class="refsect1" lang="en"><a name="id2483561"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-h|--help</span></dt><dd><p>Print a summary of command line options. 11 11 </p></dd><dt><span class="term">-w target-workgroup</span></dt><dd><p> 12 12 Sets target workgroup or domain. You have to specify … … 42 42 </p></dd><dt><span class="term">-P</span></dt><dd><p> 43 43 Make queries to the external server using the machine account of the local server. 44 </p></dd><dt><span class="term">--request-timeout 30</span></dt><dd><p> 45 Let client requests timeout after 30 seconds the default is 10 46 seconds. 44 47 </p></dd><dt><span class="term">-d|--debuglevel=level</span></dt><dd><p><em class="replaceable"><code>level</code></em> is an integer 45 48 from 0 to 10. The default value if this parameter is … … 55 58 data, most of which is extremely cryptic.</p><p>Note that specifying this parameter here will 56 59 override the <a class="link" href="smb.conf.5.html#LOGLEVEL" target="_top">log level</a> parameter 57 in the <code class="filename">smb.conf</code> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id24815 65"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id2481571"></a><h3>CHANGESECRETPW</h3><p>This command allows the Samba machine account password to be set from an external application60 in the <code class="filename">smb.conf</code> file.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2481584"></a><h2>COMMANDS</h2><div class="refsect2" lang="en"><a name="id2481590"></a><h3>CHANGESECRETPW</h3><p>This command allows the Samba machine account password to be set from an external application 58 61 to a machine account password that has already been stored in Active Directory. DO NOT USE this command 59 62 unless you know exactly what you are doing. The use of this command requires that the force flag (-f) … … 62 65 this without care and attention as it will overwrite a legitimate machine password without warning. 63 66 YOU HAVE BEEN WARNED. 64 </p></div><div class="refsect2" lang="en"><a name="id2481 592"></a><h3>TIME</h3><p>The <code class="literal">NET TIME</code> command allows you to view the time on a remote server65 or synchronise the time on the local server with the time on the remote server.</p><div class="refsect3" lang="en"><a name="id24816 09"></a><h4>TIME</h4><p>Without any options, the <code class="literal">NET TIME</code> command67 </p></div><div class="refsect2" lang="en"><a name="id2481611"></a><h3>TIME</h3><p>The <code class="literal">NET TIME</code> command allows you to view the time on a remote server 68 or synchronise the time on the local server with the time on the remote server.</p><div class="refsect3" lang="en"><a name="id2481628"></a><h4>TIME</h4><p>Without any options, the <code class="literal">NET TIME</code> command 66 69 displays the time on the remote server. 67 </p></div><div class="refsect3" lang="en"><a name="id24816 25"></a><h4>TIME SYSTEM</h4><p>Displays the time on the remote server in a format ready for <code class="literal">/bin/date</code>.</p></div><div class="refsect3" lang="en"><a name="id2481642"></a><h4>TIME SET</h4><p>Tries to set the date and time of the local server to that on68 the remote server using <code class="literal">/bin/date</code>. </p></div><div class="refsect3" lang="en"><a name="id24816 60"></a><h4>TIME ZONE</h4><p>Displays the timezone in hours from GMT on the remote computer.</p></div></div><div class="refsect2" lang="en"><a name="id2481672"></a><h3>[RPC|ADS] JOIN [TYPE] [-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]</h3><p>70 </p></div><div class="refsect3" lang="en"><a name="id2481644"></a><h4>TIME SYSTEM</h4><p>Displays the time on the remote server in a format ready for <code class="literal">/bin/date</code>.</p></div><div class="refsect3" lang="en"><a name="id2481661"></a><h4>TIME SET</h4><p>Tries to set the date and time of the local server to that on 71 the remote server using <code class="literal">/bin/date</code>. </p></div><div class="refsect3" lang="en"><a name="id2481679"></a><h4>TIME ZONE</h4><p>Displays the timezone in hours from GMT on the remote computer.</p></div></div><div class="refsect2" lang="en"><a name="id2481691"></a><h3>[RPC|ADS] JOIN [TYPE] [-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]</h3><p> 69 72 Join a domain. If the account already exists on the server, and 70 73 [TYPE] is MEMBER, the machine will attempt to join automatically. … … 83 86 and ldap, so it may need to be doubled or quadrupled to pass through, 84 87 and it is not used as a delimiter. 85 </p></div><div class="refsect2" lang="en"><a name="id24817 06"></a><h3>[RPC] OLDJOIN [options]</h3><p>Join a domain. Use the OLDJOIN option to join the domain88 </p></div><div class="refsect2" lang="en"><a name="id2481725"></a><h3>[RPC] OLDJOIN [options]</h3><p>Join a domain. Use the OLDJOIN option to join the domain 86 89 using the old style of domain joining - you need to create a trust 87 account in server manager first.</p></div><div class="refsect2" lang="en"><a name="id24817 19"></a><h3>[RPC|ADS] USER</h3><div class="refsect3" lang="en"><a name="id2481724"></a><h4>[RPC|ADS] USER</h4><p>List all users</p></div><div class="refsect3" lang="en"><a name="id2481735"></a><h4>[RPC|ADS] USER DELETE <em class="replaceable"><code>target</code></em></h4><p>Delete specified user</p></div><div class="refsect3" lang="en"><a name="id2481747"></a><h4>[RPC|ADS] USER INFO <em class="replaceable"><code>target</code></em></h4><p>List the domain groups of the specified user.</p></div><div class="refsect3" lang="en"><a name="id2481760"></a><h4>[RPC|ADS] USER RENAME <em class="replaceable"><code>oldname</code></em> <em class="replaceable"><code>newname</code></em></h4><p>Rename specified user.</p></div><div class="refsect3" lang="en"><a name="id2481775"></a><h4>[RPC|ADS] USER ADD <em class="replaceable"><code>name</code></em> [password] [-F user flags] [-C comment]</h4><p>Add specified user.</p></div></div><div class="refsect2" lang="en"><a name="id2481790"></a><h3>[RPC|ADS] GROUP</h3><div class="refsect3" lang="en"><a name="id2481796"></a><h4>[RPC|ADS] GROUP [misc options] [targets]</h4><p>List user groups.</p></div><div class="refsect3" lang="en"><a name="id2481807"></a><h4>[RPC|ADS] GROUP DELETE <em class="replaceable"><code>name</code></em> [misc. options]</h4><p>Delete specified group.</p></div><div class="refsect3" lang="en"><a name="id2481820"></a><h4>[RPC|ADS] GROUP ADD <em class="replaceable"><code>name</code></em> [-C comment]</h4><p>Create specified group.</p></div></div><div class="refsect2" lang="en"><a name="id2481835"></a><h3>[RAP|RPC] SHARE</h3><div class="refsect3" lang="en"><a name="id2481840"></a><h4>[RAP|RPC] SHARE [misc. options] [targets]</h4><p>Enumerates all exported resources (network shares) on target server.</p></div><div class="refsect3" lang="en"><a name="id2481852"></a><h4>[RAP|RPC] SHARE ADD <em class="replaceable"><code>name=serverpath</code></em> [-C comment] [-M maxusers] [targets]</h4><p>Adds a share from a server (makes the export active). Maxusers90 account in server manager first.</p></div><div class="refsect2" lang="en"><a name="id2481738"></a><h3>[RPC|ADS] USER</h3><div class="refsect3" lang="en"><a name="id2481744"></a><h4>[RPC|ADS] USER</h4><p>List all users</p></div><div class="refsect3" lang="en"><a name="id2481754"></a><h4>[RPC|ADS] USER DELETE <em class="replaceable"><code>target</code></em></h4><p>Delete specified user</p></div><div class="refsect3" lang="en"><a name="id2481766"></a><h4>[RPC|ADS] USER INFO <em class="replaceable"><code>target</code></em></h4><p>List the domain groups of the specified user.</p></div><div class="refsect3" lang="en"><a name="id2481779"></a><h4>[RPC|ADS] USER RENAME <em class="replaceable"><code>oldname</code></em> <em class="replaceable"><code>newname</code></em></h4><p>Rename specified user.</p></div><div class="refsect3" lang="en"><a name="id2481794"></a><h4>[RPC|ADS] USER ADD <em class="replaceable"><code>name</code></em> [password] [-F user flags] [-C comment]</h4><p>Add specified user.</p></div></div><div class="refsect2" lang="en"><a name="id2481809"></a><h3>[RPC|ADS] GROUP</h3><div class="refsect3" lang="en"><a name="id2481815"></a><h4>[RPC|ADS] GROUP [misc options] [targets]</h4><p>List user groups.</p></div><div class="refsect3" lang="en"><a name="id2481826"></a><h4>[RPC|ADS] GROUP DELETE <em class="replaceable"><code>name</code></em> [misc. options]</h4><p>Delete specified group.</p></div><div class="refsect3" lang="en"><a name="id2481839"></a><h4>[RPC|ADS] GROUP ADD <em class="replaceable"><code>name</code></em> [-C comment]</h4><p>Create specified group.</p></div></div><div class="refsect2" lang="en"><a name="id2481854"></a><h3>[RAP|RPC] SHARE</h3><div class="refsect3" lang="en"><a name="id2481860"></a><h4>[RAP|RPC] SHARE [misc. options] [targets]</h4><p>Enumerates all exported resources (network shares) on target server.</p></div><div class="refsect3" lang="en"><a name="id2481871"></a><h4>[RAP|RPC] SHARE ADD <em class="replaceable"><code>name=serverpath</code></em> [-C comment] [-M maxusers] [targets]</h4><p>Adds a share from a server (makes the export active). Maxusers 88 91 specifies the number of users that can be connected to the 89 share simultaneously.</p></div><div class="refsect3" lang="en"><a name="id24818 69"></a><h4>SHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p>Delete specified share.</p></div></div><div class="refsect2" lang="en"><a name="id2481882"></a><h3>[RPC|RAP] FILE</h3><div class="refsect3" lang="en"><a name="id2481888"></a><h4>[RPC|RAP] FILE</h4><p>List all open files on remote server.</p></div><div class="refsect3" lang="en"><a name="id2481899"></a><h4>[RPC|RAP] FILE CLOSE <em class="replaceable"><code>fileid</code></em></h4><p>Close file with specified <em class="replaceable"><code>fileid</code></em> on90 remote server.</p></div><div class="refsect3" lang="en"><a name="id24819 15"></a><h4>[RPC|RAP] FILE INFO <em class="replaceable"><code>fileid</code></em></h4><p>92 share simultaneously.</p></div><div class="refsect3" lang="en"><a name="id2481888"></a><h4>SHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p>Delete specified share.</p></div></div><div class="refsect2" lang="en"><a name="id2481901"></a><h3>[RPC|RAP] FILE</h3><div class="refsect3" lang="en"><a name="id2481907"></a><h4>[RPC|RAP] FILE</h4><p>List all open files on remote server.</p></div><div class="refsect3" lang="en"><a name="id2481918"></a><h4>[RPC|RAP] FILE CLOSE <em class="replaceable"><code>fileid</code></em></h4><p>Close file with specified <em class="replaceable"><code>fileid</code></em> on 93 remote server.</p></div><div class="refsect3" lang="en"><a name="id2481934"></a><h4>[RPC|RAP] FILE INFO <em class="replaceable"><code>fileid</code></em></h4><p> 91 94 Print information on specified <em class="replaceable"><code>fileid</code></em>. 92 95 Currently listed are: file-id, username, locks, path, permissions. 93 </p></div><div class="refsect3" lang="en"><a name="id24819 31"></a><h4>[RAP|RPC] FILE USER <em class="replaceable"><code>user</code></em></h4><p>96 </p></div><div class="refsect3" lang="en"><a name="id2481950"></a><h4>[RAP|RPC] FILE USER <em class="replaceable"><code>user</code></em></h4><p> 94 97 List files opened by specified <em class="replaceable"><code>user</code></em>. 95 98 Please note that <code class="literal">net rap file user</code> does not work 96 99 against Samba servers. 97 </p></div></div><div class="refsect2" lang="en"><a name="id24819 55"></a><h3>SESSION</h3><div class="refsect3" lang="en"><a name="id2481961"></a><h4>RAP SESSION</h4><p>Without any other options, SESSION enumerates all active SMB/CIFS98 sessions on the target server.</p></div><div class="refsect3" lang="en"><a name="id24819 72"></a><h4>RAP SESSION DELETE|CLOSE <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Close the specified sessions.</p></div><div class="refsect3" lang="en"><a name="id2481984"></a><h4>RAP SESSION INFO <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Give a list with all the open files in specified session.</p></div></div><div class="refsect2" lang="en"><a name="id2481999"></a><h3>RAP SERVER <em class="replaceable"><code>DOMAIN</code></em></h3><p>List all servers in specified domain or workgroup. Defaults99 to local domain.</p></div><div class="refsect2" lang="en"><a name="id24820 12"></a><h3>RAP DOMAIN</h3><p>Lists all domains and workgroups visible on the100 current network.</p></div><div class="refsect2" lang="en"><a name="id24820 24"></a><h3>RAP PRINTQ</h3><div class="refsect3" lang="en"><a name="id2482029"></a><h4>RAP PRINTQ INFO <em class="replaceable"><code>QUEUE_NAME</code></em></h4><p>Lists the specified print queue and print jobs on the server.100 </p></div></div><div class="refsect2" lang="en"><a name="id2481974"></a><h3>SESSION</h3><div class="refsect3" lang="en"><a name="id2481980"></a><h4>RAP SESSION</h4><p>Without any other options, SESSION enumerates all active SMB/CIFS 101 sessions on the target server.</p></div><div class="refsect3" lang="en"><a name="id2481991"></a><h4>RAP SESSION DELETE|CLOSE <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Close the specified sessions.</p></div><div class="refsect3" lang="en"><a name="id2482003"></a><h4>RAP SESSION INFO <em class="replaceable"><code>CLIENT_NAME</code></em></h4><p>Give a list with all the open files in specified session.</p></div></div><div class="refsect2" lang="en"><a name="id2482018"></a><h3>RAP SERVER <em class="replaceable"><code>DOMAIN</code></em></h3><p>List all servers in specified domain or workgroup. Defaults 102 to local domain.</p></div><div class="refsect2" lang="en"><a name="id2482032"></a><h3>RAP DOMAIN</h3><p>Lists all domains and workgroups visible on the 103 current network.</p></div><div class="refsect2" lang="en"><a name="id2482043"></a><h3>RAP PRINTQ</h3><div class="refsect3" lang="en"><a name="id2482048"></a><h4>RAP PRINTQ INFO <em class="replaceable"><code>QUEUE_NAME</code></em></h4><p>Lists the specified print queue and print jobs on the server. 101 104 If the <em class="replaceable"><code>QUEUE_NAME</code></em> is omitted, all 102 queues are listed.</p></div><div class="refsect3" lang="en"><a name="id2 482047"></a><h4>RAP PRINTQ DELETE <em class="replaceable"><code>JOBID</code></em></h4><p>Delete job with specified id.</p></div></div><div class="refsect2" lang="en"><a name="id2532524"></a><h3>RAP VALIDATE <em class="replaceable"><code>user</code></em> [<em class="replaceable"><code>password</code></em>]</h3><p>105 queues are listed.</p></div><div class="refsect3" lang="en"><a name="id2532529"></a><h4>RAP PRINTQ DELETE <em class="replaceable"><code>JOBID</code></em></h4><p>Delete job with specified id.</p></div></div><div class="refsect2" lang="en"><a name="id2532542"></a><h3>RAP VALIDATE <em class="replaceable"><code>user</code></em> [<em class="replaceable"><code>password</code></em>]</h3><p> 103 106 Validate whether the specified user can log in to the 104 107 remote server. If the password is not specified on the commandline, it 105 108 will be prompted. 106 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id25325 47"></a><h3>RAP GROUPMEMBER</h3><div class="refsect3" lang="en"><a name="id2532552"></a><h4>RAP GROUPMEMBER LIST <em class="replaceable"><code>GROUP</code></em></h4><p>List all members of the specified group.</p></div><div class="refsect3" lang="en"><a name="id2532565"></a><h4>RAP GROUPMEMBER DELETE <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Delete member from group.</p></div><div class="refsect3" lang="en"><a name="id2532580"></a><h4>RAP GROUPMEMBER ADD <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Add member to group.</p></div></div><div class="refsect2" lang="en"><a name="id2532596"></a><h3>RAP ADMIN <em class="replaceable"><code>command</code></em></h3><p>Execute the specified <em class="replaceable"><code>command</code></em> on109 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id2532565"></a><h3>RAP GROUPMEMBER</h3><div class="refsect3" lang="en"><a name="id2532570"></a><h4>RAP GROUPMEMBER LIST <em class="replaceable"><code>GROUP</code></em></h4><p>List all members of the specified group.</p></div><div class="refsect3" lang="en"><a name="id2532583"></a><h4>RAP GROUPMEMBER DELETE <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Delete member from group.</p></div><div class="refsect3" lang="en"><a name="id2532598"></a><h4>RAP GROUPMEMBER ADD <em class="replaceable"><code>GROUP</code></em> <em class="replaceable"><code>USER</code></em></h4><p>Add member to group.</p></div></div><div class="refsect2" lang="en"><a name="id2532614"></a><h3>RAP ADMIN <em class="replaceable"><code>command</code></em></h3><p>Execute the specified <em class="replaceable"><code>command</code></em> on 107 110 the remote server. Only works with OS/2 servers. 108 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id25326 16"></a><h3>RAP SERVICE</h3><div class="refsect3" lang="en"><a name="id2532621"></a><h4>RAP SERVICE START <em class="replaceable"><code>NAME</code></em> [arguments...]</h4><p>Start the specified service on the remote server. Not implemented yet.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect3" lang="en"><a name="id2532640"></a><h4>RAP SERVICE STOP</h4><p>Stop the specified service on the remote server.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div></div><div class="refsect2" lang="en"><a name="id2532656"></a><h3>RAP PASSWORD <em class="replaceable"><code>USER</code></em> <em class="replaceable"><code>OLDPASS</code></em> <em class="replaceable"><code>NEWPASS</code></em></h3><p>111 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect2" lang="en"><a name="id2532634"></a><h3>RAP SERVICE</h3><div class="refsect3" lang="en"><a name="id2532639"></a><h4>RAP SERVICE START <em class="replaceable"><code>NAME</code></em> [arguments...]</h4><p>Start the specified service on the remote server. Not implemented yet.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div><div class="refsect3" lang="en"><a name="id2532658"></a><h4>RAP SERVICE STOP</h4><p>Stop the specified service on the remote server.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Currently NOT implemented.</p></div></div></div><div class="refsect2" lang="en"><a name="id2532674"></a><h3>RAP PASSWORD <em class="replaceable"><code>USER</code></em> <em class="replaceable"><code>OLDPASS</code></em> <em class="replaceable"><code>NEWPASS</code></em></h3><p> 109 112 Change password of <em class="replaceable"><code>USER</code></em> from <em class="replaceable"><code>OLDPASS</code></em> to <em class="replaceable"><code>NEWPASS</code></em>. 110 </p></div><div class="refsect2" lang="en"><a name="id2532 683"></a><h3>LOOKUP</h3><div class="refsect3" lang="en"><a name="id2532689"></a><h4>LOOKUP HOST <em class="replaceable"><code>HOSTNAME</code></em> [<em class="replaceable"><code>TYPE</code></em>]</h4><p>113 </p></div><div class="refsect2" lang="en"><a name="id2532701"></a><h3>LOOKUP</h3><div class="refsect3" lang="en"><a name="id2532707"></a><h4>LOOKUP HOST <em class="replaceable"><code>HOSTNAME</code></em> [<em class="replaceable"><code>TYPE</code></em>]</h4><p> 111 114 Lookup the IP address of the given host with the specified type (netbios suffix). 112 115 The type defaults to 0x20 (workstation). 113 </p></div><div class="refsect3" lang="en"><a name="id25327 07"></a><h4>LOOKUP LDAP [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP address of LDAP server of specified <em class="replaceable"><code>DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id2532724"></a><h4>LOOKUP KDC [<em class="replaceable"><code>REALM</code></em>]</h4><p>Give IP address of KDC for the specified <em class="replaceable"><code>REALM</code></em>.114 Defaults to local realm.</p></div><div class="refsect3" lang="en"><a name="id25327 41"></a><h4>LOOKUP DC [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP's of Domain Controllers for specified <em class="replaceable"><code>115 DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id25327 58"></a><h4>LOOKUP MASTER <em class="replaceable"><code>DOMAIN</code></em></h4><p>Give IP of master browser for specified <em class="replaceable"><code>DOMAIN</code></em>116 or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><a name="id25327 75"></a><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It116 </p></div><div class="refsect3" lang="en"><a name="id2532725"></a><h4>LOOKUP LDAP [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP address of LDAP server of specified <em class="replaceable"><code>DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id2532742"></a><h4>LOOKUP KDC [<em class="replaceable"><code>REALM</code></em>]</h4><p>Give IP address of KDC for the specified <em class="replaceable"><code>REALM</code></em>. 117 Defaults to local realm.</p></div><div class="refsect3" lang="en"><a name="id2532759"></a><h4>LOOKUP DC [<em class="replaceable"><code>DOMAIN</code></em>]</h4><p>Give IP's of Domain Controllers for specified <em class="replaceable"><code> 118 DOMAIN</code></em>. Defaults to local domain.</p></div><div class="refsect3" lang="en"><a name="id2532776"></a><h4>LOOKUP MASTER <em class="replaceable"><code>DOMAIN</code></em></h4><p>Give IP of master browser for specified <em class="replaceable"><code>DOMAIN</code></em> 119 or workgroup. Defaults to local domain.</p></div></div><div class="refsect2" lang="en"><a name="id2532793"></a><h3>CACHE</h3><p>Samba uses a general caching interface called 'gencache'. It 117 120 can be controlled using 'NET CACHE'.</p><p>All the timeout parameters support the suffixes: 118 121 119 122 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>s - Seconds</td></tr><tr><td>m - Minutes</td></tr><tr><td>h - Hours</td></tr><tr><td>d - Days</td></tr><tr><td>w - Weeks</td></tr></table><p> 120 123 121 </p><div class="refsect3" lang="en"><a name="id25328 11"></a><h4>CACHE ADD <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><a name="id2532830"></a><h4>CACHE DEL <em class="replaceable"><code>key</code></em></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><a name="id2532842"></a><h4>CACHE SET <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><a name="id2532861"></a><h4>CACHE SEARCH <em class="replaceable"><code>PATTERN</code></em></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><a name="id2532873"></a><h4>CACHE LIST</h4><p>124 </p><div class="refsect3" lang="en"><a name="id2532829"></a><h4>CACHE ADD <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Add specified key+data to the cache with the given timeout.</p></div><div class="refsect3" lang="en"><a name="id2532848"></a><h4>CACHE DEL <em class="replaceable"><code>key</code></em></h4><p>Delete key from the cache.</p></div><div class="refsect3" lang="en"><a name="id2532860"></a><h4>CACHE SET <em class="replaceable"><code>key</code></em> <em class="replaceable"><code>data</code></em> <em class="replaceable"><code>time-out</code></em></h4><p>Update data of existing cache entry.</p></div><div class="refsect3" lang="en"><a name="id2532879"></a><h4>CACHE SEARCH <em class="replaceable"><code>PATTERN</code></em></h4><p>Search for the specified pattern in the cache data.</p></div><div class="refsect3" lang="en"><a name="id2532891"></a><h4>CACHE LIST</h4><p> 122 125 List all current items in the cache. 123 </p></div><div class="refsect3" lang="en"><a name="id2532 884"></a><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><a name="id2532895"></a><h3>GETLOCALSID [DOMAIN]</h3><p>Prints the SID of the specified domain, or if the parameter is124 omitted, the SID of the local server.</p></div><div class="refsect2" lang="en"><a name="id25329 07"></a><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets SID for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><a name="id2532917"></a><h3>GETDOMAINSID</h3><p>Prints the local machine SID and the SID of the current125 domain.</p></div><div class="refsect2" lang="en"><a name="id25329 28"></a><h3>SETDOMAINSID</h3><p>Sets the SID of the current domain.</p></div><div class="refsect2" lang="en"><a name="id2532938"></a><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups.126 </p></div><div class="refsect3" lang="en"><a name="id2532902"></a><h4>CACHE FLUSH</h4><p>Remove all the current items from the cache.</p></div></div><div class="refsect2" lang="en"><a name="id2532913"></a><h3>GETLOCALSID [DOMAIN]</h3><p>Prints the SID of the specified domain, or if the parameter is 127 omitted, the SID of the local server.</p></div><div class="refsect2" lang="en"><a name="id2532925"></a><h3>SETLOCALSID S-1-5-21-x-y-z</h3><p>Sets SID for the local server to the specified SID.</p></div><div class="refsect2" lang="en"><a name="id2532935"></a><h3>GETDOMAINSID</h3><p>Prints the local machine SID and the SID of the current 128 domain.</p></div><div class="refsect2" lang="en"><a name="id2532946"></a><h3>SETDOMAINSID</h3><p>Sets the SID of the current domain.</p></div><div class="refsect2" lang="en"><a name="id2532956"></a><h3>GROUPMAP</h3><p>Manage the mappings between Windows group SIDs and UNIX groups. 126 129 Common options include:</p><div class="itemizedlist"><ul type="disc"><li><p>unixgroup - Name of the UNIX group</p></li><li><p>ntgroup - Name of the Windows NT group (must be 127 130 resolvable to a SID</p></li><li><p>rid - Unsigned 32-bit integer</p></li><li><p>sid - Full SID in the form of "S-1-..."</p></li><li><p>type - Type of the group; either 'domain', 'local', 128 or 'builtin'</p></li><li><p>comment - Freeform text description of the group</p></li></ul></div><div class="refsect3" lang="en"><a name="id25329 81"></a><h4>GROUPMAP ADD</h4><p>131 or 'builtin'</p></li><li><p>comment - Freeform text description of the group</p></li></ul></div><div class="refsect3" lang="en"><a name="id2532999"></a><h4>GROUPMAP ADD</h4><p> 129 132 Add a new group mapping entry: 130 133 </p><pre class="programlisting"> … … 132 135 [type={domain|local}] [ntgroup=string] [comment=string] 133 136 </pre><p> 134 </p></div><div class="refsect3" lang="en"><a name="id253 2998"></a><h4>GROUPMAP DELETE</h4><p>Delete a group mapping entry. If more than one group name matches, the first entry found is deleted.</p><p>net groupmap delete {ntgroup=string|sid=SID}</p></div><div class="refsect3" lang="en"><a name="id2533013"></a><h4>GROUPMAP MODIFY</h4><p>Update en existing group entry.</p><p>137 </p></div><div class="refsect3" lang="en"><a name="id2533016"></a><h4>GROUPMAP DELETE</h4><p>Delete a group mapping entry. If more than one group name matches, the first entry found is deleted.</p><p>net groupmap delete {ntgroup=string|sid=SID}</p></div><div class="refsect3" lang="en"><a name="id2533031"></a><h4>GROUPMAP MODIFY</h4><p>Update en existing group entry.</p><p> 135 138 </p><pre class="programlisting"> 136 139 net groupmap modify {ntgroup=string|sid=SID} [unixgroup=string] \ 137 140 [comment=string] [type={domain|local}] 138 141 </pre><p> 139 </p></div><div class="refsect3" lang="en"><a name="id25330 33"></a><h4>GROUPMAP LIST</h4><p>List existing group mapping entries.</p><p>net groupmap list [verbose] [ntgroup=string] [sid=SID]</p></div></div><div class="refsect2" lang="en"><a name="id2533049"></a><h3>MAXRID</h3><p>Prints out the highest RID currently in use on the local142 </p></div><div class="refsect3" lang="en"><a name="id2533051"></a><h4>GROUPMAP LIST</h4><p>List existing group mapping entries.</p><p>net groupmap list [verbose] [ntgroup=string] [sid=SID]</p></div></div><div class="refsect2" lang="en"><a name="id2533067"></a><h3>MAXRID</h3><p>Prints out the highest RID currently in use on the local 140 143 server (by the active 'passdb backend'). 141 </p></div><div class="refsect2" lang="en"><a name="id25330 60"></a><h3>RPC INFO</h3><p>Print information about the domain of the remote server,144 </p></div><div class="refsect2" lang="en"><a name="id2533078"></a><h3>RPC INFO</h3><p>Print information about the domain of the remote server, 142 145 such as domain name, domain sid and number of users and groups. 143 </p></div><div class="refsect2" lang="en"><a name="id25330 72"></a><h3>[RPC|ADS] TESTJOIN</h3><p>Check whether participation in a domain is still valid.</p></div><div class="refsect2" lang="en"><a name="id2533083"></a><h3>[RPC|ADS] CHANGETRUSTPW</h3><p>Force change of domain trust password.</p></div><div class="refsect2" lang="en"><a name="id2533093"></a><h3>RPC TRUSTDOM</h3><div class="refsect3" lang="en"><a name="id2533098"></a><h4>RPC TRUSTDOM ADD <em class="replaceable"><code>DOMAIN</code></em></h4><p>Add a interdomain trust account for <em class="replaceable"><code>DOMAIN</code></em>.146 </p></div><div class="refsect2" lang="en"><a name="id2533090"></a><h3>[RPC|ADS] TESTJOIN</h3><p>Check whether participation in a domain is still valid.</p></div><div class="refsect2" lang="en"><a name="id2533101"></a><h3>[RPC|ADS] CHANGETRUSTPW</h3><p>Force change of domain trust password.</p></div><div class="refsect2" lang="en"><a name="id2533111"></a><h3>RPC TRUSTDOM</h3><div class="refsect3" lang="en"><a name="id2533117"></a><h4>RPC TRUSTDOM ADD <em class="replaceable"><code>DOMAIN</code></em></h4><p>Add a interdomain trust account for <em class="replaceable"><code>DOMAIN</code></em>. 144 147 This is in fact a Samba account named <em class="replaceable"><code>DOMAIN$</code></em> 145 148 with the account flag <code class="constant">'I'</code> (interdomain trust account). … … 147 150 <code class="literal">smbpasswd -a -i DOMAIN</code>. Please note that both commands 148 151 expect a appropriate UNIX account. 149 </p></div><div class="refsect3" lang="en"><a name="id25331 30"></a><h4>RPC TRUSTDOM DEL <em class="replaceable"><code>DOMAIN</code></em></h4><p>Remove interdomain trust account for152 </p></div><div class="refsect3" lang="en"><a name="id2533148"></a><h4>RPC TRUSTDOM DEL <em class="replaceable"><code>DOMAIN</code></em></h4><p>Remove interdomain trust account for 150 153 <em class="replaceable"><code>DOMAIN</code></em>. If it is used against localhost 151 154 it has the same effect as <code class="literal">smbpasswd -x DOMAIN$</code>. 152 </p></div><div class="refsect3" lang="en"><a name="id25331 52"></a><h4>RPC TRUSTDOM ESTABLISH <em class="replaceable"><code>DOMAIN</code></em></h4><p>155 </p></div><div class="refsect3" lang="en"><a name="id2533170"></a><h4>RPC TRUSTDOM ESTABLISH <em class="replaceable"><code>DOMAIN</code></em></h4><p> 153 156 Establish a trust relationship to a trusting domain. 154 157 Interdomain account must already be created on the remote PDC. 155 </p></div><div class="refsect3" lang="en"><a name="id25331 66"></a><h4>RPC TRUSTDOM REVOKE <em class="replaceable"><code>DOMAIN</code></em></h4><p>Abandon relationship to trusted domain</p></div><div class="refsect3" lang="en"><a name="id2533178"></a><h4>RPC TRUSTDOM LIST</h4><p>List all current interdomain trust relationships.</p></div><div class="refsect3" lang="en"><a name="id2533189"></a><h4>RPC RIGHTS</h4><p>This subcommand is used to view and manage Samba's rights assignments (also158 </p></div><div class="refsect3" lang="en"><a name="id2533184"></a><h4>RPC TRUSTDOM REVOKE <em class="replaceable"><code>DOMAIN</code></em></h4><p>Abandon relationship to trusted domain</p></div><div class="refsect3" lang="en"><a name="id2533196"></a><h4>RPC TRUSTDOM LIST</h4><p>List all current interdomain trust relationships.</p></div><div class="refsect3" lang="en"><a name="id2533207"></a><h4>RPC RIGHTS</h4><p>This subcommand is used to view and manage Samba's rights assignments (also 156 159 referred to as privileges). There are three options currently available: 157 160 <em class="parameter"><code>list</code></em>, <em class="parameter"><code>grant</code></em>, and 158 161 <em class="parameter"><code>revoke</code></em>. More details on Samba's privilege model and its use 159 can be found in the Samba-HOWTO-Collection.</p></div></div><div class="refsect2" lang="en"><a name="id25332 19"></a><h3>RPC ABORTSHUTDOWN</h3><p>Abort the shutdown of a remote server.</p></div><div class="refsect2" lang="en"><a name="id2533230"></a><h3>RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]</h3><p>Shut down the remote server.</p><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p>162 can be found in the Samba-HOWTO-Collection.</p></div></div><div class="refsect2" lang="en"><a name="id2533238"></a><h3>RPC ABORTSHUTDOWN</h3><p>Abort the shutdown of a remote server.</p></div><div class="refsect2" lang="en"><a name="id2533248"></a><h3>RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]</h3><p>Shut down the remote server.</p><div class="variablelist"><dl><dt><span class="term">-r</span></dt><dd><p> 160 163 Reboot after shutdown. 161 164 </p></dd><dt><span class="term">-f</span></dt><dd><p> … … 165 168 user of the system can use this time to cancel the shutdown. 166 169 </p></dd><dt><span class="term">-C message</span></dt><dd><p>Display the specified message on the screen to 167 announce the shutdown.</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id2533 290"></a><h3>RPC SAMDUMP</h3><p>Print out sam database of remote server. You need168 to run this against the PDC, from a Samba machine joined as a BDC. </p></div><div class="refsect2" lang="en"><a name="id25333 02"></a><h3>RPC VAMPIRE</h3><p>Export users, aliases and groups from remote server to170 announce the shutdown.</p></dd></dl></div></div><div class="refsect2" lang="en"><a name="id2533309"></a><h3>RPC SAMDUMP</h3><p>Print out sam database of remote server. You need 171 to run this against the PDC, from a Samba machine joined as a BDC. </p></div><div class="refsect2" lang="en"><a name="id2533320"></a><h3>RPC VAMPIRE</h3><p>Export users, aliases and groups from remote server to 169 172 local server. You need to run this against the PDC, from a Samba machine joined as a BDC. 170 </p></div><div class="refsect2" lang="en"><a name="id25333 14"></a><h3>RPC GETSID</h3><p>Fetch domain SID and store it in the local <code class="filename">secrets.tdb</code>. </p></div><div class="refsect2" lang="en"><a name="id2533330"></a><h3>ADS LEAVE</h3><p>Make the remote host leave the domain it is part of. </p></div><div class="refsect2" lang="en"><a name="id2533341"></a><h3>ADS STATUS</h3><p>Print out status of machine account of the local machine in ADS.173 </p></div><div class="refsect2" lang="en"><a name="id2533333"></a><h3>RPC GETSID</h3><p>Fetch domain SID and store it in the local <code class="filename">secrets.tdb</code>. </p></div><div class="refsect2" lang="en"><a name="id2533348"></a><h3>ADS LEAVE</h3><p>Make the remote host leave the domain it is part of. </p></div><div class="refsect2" lang="en"><a name="id2533359"></a><h3>ADS STATUS</h3><p>Print out status of machine account of the local machine in ADS. 171 174 Prints out quite some debug info. Aimed at developers, regular 172 users should use <code class="literal">NET ADS TESTJOIN</code>.</p></div><div class="refsect2" lang="en"><a name="id25333 58"></a><h3>ADS PRINTER</h3><div class="refsect3" lang="en"><a name="id2533363"></a><h4>ADS PRINTER INFO [<em class="replaceable"><code>PRINTER</code></em>] [<em class="replaceable"><code>SERVER</code></em>]</h4><p>175 users should use <code class="literal">NET ADS TESTJOIN</code>.</p></div><div class="refsect2" lang="en"><a name="id2533376"></a><h3>ADS PRINTER</h3><div class="refsect3" lang="en"><a name="id2533382"></a><h4>ADS PRINTER INFO [<em class="replaceable"><code>PRINTER</code></em>] [<em class="replaceable"><code>SERVER</code></em>]</h4><p> 173 176 Lookup info for <em class="replaceable"><code>PRINTER</code></em> on <em class="replaceable"><code>SERVER</code></em>. The printer name defaults to "*", the 174 server name defaults to the local host.</p></div><div class="refsect3" lang="en"><a name="id2533 387"></a><h4>ADS PRINTER PUBLISH <em class="replaceable"><code>PRINTER</code></em></h4><p>Publish specified printer using ADS.</p></div><div class="refsect3" lang="en"><a name="id2533400"></a><h4>ADS PRINTER REMOVE <em class="replaceable"><code>PRINTER</code></em></h4><p>Remove specified printer from ADS directory.</p></div></div><div class="refsect2" lang="en"><a name="id2533414"></a><h3>ADS SEARCH <em class="replaceable"><code>EXPRESSION</code></em> <em class="replaceable"><code>ATTRIBUTES...</code></em></h3><p>Perform a raw LDAP search on a ADS server and dump the results. The177 server name defaults to the local host.</p></div><div class="refsect3" lang="en"><a name="id2533405"></a><h4>ADS PRINTER PUBLISH <em class="replaceable"><code>PRINTER</code></em></h4><p>Publish specified printer using ADS.</p></div><div class="refsect3" lang="en"><a name="id2533418"></a><h4>ADS PRINTER REMOVE <em class="replaceable"><code>PRINTER</code></em></h4><p>Remove specified printer from ADS directory.</p></div></div><div class="refsect2" lang="en"><a name="id2533432"></a><h3>ADS SEARCH <em class="replaceable"><code>EXPRESSION</code></em> <em class="replaceable"><code>ATTRIBUTES...</code></em></h3><p>Perform a raw LDAP search on a ADS server and dump the results. The 175 178 expression is a standard LDAP search expression, and the 176 179 attributes are a list of LDAP fields to show in the results.</p><p>Example: <strong class="userinput"><code>net ads search '(objectCategory=group)' sAMAccountName</code></strong> 177 </p></div><div class="refsect2" lang="en"><a name="id25334 41"></a><h3>ADS DN <em class="replaceable"><code>DN</code></em> <em class="replaceable"><code>(attributes)</code></em></h3><p>180 </p></div><div class="refsect2" lang="en"><a name="id2533459"></a><h3>ADS DN <em class="replaceable"><code>DN</code></em> <em class="replaceable"><code>(attributes)</code></em></h3><p> 178 181 Perform a raw LDAP search on a ADS server and dump the results. The 179 182 DN standard LDAP DN, and the attributes are a list of LDAP fields 180 183 to show in the result. 181 </p><p>Example: <strong class="userinput"><code>net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountName</code></strong></p></div><div class="refsect2" lang="en"><a name="id25334 68"></a><h3>ADS WORKGROUP</h3><p>Print out workgroup name for specified kerberos realm.</p></div><div class="refsect2" lang="en"><a name="id2533478"></a><h3>SAM CREATEBUILTINGROUP <NAME></h3><p>184 </p><p>Example: <strong class="userinput"><code>net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountName</code></strong></p></div><div class="refsect2" lang="en"><a name="id2533486"></a><h3>ADS WORKGROUP</h3><p>Print out workgroup name for specified kerberos realm.</p></div><div class="refsect2" lang="en"><a name="id2533496"></a><h3>SAM CREATEBUILTINGROUP <NAME></h3><p> 182 185 (Re)Create a BUILTIN group. 183 186 Only a wellknown set of BUILTIN groups can be created with this command. … … 189 192 This command requires a running Winbindd with idmap allocation properly 190 193 configured. The group gid will be allocated out of the winbindd range. 191 </p></div><div class="refsect2" lang="en"><a name="id2533 497"></a><h3>SAM CREATELOCALGROUP <NAME></h3><p>194 </p></div><div class="refsect2" lang="en"><a name="id2533515"></a><h3>SAM CREATELOCALGROUP <NAME></h3><p> 192 195 Create a LOCAL group (also known as Alias). 193 196 194 197 This command requires a running Winbindd with idmap allocation properly 195 198 configured. The group gid will be allocated out of the winbindd range. 196 </p></div><div class="refsect2" lang="en"><a name="id25335 11"></a><h3>SAM DELETELOCALGROUP <NAME></h3><p>199 </p></div><div class="refsect2" lang="en"><a name="id2533529"></a><h3>SAM DELETELOCALGROUP <NAME></h3><p> 197 200 Delete an existing LOCAL group (also known as Alias). 198 201 199 </p></div><div class="refsect2" lang="en"><a name="id25335 22"></a><h3>SAM MAPUNIXGROUP <NAME></h3><p>202 </p></div><div class="refsect2" lang="en"><a name="id2533540"></a><h3>SAM MAPUNIXGROUP <NAME></h3><p> 200 203 Map an existing Unix group and make it a Domain Group, the domain group 201 204 will have the same name. 202 </p></div><div class="refsect2" lang="en"><a name="id25335 34"></a><h3>SAM UNMAPUNIXGROUP <NAME></h3><p>205 </p></div><div class="refsect2" lang="en"><a name="id2533553"></a><h3>SAM UNMAPUNIXGROUP <NAME></h3><p> 203 206 Remove an existing group mapping entry. 204 </p></div><div class="refsect2" lang="en"><a name="id25335 46"></a><h3>SAM ADDMEM <GROUP> <MEMBER></h3><p>207 </p></div><div class="refsect2" lang="en"><a name="id2533564"></a><h3>SAM ADDMEM <GROUP> <MEMBER></h3><p> 205 208 Add a member to a Local group. The group can be specified only by name, 206 209 the member can be specified by name or SID. 207 </p></div><div class="refsect2" lang="en"><a name="id25335 59"></a><h3>SAM DELMEM <GROUP> <MEMBER></h3><p>210 </p></div><div class="refsect2" lang="en"><a name="id2533577"></a><h3>SAM DELMEM <GROUP> <MEMBER></h3><p> 208 211 Remove a member from a Local group. The group and the member must be 209 212 specified by name. 210 </p></div><div class="refsect2" lang="en"><a name="id25335 71"></a><h3>SAM LISTMEM <GROUP></h3><p>213 </p></div><div class="refsect2" lang="en"><a name="id2533589"></a><h3>SAM LISTMEM <GROUP></h3><p> 211 214 List Local group members. The group must be specified by name. 212 </p></div><div class="refsect2" lang="en"><a name="id2533 582"></a><h3>SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]</h3><p>215 </p></div><div class="refsect2" lang="en"><a name="id2533600"></a><h3>SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]</h3><p> 213 216 List the specified set of accounts by name. If verbose is specified, 214 217 the rid and description is also provided for each account. 215 </p></div><div class="refsect2" lang="en"><a name="id2533 596"></a><h3>SAM SHOW <NAME></h3><p>218 </p></div><div class="refsect2" lang="en"><a name="id2533614"></a><h3>SAM SHOW <NAME></h3><p> 216 219 Show the full DOMAIN\\NAME the SID and the type for the corresponding 217 220 account. 218 </p></div><div class="refsect2" lang="en"><a name="id25336 07"></a><h3>SAM SET HOMEDIR <NAME> <DIRECTORY></h3><p>221 </p></div><div class="refsect2" lang="en"><a name="id2533625"></a><h3>SAM SET HOMEDIR <NAME> <DIRECTORY></h3><p> 219 222 Set the home directory for a user account. 220 </p></div><div class="refsect2" lang="en"><a name="id25336 18"></a><h3>SAM SET PROFILEPATH <NAME> <PATH></h3><p>223 </p></div><div class="refsect2" lang="en"><a name="id2533636"></a><h3>SAM SET PROFILEPATH <NAME> <PATH></h3><p> 221 224 Set the profile path for a user account. 222 </p></div><div class="refsect2" lang="en"><a name="id25336 29"></a><h3>SAM SET COMMENT <NAME> <COMMENT></h3><p>225 </p></div><div class="refsect2" lang="en"><a name="id2533647"></a><h3>SAM SET COMMENT <NAME> <COMMENT></h3><p> 223 226 Set the comment for a user or group account. 224 </p></div><div class="refsect2" lang="en"><a name="id25336 39"></a><h3>SAM SET FULLNAME <NAME> <FULL NAME></h3><p>227 </p></div><div class="refsect2" lang="en"><a name="id2533657"></a><h3>SAM SET FULLNAME <NAME> <FULL NAME></h3><p> 225 228 Set the full name for a user account. 226 </p></div><div class="refsect2" lang="en"><a name="id25336 50"></a><h3>SAM SET LOGONSCRIPT <NAME> <SCRIPT></h3><p>229 </p></div><div class="refsect2" lang="en"><a name="id2533669"></a><h3>SAM SET LOGONSCRIPT <NAME> <SCRIPT></h3><p> 227 230 Set the logon script for a user account. 228 </p></div><div class="refsect2" lang="en"><a name="id25336 62"></a><h3>SAM SET HOMEDRIVE <NAME> <DRIVE></h3><p>231 </p></div><div class="refsect2" lang="en"><a name="id2533680"></a><h3>SAM SET HOMEDRIVE <NAME> <DRIVE></h3><p> 229 232 Set the home drive for a user account. 230 </p></div><div class="refsect2" lang="en"><a name="id25336 73"></a><h3>SAM SET WORKSTATIONS <NAME> <WORKSTATIONS></h3><p>233 </p></div><div class="refsect2" lang="en"><a name="id2533691"></a><h3>SAM SET WORKSTATIONS <NAME> <WORKSTATIONS></h3><p> 231 234 Set the workstations a user account is allowed to log in from. 232 </p></div><div class="refsect2" lang="en"><a name="id2533 685"></a><h3>SAM SET DISABLE <NAME></h3><p>235 </p></div><div class="refsect2" lang="en"><a name="id2533703"></a><h3>SAM SET DISABLE <NAME></h3><p> 233 236 Set the "disabled" flag for a user account. 234 </p></div><div class="refsect2" lang="en"><a name="id2533 696"></a><h3>SAM SET PWNOTREQ <NAME></h3><p>237 </p></div><div class="refsect2" lang="en"><a name="id2533714"></a><h3>SAM SET PWNOTREQ <NAME></h3><p> 235 238 Set the "password not required" flag for a user account. 236 </p></div><div class="refsect2" lang="en"><a name="id25337 07"></a><h3>SAM SET AUTOLOCK <NAME></h3><p>239 </p></div><div class="refsect2" lang="en"><a name="id2533725"></a><h3>SAM SET AUTOLOCK <NAME></h3><p> 237 240 Set the "autolock" flag for a user account. 238 </p></div><div class="refsect2" lang="en"><a name="id25337 19"></a><h3>SAM SET PWNOEXP <NAME></h3><p>241 </p></div><div class="refsect2" lang="en"><a name="id2533737"></a><h3>SAM SET PWNOEXP <NAME></h3><p> 239 242 Set the "password do not expire" flag for a user account. 240 </p></div><div class="refsect2" lang="en"><a name="id25337 30"></a><h3>SAM SET PWDMUSTCHANGENOW <NAME> [yes|no]</h3><p>243 </p></div><div class="refsect2" lang="en"><a name="id2533748"></a><h3>SAM SET PWDMUSTCHANGENOW <NAME> [yes|no]</h3><p> 241 244 Set or unset the "password must change" flag for a user account. 242 </p></div><div class="refsect2" lang="en"><a name="id25337 42"></a><h3>SAM POLICY LIST</h3><p>245 </p></div><div class="refsect2" lang="en"><a name="id2533760"></a><h3>SAM POLICY LIST</h3><p> 243 246 List the available account policies. 244 </p></div><div class="refsect2" lang="en"><a name="id25337 52"></a><h3>SAM POLICY SHOW <account policy></h3><p>247 </p></div><div class="refsect2" lang="en"><a name="id2533770"></a><h3>SAM POLICY SHOW <account policy></h3><p> 245 248 Show the account policy value. 246 </p></div><div class="refsect2" lang="en"><a name="id25337 63"></a><h3>SAM POLICY SET <account policy> <value></h3><p>249 </p></div><div class="refsect2" lang="en"><a name="id2533781"></a><h3>SAM POLICY SET <account policy> <value></h3><p> 247 250 Set a value for the account policy. 248 251 Valid values can be: "forever", "never", "off", or a number. 249 </p></div><div class="refsect2" lang="en"><a name="id25337 76"></a><h3>SAM PROVISION</h3><p>252 </p></div><div class="refsect2" lang="en"><a name="id2533794"></a><h3>SAM PROVISION</h3><p> 250 253 Only available if ldapsam:editposix is set and winbindd is running. 251 254 Properly populates the ldap tree with the basic accounts (Administrator) 252 255 and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree. 253 </p></div><div class="refsect2" lang="en"><a name="id2533 789"></a><h3>IDMAP DUMP <local tdb file name></h3><p>256 </p></div><div class="refsect2" lang="en"><a name="id2533807"></a><h3>IDMAP DUMP <local tdb file name></h3><p> 254 257 Dumps the mappings contained in the local tdb file specified. 255 258 This command is useful to dump only the mappings produced by the idmap_tdb backend. 256 </p></div><div class="refsect2" lang="en"><a name="id25338 03"></a><h3>IDMAP RESTORE [input file]</h3><p>259 </p></div><div class="refsect2" lang="en"><a name="id2533821"></a><h3>IDMAP RESTORE [input file]</h3><p> 257 260 Restore the mappings from the specified file or stdin. 258 </p></div><div class="refsect2" lang="en"><a name="id25338 14"></a><h3>IDMAP SECRET <DOMAIN>|ALLOC <secret></h3><p>261 </p></div><div class="refsect2" lang="en"><a name="id2533832"></a><h3>IDMAP SECRET <DOMAIN>|ALLOC <secret></h3><p> 259 262 Store a secret for the specified domain, used primarily for domains 260 263 that use idmap_ldap as a backend. In this case the secret is used 261 264 as the password for the user DN used to bind to the ldap server. 262 </p></div><div class="refsect2" lang="en"><a name="id25338 28"></a><h3>USERSHARE</h3><p>Starting with version 3.0.23, a Samba server now supports the ability for265 </p></div><div class="refsect2" lang="en"><a name="id2533846"></a><h3>USERSHARE</h3><p>Starting with version 3.0.23, a Samba server now supports the ability for 263 266 non-root users to add user defined shares to be exported using the "net usershare" 264 267 commands. … … 289 292 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] - to add or change a user defined share.</td></tr><tr><td>net usershare delete sharename - to delete a user defined share.</td></tr><tr><td>net usershare info [-l|--long] [wildcard sharename] - to print info about a user defined share.</td></tr><tr><td>net usershare list [-l|--long] [wildcard sharename] - to list user defined shares.</td></tr></table><p> 290 293 291 </p><div class="refsect3" lang="en"><a name="id2 533886"></a><h4>USERSHARE ADD <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>[comment]</code></em> <em class="replaceable"><code>[acl]</code></em> <em class="replaceable"><code>[guest_ok=[y|n]]</code></em></h4><p>294 </p><div class="refsect3" lang="en"><a name="id2481377"></a><h4>USERSHARE ADD <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> <em class="replaceable"><code>[comment]</code></em> <em class="replaceable"><code>[acl]</code></em> <em class="replaceable"><code>[guest_ok=[y|n]]</code></em></h4><p> 292 295 Add or replace a new user defined share, with name "sharename". 293 296 </p><p> … … 326 329 at connect time so will see the change immediately, there is no need 327 330 to restart smbd on adding, deleting or changing a user defined share. 328 </div><div class="refsect3" lang="en"><a name="id2 533958"></a><h4>USERSHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p>331 </div><div class="refsect3" lang="en"><a name="id2481451"></a><h4>USERSHARE DELETE <em class="replaceable"><code>sharename</code></em></h4><p> 329 332 Deletes the user defined share by name. The Samba smbd daemon 330 333 immediately notices this change, although it will not disconnect 331 334 any users currently connected to the deleted share. 332 </p></div><div class="refsect3" lang="en"><a name="id2 533973"></a><h4>USERSHARE INFO <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>[wildcard sharename]</code></em></h4><p>335 </p></div><div class="refsect3" lang="en"><a name="id2481467"></a><h4>USERSHARE INFO <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>[wildcard sharename]</code></em></h4><p> 333 336 Get info on user defined shares owned by the current user matching the given pattern, or all users. 334 337 </p><p> … … 349 352 And is a list of the current settings of the user defined share that can be 350 353 modified by the "net usershare add" command. 351 </p></div><div class="refsect3" lang="en"><a name="id2534 007"></a><h4>USERSHARE LIST <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>wildcard sharename</code></em></h4><p>354 </p></div><div class="refsect3" lang="en"><a name="id2534165"></a><h4>USERSHARE LIST <em class="replaceable"><code>[-l|--long]</code></em> <em class="replaceable"><code>wildcard sharename</code></em></h4><p> 352 355 List all the user defined shares owned by the current user matching the given pattern, or all users. 353 356 </p><p> … … 357 360 If the '-l' or '--long' option is also given, it includes the names of user defined 358 361 shares created by other users. 359 </p></div></div><div class="refsect2" lang="en"><a name="id2534 040"></a><h3>CONF</h3><p>Starting with version 3.2.0, a Samba server can be configured by data362 </p></div></div><div class="refsect2" lang="en"><a name="id2534192"></a><h3>CONF</h3><p>Starting with version 3.2.0, a Samba server can be configured by data 360 363 stored in registry. This configuration data can be edited with the new "net 361 364 conf" commands. … … 375 378 format.</td></tr><tr><td>net conf listshares - List the registry shares.</td></tr><tr><td>net conf drop - Delete the complete configuration from 376 379 registry.</td></tr><tr><td>net conf showshare - Show the definition of a registry share.</td></tr><tr><td>net conf addshare - Create a new registry share.</td></tr><tr><td>net conf delshare - Delete a registry share.</td></tr><tr><td>net conf setparm - Store a parameter.</td></tr><tr><td>net conf getparm - Retrieve the value of a parameter.</td></tr><tr><td>net conf delparm - Delete a parameter.</td></tr><tr><td>net conf getincludes - Show the includes of a share definition.</td></tr><tr><td>net conf setincludes - Set includes for a share.</td></tr><tr><td>net conf delincludes - Delete includes from a share definition.</td></tr></table><p> 377 </p><div class="refsect3" lang="en"><a name="id2534 161"></a><h4>CONF LIST</h4><p>380 </p><div class="refsect3" lang="en"><a name="id2534313"></a><h4>CONF LIST</h4><p> 378 381 Print the configuration data stored in the registry in a smb.conf-like format to 379 382 standard output. 380 </p></div><div class="refsect3" lang="en"><a name="id2534 172"></a><h4>CONF IMPORT <em class="replaceable"><code>[--test|-T]</code></em> <em class="replaceable"><code>filename</code></em> <em class="replaceable"><code>[section]</code></em></h4><p>383 </p></div><div class="refsect3" lang="en"><a name="id2534324"></a><h4>CONF IMPORT <em class="replaceable"><code>[--test|-T]</code></em> <em class="replaceable"><code>filename</code></em> <em class="replaceable"><code>[section]</code></em></h4><p> 381 384 This command imports configuration from a file in smb.conf format. 382 385 If a section encountered in the input file is present in registry, … … 388 391 the parameter "-T" on the commandline. In test mode, no changes are made to the 389 392 registry, and the resulting configuration is printed to standard output instead. 390 </p></div><div class="refsect3" lang="en"><a name="id2534 202"></a><h4>CONF LISTSHARES</h4><p>393 </p></div><div class="refsect3" lang="en"><a name="id2534354"></a><h4>CONF LISTSHARES</h4><p> 391 394 List the names of the shares defined in registry. 392 </p></div><div class="refsect3" lang="en"><a name="id2534 212"></a><h4>CONF DROP</h4><p>395 </p></div><div class="refsect3" lang="en"><a name="id2534364"></a><h4>CONF DROP</h4><p> 393 396 Delete the complete configuration data from registry. 394 </p></div><div class="refsect3" lang="en"><a name="id2534 223"></a><h4>CONF SHOWSHARE <em class="replaceable"><code>sharename</code></em></h4><p>397 </p></div><div class="refsect3" lang="en"><a name="id2534375"></a><h4>CONF SHOWSHARE <em class="replaceable"><code>sharename</code></em></h4><p> 395 398 Show the definition of the share or section specified. It is valid to specify 396 399 "global" as sharename to retrieve the global configuration options from 397 400 registry. 398 </p></div><div class="refsect3" lang="en"><a name="id2534 238"></a><h4>CONF ADDSHARE <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> [<em class="replaceable"><code>writeable={y|N}</code></em> [<em class="replaceable"><code>guest_ok={y|N}</code></em> [<em class="replaceable"><code>comment</code></em>]]] </h4><p>Create a new share definition in registry.401 </p></div><div class="refsect3" lang="en"><a name="id2534389"></a><h4>CONF ADDSHARE <em class="replaceable"><code>sharename</code></em> <em class="replaceable"><code>path</code></em> [<em class="replaceable"><code>writeable={y|N}</code></em> [<em class="replaceable"><code>guest_ok={y|N}</code></em> [<em class="replaceable"><code>comment</code></em>]]] </h4><p>Create a new share definition in registry. 399 402 The sharename and path have to be given. The share name may 400 403 <span class="emphasis"><em>not</em></span> be "global". Optionally, values for the very … … 402 405 The same result may be obtained by a sequence of "net conf setparm" 403 406 commands. 404 </p></div><div class="refsect3" lang="en"><a name="id2534 272"></a><h4>CONF DELSHARE <em class="replaceable"><code>sharename</code></em></h4><p>407 </p></div><div class="refsect3" lang="en"><a name="id2534423"></a><h4>CONF DELSHARE <em class="replaceable"><code>sharename</code></em></h4><p> 405 408 Delete a share definition from registry. 406 </p></div><div class="refsect3" lang="en"><a name="id2534 284"></a><h4>CONF SETPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em> <em class="replaceable"><code>value</code></em></h4><p>409 </p></div><div class="refsect3" lang="en"><a name="id2534436"></a><h4>CONF SETPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em> <em class="replaceable"><code>value</code></em></h4><p> 407 410 Store a parameter in registry. The section may be global or a sharename. 408 411 The section is created if it does not exist yet. 409 </p></div><div class="refsect3" lang="en"><a name="id2534 304"></a><h4>CONF GETPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em></h4><p>412 </p></div><div class="refsect3" lang="en"><a name="id2534456"></a><h4>CONF GETPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em></h4><p> 410 413 Show a parameter stored in registry. 411 </p></div><div class="refsect3" lang="en"><a name="id2534 320"></a><h4>CONF DELPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em></h4><p>414 </p></div><div class="refsect3" lang="en"><a name="id2534472"></a><h4>CONF DELPARM <em class="replaceable"><code>section</code></em> <em class="replaceable"><code>parameter</code></em></h4><p> 412 415 Delete a parameter stored in registry. 413 </p></div><div class="refsect3" lang="en"><a name="id2534 336"></a><h4>CONF GETINCLUDES <em class="replaceable"><code>section</code></em></h4><p>416 </p></div><div class="refsect3" lang="en"><a name="id2534488"></a><h4>CONF GETINCLUDES <em class="replaceable"><code>section</code></em></h4><p> 414 417 Get the list of includes for the provided section (global or share). 415 418 </p><p> … … 427 430 configuration. In the future, there will be the ability to include configuration 428 431 data from other registry keys. 429 </p></div><div class="refsect3" lang="en"><a name="id2534 371"></a><h4>CONF SETINCLUDES <em class="replaceable"><code>section</code></em> [<em class="replaceable"><code>filename</code></em>]+</h4><p>432 </p></div><div class="refsect3" lang="en"><a name="id2534523"></a><h4>CONF SETINCLUDES <em class="replaceable"><code>section</code></em> [<em class="replaceable"><code>filename</code></em>]+</h4><p> 430 433 Set the list of includes for the provided section (global or share) to the given 431 434 list of one or more filenames. The filenames may contain the usual smb.conf 432 435 macros like %I. 433 </p></div><div class="refsect3" lang="en"><a name="id2534 390"></a><h4>CONF DELINCLUDES <em class="replaceable"><code>section</code></em></h4><p>436 </p></div><div class="refsect3" lang="en"><a name="id2534542"></a><h4>CONF DELINCLUDES <em class="replaceable"><code>section</code></em></h4><p> 434 437 Delete the list of includes from the provided section (global or share). 435 </p></div></div><div class="refsect2" lang="en"><a name="id2534404"></a><h3>HELP [COMMAND]</h3><p>Gives usage information for the specified command.</p></div></div><div class="refsect1" lang="en"><a name="id2534416"></a><h2>VERSION</h2><p>This man page is complete for version 3 of the Samba 436 suite.</p></div><div class="refsect1" lang="en"><a name="id2534426"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 438 </p></div></div><div class="refsect2" lang="en"><a name="id2534556"></a><h3>DOM</h3><p>Starting with version 3.2.0 Samba has support for remote join and unjoin APIs, both client and server-side. Windows supports remote join capabilities since Windows 2000. 439 </p><p>In order for Samba to be joined or unjoined remotely an account must be used that is either member of the Domain Admins group, a member of the local Administrators group or a user that is granted the SeMachineAccountPrivilege privilege. 440 </p><p>The client side support for remote join is implemented in the net dom commands which are: 441 </p><table class="simplelist" border="0" summary="Simple list"><tr><td>net dom join - Join a remote computer into a domain.</td></tr><tr><td>net dom unjoin - Unjoin a remote computer from a domain.</td></tr></table><p> 442 </p><div class="refsect3" lang="en"><a name="id2534593"></a><h4>DOM JOIN <em class="replaceable"><code>domain=DOMAIN</code></em> <em class="replaceable"><code>ou=OU</code></em> <em class="replaceable"><code>account=ACCOUNT</code></em> <em class="replaceable"><code>password=PASSWORD</code></em> <em class="replaceable"><code>reboot</code></em></h4><p> 443 Joins a computer into a domain. This command supports the following additional parameters: 444 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="replaceable"><code>DOMAIN</code></em> can be a NetBIOS domain name (also known as short domain name) or a DNS domain name for Active Directory Domains. As in Windows, it is also possible to control which Domain Controller to use. This can be achieved by appending the DC name using the \ separator character. Example: MYDOM\MYDC. The <em class="replaceable"><code>DOMAIN</code></em> parameter cannot be NULL.</p></li><li><p><em class="replaceable"><code>OU</code></em> can be set to a RFC 1779 LDAP DN, like <span class="emphasis"><em>ou=mymachines,cn=Users,dc=example,dc=com</em></span> in order to create the machine account in a non-default LDAP containter. This optional parameter is only supported when joining Active Directory Domains.</p></li><li><p><em class="replaceable"><code>ACCOUNT</code></em> defines a domain account that will be used to join the machine to the domain. This domain account needs to have sufficient privileges to join machines.</p></li><li><p><em class="replaceable"><code>PASSWORD</code></em> defines the password for the domain account defined with <em class="replaceable"><code>ACCOUNT</code></em>.</p></li><li><p><em class="replaceable"><code>REBOOT</code></em> is an optional parameter that can be set to reboot the remote machine after successful join to the domain.</p></li></ul></div><p> 445 Note that you also need to use standard net paramters to connect and authenticate to the remote machine that you want to join. These additional parameters include: -S computer and -U user. 446 </p><p> 447 Example: 448 net dom join -S xp -U XP\\administrator%secret domain=MYDOM account=MYDOM\\administrator password=topsecret reboot. 449 </p><p> 450 This example would connect to a computer named XP as the local administrator using password secret, and join the computer into a domain called MYDOM using the MYDOM domain administrator account and password topsecret. After successful join, the computer would reboot. 451 </p></div><div class="refsect3" lang="en"><a name="id2534699"></a><h4>DOM UNJOIN <em class="replaceable"><code>account=ACCOUNT</code></em> <em class="replaceable"><code>password=PASSWORD</code></em> <em class="replaceable"><code>reboot</code></em></h4><p> 452 Unjoins a computer from a domain. This command supports the following additional parameters: 453 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="replaceable"><code>ACCOUNT</code></em> defines a domain account that will be used to unjoin the machine from the domain. This domain account needs to have sufficient privileges to unjoin machines.</p></li><li><p><em class="replaceable"><code>PASSWORD</code></em> defines the password for the domain account defined with <em class="replaceable"><code>ACCOUNT</code></em>.</p></li><li><p><em class="replaceable"><code>REBOOT</code></em> is an optional parameter that can be set to reboot the remote machine after successful unjoin from the domain.</p></li></ul></div><p> 454 Note that you also need to use standard net paramters to connect and authenticate to the remote machine that you want to unjoin. These additional parameters include: -S computer and -U user. 455 </p><p> 456 Example: 457 net dom unjoin -S xp -U XP\\administrator%secret account=MYDOM\\administrator password=topsecret reboot. 458 </p><p> 459 This example would connect to a computer named XP as the local administrator using password secret, and unjoin the computer from the domain using the MYDOM domain administrator account and password topsecret. After successful unjoin, the computer would reboot. 460 </p></div></div><div class="refsect2" lang="en"><a name="id2534771"></a><h3>HELP [COMMAND]</h3><p>Gives usage information for the specified command.</p></div></div><div class="refsect1" lang="en"><a name="id2534783"></a><h2>VERSION</h2><p>This man page is complete for version 3 of the Samba 461 suite.</p></div><div class="refsect1" lang="en"><a name="id2534793"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities 437 462 were created by Andrew Tridgell. Samba is now developed 438 463 by the Samba Team as an Open Source project similar -
branches/samba-3.2.x/docs/htmldocs/manpages/smb.conf.5.html
r233 r272 366 366 </h3></div></div></div><a class="indexterm" name="id2533431"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 367 367 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 368 right, this command will be run as user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code>368 right, this command will be run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> 369 369 </em></span> 370 370 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> … … 5211 5211 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5212 5212 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 5213 right, this command will be run as user.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%z</code></em> will be substituted with the5213 right, this command will be run as root.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%z</code></em> will be substituted with the 5214 5214 shutdown message sent to the server.</p></li><li><p><em class="parameter"><code>%t</code></em> will be substituted with the 5215 5215 number of seconds to wait before effectively starting the … … 5221 5221 </p><pre class="programlisting"> 5222 5222 #!/bin/bash 5223 5224 $time=0 5225 let "time/60"5226 let "time++"5223 5224 time=$2 5225 let time="${time} / 60" 5226 let time="${time} + 1" 5227 5227 5228 5228 /sbin/shutdown $3 $4 +$time $1 & 5229 5229 5230 </pre><p> 5230 5231 Shutdown does not return so we need to launch it in background. … … 5233 5234 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5234 5235 </em></span> 5235 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256026 7"></a>5236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560268"></a> 5236 5237 5237 5238 smb encrypt (S) 5238 </h3></div></div></div><a class="indexterm" name="id256026 8"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5239 </h3></div></div></div><a class="indexterm" name="id2560269"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5239 5240 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5240 5241 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5264 5265 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5265 5266 </em></span> 5266 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256037 3"></a>5267 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560374"></a> 5267 5268 5268 5269 smb passwd file (G) 5269 </h3></div></div></div><a class="indexterm" name="id256037 4"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5270 </h3></div></div></div><a class="indexterm" name="id2560375"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5270 5271 default the path to the smbpasswd file is compiled into Samba.</p><p> 5271 5272 An example of use is: … … 5275 5276 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5276 5277 </em></span> 5277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256042 7"></a>5278 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560428"></a> 5278 5279 5279 5280 smb ports (G) 5280 </h3></div></div></div><a class="indexterm" name="id256042 8"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5281 </h3></div></div></div><a class="indexterm" name="id2560429"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5281 5282 </em></span> 5282 5283 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560469"></a> … … 5292 5293 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5293 5294 </em></span> 5294 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25605 39"></a>5295 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560540"></a> 5295 5296 5296 5297 socket options (G) 5297 </h3></div></div></div><a class="indexterm" name="id256054 0"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5298 </h3></div></div></div><a class="indexterm" name="id2560541"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5298 5299 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5299 5300 of the operating systems which allow the connection to be … … 5323 5324 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5324 5325 </em></span> 5325 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25607 49"></a>5326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560750"></a> 5326 5327 5327 5328 stat cache (G) 5328 </h3></div></div></div><a class="indexterm" name="id256075 0"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5329 </h3></div></div></div><a class="indexterm" name="id2560751"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5329 5330 speed up case insensitive name mappings. You should never need 5330 5331 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> … … 5345 5346 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5346 5347 </em></span> 5347 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256092 2"></a>5348 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560923"></a> 5348 5349 5349 5350 strict allocate (S) 5350 </h3></div></div></div><a class="indexterm" name="id256092 3"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5351 </h3></div></div></div><a class="indexterm" name="id2560924"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5351 5352 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5352 5353 the server will change from UNIX behaviour of not committing real … … 5379 5380 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5380 5381 </em></span> 5381 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256107 2"></a>5382 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561073"></a> 5382 5383 5383 5384 strict sync (S) 5384 </h3></div></div></div><a class="indexterm" name="id256107 3"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5385 </h3></div></div></div><a class="indexterm" name="id2561074"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5385 5386 shell) seem to confuse flushing buffer contents to disk with doing 5386 5387 a sync to disk. Under UNIX, a sync call forces the process to be … … 5396 5397 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5397 5398 </em></span> 5398 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256113 7"></a>5399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561138"></a> 5399 5400 5400 5401 svcctl list (G) 5401 </h3></div></div></div><a class="indexterm" name="id256113 8"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5402 </h3></div></div></div><a class="indexterm" name="id2561139"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5402 5403 will use for starting and stopping Unix services via the Win32 5403 5404 ServiceControl API. This allows Windows administrators to … … 5412 5413 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5413 5414 </em></span> 5414 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256122 2"></a>5415 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561223"></a> 5415 5416 5416 5417 sync always (S) 5417 </h3></div></div></div><a class="indexterm" name="id256122 3"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5418 </h3></div></div></div><a class="indexterm" name="id2561224"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5418 5419 whether writes will always be written to stable storage before 5419 5420 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5426 5427 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5427 5428 </em></span> 5428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256129 3"></a>5429 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561294"></a> 5429 5430 5430 5431 syslog only (G) 5431 </h3></div></div></div><a class="indexterm" name="id256129 4"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5432 </h3></div></div></div><a class="indexterm" name="id2561295"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5432 5433 If this parameter is set then Samba debug messages are logged into the system 5433 5434 syslog only, and not to the debug log files. There still will be some … … 5449 5450 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5450 5451 </em></span> 5451 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256141 1"></a>5452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561412"></a> 5452 5453 5453 5454 template homedir (G) 5454 </h3></div></div></div><a class="indexterm" name="id256141 2"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5455 </h3></div></div></div><a class="indexterm" name="id2561413"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5455 5456 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5456 5457 parameter to fill in the home directory for that user. If the … … 5465 5466 </h3></div></div></div><a class="indexterm" name="id2561478"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5466 5467 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5467 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256151 6"></a>5468 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561517"></a> 5468 5469 5469 5470 time offset (G) 5470 </h3></div></div></div><a class="indexterm" name="id256151 7"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5471 </h3></div></div></div><a class="indexterm" name="id2561518"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5471 5472 to the normal GMT to local time conversion. This is useful if 5472 5473 you are serving a lot of PCs that have incorrect daylight … … 5475 5476 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5476 5477 </em></span> 5477 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256157 6"></a>5478 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561577"></a> 5478 5479 5479 5480 time server (G) 5480 </h3></div></div></div><a class="indexterm" name="id256157 7"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5481 </h3></div></div></div><a class="indexterm" name="id2561578"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5481 5482 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5482 5483 </em></span> 5483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256162 6"></a>5484 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561627"></a> 5484 5485 5485 5486 unix charset (G) 5486 </h3></div></div></div><a class="indexterm" name="id256162 7"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5487 </h3></div></div></div><a class="indexterm" name="id2561628"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5487 5488 Samba runs on uses. Samba needs to know this in order to be able to 5488 5489 convert text to the charsets other SMB clients use. … … 5493 5494 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5494 5495 </em></span> 5495 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256169 2"></a>5496 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561693"></a> 5496 5497 5497 5498 unix extensions (G) 5498 </h3></div></div></div><a class="indexterm" name="id256169 3"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5499 impl ments the CIFS UNIX extensions, as defined by HP.5499 </h3></div></div></div><a class="indexterm" name="id2561694"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5500 implements the CIFS UNIX extensions, as defined by HP. 5500 5501 These extensions enable Samba to better serve UNIX CIFS clients 5501 5502 by supporting features such as symbolic links, hard links, etc... … … 5536 5537 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5537 5538 </em></span> 5538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25619 19"></a>5539 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561920"></a> 5539 5540 5540 5541 use client driver (S) 5541 </h3></div></div></div><a class="indexterm" name="id256192 0"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005542 </h3></div></div></div><a class="indexterm" name="id2561921"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5542 5543 clients. It has no effect on Windows 95/98/ME clients. When 5543 5544 serving a printer to Windows NT/2000 clients without first installing … … 5564 5565 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5565 5566 </em></span> 5566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256200 0"></a>5567 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562001"></a> 5567 5568 5568 5569 use kerberos keytab (G) 5569 </h3></div></div></div><a class="indexterm" name="id256200 1"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5570 </h3></div></div></div><a class="indexterm" name="id2562002"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5570 5571 Specifies whether Samba should attempt to maintain service principals in the systems 5571 5572 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5579 5580 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5580 5581 </em></span> 5581 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256206 8"></a>5582 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562069"></a> 5582 5583 5583 5584 use mmap (G) … … 5591 5592 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5592 5593 </em></span> 5593 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256212 0"></a>5594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562121"></a> 5594 5595 5595 5596 username level (G) … … 5609 5610 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5610 5611 </em></span> 5611 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256220 2"></a>5612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562203"></a> 5612 5613 5613 5614 username map script (G) 5614 </h3></div></div></div><a class="indexterm" name="id256220 3"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5615 </h3></div></div></div><a class="indexterm" name="id2562204"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5615 5616 <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter. This parameter 5616 5617 specifies and external program or script that must accept a single … … 5623 5624 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5624 5625 </em></span> 5625 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25622 79"></a>5626 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562280"></a> 5626 5627 5627 5628 username map (G) 5628 </h3></div></div></div><a class="indexterm" name="id256228 0"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5629 </h3></div></div></div><a class="indexterm" name="id2562281"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5629 5630 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5630 5631 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5710 5711 # no username map</code> 5711 5712 </em></span> 5712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25625 59"></a>5713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562560"></a> 5713 5714 5714 5715 <a name="USER"></a>user 5715 </h3></div></div></div><a class="indexterm" name="id256256 0"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562591"></a>5716 </h3></div></div></div><a class="indexterm" name="id2562561"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562592"></a> 5716 5717 5717 5718 <a name="USERS"></a>users 5718 </h3></div></div></div><a class="indexterm" name="id256259 2"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562623"></a>5719 </h3></div></div></div><a class="indexterm" name="id2562593"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562623"></a> 5719 5720 5720 5721 username (S) … … 5757 5758 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5758 5759 </em></span> 5759 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256279 3"></a>5760 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562794"></a> 5760 5761 5761 5762 usershare allow guests (G) 5762 </h3></div></div></div><a class="indexterm" name="id256279 4"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5763 </h3></div></div></div><a class="indexterm" name="id2562795"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5763 5764 to be accessed by non-authenticated users or not. It is the equivalent 5764 5765 of allowing people who can create a share the option of setting … … 5767 5768 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5768 5769 </em></span> 5769 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256284 5"></a>5770 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562846"></a> 5770 5771 5771 5772 usershare max shares (G) 5772 </h3></div></div></div><a class="indexterm" name="id256284 6"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5773 </h3></div></div></div><a class="indexterm" name="id2562847"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5773 5774 that are allowed to be created by users belonging to the group owning the 5774 5775 usershare directory. If set to zero (the default) user defined shares are ignored. 5775 5776 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5776 5777 </em></span> 5777 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256289 1"></a>5778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562892"></a> 5778 5779 5779 5780 usershare owner only (G) 5780 </h3></div></div></div><a class="indexterm" name="id256289 2"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5781 </h3></div></div></div><a class="indexterm" name="id2562893"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5781 5782 a user defined shares must be owned by the user creating the 5782 5783 user defined share or not. If set to True (the default) then … … 5830 5831 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5831 5832 </em></span> 5832 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256308 4"></a>5833 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563085"></a> 5833 5834 5834 5835 usershare prefix deny list (G) 5835 </h3></div></div></div><a class="indexterm" name="id256308 5"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5836 </h3></div></div></div><a class="indexterm" name="id2563086"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5836 5837 the root of which are NOT allowed to be exported by user defined share definitions. 5837 5838 If the pathname exported starts with one of the strings in this … … 5870 5871 5871 5872 use sendfile (S) 5872 </h3></div></div></div><a class="indexterm" name="id256323 3"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5873 </h3></div></div></div><a class="indexterm" name="id2563234"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5873 5874 system call is supported by the underlying operating system, then some SMB read calls 5874 5875 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5879 5880 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5880 5881 </em></span> 5881 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25632 89"></a>5882 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563290"></a> 5882 5883 5883 5884 use spnego (G) 5884 </h3></div></div></div><a class="indexterm" name="id256329 0"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5885 </h3></div></div></div><a class="indexterm" name="id2563291"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5885 5886 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5886 5887 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5890 5891 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5891 5892 </em></span> 5892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25633 39"></a>5893 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563340"></a> 5893 5894 5894 5895 utmp directory (G) 5895 </h3></div></div></div><a class="indexterm" name="id256334 0"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5896 </h3></div></div></div><a class="indexterm" name="id2563341"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5896 5897 been configured and compiled with the option <code class="literal"> 5897 5898 --with-utmp</code>. It specifies a directory pathname that is … … 5905 5906 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 5906 5907 </em></span> 5907 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256341 7"></a>5908 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563418"></a> 5908 5909 5909 5910 utmp (G) 5910 </h3></div></div></div><a class="indexterm" name="id256341 8"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>5911 </h3></div></div></div><a class="indexterm" name="id2563419"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5911 5912 This boolean parameter is only available if Samba has been configured and compiled 5912 5913 with the option <code class="literal">--with-utmp</code>. If set to … … 5939 5940 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 5940 5941 </em></span> 5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256357 1"></a>5942 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563572"></a> 5942 5943 5943 5944 -valid (S) 5944 </h3></div></div></div><a class="indexterm" name="id256357 2"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is5945 </h3></div></div></div><a class="indexterm" name="id2563573"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5945 5946 valid and thus can be used. When this parameter is set to false, 5946 5947 the share will be in no way visible nor accessible. … … 5985 5986 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 5986 5987 </em></span> 5987 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25637 39"></a>5988 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563740"></a> 5988 5989 5989 5990 veto oplock files (S) 5990 </h3></div></div></div><a class="indexterm" name="id256374 0"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5991 </h3></div></div></div><a class="indexterm" name="id2563741"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5991 5992 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 5992 5993 parameter is turned on for a share. It allows the Samba administrator … … 6009 6010 # No files are vetoed for oplock grants</code> 6010 6011 </em></span> 6011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256383 2"></a>6012 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563833"></a> 6012 6013 6013 6014 <a name="VFSOBJECT"></a>vfs object 6014 </h3></div></div></div><a class="indexterm" name="id2563834"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256386 4"></a>6015 </h3></div></div></div><a class="indexterm" name="id2563834"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563865"></a> 6015 6016 6016 6017 vfs objects (S) … … 6022 6023 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6023 6024 </em></span> 6024 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256392 4"></a>6025 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563925"></a> 6025 6026 6026 6027 volume (S) … … 6030 6031 # the name of the share</code> 6031 6032 </em></span> 6032 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256396 8"></a>6033 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563969"></a> 6033 6034 6034 6035 wide links (S) 6035 </h3></div></div></div><a class="indexterm" name="id25639 69"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6036 </h3></div></div></div><a class="indexterm" name="id2563970"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6036 6037 in the UNIX file system may be followed by the server. Links 6037 6038 that point to areas within the directory tree exported by the … … 6041 6042 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 6042 6043 </em></span> 6043 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256402 0"></a>6044 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564021"></a> 6044 6045 6045 6046 winbind cache time (G) 6046 </h3></div></div></div><a class="indexterm" name="id256402 1"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6047 </h3></div></div></div><a class="indexterm" name="id2564022"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6047 6048 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6048 6049 user and group information before querying a Windows NT server … … 6052 6053 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6053 6054 </em></span> 6054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256409 2"></a>6055 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564093"></a> 6055 6056 6056 6057 winbind enum groups (G) 6057 </h3></div></div></div><a class="indexterm" name="id256409 3"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6058 </h3></div></div></div><a class="indexterm" name="id2564094"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6058 6059 the enumeration of groups through the <code class="literal">setgrent()</code>, 6059 6060 <code class="literal">getgrent()</code> and … … 6063 6064 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6064 6065 </em></span> 6065 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256418 2"></a>6066 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564183"></a> 6066 6067 6067 6068 winbind enum users (G) … … 6078 6079 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6079 6080 </em></span> 6080 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256427 6"></a>6081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564277"></a> 6081 6082 6082 6083 winbind expand groups (G) 6083 </h3></div></div></div><a class="indexterm" name="id256427 7"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6084 </h3></div></div></div><a class="indexterm" name="id2564278"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6084 6085 will traverse when flattening nested group memberships 6085 6086 of Windows domain groups. This is different from the … … 6104 6105 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6105 6106 </em></span> 6106 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256439 5"></a>6107 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564396"></a> 6107 6108 6108 6109 winbind normalize names (G) 6109 </h3></div></div></div><a class="indexterm" name="id256439 6"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6110 </h3></div></div></div><a class="indexterm" name="id2564397"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6110 6111 whitespace in user and group names with an underscore (_) character. 6111 6112 For example, whether the name "Space Kadet" should be … … 6144 6145 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 6145 6146 </em></span> 6146 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256458 0"></a>6147 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564581"></a> 6147 6148 6148 6149 winbind offline logon (G) 6149 </h3></div></div></div><a class="indexterm" name="id256458 1"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6150 </h3></div></div></div><a class="indexterm" name="id2564582"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6150 6151 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6151 6152 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6165 6166 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6166 6167 </em></span> 6167 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256471 6"></a>6168 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564717"></a> 6168 6169 6169 6170 winbind rpc only (G) 6170 </h3></div></div></div><a class="indexterm" name="id256471 7"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6171 </h3></div></div></div><a class="indexterm" name="id2564718"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6171 6172 Setting this parameter to <code class="literal">yes</code> forces 6172 6173 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6188 6189 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6189 6190 </em></span> 6190 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256485 2"></a>6191 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564853"></a> 6191 6192 6192 6193 winbind trusted domains only (G) 6193 </h3></div></div></div><a class="indexterm" name="id256485 3"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6194 </h3></div></div></div><a class="indexterm" name="id2564854"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6194 6195 This parameter is designed to allow Samba servers that are members 6195 6196 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6203 6204 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6204 6205 </em></span> 6205 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256493 1"></a>6206 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564932"></a> 6206 6207 6207 6208 winbind use default domain (G) 6208 </h3></div></div></div><a class="indexterm" name="id256493 2"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6209 </h3></div></div></div><a class="indexterm" name="id2564933"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6209 6210 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6210 6211 without domain component in their username. Users without a domain … … 6240 6241 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6241 6242 program <code class="literal">nsupdate</code> is provided in the examples 6242 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256511 0"></a>6243 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565111"></a> 6243 6244 6244 6245 wins proxy (G) 6245 </h3></div></div></div><a class="indexterm" name="id256511 1"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6246 </h3></div></div></div><a class="indexterm" name="id2565112"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6246 6247 queries on behalf of other hosts. You may need to set this 6247 6248 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6248 6249 </em></span> 6249 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256516 5"></a>6250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565166"></a> 6250 6251 6251 6252 wins server (G) 6252 </h3></div></div></div><a class="indexterm" name="id256516 6"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6253 </h3></div></div></div><a class="indexterm" name="id2565167"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6253 6254 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6254 6255 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6269 6270 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6270 6271 </em></span> 6271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256527 5"></a>6272 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565276"></a> 6272 6273 6273 6274 wins support (G) 6274 </h3></div></div></div><a class="indexterm" name="id256527 6"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6275 </h3></div></div></div><a class="indexterm" name="id2565277"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6275 6276 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6276 6277 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6289 6290 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6290 6291 </em></span> 6291 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256541 7"></a>6292 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565418"></a> 6292 6293 6293 6294 <a name="WRITABLE"></a>writable 6294 </h3></div></div></div><a class="indexterm" name="id256541 8"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565449"></a>6295 </h3></div></div></div><a class="indexterm" name="id2565419"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565449"></a> 6295 6296 6296 6297 writeable (S) … … 6318 6319 # for a 256k cache size per file</code> 6319 6320 </em></span> 6320 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256558 3"></a>6321 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565584"></a> 6321 6322 6322 6323 write list (S) 6323 </h3></div></div></div><a class="indexterm" name="id256558 4"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6324 </h3></div></div></div><a class="indexterm" name="id2565585"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6324 6325 This is a list of users that are given read-write access to a service. If the 6325 6326 connecting user is in this list then they will be given write access, no matter … … 6336 6337 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6337 6338 </em></span> 6338 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256567 6"></a>6339 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565677"></a> 6339 6340 6340 6341 write raw (G) … … 6343 6344 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6344 6345 </em></span> 6345 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256572 0"></a>6346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565721"></a> 6346 6347 6347 6348 wtmp directory (G) 6348 </h3></div></div></div><a class="indexterm" name="id256572 1"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6349 </h3></div></div></div><a class="indexterm" name="id2565722"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6349 6350 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6350 6351 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6358 6359 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6359 6360 </em></span> 6360 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id256580 4"></a><h2>WARNINGS</h2><p>6361 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2565805"></a><h2>WARNINGS</h2><p> 6361 6362 Although the configuration file permits service names to contain spaces, your client software may not. 6362 6363 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6371 6372 care when designing these sections. In particular, ensure that the permissions on spool directories are 6372 6373 correct. 6373 </p></div><div class="refsect1" lang="en"><a name="id256585 4"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2565865"></a><h2>SEE ALSO</h2><p>6374 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id256594 4"></a><h2>AUTHOR</h2><p>6374 </p></div><div class="refsect1" lang="en"><a name="id2565855"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2565866"></a><h2>SEE ALSO</h2><p> 6375 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2565945"></a><h2>AUTHOR</h2><p> 6375 6376 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6376 6377 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
