Changeset 311 for branches/samba-3.0/docs/htmldocs/manpages/smb.conf.5.html
- Timestamp:
- Aug 5, 2009, 6:33:18 PM (16 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.0/docs/htmldocs/manpages/smb.conf.5.html
r286 r311 4403 4403 the value for the <em class="parameter"><code>printing</code></em> option since it will 4404 4404 reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section"> 4405 [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555851"></a> 4405 [printers]</a> section.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printing</code></em> = <code class="literal">Depends on the operating system, see 4406 <code class="literal">testparm -v.</code></code> 4407 </em></span> 4408 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555869"></a> 4406 4409 4407 4410 printjob username (S) 4408 </h3></div></div></div><a class="indexterm" name="id25558 52"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4411 </h3></div></div></div><a class="indexterm" name="id2555870"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4409 4412 passed to the printing system. Usually, the username is sent, 4410 4413 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4412 4415 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4413 4416 </em></span> 4414 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25559 13"></a>4417 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555930"></a> 4415 4418 4416 4419 private dir (G) 4417 </h3></div></div></div><a class="indexterm" name="id25559 14"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4420 </h3></div></div></div><a class="indexterm" name="id2555932"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4418 4421 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4419 4422 and <code class="filename">secrets.tdb</code>. 4420 4423 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4421 4424 </em></span> 4422 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25559 67"></a>4425 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555984"></a> 4423 4426 4424 4427 profile acls (S) 4425 </h3></div></div></div><a class="indexterm" name="id25559 68"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4428 </h3></div></div></div><a class="indexterm" name="id2555986"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4426 4429 This boolean parameter was added to fix the problems that people have been 4427 4430 having with storing user profiles on Samba shares from Windows 2000 or … … 4451 4454 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4452 4455 </em></span> 4453 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25560 47"></a>4456 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556065"></a> 4454 4457 4455 4458 queuepause command (S) 4456 </h3></div></div></div><a class="indexterm" name="id25560 48"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4459 </h3></div></div></div><a class="indexterm" name="id2556066"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4457 4460 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4458 4461 a printer name as its only parameter and stops the printer queue, … … 4465 4468 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4466 4469 </em></span> 4467 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25561 24"></a>4470 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556142"></a> 4468 4471 4469 4472 queueresume command (S) 4470 </h3></div></div></div><a class="indexterm" name="id25561 25"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4473 </h3></div></div></div><a class="indexterm" name="id2556143"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4471 4474 executed on the server host in order to resume the printer queue. It 4472 4475 is the command to undo the behavior that is caused by the … … 4483 4486 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4484 4487 </em></span> 4485 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25562 27"></a>4488 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556245"></a> 4486 4489 4487 4490 read bmpx (G) 4488 </h3></div></div></div><a class="indexterm" name="id25562 28"></a><a name="READBMPX"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether4491 </h3></div></div></div><a class="indexterm" name="id2556246"></a><a name="READBMPX"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 4489 4492 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will support the "Read 4490 4493 Block Multiplex" SMB. This is now rarely used and defaults to … … 4492 4495 parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read bmpx</code></em> = <code class="literal">no</code> 4493 4496 </em></span> 4494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25562 82"></a>4497 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556299"></a> 4495 4498 4496 4499 read list (S) 4497 </h3></div></div></div><a class="indexterm" name="id2556 283"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>4500 </h3></div></div></div><a class="indexterm" name="id2556300"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4498 4501 This is a list of users that are given read-only access to a service. If the connecting user is in this list 4499 4502 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set … … 4505 4508 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 4506 4509 </em></span> 4507 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25563 81"></a>4510 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556399"></a> 4508 4511 4509 4512 read only (S) 4510 </h3></div></div></div><a class="indexterm" name="id2556 382"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users4513 </h3></div></div></div><a class="indexterm" name="id2556400"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 4511 4514 of a service may not create or modify files in the service's 4512 4515 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 4514 4517 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 4515 4518 </em></span> 4516 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25564 58"></a>4519 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556476"></a> 4517 4520 4518 4521 read raw (G) 4519 </h3></div></div></div><a class="indexterm" name="id25564 59"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server4522 </h3></div></div></div><a class="indexterm" name="id2556477"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4520 4523 will support the raw read SMB requests when transferring data 4521 4524 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 4526 4529 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 4527 4530 </em></span> 4528 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25565 18"></a>4531 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556536"></a> 4529 4532 4530 4533 realm (G) 4531 </h3></div></div></div><a class="indexterm" name="id25565 19"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is4534 </h3></div></div></div><a class="indexterm" name="id2556537"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4532 4535 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 4533 4536 is usually set to the DNS name of the kerberos server. … … 4536 4539 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 4537 4540 </em></span> 4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556 583"></a>4541 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556601"></a> 4539 4542 4540 4543 remote announce (G) 4541 </h3></div></div></div><a class="indexterm" name="id2556 584"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>4544 </h3></div></div></div><a class="indexterm" name="id2556602"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4542 4545 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself 4543 4546 to arbitrary IP addresses with an arbitrary workgroup name. … … 4563 4566 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 4564 4567 </em></span> 4565 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556 688"></a>4568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556706"></a> 4566 4569 4567 4570 remote browse sync (G) 4568 </h3></div></div></div><a class="indexterm" name="id2556 689"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>4571 </h3></div></div></div><a class="indexterm" name="id2556707"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4569 4572 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4570 4573 synchronization of browse lists with the master browser of a Samba … … 4598 4601 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 4599 4602 </em></span> 4600 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25568 00"></a>4603 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556818"></a> 4601 4604 4602 4605 rename user script (G) 4603 </h3></div></div></div><a class="indexterm" name="id25568 02"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>4606 </h3></div></div></div><a class="indexterm" name="id2556819"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4604 4607 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4605 4608 </p><p> … … 4619 4622 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 4620 4623 </em></span> 4621 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556 891"></a>4624 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556909"></a> 4622 4625 4623 4626 reset on zero vc (G) 4624 </h3></div></div></div><a class="indexterm" name="id2556 892"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>4627 </h3></div></div></div><a class="indexterm" name="id2556910"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4625 4628 This boolean option controls whether an incoming session setup 4626 4629 should kill other connections coming from the same IP. This matches … … 4641 4644 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 4642 4645 </em></span> 4643 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25569 44"></a>4646 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556961"></a> 4644 4647 4645 4648 restrict anonymous (G) 4646 </h3></div></div></div><a class="indexterm" name="id25569 45"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and4649 </h3></div></div></div><a class="indexterm" name="id2556962"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 4647 4650 group list information is returned for an anonymous connection. 4648 4651 and mirrors the effects of the … … 4667 4670 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 4668 4671 </em></span> 4669 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25570 28"></a>4672 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557046"></a> 4670 4673 4671 4674 <a name="ROOT"></a>root 4672 </h3></div></div></div><a class="indexterm" name="id25570 29"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557061"></a>4675 </h3></div></div></div><a class="indexterm" name="id2557047"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557079"></a> 4673 4676 4674 4677 <a name="ROOTDIR"></a>root dir 4675 </h3></div></div></div><a class="indexterm" name="id25570 62"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557092"></a>4678 </h3></div></div></div><a class="indexterm" name="id2557080"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557110"></a> 4676 4679 4677 4680 root directory (G) 4678 </h3></div></div></div><a class="indexterm" name="id2557 093"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.4681 </h3></div></div></div><a class="indexterm" name="id2557111"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4679 4682 Change its root directory) to this directory on startup. This is 4680 4683 not strictly necessary for secure operation. Even without it the … … 4699 4702 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 4700 4703 </em></span> 4701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25572 16"></a>4704 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557234"></a> 4702 4705 4703 4706 root postexec (S) 4704 </h3></div></div></div><a class="indexterm" name="id25572 17"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4707 </h3></div></div></div><a class="indexterm" name="id2557235"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4705 4708 This is the same as the <em class="parameter"><code>postexec</code></em> 4706 4709 parameter except that the command is run as root. This is useful for … … 4708 4711 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 4709 4712 </em></span> 4710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25572 65"></a>4713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557283"></a> 4711 4714 4712 4715 root preexec close (S) 4713 </h3></div></div></div><a class="indexterm" name="id25572 66"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close4716 </h3></div></div></div><a class="indexterm" name="id2557284"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 4714 4717 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 4715 4718 </em></span> 4716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25573 13"></a>4719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557331"></a> 4717 4720 4718 4721 root preexec (S) 4719 </h3></div></div></div><a class="indexterm" name="id25573 14"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>4722 </h3></div></div></div><a class="indexterm" name="id2557332"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4720 4723 This is the same as the <em class="parameter"><code>preexec</code></em> 4721 4724 parameter except that the command is run as root. This is useful for … … 4723 4726 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 4724 4727 </em></span> 4725 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25573 62"></a>4728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557380"></a> 4726 4729 4727 4730 security mask (S) 4728 </h3></div></div></div><a class="indexterm" name="id25573 63"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>4731 </h3></div></div></div><a class="indexterm" name="id2557381"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 4729 4732 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 4730 4733 UNIX permission on a file using the native NT security dialog box. … … 4745 4748 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 4746 4749 </em></span> 4747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25574 68"></a>4750 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557486"></a> 4748 4751 4749 4752 security (G) 4750 </h3></div></div></div><a class="indexterm" name="id25574 69"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to4753 </h3></div></div></div><a class="indexterm" name="id2557487"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 4751 4754 Samba and is one of the most important settings in the <code class="filename"> 4752 4755 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 4872 4875 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 4873 4876 </em></span> 4874 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25583 47"></a>4877 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558365"></a> 4875 4878 4876 4879 server schannel (G) 4877 </h3></div></div></div><a class="indexterm" name="id25583 48"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4880 </h3></div></div></div><a class="indexterm" name="id2558366"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4878 4881 This controls whether the server offers or even demands the use of the netlogon schannel. 4879 4882 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. … … 4886 4889 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 4887 4890 </em></span> 4888 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25584 63"></a>4891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558481"></a> 4889 4892 4890 4893 server signing (G) 4891 </h3></div></div></div><a class="indexterm" name="id25584 64"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires4894 </h3></div></div></div><a class="indexterm" name="id2558482"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires 4892 4895 the client it talks to to use SMB signing. Possible values 4893 4896 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> … … 4897 4900 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 4898 4901 </em></span> 4899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25585 24"></a>4902 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558542"></a> 4900 4903 4901 4904 server string (G) 4902 </h3></div></div></div><a class="indexterm" name="id25585 25"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print4905 </h3></div></div></div><a class="indexterm" name="id2558543"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 4903 4906 manager and next to the IPC connection in <code class="literal">net view</code>. It 4904 4907 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 4909 4912 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 4910 4913 </em></span> 4911 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 15"></a>4914 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558633"></a> 4912 4915 4913 4916 set directory (S) 4914 </h3></div></div></div><a class="indexterm" name="id25586 16"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4917 </h3></div></div></div><a class="indexterm" name="id2558634"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4915 4918 If <code class="literal">set directory = no</code>, then users of the 4916 4919 service may not use the setdir command to change directory. … … 4921 4924 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 4922 4925 </em></span> 4923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25586 75"></a>4926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558693"></a> 4924 4927 4925 4928 set primary group script (G) 4926 </h3></div></div></div><a class="indexterm" name="id25586 76"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a4929 </h3></div></div></div><a class="indexterm" name="id2558694"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 4927 4930 primary group in addition to the auxiliary groups. This script 4928 4931 sets the primary group in the unix userdatase when an … … 4936 4939 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 4937 4940 </em></span> 4938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25587 57"></a>4941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558775"></a> 4939 4942 4940 4943 set quota command (G) 4941 </h3></div></div></div><a class="indexterm" name="id25587 58"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used4944 </h3></div></div></div><a class="indexterm" name="id2558776"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 4942 4945 whenever there is no operating system API available from the OS that 4943 4946 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 4949 4952 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 4950 4953 </em></span> 4951 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25589 21"></a>4954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558938"></a> 4952 4955 4953 4956 share modes (S) 4954 </h3></div></div></div><a class="indexterm" name="id25589 22"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of4957 </h3></div></div></div><a class="indexterm" name="id2558940"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 4955 4958 the <em class="parameter"><code>share modes</code></em> during a file open. These 4956 4959 modes are used by clients to gain exclusive read or write access … … 4965 4968 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 4966 4969 </em></span> 4967 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25590 14"></a>4970 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559032"></a> 4968 4971 4969 4972 short preserve case (S) 4970 </h3></div></div></div><a class="indexterm" name="id25590 15"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4973 </h3></div></div></div><a class="indexterm" name="id2559033"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4971 4974 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 4972 4975 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 4975 4978 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 4976 4979 </em></span> 4977 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559 094"></a>4980 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559112"></a> 4978 4981 4979 4982 show add printer wizard (G) 4980 </h3></div></div></div><a class="indexterm" name="id2559 095"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support4983 </h3></div></div></div><a class="indexterm" name="id2559113"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 4981 4984 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 4982 4985 appear on Samba hosts in the share listing. Normally this folder will … … 4996 4999 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 4997 5000 </em></span> 4998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25591 77"></a>5001 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559195"></a> 4999 5002 5000 5003 shutdown script (G) 5001 </h3></div></div></div><a class="indexterm" name="id25591 78"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5004 </h3></div></div></div><a class="indexterm" name="id2559196"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5002 5005 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5003 5006 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, … … 5024 5027 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5025 5028 </em></span> 5026 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25593 30"></a>5029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559348"></a> 5027 5030 5028 5031 smb passwd file (G) 5029 </h3></div></div></div><a class="indexterm" name="id25593 31"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5032 </h3></div></div></div><a class="indexterm" name="id2559349"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5030 5033 default the path to the smbpasswd file is compiled into Samba.</p><p> 5031 5034 An example of use is: … … 5035 5038 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5036 5039 </em></span> 5037 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559 385"></a>5040 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559402"></a> 5038 5041 5039 5042 smb ports (G) 5040 </h3></div></div></div><a class="indexterm" name="id2559 386"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5041 </em></span> 5042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25594 26"></a>5043 </h3></div></div></div><a class="indexterm" name="id2559404"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5044 </em></span> 5045 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559444"></a> 5043 5046 5044 5047 socket address (G) 5045 </h3></div></div></div><a class="indexterm" name="id25594 27"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5048 </h3></div></div></div><a class="indexterm" name="id2559445"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5046 5049 address Samba will listen for connections on. This is used to 5047 5050 support multiple virtual interfaces on the one server, each … … 5052 5055 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5053 5056 </em></span> 5054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559 497"></a>5057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559514"></a> 5055 5058 5056 5059 socket options (G) 5057 </h3></div></div></div><a class="indexterm" name="id2559 498"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5060 </h3></div></div></div><a class="indexterm" name="id2559516"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5058 5061 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5059 5062 of the operating systems which allow the connection to be … … 5083 5086 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5084 5087 </em></span> 5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25597 07"></a>5088 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559730"></a> 5086 5089 5087 5090 stat cache (G) 5088 </h3></div></div></div><a class="indexterm" name="id25597 08"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5091 </h3></div></div></div><a class="indexterm" name="id2559731"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5089 5092 speed up case insensitive name mappings. You should never need 5090 5093 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5091 5094 </em></span> 5092 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25597 58"></a>5095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559781"></a> 5093 5096 5094 5097 store dos attributes (S) 5095 </h3></div></div></div><a class="indexterm" name="id25597 59"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5098 </h3></div></div></div><a class="indexterm" name="id2559782"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5096 5099 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5097 5100 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5105 5108 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5106 5109 </em></span> 5107 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559 880"></a>5110 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559903"></a> 5108 5111 5109 5112 strict allocate (S) 5110 </h3></div></div></div><a class="indexterm" name="id2559 881"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5113 </h3></div></div></div><a class="indexterm" name="id2559904"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5111 5114 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5112 5115 the server will change from UNIX behaviour of not committing real … … 5120 5123 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 5121 5124 </em></span> 5122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25599 50"></a>5125 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559972"></a> 5123 5126 5124 5127 strict locking (S) 5125 </h3></div></div></div><a class="indexterm" name="id25599 51"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5128 </h3></div></div></div><a class="indexterm" name="id2559973"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5126 5129 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5127 5130 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5139 5142 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5140 5143 </em></span> 5141 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25600 29"></a>5144 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560052"></a> 5142 5145 5143 5146 strict sync (S) 5144 </h3></div></div></div><a class="indexterm" name="id25600 30"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5147 </h3></div></div></div><a class="indexterm" name="id2560053"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5145 5148 shell) seem to confuse flushing buffer contents to disk with doing 5146 5149 a sync to disk. Under UNIX, a sync call forces the process to be … … 5156 5159 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5157 5160 </em></span> 5158 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560 094"></a>5161 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560116"></a> 5159 5162 5160 5163 svcctl list (G) 5161 </h3></div></div></div><a class="indexterm" name="id2560 095"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5164 </h3></div></div></div><a class="indexterm" name="id2560118"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5162 5165 will use for starting and stopping Unix services via the Win32 5163 5166 ServiceControl API. This allows Windows administrators to … … 5172 5175 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5173 5176 </em></span> 5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560 179"></a>5177 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560202"></a> 5175 5178 5176 5179 sync always (S) 5177 </h3></div></div></div><a class="indexterm" name="id2560 180"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5180 </h3></div></div></div><a class="indexterm" name="id2560203"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5178 5181 whether writes will always be written to stable storage before 5179 5182 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5186 5189 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5187 5190 </em></span> 5188 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25602 51"></a>5191 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560273"></a> 5189 5192 5190 5193 syslog only (G) 5191 </h3></div></div></div><a class="indexterm" name="id25602 52"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5194 </h3></div></div></div><a class="indexterm" name="id2560274"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5192 5195 If this parameter is set then Samba debug messages are logged into the system 5193 5196 syslog only, and not to the debug log files. There still will be some … … 5195 5198 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5196 5199 </em></span> 5197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560 298"></a>5200 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560321"></a> 5198 5201 5199 5202 syslog (G) 5200 </h3></div></div></div><a class="indexterm" name="id2560 299"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5203 </h3></div></div></div><a class="indexterm" name="id2560322"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5201 5204 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5202 5205 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5209 5212 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5210 5213 </em></span> 5211 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25603 69"></a>5214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560391"></a> 5212 5215 5213 5216 template homedir (G) 5214 </h3></div></div></div><a class="indexterm" name="id25603 70"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5217 </h3></div></div></div><a class="indexterm" name="id2560392"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5215 5218 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5216 5219 parameter to fill in the home directory for that user. If the … … 5220 5223 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5221 5224 </em></span> 5222 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25604 34"></a>5225 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560457"></a> 5223 5226 5224 5227 template shell (G) 5225 </h3></div></div></div><a class="indexterm" name="id25604 36"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5228 </h3></div></div></div><a class="indexterm" name="id2560458"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5226 5229 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5227 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25604 74"></a>5230 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560496"></a> 5228 5231 5229 5232 time offset (G) 5230 </h3></div></div></div><a class="indexterm" name="id25604 75"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5233 </h3></div></div></div><a class="indexterm" name="id2560497"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5231 5234 to the normal GMT to local time conversion. This is useful if 5232 5235 you are serving a lot of PCs that have incorrect daylight … … 5235 5238 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5236 5239 </em></span> 5237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25605 34"></a>5240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560556"></a> 5238 5241 5239 5242 time server (G) 5240 </h3></div></div></div><a class="indexterm" name="id25605 35"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5243 </h3></div></div></div><a class="indexterm" name="id2560557"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5241 5244 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5242 5245 </em></span> 5243 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560 584"></a>5246 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560606"></a> 5244 5247 5245 5248 unix charset (G) 5246 </h3></div></div></div><a class="indexterm" name="id2560 585"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5249 </h3></div></div></div><a class="indexterm" name="id2560608"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5247 5250 Samba runs on uses. Samba needs to know this in order to be able to 5248 5251 convert text to the charsets other SMB clients use. … … 5253 5256 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5254 5257 </em></span> 5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25606 50"></a>5258 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560672"></a> 5256 5259 5257 5260 unix extensions (G) 5258 </h3></div></div></div><a class="indexterm" name="id25606 51"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5261 </h3></div></div></div><a class="indexterm" name="id2560674"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5259 5262 implments the CIFS UNIX extensions, as defined by HP. 5260 5263 These extensions enable Samba to better serve UNIX CIFS clients … … 5263 5266 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5264 5267 </em></span> 5265 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25607 03"></a>5268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560720"></a> 5266 5269 5267 5270 unix password sync (G) 5268 </h3></div></div></div><a class="indexterm" name="id25607 04"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5271 </h3></div></div></div><a class="indexterm" name="id2560721"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5269 5272 attempts to synchronize the UNIX password with the SMB password 5270 5273 when the encrypted SMB password in the smbpasswd file is changed. … … 5275 5278 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5276 5279 </em></span> 5277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25607 64"></a>5280 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560781"></a> 5278 5281 5279 5282 update encrypted (G) 5280 </h3></div></div></div><a class="indexterm" name="id25607 65"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>5283 </h3></div></div></div><a class="indexterm" name="id2560782"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5281 5284 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5282 5285 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to … … 5296 5299 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5297 5300 </em></span> 5298 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25608 83"></a>5301 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560899"></a> 5299 5302 5300 5303 use client driver (S) 5301 </h3></div></div></div><a class="indexterm" name="id2560 884"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005304 </h3></div></div></div><a class="indexterm" name="id2560900"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5302 5305 clients. It has no effect on Windows 95/98/ME clients. When 5303 5306 serving a printer to Windows NT/2000 clients without first installing … … 5324 5327 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5325 5328 </em></span> 5326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25609 64"></a>5329 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560988"></a> 5327 5330 5328 5331 use kerberos keytab (G) 5329 </h3></div></div></div><a class="indexterm" name="id25609 65"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5332 </h3></div></div></div><a class="indexterm" name="id2560989"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5330 5333 Specifies whether Samba should attempt to maintain service principals in the systems 5331 5334 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5339 5342 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5340 5343 </em></span> 5341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25610 32"></a>5344 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561056"></a> 5342 5345 5343 5346 use mmap (G) 5344 </h3></div></div></div><a class="indexterm" name="id25610 33"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can5347 </h3></div></div></div><a class="indexterm" name="id2561058"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5345 5348 depend on mmap working correctly on the running system. Samba requires a coherent 5346 5349 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5351 5354 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5352 5355 </em></span> 5353 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561 084"></a>5356 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561108"></a> 5354 5357 5355 5358 username level (G) 5356 </h3></div></div></div><a class="indexterm" name="id2561 085"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at5359 </h3></div></div></div><a class="indexterm" name="id2561110"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5357 5360 the real UNIX username, as many DOS clients send an all-uppercase 5358 5361 username. By default Samba tries all lowercase, followed by the … … 5369 5372 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5370 5373 </em></span> 5371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25611 66"></a>5374 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561190"></a> 5372 5375 5373 5376 username map script (G) 5374 </h3></div></div></div><a class="indexterm" name="id25611 67"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5377 </h3></div></div></div><a class="indexterm" name="id2561191"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5375 5378 <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter. This parameter 5376 5379 specifies and external program or script that must accept a single … … 5383 5386 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5384 5387 </em></span> 5385 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25612 43"></a>5388 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561267"></a> 5386 5389 5387 5390 username map (G) 5388 </h3></div></div></div><a class="indexterm" name="id25612 44"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5391 </h3></div></div></div><a class="indexterm" name="id2561268"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5389 5392 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5390 5393 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5470 5473 # no username map</code> 5471 5474 </em></span> 5472 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25615 23"></a>5475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561547"></a> 5473 5476 5474 5477 <a name="USER"></a>user 5475 </h3></div></div></div><a class="indexterm" name="id25615 24"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561555"></a>5478 </h3></div></div></div><a class="indexterm" name="id2561548"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561579"></a> 5476 5479 5477 5480 <a name="USERS"></a>users 5478 </h3></div></div></div><a class="indexterm" name="id25615 56"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561586"></a>5481 </h3></div></div></div><a class="indexterm" name="id2561580"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561611"></a> 5479 5482 5480 5483 username (S) 5481 </h3></div></div></div><a class="indexterm" name="id2561 587"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited5484 </h3></div></div></div><a class="indexterm" name="id2561612"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 5482 5485 list, in which case the supplied password will be tested against 5483 5486 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 5517 5520 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5518 5521 </em></span> 5519 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25617 57"></a>5522 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561781"></a> 5520 5523 5521 5524 usershare allow guests (G) 5522 </h3></div></div></div><a class="indexterm" name="id25617 58"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5525 </h3></div></div></div><a class="indexterm" name="id2561782"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5523 5526 to be accessed by non-authenticated users or not. It is the equivalent 5524 5527 of allowing people who can create a share the option of setting … … 5527 5530 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5528 5531 </em></span> 5529 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25618 09"></a>5532 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561834"></a> 5530 5533 5531 5534 usershare max shares (G) 5532 </h3></div></div></div><a class="indexterm" name="id25618 10"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5535 </h3></div></div></div><a class="indexterm" name="id2561835"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5533 5536 that are allowed to be created by users belonging to the group owning the 5534 5537 usershare directory. If set to zero (the default) user defined shares are ignored. 5535 5538 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5536 5539 </em></span> 5537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25618 54"></a>5540 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561879"></a> 5538 5541 5539 5542 usershare owner only (G) 5540 </h3></div></div></div><a class="indexterm" name="id25618 56"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5543 </h3></div></div></div><a class="indexterm" name="id2561880"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5541 5544 a user defined shares must be owned by the user creating the 5542 5545 user defined share or not. If set to True (the default) then … … 5548 5551 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 5549 5552 </em></span> 5550 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25619 04"></a>5553 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561929"></a> 5551 5554 5552 5555 usershare path (G) 5553 </h3></div></div></div><a class="indexterm" name="id25619 05"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the5556 </h3></div></div></div><a class="indexterm" name="id2561930"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 5554 5557 filesystem used to store the user defined share definition files. 5555 5558 This directory must be owned by root, and have no access for … … 5572 5575 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 5573 5576 </em></span> 5574 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256 1975"></a>5577 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562000"></a> 5575 5578 5576 5579 usershare prefix allow list (G) 5577 </h3></div></div></div><a class="indexterm" name="id256 1976"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5580 </h3></div></div></div><a class="indexterm" name="id2562001"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5578 5581 the root of which are allowed to be exported by user defined share definitions. 5579 5582 If the pathname exported doesn't start with one of the strings in this … … 5590 5593 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5591 5594 </em></span> 5592 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25620 48"></a>5595 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562072"></a> 5593 5596 5594 5597 usershare prefix deny list (G) 5595 </h3></div></div></div><a class="indexterm" name="id25620 49"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5598 </h3></div></div></div><a class="indexterm" name="id2562073"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5596 5599 the root of which are NOT allowed to be exported by user defined share definitions. 5597 5600 If the pathname exported starts with one of the strings in this … … 5609 5612 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 5610 5613 </em></span> 5611 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25621 22"></a>5614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562147"></a> 5612 5615 5613 5616 usershare template share (G) 5614 </h3></div></div></div><a class="indexterm" name="id25621 23"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters5617 </h3></div></div></div><a class="indexterm" name="id2562148"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 5615 5618 such as path, guest ok etc. This parameter allows usershares to 5616 5619 "cloned" from an existing share. If "usershare template share" … … 5627 5630 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 5628 5631 </em></span> 5629 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 195"></a>5632 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562220"></a> 5630 5633 5631 5634 use sendfile (S) 5632 </h3></div></div></div><a class="indexterm" name="id2562 196"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5635 </h3></div></div></div><a class="indexterm" name="id2562221"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5633 5636 system call is supported by the underlying operating system, then some SMB read calls 5634 5637 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5639 5642 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5640 5643 </em></span> 5641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25622 53"></a>5644 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562277"></a> 5642 5645 5643 5646 use spnego (G) 5644 </h3></div></div></div><a class="indexterm" name="id25622 54"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5647 </h3></div></div></div><a class="indexterm" name="id2562278"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5645 5648 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5646 5649 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5650 5653 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5651 5654 </em></span> 5652 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25623 02"></a>5655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562327"></a> 5653 5656 5654 5657 utmp directory (G) 5655 </h3></div></div></div><a class="indexterm" name="id25623 03"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5658 </h3></div></div></div><a class="indexterm" name="id2562328"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5656 5659 been configured and compiled with the option <code class="literal"> 5657 5660 --with-utmp</code>. It specifies a directory pathname that is … … 5665 5668 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 5666 5669 </em></span> 5667 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 380"></a>5670 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562405"></a> 5668 5671 5669 5672 utmp (G) 5670 </h3></div></div></div><a class="indexterm" name="id2562 381"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>5673 </h3></div></div></div><a class="indexterm" name="id2562406"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5671 5674 This boolean parameter is only available if Samba has been configured and compiled 5672 5675 with the option <code class="literal">--with-utmp</code>. If set to … … 5680 5683 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 5681 5684 </em></span> 5682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25624 43"></a>5685 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562467"></a> 5683 5686 5684 5687 valid users (S) 5685 </h3></div></div></div><a class="indexterm" name="id25624 44"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>5688 </h3></div></div></div><a class="indexterm" name="id2562468"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 5686 5689 This is a list of users that should be allowed to login to this service. Names starting with 5687 5690 '@', '+' and '&' are interpreted using the same rules as described in the … … 5699 5702 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 5700 5703 </em></span> 5701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25625 34"></a>5704 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562559"></a> 5702 5705 5703 5706 -valid (S) 5704 </h3></div></div></div><a class="indexterm" name="id25625 35"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is5707 </h3></div></div></div><a class="indexterm" name="id2562560"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 5705 5708 valid and thus can be used. When this parameter is set to false, 5706 5709 the share will be in no way visible nor accessible. … … 5711 5714 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 5712 5715 </em></span> 5713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 584"></a>5716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562608"></a> 5714 5717 5715 5718 veto files (S) 5716 </h3></div></div></div><a class="indexterm" name="id2562 585"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5719 </h3></div></div></div><a class="indexterm" name="id2562610"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5717 5720 This is a list of files and directories that are neither visible nor accessible. Each entry in 5718 5721 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 5745 5748 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 5746 5749 </em></span> 5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25627 03"></a>5750 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562727"></a> 5748 5751 5749 5752 veto oplock files (S) 5750 </h3></div></div></div><a class="indexterm" name="id25627 04"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>5753 </h3></div></div></div><a class="indexterm" name="id2562728"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5751 5754 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 5752 5755 parameter is turned on for a share. It allows the Samba administrator … … 5769 5772 # No files are vetoed for oplock grants</code> 5770 5773 </em></span> 5771 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 796"></a>5774 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562820"></a> 5772 5775 5773 5776 <a name="VFSOBJECT"></a>vfs object 5774 </h3></div></div></div><a class="indexterm" name="id2562 797"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562828"></a>5777 </h3></div></div></div><a class="indexterm" name="id2562821"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562852"></a> 5775 5778 5776 5779 vfs objects (S) 5777 </h3></div></div></div><a class="indexterm" name="id25628 29"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which5780 </h3></div></div></div><a class="indexterm" name="id2562853"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 5778 5781 are used for Samba VFS I/O operations. By default, normal 5779 5782 disk I/O operations are used but these can be overloaded … … 5782 5785 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 5783 5786 </em></span> 5784 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562 888"></a>5787 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562912"></a> 5785 5788 5786 5789 volume (S) 5787 </h3></div></div></div><a class="indexterm" name="id2562 889"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label5790 </h3></div></div></div><a class="indexterm" name="id2562913"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 5788 5791 returned for a share. Useful for CDROMs with installation programs 5789 5792 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 5790 5793 # the name of the share</code> 5791 5794 </em></span> 5792 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25629 32"></a>5795 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562956"></a> 5793 5796 5794 5797 wide links (S) 5795 </h3></div></div></div><a class="indexterm" name="id25629 33"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links5798 </h3></div></div></div><a class="indexterm" name="id2562957"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 5796 5799 in the UNIX file system may be followed by the server. Links 5797 5800 that point to areas within the directory tree exported by the … … 5801 5804 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 5802 5805 </em></span> 5803 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id256 2984"></a>5806 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563008"></a> 5804 5807 5805 5808 winbind cache time (G) 5806 </h3></div></div></div><a class="indexterm" name="id256 2985"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of5809 </h3></div></div></div><a class="indexterm" name="id2563009"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 5807 5810 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 5808 5811 user and group information before querying a Windows NT server … … 5812 5815 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 5813 5816 </em></span> 5814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25630 55"></a>5817 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563080"></a> 5815 5818 5816 5819 winbind enum groups (G) 5817 </h3></div></div></div><a class="indexterm" name="id25630 56"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress5820 </h3></div></div></div><a class="indexterm" name="id2563081"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 5818 5821 the enumeration of groups through the <code class="literal">setgrent()</code>, 5819 5822 <code class="literal">getgrent()</code> and … … 5823 5826 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 5824 5827 </em></span> 5825 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25631 46"></a>5828 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563170"></a> 5826 5829 5827 5830 winbind enum users (G) 5828 </h3></div></div></div><a class="indexterm" name="id25631 47"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be5831 </h3></div></div></div><a class="indexterm" name="id2563171"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 5829 5832 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 5830 5833 <code class="literal">getpwent()</code> and … … 5838 5841 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 5839 5842 </em></span> 5840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25632 39"></a>5843 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563264"></a> 5841 5844 5842 5845 winbind nested groups (G) 5843 </h3></div></div></div><a class="indexterm" name="id25632 40"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested5846 </h3></div></div></div><a class="indexterm" name="id2563265"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 5844 5847 groups. Nested groups are also called local groups or 5845 5848 aliases. They work like their counterparts in Windows: Nested … … 5849 5852 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 5850 5853 </em></span> 5851 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 290"></a>5854 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563315"></a> 5852 5855 5853 5856 winbind normalize names (G) 5854 </h3></div></div></div><a class="indexterm" name="id2563 291"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace5857 </h3></div></div></div><a class="indexterm" name="id2563316"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 5855 5858 whitespace in user and group names with an underscore (_) character. 5856 5859 For example, whether the name "Space Kadet" should be … … 5864 5867 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 5865 5868 </em></span> 5866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25633 57"></a>5869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563381"></a> 5867 5870 5868 5871 winbind nss info (G) 5869 </h3></div></div></div><a class="indexterm" name="id25633 58"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name5872 </h3></div></div></div><a class="indexterm" name="id2563382"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 5870 5873 Service Information to construct a user's home directory and login shell. 5871 5874 Currently the following settings are available: … … 5889 5892 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 5890 5893 </em></span> 5891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 476"></a>5894 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563501"></a> 5892 5895 5893 5896 winbind offline logon (G) 5894 </h3></div></div></div><a class="indexterm" name="id2563 477"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should5897 </h3></div></div></div><a class="indexterm" name="id2563502"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 5895 5898 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 5896 5899 module using Cached Credentials. If enabled, winbindd will store user credentials … … 5900 5903 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 5901 5904 </em></span> 5902 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25635 45"></a>5905 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563570"></a> 5903 5906 5904 5907 winbind refresh tickets (G) 5905 </h3></div></div></div><a class="indexterm" name="id25635 46"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets5908 </h3></div></div></div><a class="indexterm" name="id2563571"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 5906 5909 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 5907 5910 … … 5910 5913 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 5911 5914 </em></span> 5912 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25636 12"></a>5915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563637"></a> 5913 5916 5914 5917 winbind separator (G) 5915 </h3></div></div></div><a class="indexterm" name="id25636 13"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character5918 </h3></div></div></div><a class="indexterm" name="id2563638"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 5916 5919 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 5917 5920 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 5924 5927 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 5925 5928 </em></span> 5926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 699"></a>5929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563724"></a> 5927 5930 5928 5931 winbind trusted domains only (G) 5929 </h3></div></div></div><a class="indexterm" name="id25637 00"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5932 </h3></div></div></div><a class="indexterm" name="id2563725"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5930 5933 This parameter is designed to allow Samba servers that are members 5931 5934 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 5939 5942 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 5940 5943 </em></span> 5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563 778"></a>5944 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563803"></a> 5942 5945 5943 5946 winbind use default domain (G) 5944 </h3></div></div></div><a class="indexterm" name="id2563 780"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the5947 </h3></div></div></div><a class="indexterm" name="id2563804"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 5945 5948 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 5946 5949 without domain component in their username. Users without a domain … … 5952 5955 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 5953 5956 </em></span> 5954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25638 50"></a>5957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563875"></a> 5955 5958 5956 5959 wins hook (G) 5957 </h3></div></div></div><a class="indexterm" name="id25638 52"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this5960 </h3></div></div></div><a class="indexterm" name="id2563876"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 5958 5961 allows you to call an external program for all changes to the 5959 5962 WINS database. The primary use for this option is to allow the … … 5976 5979 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 5977 5980 program <code class="literal">nsupdate</code> is provided in the examples 5978 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25639 57"></a>5981 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563982"></a> 5979 5982 5980 5983 wins proxy (G) 5981 </h3></div></div></div><a class="indexterm" name="id25639 58"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name5984 </h3></div></div></div><a class="indexterm" name="id2563983"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 5982 5985 queries on behalf of other hosts. You may need to set this 5983 5986 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 5984 5987 </em></span> 5985 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25640 12"></a>5988 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564036"></a> 5986 5989 5987 5990 wins server (G) 5988 </h3></div></div></div><a class="indexterm" name="id25640 13"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP5991 </h3></div></div></div><a class="indexterm" name="id2564037"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 5989 5992 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 5990 5993 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6005 6008 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6006 6009 </em></span> 6007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25641 22"></a>6010 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564147"></a> 6008 6011 6009 6012 wins support (G) 6010 </h3></div></div></div><a class="indexterm" name="id25641 23"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6013 </h3></div></div></div><a class="indexterm" name="id2564148"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6011 6014 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6012 6015 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6014 6017 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6015 6018 </em></span> 6016 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564 192"></a>6019 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564216"></a> 6017 6020 6018 6021 workgroup (G) 6019 </h3></div></div></div><a class="indexterm" name="id2564 193"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6022 </h3></div></div></div><a class="indexterm" name="id2564217"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6020 6023 appear to be in when queried by clients. Note that this parameter 6021 6024 also controls the Domain name used with … … 6025 6028 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6026 6029 </em></span> 6027 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25642 64"></a>6030 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564288"></a> 6028 6031 6029 6032 <a name="WRITABLE"></a>writable 6030 </h3></div></div></div><a class="indexterm" name="id25642 65"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564295"></a>6033 </h3></div></div></div><a class="indexterm" name="id2564290"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564320"></a> 6031 6034 6032 6035 writeable (S) 6033 </h3></div></div></div><a class="indexterm" name="id2564 296"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>6034 </em></span> 6035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25643 46"></a>6036 </h3></div></div></div><a class="indexterm" name="id2564321"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code> 6037 </em></span> 6038 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564371"></a> 6036 6039 6037 6040 write cache size (S) 6038 </h3></div></div></div><a class="indexterm" name="id25643 48"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6041 </h3></div></div></div><a class="indexterm" name="id2564372"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6039 6042 Samba will create an in-memory cache for each oplocked file 6040 6043 (it does <span class="emphasis"><em>not</em></span> do this for … … 6054 6057 # for a 256k cache size per file</code> 6055 6058 </em></span> 6056 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25644 30"></a>6059 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564454"></a> 6057 6060 6058 6061 write list (S) 6059 </h3></div></div></div><a class="indexterm" name="id25644 31"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6062 </h3></div></div></div><a class="indexterm" name="id2564455"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6060 6063 This is a list of users that are given read-write access to a service. If the 6061 6064 connecting user is in this list then they will be given write access, no matter … … 6072 6075 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6073 6076 </em></span> 6074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25645 23"></a>6077 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564548"></a> 6075 6078 6076 6079 write raw (G) 6077 </h3></div></div></div><a class="indexterm" name="id25645 24"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6080 </h3></div></div></div><a class="indexterm" name="id2564549"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6078 6081 will support raw write SMB's when transferring data from clients. 6079 6082 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6080 6083 </em></span> 6081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id25645 67"></a>6084 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564592"></a> 6082 6085 6083 6086 wtmp directory (G) 6084 </h3></div></div></div><a class="indexterm" name="id25645 68"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6087 </h3></div></div></div><a class="indexterm" name="id2564593"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6085 6088 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6086 6089 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6094 6097 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6095 6098 </em></span> 6096 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id25646 51"></a><h2>WARNINGS</h2><p>6099 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2564675"></a><h2>WARNINGS</h2><p> 6097 6100 Although the configuration file permits service names to contain spaces, your client software may not. 6098 6101 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6107 6110 care when designing these sections. In particular, ensure that the permissions on spool directories are 6108 6111 correct. 6109 </p></div><div class="refsect1" lang="en"><a name="id25647 01"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2564712"></a><h2>SEE ALSO</h2><p>6110 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2564 791"></a><h2>AUTHOR</h2><p>6112 </p></div><div class="refsect1" lang="en"><a name="id2564725"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2564736"></a><h2>SEE ALSO</h2><p> 6113 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2564816"></a><h2>AUTHOR</h2><p> 6111 6114 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6112 6115 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.