Changeset 286 for branches/samba-3.0/docs/manpages/net.8
- Timestamp:
- Jun 24, 2009, 5:09:21 PM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/manpages/net.8
r158 r286 1 1 .\" Title: net 2 .\" Author: 3 .\" Generator: DocBook XSL Stylesheets v1.7 3.2<http://docbook.sf.net/>4 .\" Date: 0 8/25/20082 .\" Author: [see the "AUTHOR" section] 3 .\" Generator: DocBook XSL Stylesheets v1.74.0 <http://docbook.sf.net/> 4 .\" Date: 06/22/2009 5 5 .\" Manual: System Administration tools 6 6 .\" Source: Samba 3.0 7 .\" Language: English 7 8 .\" 8 .TH "NET" "8" "08/25/2008" "Samba 3\.0" "System Administration tools" 9 .TH "NET" "8" "06/22/2009" "Samba 3\&.0" "System Administration tools" 10 .\" ----------------------------------------------------------------- 11 .\" * (re)Define some macros 12 .\" ----------------------------------------------------------------- 13 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 14 .\" toupper - uppercase a string (locale-aware) 15 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 16 .de toupper 17 .tr aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ 18 \\$* 19 .tr aabbccddeeffgghhiijjkkllmmnnooppqqrrssttuuvvwwxxyyzz 20 .. 21 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 22 .\" SH-xref - format a cross-reference to an SH section 23 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 24 .de SH-xref 25 .ie n \{\ 26 .\} 27 .toupper \\$* 28 .el \{\ 29 \\$* 30 .\} 31 .. 32 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 33 .\" SH - level-one heading that works better for non-TTY output 34 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 35 .de1 SH 36 .\" put an extra blank line of space above the head in non-TTY output 37 .if t \{\ 38 .sp 1 39 .\} 40 .sp \\n[PD]u 41 .nr an-level 1 42 .set-an-margin 43 .nr an-prevailing-indent \\n[IN] 44 .fi 45 .in \\n[an-margin]u 46 .ti 0 47 .HTML-TAG ".NH \\n[an-level]" 48 .it 1 an-trap 49 .nr an-no-space-flag 1 50 .nr an-break-flag 1 51 \." make the size of the head bigger 52 .ps +3 53 .ft B 54 .ne (2v + 1u) 55 .ie n \{\ 56 .\" if n (TTY output), use uppercase 57 .toupper \\$* 58 .\} 59 .el \{\ 60 .nr an-break-flag 0 61 .\" if not n (not TTY), use normal case (not uppercase) 62 \\$1 63 .in \\n[an-margin]u 64 .ti 0 65 .\" if not n (not TTY), put a border/line under subheading 66 .sp -.6 67 \l'\n(.lu' 68 .\} 69 .. 70 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 71 .\" SS - level-two heading that works better for non-TTY output 72 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 73 .de1 SS 74 .sp \\n[PD]u 75 .nr an-level 1 76 .set-an-margin 77 .nr an-prevailing-indent \\n[IN] 78 .fi 79 .in \\n[IN]u 80 .ti \\n[SN]u 81 .it 1 an-trap 82 .nr an-no-space-flag 1 83 .nr an-break-flag 1 84 .ps \\n[PS-SS]u 85 \." make the size of the head bigger 86 .ps +2 87 .ft B 88 .ne (2v + 1u) 89 .if \\n[.$] \&\\$* 90 .. 91 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 92 .\" BB/BE - put background/screen (filled box) around block of text 93 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 94 .de BB 95 .if t \{\ 96 .sp -.5 97 .br 98 .in +2n 99 .ll -2n 100 .gcolor red 101 .di BX 102 .\} 103 .. 104 .de EB 105 .if t \{\ 106 .if "\\$2"adjust-for-leading-newline" \{\ 107 .sp -1 108 .\} 109 .br 110 .di 111 .in 112 .ll 113 .gcolor 114 .nr BW \\n(.lu-\\n(.i 115 .nr BH \\n(dn+.5v 116 .ne \\n(BHu+.5v 117 .ie "\\$2"adjust-for-leading-newline" \{\ 118 \M[\\$1]\h'1n'\v'+.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[] 119 .\} 120 .el \{\ 121 \M[\\$1]\h'1n'\v'-.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[] 122 .\} 123 .in 0 124 .sp -.5v 125 .nf 126 .BX 127 .in 128 .sp .5v 129 .fi 130 .\} 131 .. 132 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 133 .\" BM/EM - put colored marker in margin next to block of text 134 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 135 .de BM 136 .if t \{\ 137 .br 138 .ll -2n 139 .gcolor red 140 .di BX 141 .\} 142 .. 143 .de EM 144 .if t \{\ 145 .br 146 .di 147 .ll 148 .gcolor 149 .nr BH \\n(dn 150 .ne \\n(BHu 151 \M[\\$1]\D'P -.75n 0 0 \\n(BHu -(\\n[.i]u - \\n(INu - .75n) 0 0 -\\n(BHu'\M[] 152 .in 0 153 .nf 154 .BX 155 .in 156 .fi 157 .\} 158 .. 159 .\" ----------------------------------------------------------------- 160 .\" * set default formatting 161 .\" ----------------------------------------------------------------- 9 162 .\" disable hyphenation 10 163 .nh 11 164 .\" disable justification (adjust text to left margin only) 12 165 .ad l 13 .SH "NAME" 14 net - Tool for administration of Samba and remote CIFS servers. 15 .SH "SYNOPSIS" 16 .HP 1 17 net {<ads|rap|rpc>} [\-h] [\-w\ workgroup] [\-W\ myworkgroup] [\-U\ user] [\-I\ ip\-address] [\-p\ port] [\-n\ myname] [\-s\ conffile] [\-S\ server] [\-l] [\-P] [\-d\ debuglevel] [\-V] 166 .\" ----------------------------------------------------------------- 167 .\" * MAIN CONTENT STARTS HERE * 168 .\" ----------------------------------------------------------------- 169 .SH "Name" 170 net \- Tool for administration of Samba and remote CIFS servers\&. 171 .SH "Synopsis" 172 .fam C 173 .HP \w'\ 'u 174 \FCnet\F[] {<ads|rap|rpc>} [\-h] [\-w\ workgroup] [\-W\ myworkgroup] [\-U\ user] [\-I\ ip\-address] [\-p\ port] [\-n\ myname] [\-s\ conffile] [\-S\ server] [\-l] [\-P] [\-d\ debuglevel] [\-V] 175 .fam 18 176 .SH "DESCRIPTION" 19 177 .PP 20 178 This tool is part of the 21 179 \fBsamba\fR(7) 22 suite\ .23 .PP 24 The Samba net utility is meant to work just like the net utility available for windows and DOS\ . The first argument should be used to specify the protocol to use when executing a certain command\. ADS is used for ActiveDirectory, RAP is using for old (Win9x/NT3) clients and RPC can be used for NT4 and Windows 2000\. If this argument is omitted, net will try to determine it automatically\. Not all commands are available on all protocols\.180 suite\&. 181 .PP 182 The Samba net utility is meant to work just like the net utility available for windows and DOS\&. The first argument should be used to specify the protocol to use when executing a certain command\&. ADS is used for ActiveDirectory, RAP is using for old (Win9x/NT3) clients and RPC can be used for NT4 and Windows 2000\&. If this argument is omitted, net will try to determine it automatically\&. Not all commands are available on all protocols\&. 25 183 .SH "OPTIONS" 26 184 .PP 27 185 \-h|\-\-help 28 186 .RS 4 29 Print a summary of command line options\ .187 Print a summary of command line options\&. 30 188 .RE 31 189 .PP 32 190 \-w target\-workgroup 33 191 .RS 4 34 Sets target workgroup or domain\ . You have to specify either this option or the IP address or the name of a server\.192 Sets target workgroup or domain\&. You have to specify either this option or the IP address or the name of a server\&. 35 193 .RE 36 194 .PP … … 47 205 \-I ip\-address 48 206 .RS 4 49 IP address of target server to use\ . You have to specify either this option or a target workgroup or a target server\.207 IP address of target server to use\&. You have to specify either this option or a target workgroup or a target server\&. 50 208 .RE 51 209 .PP 52 210 \-p port 53 211 .RS 4 54 Port on the target server to connect to (usually 139 or 445)\ . Defaults to trying 445 first, then 139\.212 Port on the target server to connect to (usually 139 or 445)\&. Defaults to trying 445 first, then 139\&. 55 213 .RE 56 214 .PP 57 215 \-n <primary NetBIOS name> 58 216 .RS 4 59 This option allows you to override the NetBIOS name that Samba uses for itself\ . This is identical to setting the60 \ fInetbios name\fR217 This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the 218 \m[blue]\fBnetbios name\fR\m[] 61 219 parameter in the 62 \ fIsmb\.conf\fR63 file\ . However, a command line setting will take precedence over settings in64 \ fIsmb\.conf\fR\.220 \FCsmb\&.conf\F[] 221 file\&. However, a command line setting will take precedence over settings in 222 \FCsmb\&.conf\F[]\&. 65 223 .RE 66 224 .PP 67 225 \-s <configuration file> 68 226 .RS 4 69 The file specified contains the configuration details required by the server\ . The information in this file includes server\-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\. See70 \ fIsmb\.conf\fR71 for more information\ . The default configuration file name is determined at compile time\.227 The file specified contains the configuration details required by the server\&. The information in this file includes server\-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See 228 \FCsmb\&.conf\F[] 229 for more information\&. The default configuration file name is determined at compile time\&. 72 230 .RE 73 231 .PP 74 232 \-S server 75 233 .RS 4 76 Name of target server\ . You should specify either this option or a target workgroup or a target IP address\.234 Name of target server\&. You should specify either this option or a target workgroup or a target IP address\&. 77 235 .RE 78 236 .PP 79 237 \-l 80 238 .RS 4 81 When listing data, give more information on each item\ .239 When listing data, give more information on each item\&. 82 240 .RE 83 241 .PP 84 242 \-P 85 243 .RS 4 86 Make queries to the external server using the machine account of the local server\ .244 Make queries to the external server using the machine account of the local server\&. 87 245 .RE 88 246 .PP … … 90 248 .RS 4 91 249 \fIlevel\fR 92 is an integer from 0 to 10\ . The default value if this parameter is not specified is 0\.93 .sp 94 The higher this value, the more detail will be logged to the log files about the activities of the server\ . At level 0, only critical errors and serious warnings will be logged\. Level 1 is a reasonable level for day\-to\-day running \- it generates a small amount of information about operations carried out\.95 .sp 96 Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\ . Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\.250 is an integer from 0 to 10\&. The default value if this parameter is not specified is 0\&. 251 .sp 252 The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day\-to\-day running \- it generates a small amount of information about operations carried out\&. 253 .sp 254 Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. 97 255 .sp 98 256 Note that specifying this parameter here will override the 99 \ fIlog level\fR257 \m[blue]\fBlog level\fR\m[] 100 258 parameter in the 101 \ fIsmb\.conf\fR102 file\ .259 \FCsmb\&.conf\F[] 260 file\&. 103 261 .RE 104 262 .SH "COMMANDS" 105 263 .SS "CHANGESECRETPW" 106 264 .PP 107 This command allows the Samba machine account password to be set from an external application to a machine account password that has already been stored in Active Directory\ . DO NOT USE this command unless you know exactly what you are doing\. The use of this command requires that the force flag (\-f) be used also\. There will be NO command prompt\. Whatever information is piped into stdin, either by typing at the command line or otherwise, will be stored as the literal machine password\. Do NOT use this without care and attention as it will overwrite a legitimate machine password without warning\. YOU HAVE BEEN WARNED\.265 This command allows the Samba machine account password to be set from an external application to a machine account password that has already been stored in Active Directory\&. DO NOT USE this command unless you know exactly what you are doing\&. The use of this command requires that the force flag (\-f) be used also\&. There will be NO command prompt\&. Whatever information is piped into stdin, either by typing at the command line or otherwise, will be stored as the literal machine password\&. Do NOT use this without care and attention as it will overwrite a legitimate machine password without warning\&. YOU HAVE BEEN WARNED\&. 108 266 .SS "TIME" 109 267 .PP 110 268 The 111 NET TIME 112 command allows you to view the time on a remote server or synchronise the time on the local server with the time on the remote server\ .269 \FCNET TIME\F[] 270 command allows you to view the time on a remote server or synchronise the time on the local server with the time on the remote server\&. 113 271 .SS "TIME" 114 272 .PP 115 273 Without any options, the 116 NET TIME 117 command displays the time on the remote server\ .274 \FCNET TIME\F[] 275 command displays the time on the remote server\&. 118 276 .SS "TIME SYSTEM" 119 277 .PP 120 278 Displays the time on the remote server in a format ready for 121 /bin/date\.279 \FC/bin/date\F[]\&. 122 280 .SS "TIME SET" 123 281 .PP 124 282 Tries to set the date and time of the local server to that on the remote server using 125 /bin/date\.283 \FC/bin/date\F[]\&. 126 284 .SS "TIME ZONE" 127 285 .PP 128 Displays the timezone in hours from GMT on the remote computer\ .286 Displays the timezone in hours from GMT on the remote computer\&. 129 287 .SS "[RPC|ADS] JOIN [TYPE] [\-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]" 130 288 .PP 131 Join a domain\ . If the account already exists on the server, and [TYPE] is MEMBER, the machine will attempt to join automatically\. (Assuming that the machine has been created in server manager) Otherwise, a password will be prompted for, and a new account may be created\.132 .PP 133 [TYPE] may be PDC, BDC or MEMBER to specify the type of server joining the domain\ .134 .PP 135 [UPN] (ADS only) set the principalname attribute during the join\ . The default format is host/netbiosname@REALM\.136 .PP 137 [OU] (ADS only) Precreate the computer account in a specific OU\ . The OU string reads from top to bottom without RDNs, and is delimited by a \'/\'\. Please note that \'\e\' is used for escape by both the shell and ldap, so it may need to be doubled or quadrupled to pass through, and it is not used as a delimiter\.289 Join a domain\&. If the account already exists on the server, and [TYPE] is MEMBER, the machine will attempt to join automatically\&. (Assuming that the machine has been created in server manager) Otherwise, a password will be prompted for, and a new account may be created\&. 290 .PP 291 [TYPE] may be PDC, BDC or MEMBER to specify the type of server joining the domain\&. 292 .PP 293 [UPN] (ADS only) set the principalname attribute during the join\&. The default format is host/netbiosname@REALM\&. 294 .PP 295 [OU] (ADS only) Precreate the computer account in a specific OU\&. The OU string reads from top to bottom without RDNs, and is delimited by a \'/\'\&. Please note that \'\e\' is used for escape by both the shell and ldap, so it may need to be doubled or quadrupled to pass through, and it is not used as a delimiter\&. 138 296 .SS "[RPC] OLDJOIN [options]" 139 297 .PP 140 Join a domain\ . Use the OLDJOIN option to join the domain using the old style of domain joining \- you need to create a trust account in server manager first\.298 Join a domain\&. Use the OLDJOIN option to join the domain using the old style of domain joining \- you need to create a trust account in server manager first\&. 141 299 .SS "[RPC|ADS] USER" 142 300 .SS "[RPC|ADS] USER" … … 148 306 .SS "[RPC|ADS] USER INFO target" 149 307 .PP 150 List the domain groups of the specified user\ .308 List the domain groups of the specified user\&. 151 309 .SS "[RPC|ADS] USER RENAME oldname newname" 152 310 .PP 153 Rename specified user\ .311 Rename specified user\&. 154 312 .SS "[RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]" 155 313 .PP 156 Add specified user\ .314 Add specified user\&. 157 315 .SS "[RPC|ADS] GROUP" 158 316 .SS "[RPC|ADS] GROUP [misc options] [targets]" 159 317 .PP 160 List user groups\ .318 List user groups\&. 161 319 .SS "[RPC|ADS] GROUP DELETE name [misc. options]" 162 320 .PP 163 Delete specified group\ .321 Delete specified group\&. 164 322 .SS "[RPC|ADS] GROUP ADD name [-C comment]" 165 323 .PP 166 Create specified group\ .324 Create specified group\&. 167 325 .SS "[RAP|RPC] SHARE" 168 326 .SS "[RAP|RPC] SHARE [misc. options] [targets]" 169 327 .PP 170 Enumerates all exported resources (network shares) on target server\ .328 Enumerates all exported resources (network shares) on target server\&. 171 329 .SS "[RAP|RPC] SHARE ADD name=serverpath [-C comment] [-M maxusers] [targets]" 172 330 .PP 173 Adds a share from a server (makes the export active)\ . Maxusers specifies the number of users that can be connected to the share simultaneously\.331 Adds a share from a server (makes the export active)\&. Maxusers specifies the number of users that can be connected to the share simultaneously\&. 174 332 .SS "SHARE DELETE sharename" 175 333 .PP 176 Delete specified share\ .334 Delete specified share\&. 177 335 .SS "[RPC|RAP] FILE" 178 336 .SS "[RPC|RAP] FILE" 179 337 .PP 180 List all open files on remote server\ .338 List all open files on remote server\&. 181 339 .SS "[RPC|RAP] FILE CLOSE fileid" 182 340 .PP 183 341 Close file with specified 184 342 \fIfileid\fR 185 on remote server\ .343 on remote server\&. 186 344 .SS "[RPC|RAP] FILE INFO fileid" 187 345 .PP 188 346 Print information on specified 189 \fIfileid\fR\ . Currently listed are: file\-id, username, locks, path, permissions\.347 \fIfileid\fR\&. Currently listed are: file\-id, username, locks, path, permissions\&. 190 348 .SS "[RAP|RPC] FILE USER user" 191 349 .PP 192 350 List files opened by specified 193 \fIuser\fR\ . Please note that194 net rap file user 195 does not work against Samba servers\ .351 \fIuser\fR\&. Please note that 352 \FCnet rap file user\F[] 353 does not work against Samba servers\&. 196 354 .SS "SESSION" 197 355 .SS "RAP SESSION" 198 356 .PP 199 Without any other options, SESSION enumerates all active SMB/CIFS sessions on the target server\ .357 Without any other options, SESSION enumerates all active SMB/CIFS sessions on the target server\&. 200 358 .SS "RAP SESSION DELETE|CLOSE CLIENT_NAME" 201 359 .PP 202 Close the specified sessions\ .360 Close the specified sessions\&. 203 361 .SS "RAP SESSION INFO CLIENT_NAME" 204 362 .PP 205 Give a list with all the open files in specified session\ .363 Give a list with all the open files in specified session\&. 206 364 .SS "RAP SERVER \fIDOMAIN\fR" 207 365 .PP 208 List all servers in specified domain or workgroup\ . Defaults to local domain\.366 List all servers in specified domain or workgroup\&. Defaults to local domain\&. 209 367 .SS "RAP DOMAIN" 210 368 .PP 211 Lists all domains and workgroups visible on the current network\ .369 Lists all domains and workgroups visible on the current network\&. 212 370 .SS "RAP PRINTQ" 213 .SS "RAP PRINTQ LISTQUEUE_NAME"214 .PP 215 Lists the specified print queue and print jobs on the server\ . If the371 .SS "RAP PRINTQ INFO QUEUE_NAME" 372 .PP 373 Lists the specified print queue and print jobs on the server\&. If the 216 374 \fIQUEUE_NAME\fR 217 is omitted, all queues are listed\ .375 is omitted, all queues are listed\&. 218 376 .SS "RAP PRINTQ DELETE JOBID" 219 377 .PP 220 Delete job with specified id\ .378 Delete job with specified id\&. 221 379 .SS "RAP VALIDATE \fIuser\fR [\fIpassword\fR]" 222 380 .PP 223 Validate whether the specified user can log in to the remote server\. If the password is not specified on the commandline, it will be prompted\. 224 .sp 381 Validate whether the specified user can log in to the remote server\&. If the password is not specified on the commandline, it will be prompted\&. 382 .if n \{\ 383 .sp 384 .\} 385 .RS 4 386 .BM yellow 225 387 .it 1 an-trap 226 388 .nr an-no-space-flag 1 227 389 .nr an-break-flag 1 228 390 .br 229 Note 230 .PP 231 Currently NOT implemented\. 391 .ps +1 392 \fBNote\fR 393 .ps -1 394 .br 395 .PP 396 Currently NOT implemented\&. 397 .sp .5v 398 .EM yellow 399 .RE 232 400 .SS "RAP GROUPMEMBER" 233 401 .SS "RAP GROUPMEMBER LIST GROUP" 234 402 .PP 235 List all members of the specified group\ .403 List all members of the specified group\&. 236 404 .SS "RAP GROUPMEMBER DELETE GROUP USER" 237 405 .PP 238 Delete member from group\ .406 Delete member from group\&. 239 407 .SS "RAP GROUPMEMBER ADD GROUP USER" 240 408 .PP 241 Add member to group\ .409 Add member to group\&. 242 410 .SS "RAP ADMIN \fIcommand\fR" 243 411 .PP 244 412 Execute the specified 245 413 \fIcommand\fR 246 on the remote server\. Only works with OS/2 servers\. 247 .sp 414 on the remote server\&. Only works with OS/2 servers\&. 415 .if n \{\ 416 .sp 417 .\} 418 .RS 4 419 .BM yellow 248 420 .it 1 an-trap 249 421 .nr an-no-space-flag 1 250 422 .nr an-break-flag 1 251 423 .br 252 Note 253 .PP 254 Currently NOT implemented\. 424 .ps +1 425 \fBNote\fR 426 .ps -1 427 .br 428 .PP 429 Currently NOT implemented\&. 430 .sp .5v 431 .EM yellow 432 .RE 255 433 .SS "RAP SERVICE" 256 434 .SS "RAP SERVICE START NAME [arguments...]" 257 435 .PP 258 Start the specified service on the remote server\. Not implemented yet\. 259 .sp 436 Start the specified service on the remote server\&. Not implemented yet\&. 437 .if n \{\ 438 .sp 439 .\} 440 .RS 4 441 .BM yellow 260 442 .it 1 an-trap 261 443 .nr an-no-space-flag 1 262 444 .nr an-break-flag 1 263 445 .br 264 Note 265 .PP 266 Currently NOT implemented\. 267 446 .ps +1 447 \fBNote\fR 448 .ps -1 449 .br 450 .PP 451 Currently NOT implemented\&. 452 .sp .5v 453 .EM yellow 454 .RE 268 455 .SS "RAP SERVICE STOP" 269 456 .PP 270 Stop the specified service on the remote server\. 271 .sp 457 Stop the specified service on the remote server\&. 458 .if n \{\ 459 .sp 460 .\} 461 .RS 4 462 .BM yellow 272 463 .it 1 an-trap 273 464 .nr an-no-space-flag 1 274 465 .nr an-break-flag 1 275 466 .br 276 Note 277 .PP 278 Currently NOT implemented\. 467 .ps +1 468 \fBNote\fR 469 .ps -1 470 .br 471 .PP 472 Currently NOT implemented\&. 473 .sp .5v 474 .EM yellow 475 .RE 279 476 .SS "RAP PASSWORD \fIUSER\fR \fIOLDPASS\fR \fINEWPASS\fR" 280 477 .PP … … 284 481 \fIOLDPASS\fR 285 482 to 286 \fINEWPASS\fR\ .483 \fINEWPASS\fR\&. 287 484 .SS "LOOKUP" 288 485 .SS "LOOKUP HOST HOSTNAME [TYPE]" 289 486 .PP 290 Lookup the IP address of the given host with the specified type (netbios suffix)\ . The type defaults to 0x20 (workstation)\.487 Lookup the IP address of the given host with the specified type (netbios suffix)\&. The type defaults to 0x20 (workstation)\&. 291 488 .SS "LOOKUP LDAP [DOMAIN]" 292 489 .PP 293 490 Give IP address of LDAP server of specified 294 \fIDOMAIN\fR\ . Defaults to local domain\.491 \fIDOMAIN\fR\&. Defaults to local domain\&. 295 492 .SS "LOOKUP KDC [REALM]" 296 493 .PP 297 494 Give IP address of KDC for the specified 298 \fIREALM\fR\ . Defaults to local realm\.495 \fIREALM\fR\&. Defaults to local realm\&. 299 496 .SS "LOOKUP DC [DOMAIN]" 300 497 .PP 301 498 Give IP\'s of Domain Controllers for specified 302 \fI DOMAIN\fR\ . Defaults to local domain\.499 \fI DOMAIN\fR\&. Defaults to local domain\&. 303 500 .SS "LOOKUP MASTER DOMAIN" 304 501 .PP 305 502 Give IP of master browser for specified 306 503 \fIDOMAIN\fR 307 or workgroup\ . Defaults to local domain\.504 or workgroup\&. Defaults to local domain\&. 308 505 .SS "CACHE" 309 506 .PP 310 Samba uses a general caching interface called \'gencache\'\ . It can be controlled using \'NET CACHE\'\.507 Samba uses a general caching interface called \'gencache\'\&. It can be controlled using \'NET CACHE\'\&. 311 508 .PP 312 509 All the timeout parameters support the suffixes: 313 . IP ""4510 .RS 4 314 511 s \- Seconds 315 .IP "" 4 512 .RE 513 .RS 4 316 514 m \- Minutes 317 .IP "" 4 515 .RE 516 .RS 4 318 517 h \- Hours 319 .IP "" 4 518 .RE 519 .RS 4 320 520 d \- Days 321 .IP "" 4 521 .RE 522 .RS 4 322 523 w \- Weeks 323 524 .RE 324 525 .SS "CACHE ADD key data time-out" 325 526 .PP 326 Add specified key+data to the cache with the given timeout\ .527 Add specified key+data to the cache with the given timeout\&. 327 528 .SS "CACHE DEL key" 328 529 .PP 329 Delete key from the cache\ .530 Delete key from the cache\&. 330 531 .SS "CACHE SET key data time-out" 331 532 .PP 332 Update data of existing cache entry\ .533 Update data of existing cache entry\&. 333 534 .SS "CACHE SEARCH PATTERN" 334 535 .PP 335 Search for the specified pattern in the cache data\ .536 Search for the specified pattern in the cache data\&. 336 537 .SS "CACHE LIST" 337 538 .PP 338 List all current items in the cache\ .539 List all current items in the cache\&. 339 540 .SS "CACHE FLUSH" 340 541 .PP 341 Remove all the current items from the cache\ .542 Remove all the current items from the cache\&. 342 543 .SS "GETLOCALSID [DOMAIN]" 343 544 .PP 344 Prints the SID of the specified domain, or if the parameter is omitted, the SID of the local server\ .545 Prints the SID of the specified domain, or if the parameter is omitted, the SID of the local server\&. 345 546 .SS "SETLOCALSID S\-1\-5\-21\-x\-y\-z" 346 547 .PP 347 Sets SID for the local server to the specified SID\ .548 Sets SID for the local server to the specified SID\&. 348 549 .SS "GETDOMAINSID" 349 550 .PP 350 Prints the local machine SID and the SID of the current domain\ .551 Prints the local machine SID and the SID of the current domain\&. 351 552 .SS "SETDOMAINSID" 352 553 .PP 353 Sets the SID of the current domain\ .554 Sets the SID of the current domain\&. 354 555 .SS "GROUPMAP" 355 556 .PP 356 Manage the mappings between Windows group SIDs and UNIX groups\ . Common options include:557 Manage the mappings between Windows group SIDs and UNIX groups\&. Common options include: 357 558 .sp 358 559 .RS 4 … … 397 598 .IP \(bu 2.3 398 599 .\} 399 sid \- Full SID in the form of "S\-1\-\ .\.\."600 sid \- Full SID in the form of "S\-1\-\&.\&.\&." 400 601 .RE 401 602 .sp … … 426 627 Add a new group mapping entry: 427 628 .sp 428 .RS 4 629 .if n \{\ 630 .RS 4 631 .\} 632 .fam C 633 .ps -1 429 634 .nf 635 .if t \{\ 636 .sp -1 637 .\} 638 .BB lightgray adjust-for-leading-newline 639 .sp -1 640 430 641 net groupmap add {rid=int|sid=string} unixgroup=string \e 431 642 [type={domain|local}] [ntgroup=string] [comment=string] 643 .EB lightgray adjust-for-leading-newline 644 .if t \{\ 645 .sp 1 646 .\} 432 647 .fi 433 .RE 648 .fam 649 .ps +1 650 .if n \{\ 651 .RE 652 .\} 434 653 .sp 435 654 436 655 .SS "GROUPMAP DELETE" 437 656 .PP 438 Delete a group mapping entry\ . If more than one group name matches, the first entry found is deleted\.657 Delete a group mapping entry\&. If more than one group name matches, the first entry found is deleted\&. 439 658 .PP 440 659 net groupmap delete {ntgroup=string|sid=SID} 441 660 .SS "GROUPMAP MODIFY" 442 661 .PP 443 Update en existing group entry\ .662 Update en existing group entry\&. 444 663 .PP 445 664 446 665 .sp 447 .RS 4 666 .if n \{\ 667 .RS 4 668 .\} 669 .fam C 670 .ps -1 448 671 .nf 672 .if t \{\ 673 .sp -1 674 .\} 675 .BB lightgray adjust-for-leading-newline 676 .sp -1 677 449 678 net groupmap modify {ntgroup=string|sid=SID} [unixgroup=string] \e 450 679 [comment=string] [type={domain|local}] 680 .EB lightgray adjust-for-leading-newline 681 .if t \{\ 682 .sp 1 683 .\} 451 684 .fi 452 .RE 685 .fam 686 .ps +1 687 .if n \{\ 688 .RE 689 .\} 453 690 .sp 454 691 455 692 .SS "GROUPMAP LIST" 456 693 .PP 457 List existing group mapping entries\ .694 List existing group mapping entries\&. 458 695 .PP 459 696 net groupmap list [verbose] [ntgroup=string] [sid=SID] 460 697 .SS "MAXRID" 461 698 .PP 462 Prints out the highest RID currently in use on the local server (by the active \'passdb backend\')\ .699 Prints out the highest RID currently in use on the local server (by the active \'passdb backend\')\&. 463 700 .SS "RPC INFO" 464 701 .PP 465 Print information about the domain of the remote server, such as domain name, domain sid and number of users and groups\ .702 Print information about the domain of the remote server, such as domain name, domain sid and number of users and groups\&. 466 703 .SS "[RPC|ADS] TESTJOIN" 467 704 .PP 468 Check whether participation in a domain is still valid\ .705 Check whether participation in a domain is still valid\&. 469 706 .SS "[RPC|ADS] CHANGETRUSTPW" 470 707 .PP 471 Force change of domain trust password\ .708 Force change of domain trust password\&. 472 709 .SS "RPC TRUSTDOM" 473 710 .SS "RPC TRUSTDOM ADD DOMAIN" 474 711 .PP 475 712 Add a interdomain trust account for 476 \fIDOMAIN\fR\ . This is in fact a Samba account named713 \fIDOMAIN\fR\&. This is in fact a Samba account named 477 714 \fIDOMAIN$\fR 478 715 with the account flag 479 716 \fB\'I\'\fR 480 (interdomain trust account)\ . If the command is used against localhost it has the same effect as481 smbpasswd \-a \-i DOMAIN\. Please note that both commands expect a appropriate UNIX account\.717 (interdomain trust account)\&. If the command is used against localhost it has the same effect as 718 \FCsmbpasswd \-a \-i DOMAIN\F[]\&. Please note that both commands expect a appropriate UNIX account\&. 482 719 .SS "RPC TRUSTDOM DEL DOMAIN" 483 720 .PP 484 721 Remove interdomain trust account for 485 \fIDOMAIN\fR\ . If it is used against localhost it has the same effect as486 smbpasswd \-x DOMAIN$\.722 \fIDOMAIN\fR\&. If it is used against localhost it has the same effect as 723 \FCsmbpasswd \-x DOMAIN$\F[]\&. 487 724 .SS "RPC TRUSTDOM ESTABLISH DOMAIN" 488 725 .PP 489 Establish a trust relationship to a trusting domain\ . Interdomain account must already be created on the remote PDC\.726 Establish a trust relationship to a trusting domain\&. Interdomain account must already be created on the remote PDC\&. 490 727 .SS "RPC TRUSTDOM REVOKE DOMAIN" 491 728 .PP … … 493 730 .SS "RPC TRUSTDOM LIST" 494 731 .PP 495 List all current interdomain trust relationships\ .732 List all current interdomain trust relationships\&. 496 733 .SS "RPC RIGHTS" 497 734 .PP 498 This subcommand is used to view and manage Samba\'s rights assignments (also referred to as privileges)\ . There are three options currently available:735 This subcommand is used to view and manage Samba\'s rights assignments (also referred to as privileges)\&. There are three options currently available: 499 736 \fIlist\fR, 500 737 \fIgrant\fR, and 501 \fIrevoke\fR\ . More details on Samba\'s privilege model and its use can be found in the Samba\-HOWTO\-Collection\.738 \fIrevoke\fR\&. More details on Samba\'s privilege model and its use can be found in the Samba\-HOWTO\-Collection\&. 502 739 .SS "RPC ABORTSHUTDOWN" 503 740 .PP 504 Abort the shutdown of a remote server\ .741 Abort the shutdown of a remote server\&. 505 742 .SS "RPC SHUTDOWN [\-t timeout] [\-r] [\-f] [\-C message]" 506 743 .PP 507 Shut down the remote server\ .744 Shut down the remote server\&. 508 745 .PP 509 746 \-r 510 747 .RS 4 511 Reboot after shutdown\ .748 Reboot after shutdown\&. 512 749 .RE 513 750 .PP 514 751 \-f 515 752 .RS 4 516 Force shutting down all applications\ .753 Force shutting down all applications\&. 517 754 .RE 518 755 .PP 519 756 \-t timeout 520 757 .RS 4 521 Timeout before system will be shut down\ . An interactive user of the system can use this time to cancel the shutdown\.758 Timeout before system will be shut down\&. An interactive user of the system can use this time to cancel the shutdown\&. 522 759 .RE 523 760 \'> … … 525 762 \-C message 526 763 .RS 4 527 Display the specified message on the screen to announce the shutdown\ .764 Display the specified message on the screen to announce the shutdown\&. 528 765 .RE 529 766 .SS "RPC SAMDUMP" 530 767 .PP 531 Print out sam database of remote server\ . You need to run this against the PDC, from a Samba machine joined as a BDC\.768 Print out sam database of remote server\&. You need to run this against the PDC, from a Samba machine joined as a BDC\&. 532 769 .SS "RPC VAMPIRE" 533 770 .PP 534 Export users, aliases and groups from remote server to local server\ . You need to run this against the PDC, from a Samba machine joined as a BDC\.771 Export users, aliases and groups from remote server to local server\&. You need to run this against the PDC, from a Samba machine joined as a BDC\&. 535 772 .SS "RPC GETSID" 536 773 .PP 537 774 Fetch domain SID and store it in the local 538 \ fIsecrets\.tdb\fR\.775 \FCsecrets\&.tdb\F[]\&. 539 776 .SS "ADS LEAVE" 540 777 .PP 541 Make the remote host leave the domain it is part of\ .778 Make the remote host leave the domain it is part of\&. 542 779 .SS "ADS STATUS" 543 780 .PP 544 Print out status of machine account of the local machine in ADS\ . Prints out quite some debug info\. Aimed at developers, regular users should use545 NET ADS TESTJOIN\.781 Print out status of machine account of the local machine in ADS\&. Prints out quite some debug info\&. Aimed at developers, regular users should use 782 \FCNET ADS TESTJOIN\F[]\&. 546 783 .SS "ADS PRINTER" 547 784 .SS "ADS PRINTER INFO [PRINTER] [SERVER]" … … 550 787 \fIPRINTER\fR 551 788 on 552 \fISERVER\fR\ . The printer name defaults to "*", the server name defaults to the local host\.789 \fISERVER\fR\&. The printer name defaults to "*", the server name defaults to the local host\&. 553 790 .SS "ADS PRINTER PUBLISH PRINTER" 554 791 .PP 555 Publish specified printer using ADS\ .792 Publish specified printer using ADS\&. 556 793 .SS "ADS PRINTER REMOVE PRINTER" 557 794 .PP 558 Remove specified printer from ADS directory\ .559 .SS "ADS SEARCH \fIEXPRESSION\fR \fIATTRIBUTES\ .\.\.\fR"560 .PP 561 Perform a raw LDAP search on a ADS server and dump the results\ . The expression is a standard LDAP search expression, and the attributes are a list of LDAP fields to show in the results\.795 Remove specified printer from ADS directory\&. 796 .SS "ADS SEARCH \fIEXPRESSION\fR \fIATTRIBUTES\&.\&.\&.\fR" 797 .PP 798 Perform a raw LDAP search on a ADS server and dump the results\&. The expression is a standard LDAP search expression, and the attributes are a list of LDAP fields to show in the results\&. 562 799 .PP 563 800 Example: … … 565 802 .SS "ADS DN \fIDN\fR \fI(attributes)\fR" 566 803 .PP 567 Perform a raw LDAP search on a ADS server and dump the results\ . The DN standard LDAP DN, and the attributes are a list of LDAP fields to show in the result\.804 Perform a raw LDAP search on a ADS server and dump the results\&. The DN standard LDAP DN, and the attributes are a list of LDAP fields to show in the result\&. 568 805 .PP 569 806 Example: … … 571 808 .SS "ADS WORKGROUP" 572 809 .PP 573 Print out workgroup name for specified kerberos realm\ .810 Print out workgroup name for specified kerberos realm\&. 574 811 .SS "SAM CREATEBUILTINGROUP <NAME>" 575 812 .PP 576 (Re)Create a BUILTIN group\ . Only a wellknown set of BUILTIN groups can be created with this command\. This is the list of currently recognized group names: Administrators, Users, Guests, Power Users, Account Operators, Server Operators, Print Operators, Backup Operators, Replicator, RAS Servers, Pre\-Windows 2000 compatible Access\. This command requires a running Winbindd with idmap allocation properly configured\. The group gid will be allocated out of the winbindd range\.813 (Re)Create a BUILTIN group\&. Only a wellknown set of BUILTIN groups can be created with this command\&. This is the list of currently recognized group names: Administrators, Users, Guests, Power Users, Account Operators, Server Operators, Print Operators, Backup Operators, Replicator, RAS Servers, Pre\-Windows 2000 compatible Access\&. This command requires a running Winbindd with idmap allocation properly configured\&. The group gid will be allocated out of the winbindd range\&. 577 814 .SS "SAM CREATELOCALGROUP <NAME>" 578 815 .PP 579 Create a LOCAL group (also known as Alias)\ . This command requires a running Winbindd with idmap allocation properly configured\. The group gid will be allocated out of the winbindd range\.816 Create a LOCAL group (also known as Alias)\&. This command requires a running Winbindd with idmap allocation properly configured\&. The group gid will be allocated out of the winbindd range\&. 580 817 .SS "SAM DELETELOCALGROUP <NAME>" 581 818 .PP 582 Delete an existing LOCAL group (also known as Alias)\ .819 Delete an existing LOCAL group (also known as Alias)\&. 583 820 .SS "SAM MAPUNIXGROUP <NAME>" 584 821 .PP 585 Map an existing Unix group and make it a Domain Group, the domain group will have the same name\ .822 Map an existing Unix group and make it a Domain Group, the domain group will have the same name\&. 586 823 .SS "SAM UNMAPUNIXGROUP <NAME>" 587 824 .PP 588 Remove an existing group mapping entry\ .825 Remove an existing group mapping entry\&. 589 826 .SS "SAM ADDMEM <GROUP> <MEMBER>" 590 827 .PP 591 Add a member to a Local group\ . The group can be specified only by name, the member can be specified by name or SID\.828 Add a member to a Local group\&. The group can be specified only by name, the member can be specified by name or SID\&. 592 829 .SS "SAM DELMEM <GROUP> <MEMBER>" 593 830 .PP 594 Remove a member from a Local group\ . The group and the member must be specified by name\.831 Remove a member from a Local group\&. The group and the member must be specified by name\&. 595 832 .SS "SAM LISTMEM <GROUP>" 596 833 .PP 597 List Local group members\ . The group must be specified by name\.834 List Local group members\&. The group must be specified by name\&. 598 835 .SS "SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]" 599 836 .PP 600 List the specified set of accounts by name\ . If verbose is specified, the rid and description is also provided for each account\.837 List the specified set of accounts by name\&. If verbose is specified, the rid and description is also provided for each account\&. 601 838 .SS "SAM SHOW <NAME>" 602 839 .PP 603 Show the full DOMAIN\e\eNAME the SID and the type for the corresponding account\ .840 Show the full DOMAIN\e\eNAME the SID and the type for the corresponding account\&. 604 841 .SS "SAM SET HOMEDIR <NAME> <DIRECTORY>" 605 842 .PP 606 Set the home directory for a user account\ .843 Set the home directory for a user account\&. 607 844 .SS "SAM SET PROFILEPATH <NAME> <PATH>" 608 845 .PP 609 Set the profile path for a user account\ .846 Set the profile path for a user account\&. 610 847 .SS "SAM SET COMMENT <NAME> <COMMENT>" 611 848 .PP 612 Set the comment for a user or group account\ .849 Set the comment for a user or group account\&. 613 850 .SS "SAM SET FULLNAME <NAME> <FULL NAME>" 614 851 .PP 615 Set the full name for a user account\ .852 Set the full name for a user account\&. 616 853 .SS "SAM SET LOGONSCRIPT <NAME> <SCRIPT>" 617 854 .PP 618 Set the logon script for a user account\ .855 Set the logon script for a user account\&. 619 856 .SS "SAM SET HOMEDRIVE <NAME> <DRIVE>" 620 857 .PP 621 Set the home drive for a user account\ .858 Set the home drive for a user account\&. 622 859 .SS "SAM SET WORKSTATIONS <NAME> <WORKSTATIONS>" 623 860 .PP 624 Set the workstations a user account is allowed to log in from\ .861 Set the workstations a user account is allowed to log in from\&. 625 862 .SS "SAM SET DISABLE <NAME>" 626 863 .PP 627 Set the "disabled" flag for a user account\ .864 Set the "disabled" flag for a user account\&. 628 865 .SS "SAM SET PWNOTREQ <NAME>" 629 866 .PP 630 Set the "password not required" flag for a user account\ .867 Set the "password not required" flag for a user account\&. 631 868 .SS "SAM SET AUTOLOCK <NAME>" 632 869 .PP 633 Set the "autolock" flag for a user account\ .870 Set the "autolock" flag for a user account\&. 634 871 .SS "SAM SET PWNOEXP <NAME>" 635 872 .PP 636 Set the "password do not expire" flag for a user account\ .873 Set the "password do not expire" flag for a user account\&. 637 874 .SS "SAM SET PWDMUSTCHANGENOW <NAME> [yes|no]" 638 875 .PP 639 Set or unset the "password must change" flag for a user account\ .876 Set or unset the "password must change" flag for a user account\&. 640 877 .SS "SAM POLICY LIST" 641 878 .PP 642 List the available account policies\ .879 List the available account policies\&. 643 880 .SS "SAM POLICY SHOW <account policy>" 644 881 .PP 645 Show the account policy value\ .882 Show the account policy value\&. 646 883 .SS "SAM POLICY SET <account policy> <value>" 647 884 .PP 648 Set a value for the account policy\ . Valid values can be: "forever", "never", "off", or a number\.885 Set a value for the account policy\&. Valid values can be: "forever", "never", "off", or a number\&. 649 886 .SS "SAM PROVISION" 650 887 .PP 651 Only available if ldapsam:editposix is set and winbindd is running\ . Properly populates the ldap tree with the basic accounts (Administrator) and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree\.888 Only available if ldapsam:editposix is set and winbindd is running\&. Properly populates the ldap tree with the basic accounts (Administrator) and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree\&. 652 889 .SS "IDMAP DUMP <local tdb file name>" 653 890 .PP 654 Dumps the mappings contained in the local tdb file specified\ . This command is useful to dump only the mappings produced by the idmap_tdb backend\.891 Dumps the mappings contained in the local tdb file specified\&. This command is useful to dump only the mappings produced by the idmap_tdb backend\&. 655 892 .SS "IDMAP RESTORE [input file]" 656 893 .PP 657 Restore the mappings from the specified file or stdin\ .894 Restore the mappings from the specified file or stdin\&. 658 895 .SS "IDMAP SECRET <DOMAIN>|ALLOC <secret>" 659 896 .PP 660 Store a secret for the specified domain, used primarily for domains that use idmap_ldap as a backend\ . In this case the secret is used as the password for the user DN used to bind to the ldap server\.897 Store a secret for the specified domain, used primarily for domains that use idmap_ldap as a backend\&. In this case the secret is used as the password for the user DN used to bind to the ldap server\&. 661 898 .SS "USERSHARE" 662 899 .PP 663 Starting with version 3\ .0\.23, a Samba server now supports the ability for non\-root users to add user defined shares to be exported using the "net usershare" commands\.664 .PP 665 To set this up, first set up your smb\ .conf by adding to the [global] section: usershare path = /usr/local/samba/lib/usershares Next create the directory /usr/local/samba/lib/usershares, change the owner to root and set the group owner to the UNIX group who should have the ability to create usershares, for example a group called "serverops"\. Set the permissions on /usr/local/samba/lib/usershares to 01770\. (Owner and group all access, no access for others, plus the sticky bit, which means that a file in that directory can be renamed or deleted only by the owner of the file)\. Finally, tell smbd how many usershares you will allow by adding to the [global] section of smb\.conf a line such as : usershare max shares = 100\. To allow 100 usershare definitions\. Now, members of the UNIX group "serverops" can create user defined shares on demand using the commands below\.900 Starting with version 3\&.0\&.23, a Samba server now supports the ability for non\-root users to add user defined shares to be exported using the "net usershare" commands\&. 901 .PP 902 To set this up, first set up your smb\&.conf by adding to the [global] section: usershare path = /usr/local/samba/lib/usershares Next create the directory /usr/local/samba/lib/usershares, change the owner to root and set the group owner to the UNIX group who should have the ability to create usershares, for example a group called "serverops"\&. Set the permissions on /usr/local/samba/lib/usershares to 01770\&. (Owner and group all access, no access for others, plus the sticky bit, which means that a file in that directory can be renamed or deleted only by the owner of the file)\&. Finally, tell smbd how many usershares you will allow by adding to the [global] section of smb\&.conf a line such as : usershare max shares = 100\&. To allow 100 usershare definitions\&. Now, members of the UNIX group "serverops" can create user defined shares on demand using the commands below\&. 666 903 .PP 667 904 The usershare commands are: 668 .IP "" 4 669 net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] \- to add or change a user defined share\. 670 .IP "" 4 671 net usershare delete sharename \- to delete a user defined share\. 672 .IP "" 4 673 net usershare info [\-l|\-\-long] [wildcard sharename] \- to print info about a user defined share\. 674 .IP "" 4 675 net usershare list [\-l|\-\-long] [wildcard sharename] \- to list user defined shares\. 676 905 .RS 4 906 net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] \- to add or change a user defined share\&. 907 .RE 908 .RS 4 909 net usershare delete sharename \- to delete a user defined share\&. 910 .RE 911 .RS 4 912 net usershare info [\-l|\-\-long] [wildcard sharename] \- to print info about a user defined share\&. 913 .RE 914 .RS 4 915 net usershare list [\-l|\-\-long] [wildcard sharename] \- to list user defined shares\&. 916 .RE 677 917 .SS "USERSHARE ADD sharename path [comment] [acl] [guest_ok=[y|n]]" 678 918 .PP 679 Add or replace a new user defined share, with name "sharename"\ .680 .PP 681 "path" specifies the absolute pathname on the system to be exported\ . Restrictions may be put on this, see the global smb\.conf parameters: "usershare owner only", "usershare prefix allow list", and "usershare prefix deny list"\.682 .PP 683 The optional "comment" parameter is the comment that will appear on the share when browsed to by a client\ .684 .PP 685 The optional "acl" field specifies which users have read and write access to the entire share\ . Note that guest connections are not allowed unless the smb\.conf parameter "usershare allow guests" has been set\. The definition of a user defined share acl is: "user:permission", where user is a valid username on the system and permission can be "F", "R", or "D"\. "F" stands for "full permissions", ie\. read and write permissions\. "D" stands for "deny" for a user, ie\. prevent this user from accessing this share\. "R" stands for "read only", ie\. only allow read access to this share (no creation of new files or directories or writing to files)\.686 .PP 687 The default if no "acl" is given is "Everyone:R", which means any authenticated user has read\-only access\ .688 .PP 689 The optional "guest_ok" has the same effect as the parameter of the same name in smb\ .conf, in that it allows guest access to this user defined share\. This parameter is only allowed if the global parameter "usershare allow guests" has been set to true in the smb\.conf\.919 Add or replace a new user defined share, with name "sharename"\&. 920 .PP 921 "path" specifies the absolute pathname on the system to be exported\&. Restrictions may be put on this, see the global smb\&.conf parameters: "usershare owner only", "usershare prefix allow list", and "usershare prefix deny list"\&. 922 .PP 923 The optional "comment" parameter is the comment that will appear on the share when browsed to by a client\&. 924 .PP 925 The optional "acl" field specifies which users have read and write access to the entire share\&. Note that guest connections are not allowed unless the smb\&.conf parameter "usershare allow guests" has been set\&. The definition of a user defined share acl is: "user:permission", where user is a valid username on the system and permission can be "F", "R", or "D"\&. "F" stands for "full permissions", ie\&. read and write permissions\&. "D" stands for "deny" for a user, ie\&. prevent this user from accessing this share\&. "R" stands for "read only", ie\&. only allow read access to this share (no creation of new files or directories or writing to files)\&. 926 .PP 927 The default if no "acl" is given is "Everyone:R", which means any authenticated user has read\-only access\&. 928 .PP 929 The optional "guest_ok" has the same effect as the parameter of the same name in smb\&.conf, in that it allows guest access to this user defined share\&. This parameter is only allowed if the global parameter "usershare allow guests" has been set to true in the smb\&.conf\&. 690 930 691 931 … … 693 933 just use the "net usershare add [sharename]" command using the same 694 934 sharename as the one you wish to modify and specify the new options 695 you wish\ . The Samba smbd daemon notices user defined share modifications935 you wish\&. The Samba smbd daemon notices user defined share modifications 696 936 at connect time so will see the change immediately, there is no need 697 to restart smbd on adding, deleting or changing a user defined share\ .937 to restart smbd on adding, deleting or changing a user defined share\&. 698 938 .SS "USERSHARE DELETE sharename" 699 939 .PP 700 Deletes the user defined share by name\ . The Samba smbd daemon immediately notices this change, although it will not disconnect any users currently connected to the deleted share\.940 Deletes the user defined share by name\&. The Samba smbd daemon immediately notices this change, although it will not disconnect any users currently connected to the deleted share\&. 701 941 .SS "USERSHARE INFO [-l|--long] [wildcard sharename]" 702 942 .PP 703 Get info on user defined shares owned by the current user matching the given pattern, or all users\ .704 .PP 705 net usershare info on its own dumps out info on the user defined shares that were created by the current user, or restricts them to share names that match the given wildcard pattern (\'*\' matches one or more characters, \'?\' matches only one character)\ . If the \'\-l\' or \'\-\-long\' option is also given, it prints out info on user defined shares created by other users\.706 .PP 707 The information given about a share looks like: [foobar] path=/home/jeremy comment=testme usershare_acl=Everyone:F guest_ok=n And is a list of the current settings of the user defined share that can be modified by the "net usershare add" command\ .943 Get info on user defined shares owned by the current user matching the given pattern, or all users\&. 944 .PP 945 net usershare info on its own dumps out info on the user defined shares that were created by the current user, or restricts them to share names that match the given wildcard pattern (\'*\' matches one or more characters, \'?\' matches only one character)\&. If the \'\-l\' or \'\-\-long\' option is also given, it prints out info on user defined shares created by other users\&. 946 .PP 947 The information given about a share looks like: [foobar] path=/home/jeremy comment=testme usershare_acl=Everyone:F guest_ok=n And is a list of the current settings of the user defined share that can be modified by the "net usershare add" command\&. 708 948 .SS "USERSHARE LIST [-l|--long] wildcard sharename" 709 949 .PP 710 List all the user defined shares owned by the current user matching the given pattern, or all users\ .711 .PP 712 net usershare list on its own list out the names of the user defined shares that were created by the current user, or restricts the list to share names that match the given wildcard pattern (\'*\' matches one or more characters, \'?\' matches only one character)\ . If the \'\-l\' or \'\-\-long\' option is also given, it includes the names of user defined shares created by other users\.950 List all the user defined shares owned by the current user matching the given pattern, or all users\&. 951 .PP 952 net usershare list on its own list out the names of the user defined shares that were created by the current user, or restricts the list to share names that match the given wildcard pattern (\'*\' matches one or more characters, \'?\' matches only one character)\&. If the \'\-l\' or \'\-\-long\' option is also given, it includes the names of user defined shares created by other users\&. 713 953 .SS "HELP [COMMAND]" 714 954 .PP 715 Gives usage information for the specified command\ .955 Gives usage information for the specified command\&. 716 956 .SH "VERSION" 717 957 .PP 718 This man page is complete for version 3\ .0 of the Samba suite\.958 This man page is complete for version 3\&.0 of the Samba suite\&. 719 959 .SH "AUTHOR" 720 960 .PP 721 The original Samba software and related utilities were created by Andrew Tridgell\ . Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\.722 .PP 723 The net manpage was written by Jelmer Vernooij\ .961 The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. 962 .PP 963 The net manpage was written by Jelmer Vernooij\&.
Note:
See TracChangeset
for help on using the changeset viewer.