Ignore:
Timestamp:
Aug 5, 2009, 6:33:18 PM (16 years ago)
Author:
Herwig Bauernfeind
Message:

Update 3.0 to final 3.0.36 (docs)

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/samba-3.0/docs/htmldocs/manpages/smb.conf.5.html

    r286 r311  
    44034403    the value for the <em class="parameter"><code>printing</code></em> option since it will
    44044404    reset the printing commands to default values.</p><p>See also the discussion in the <a class="link" href="#PRINTERSSECT" title="The [printers] section">
    4405     [printers]</a> section.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555851"></a>
     4405    [printers]</a> section.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printing</code></em> = <code class="literal">Depends on the operating system, see
     4406<code class="literal">testparm -v.</code></code>
     4407</em></span>
     4408</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555869"></a>
    44064409
    44074410printjob username (S)
    4408 </h3></div></div></div><a class="indexterm" name="id2555852"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
     4411</h3></div></div></div><a class="indexterm" name="id2555870"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
    44094412    passed to the printing system. Usually, the username is sent,
    44104413    but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code>
     
    44124415</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code>
    44134416</em></span>
    4414 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555913"></a>
     4417</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555930"></a>
    44154418
    44164419private dir (G)
    4417 </h3></div></div></div><a class="indexterm" name="id2555914"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
     4420</h3></div></div></div><a class="indexterm" name="id2555932"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
    44184421    smbd will use for storing such files as <code class="filename">smbpasswd</code>
    44194422    and <code class="filename">secrets.tdb</code>.
    44204423</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code>
    44214424</em></span>
    4422 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555967"></a>
     4425</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555984"></a>
    44234426
    44244427profile acls (S)
    4425 </h3></div></div></div><a class="indexterm" name="id2555968"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4428</h3></div></div></div><a class="indexterm" name="id2555986"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44264429        This boolean parameter was added to fix the problems that people have been
    44274430        having with storing user profiles on Samba shares from Windows 2000 or
     
    44514454        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code>
    44524455</em></span>
    4453 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556047"></a>
     4456</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556065"></a>
    44544457
    44554458queuepause command (S)
    4456 </h3></div></div></div><a class="indexterm" name="id2556048"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4459</h3></div></div></div><a class="indexterm" name="id2556066"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    44574460    executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
    44584461    a printer name as its only parameter and stops the printer queue,
     
    44654468        server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code>
    44664469</em></span>
    4467 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556124"></a>
     4470</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556142"></a>
    44684471
    44694472queueresume command (S)
    4470 </h3></div></div></div><a class="indexterm" name="id2556125"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4473</h3></div></div></div><a class="indexterm" name="id2556143"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    44714474    executed on the server host in order to resume the printer queue. It
    44724475    is the command to undo the behavior that is caused by the
     
    44834486</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code>
    44844487</em></span>
    4485 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556227"></a>
     4488</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556245"></a>
    44864489
    44874490read bmpx (G)
    4488 </h3></div></div></div><a class="indexterm" name="id2556228"></a><a name="READBMPX"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
     4491</h3></div></div></div><a class="indexterm" name="id2556246"></a><a name="READBMPX"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
    44894492    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will support the "Read
    44904493    Block Multiplex" SMB. This is now rarely used and defaults to
     
    44924495        parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read bmpx</code></em> = <code class="literal">no</code>
    44934496</em></span>
    4494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556282"></a>
     4497</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556299"></a>
    44954498
    44964499read list (S)
    4497 </h3></div></div></div><a class="indexterm" name="id2556283"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4500</h3></div></div></div><a class="indexterm" name="id2556300"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44984501        This is a list of users that are given read-only access to a service. If the connecting user is in this list
    44994502        then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set
     
    45054508</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code>
    45064509</em></span>
    4507 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556381"></a>
     4510</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556399"></a>
    45084511
    45094512read only (S)
    4510 </h3></div></div></div><a class="indexterm" name="id2556382"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
     4513</h3></div></div></div><a class="indexterm" name="id2556400"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
    45114514    of a service may not create or modify files in the service's
    45124515    directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>)
     
    45144517    (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code>
    45154518</em></span>
    4516 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556458"></a>
     4519</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556476"></a>
    45174520
    45184521read raw (G)
    4519 </h3></div></div></div><a class="indexterm" name="id2556459"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     4522</h3></div></div></div><a class="indexterm" name="id2556477"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    45204523    will support the raw read SMB requests when transferring data
    45214524    to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in
     
    45264529        tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code>
    45274530</em></span>
    4528 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556518"></a>
     4531</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556536"></a>
    45294532
    45304533realm (G)
    4531 </h3></div></div></div><a class="indexterm" name="id2556519"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
     4534</h3></div></div></div><a class="indexterm" name="id2556537"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
    45324535        used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It
    45334536        is usually set to the DNS name of the kerberos server.
     
    45364539</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code>
    45374540</em></span>
    4538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556583"></a>
     4541</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556601"></a>
    45394542
    45404543remote announce (G)
    4541 </h3></div></div></div><a class="indexterm" name="id2556584"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4544</h3></div></div></div><a class="indexterm" name="id2556602"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    45424545        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>to periodically announce itself
    45434546        to arbitrary IP addresses with an arbitrary workgroup name.
     
    45634566        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code>
    45644567</em></span>
    4565 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556688"></a>
     4568</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556706"></a>
    45664569
    45674570remote browse sync (G)
    4568 </h3></div></div></div><a class="indexterm" name="id2556689"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4571</h3></div></div></div><a class="indexterm" name="id2556707"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    45694572        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
    45704573        synchronization of browse lists with the master browser of a Samba
     
    45984601        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code>
    45994602</em></span>
    4600 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556800"></a>
     4603</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556818"></a>
    46014604
    46024605rename user script (G)
    4603 </h3></div></div></div><a class="indexterm" name="id2556802"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4606</h3></div></div></div><a class="indexterm" name="id2556819"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46044607        This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below.
    46054608        </p><p>
     
    46194622        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code>
    46204623</em></span>
    4621 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556891"></a>
     4624</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556909"></a>
    46224625
    46234626reset on zero vc (G)
    4624 </h3></div></div></div><a class="indexterm" name="id2556892"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4627</h3></div></div></div><a class="indexterm" name="id2556910"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46254628        This boolean option controls whether an incoming session setup
    46264629        should kill other connections coming from the same IP. This matches
     
    46414644        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code>
    46424645</em></span>
    4643 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556944"></a>
     4646</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556961"></a>
    46444647
    46454648restrict anonymous (G)
    4646 </h3></div></div></div><a class="indexterm" name="id2556945"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
     4649</h3></div></div></div><a class="indexterm" name="id2556962"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
    46474650    group list information is returned for an anonymous connection.
    46484651    and mirrors the effects of the
     
    46674670        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code>
    46684671</em></span>
    4669 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557028"></a>
     4672</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557046"></a>
    46704673
    46714674<a name="ROOT"></a>root
    4672 </h3></div></div></div><a class="indexterm" name="id2557029"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557061"></a>
     4675</h3></div></div></div><a class="indexterm" name="id2557047"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557079"></a>
    46734676
    46744677<a name="ROOTDIR"></a>root dir
    4675 </h3></div></div></div><a class="indexterm" name="id2557062"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557092"></a>
     4678</h3></div></div></div><a class="indexterm" name="id2557080"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557110"></a>
    46764679
    46774680root directory (G)
    4678 </h3></div></div></div><a class="indexterm" name="id2557093"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
     4681</h3></div></div></div><a class="indexterm" name="id2557111"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
    46794682    Change its root directory) to this directory on startup. This is
    46804683    not strictly necessary for secure operation. Even without it the
     
    46994702</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code>
    47004703</em></span>
    4701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557216"></a>
     4704</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557234"></a>
    47024705
    47034706root postexec (S)
    4704 </h3></div></div></div><a class="indexterm" name="id2557217"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4707</h3></div></div></div><a class="indexterm" name="id2557235"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47054708        This is the same as the <em class="parameter"><code>postexec</code></em>
    47064709        parameter except that the command is run as root. This is useful for
     
    47084711        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code>
    47094712</em></span>
    4710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557265"></a>
     4713</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557283"></a>
    47114714
    47124715root preexec close (S)
    4713 </h3></div></div></div><a class="indexterm" name="id2557266"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
     4716</h3></div></div></div><a class="indexterm" name="id2557284"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
    47144717        </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code>
    47154718</em></span>
    4716 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557313"></a>
     4719</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557331"></a>
    47174720
    47184721root preexec (S)
    4719 </h3></div></div></div><a class="indexterm" name="id2557314"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4722</h3></div></div></div><a class="indexterm" name="id2557332"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47204723        This is the same as the <em class="parameter"><code>preexec</code></em>
    47214724        parameter except that the command is run as root. This is useful for
     
    47234726        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code>
    47244727</em></span>
    4725 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557362"></a>
     4728</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557380"></a>
    47264729
    47274730security mask (S)
    4728 </h3></div></div></div><a class="indexterm" name="id2557363"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4731</h3></div></div></div><a class="indexterm" name="id2557381"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47294732        This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    47304733        UNIX permission on a file using the native NT security dialog box.
     
    47454748</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code>
    47464749</em></span>
    4747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557468"></a>
     4750</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557486"></a>
    47484751
    47494752security (G)
    4750 </h3></div></div></div><a class="indexterm" name="id2557469"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
     4753</h3></div></div></div><a class="indexterm" name="id2557487"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
    47514754    Samba and is one of the most important settings in the <code class="filename">
    47524755    smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to
     
    48724875</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code>
    48734876</em></span>
    4874 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558347"></a>
     4877</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558365"></a>
    48754878
    48764879server schannel (G)
    4877 </h3></div></div></div><a class="indexterm" name="id2558348"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4880</h3></div></div></div><a class="indexterm" name="id2558366"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48784881        This controls whether the server offers or even demands the use of the netlogon schannel.
    48794882        <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
     
    48864889</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code>
    48874890</em></span>
    4888 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558463"></a>
     4891</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558481"></a>
    48894892
    48904893server signing (G)
    4891 </h3></div></div></div><a class="indexterm" name="id2558464"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires
     4894</h3></div></div></div><a class="indexterm" name="id2558482"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the server offers or requires
    48924895    the client it talks to to use SMB signing. Possible values
    48934896    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
     
    48974900        to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code>
    48984901</em></span>
    4899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558524"></a>
     4902</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558542"></a>
    49004903
    49014904server string (G)
    4902 </h3></div></div></div><a class="indexterm" name="id2558525"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
     4905</h3></div></div></div><a class="indexterm" name="id2558543"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
    49034906        manager and next to the IPC connection in <code class="literal">net view</code>. It
    49044907        can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next
     
    49094912</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code>
    49104913</em></span>
    4911 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558615"></a>
     4914</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558633"></a>
    49124915
    49134916set directory (S)
    4914 </h3></div></div></div><a class="indexterm" name="id2558616"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4917</h3></div></div></div><a class="indexterm" name="id2558634"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49154918        If <code class="literal">set directory = no</code>, then        users of the
    49164919        service may not use the setdir command to change directory.
     
    49214924        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code>
    49224925</em></span>
    4923 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558675"></a>
     4926</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558693"></a>
    49244927
    49254928set primary group script (G)
    4926 </h3></div></div></div><a class="indexterm" name="id2558676"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
     4929</h3></div></div></div><a class="indexterm" name="id2558694"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
    49274930        primary group in addition to the auxiliary groups.  This script
    49284931        sets the primary group in the unix userdatase when an
     
    49364939</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code>
    49374940</em></span>
    4938 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558757"></a>
     4941</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558775"></a>
    49394942
    49404943set quota command (G)
    4941 </h3></div></div></div><a class="indexterm" name="id2558758"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
     4944</h3></div></div></div><a class="indexterm" name="id2558776"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
    49424945        whenever there is no operating system API available from the OS that
    49434946        samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or
     
    49494952</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code>
    49504953</em></span>
    4951 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558921"></a>
     4954</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558938"></a>
    49524955
    49534956share modes (S)
    4954 </h3></div></div></div><a class="indexterm" name="id2558922"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
     4957</h3></div></div></div><a class="indexterm" name="id2558940"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
    49554958        the <em class="parameter"><code>share modes</code></em> during a file open. These
    49564959        modes are used by clients to gain exclusive read or write access
     
    49654968        off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code>
    49664969</em></span>
    4967 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559014"></a>
     4970</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559032"></a>
    49684971
    49694972short preserve case (S)
    4970 </h3></div></div></div><a class="indexterm" name="id2559015"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4973</h3></div></div></div><a class="indexterm" name="id2559033"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49714974        This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
    49724975        suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
     
    49754978        </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code>
    49764979</em></span>
    4977 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559094"></a>
     4980</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559112"></a>
    49784981
    49794982show add printer wizard (G)
    4980 </h3></div></div></div><a class="indexterm" name="id2559095"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
     4983</h3></div></div></div><a class="indexterm" name="id2559113"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
    49814984    for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
    49824985    appear on Samba hosts in the share listing.  Normally this folder will
     
    49964999                administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code>
    49975000</em></span>
    4998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559177"></a>
     5001</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559195"></a>
    49995002
    50005003shutdown script (G)
    5001 </h3></div></div></div><a class="indexterm" name="id2559178"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
     5004</h3></div></div></div><a class="indexterm" name="id2559196"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
    50025005         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should
    50035006        start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
     
    50245027</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code>
    50255028</em></span>
    5026 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559330"></a>
     5029</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559348"></a>
    50275030
    50285031smb passwd file (G)
    5029 </h3></div></div></div><a class="indexterm" name="id2559331"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
     5032</h3></div></div></div><a class="indexterm" name="id2559349"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
    50305033    default the path to the smbpasswd file  is compiled into Samba.</p><p>
    50315034    An example of use is:
     
    50355038    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code>
    50365039</em></span>
    5037 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559385"></a>
     5040</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559402"></a>
    50385041
    50395042smb ports (G)
    5040 </h3></div></div></div><a class="indexterm" name="id2559386"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
    5041 </em></span>
    5042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559426"></a>
     5043</h3></div></div></div><a class="indexterm" name="id2559404"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
     5044</em></span>
     5045</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559444"></a>
    50435046
    50445047socket address (G)
    5045 </h3></div></div></div><a class="indexterm" name="id2559427"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
     5048</h3></div></div></div><a class="indexterm" name="id2559445"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
    50465049        address Samba will listen for connections on. This is used to
    50475050        support multiple virtual interfaces on the one server, each
     
    50525055</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code>
    50535056</em></span>
    5054 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559497"></a>
     5057</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559514"></a>
    50555058
    50565059socket options (G)
    5057 </h3></div></div></div><a class="indexterm" name="id2559498"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
     5060</h3></div></div></div><a class="indexterm" name="id2559516"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
    50585061    to be used when talking with the client.</p><p>Socket options are controls on the networking layer
    50595062    of the operating systems which allow the connection to be
     
    50835086</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code>
    50845087</em></span>
    5085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559707"></a>
     5088</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559730"></a>
    50865089
    50875090stat cache (G)
    5088 </h3></div></div></div><a class="indexterm" name="id2559708"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
     5091</h3></div></div></div><a class="indexterm" name="id2559731"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
    50895092        speed up case insensitive name mappings. You should never need
    50905093        to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code>
    50915094</em></span>
    5092 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559758"></a>
     5095</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559781"></a>
    50935096
    50945097store dos attributes (S)
    5095 </h3></div></div></div><a class="indexterm" name="id2559759"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5098</h3></div></div></div><a class="indexterm" name="id2559782"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50965099        If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
    50975100        READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
     
    51055108        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code>
    51065109</em></span>
    5107 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559880"></a>
     5110</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559903"></a>
    51085111
    51095112strict allocate (S)
    5110 </h3></div></div></div><a class="indexterm" name="id2559881"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
     5113</h3></div></div></div><a class="indexterm" name="id2559904"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
    51115114    disk space allocation in the server. When this is set to <code class="constant">yes</code>
    51125115    the server will change from UNIX behaviour of not committing real
     
    51205123    of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>
    51215124</em></span>
    5122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559950"></a>
     5125</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559972"></a>
    51235126
    51245127strict locking (S)
    5125 </h3></div></div></div><a class="indexterm" name="id2559951"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5128</h3></div></div></div><a class="indexterm" name="id2559973"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51265129        This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>,
    51275130        the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
     
    51395142        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code>
    51405143</em></span>
    5141 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560029"></a>
     5144</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560052"></a>
    51425145
    51435146strict sync (S)
    5144 </h3></div></div></div><a class="indexterm" name="id2560030"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
     5147</h3></div></div></div><a class="indexterm" name="id2560053"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
    51455148    shell) seem to confuse flushing buffer contents to disk with doing
    51465149    a sync to disk. Under UNIX, a sync call forces the process to be
     
    51565159    reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code>
    51575160</em></span>
    5158 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560094"></a>
     5161</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560116"></a>
    51595162
    51605163svcctl list (G)
    5161 </h3></div></div></div><a class="indexterm" name="id2560095"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
     5164</h3></div></div></div><a class="indexterm" name="id2560118"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
    51625165    will use for starting and stopping Unix services via the Win32
    51635166    ServiceControl API.  This allows Windows administrators to
     
    51725175</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code>
    51735176</em></span>
    5174 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560179"></a>
     5177</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560202"></a>
    51755178
    51765179sync always (S)
    5177 </h3></div></div></div><a class="indexterm" name="id2560180"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
     5180</h3></div></div></div><a class="indexterm" name="id2560203"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
    51785181    whether writes will always be written to stable storage before
    51795182    the write call returns. If this is <code class="constant">no</code> then the server will be
     
    51865189    any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code>
    51875190</em></span>
    5188 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560251"></a>
     5191</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560273"></a>
    51895192
    51905193syslog only (G)
    5191 </h3></div></div></div><a class="indexterm" name="id2560252"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5194</h3></div></div></div><a class="indexterm" name="id2560274"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51925195    If this parameter is set then Samba debug messages are logged into the system
    51935196    syslog only, and not to the debug log files. There still will be some
     
    51955198    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code>
    51965199</em></span>
    5197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560298"></a>
     5200</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560321"></a>
    51985201
    51995202syslog (G)
    5200 </h3></div></div></div><a class="indexterm" name="id2560299"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5203</h3></div></div></div><a class="indexterm" name="id2560322"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52015204    This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
    52025205    Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto
     
    52095212    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code>
    52105213</em></span>
    5211 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560369"></a>
     5214</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560391"></a>
    52125215
    52135216template homedir (G)
    5214 </h3></div></div></div><a class="indexterm" name="id2560370"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5217</h3></div></div></div><a class="indexterm" name="id2560392"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    52155218        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon  uses this
    52165219        parameter to fill in the home directory for that user. If the
     
    52205223        is substituted with the user's Windows  NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code>
    52215224</em></span>
    5222 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560434"></a>
     5225</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560457"></a>
    52235226
    52245227template shell (G)
    5225 </h3></div></div></div><a class="indexterm" name="id2560436"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5228</h3></div></div></div><a class="indexterm" name="id2560458"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    52265229        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
    5227         parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560474"></a>
     5230        parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560496"></a>
    52285231
    52295232time offset (G)
    5230 </h3></div></div></div><a class="indexterm" name="id2560475"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
     5233</h3></div></div></div><a class="indexterm" name="id2560497"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
    52315234        to the normal GMT to local time conversion. This is useful if
    52325235        you are serving a lot of PCs that have incorrect daylight
     
    52355238</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code>
    52365239</em></span>
    5237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560534"></a>
     5240</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560556"></a>
    52385241
    52395242time server (G)
    5240 </h3></div></div></div><a class="indexterm" name="id2560535"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
     5243</h3></div></div></div><a class="indexterm" name="id2560557"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
    52415244clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code>
    52425245</em></span>
    5243 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560584"></a>
     5246</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560606"></a>
    52445247
    52455248unix charset (G)
    5246 </h3></div></div></div><a class="indexterm" name="id2560585"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
     5249</h3></div></div></div><a class="indexterm" name="id2560608"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
    52475250                Samba runs on uses. Samba needs to know this in order to be able to
    52485251                convert text to the charsets other SMB clients use.
     
    52535256</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code>
    52545257</em></span>
    5255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560650"></a>
     5258</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560672"></a>
    52565259
    52575260unix extensions (G)
    5258 </h3></div></div></div><a class="indexterm" name="id2560651"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5261</h3></div></div></div><a class="indexterm" name="id2560674"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    52595262    implments the CIFS UNIX extensions, as defined by HP.
    52605263    These extensions enable Samba to better serve UNIX CIFS clients
     
    52635266    no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code>
    52645267</em></span>
    5265 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560703"></a>
     5268</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560720"></a>
    52665269
    52675270unix password sync (G)
    5268 </h3></div></div></div><a class="indexterm" name="id2560704"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5271</h3></div></div></div><a class="indexterm" name="id2560721"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    52695272    attempts to synchronize the UNIX password with the SMB password
    52705273    when the encrypted SMB password in the smbpasswd file is changed.
     
    52755278        access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code>
    52765279</em></span>
    5277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560764"></a>
     5280</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560781"></a>
    52785281
    52795282update encrypted (G)
    5280 </h3></div></div></div><a class="indexterm" name="id2560765"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5283</h3></div></div></div><a class="indexterm" name="id2560782"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52815284        This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
    52825285        password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
     
    52965299        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code>
    52975300</em></span>
    5298 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560883"></a>
     5301</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560899"></a>
    52995302
    53005303use client driver (S)
    5301 </h3></div></div></div><a class="indexterm" name="id2560884"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
     5304</h3></div></div></div><a class="indexterm" name="id2560900"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
    53025305    clients.  It has no effect on Windows 95/98/ME clients.  When
    53035306    serving a printer to Windows NT/2000 clients without first installing
     
    53245327        server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code>
    53255328</em></span>
    5326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560964"></a>
     5329</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560988"></a>
    53275330
    53285331use kerberos keytab (G)
    5329 </h3></div></div></div><a class="indexterm" name="id2560965"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5332</h3></div></div></div><a class="indexterm" name="id2560989"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>
    53305333        Specifies whether Samba should attempt to maintain service principals in the systems
    53315334        keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>.
     
    53395342        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code>
    53405343</em></span>
    5341 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561032"></a>
     5344</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561056"></a>
    53425345
    53435346use mmap (G)
    5344 </h3></div></div></div><a class="indexterm" name="id2561033"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
     5347</h3></div></div></div><a class="indexterm" name="id2561058"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
    53455348    depend on mmap working correctly on the running system. Samba requires a coherent
    53465349    mmap/read-write system memory cache. Currently only HPUX does not have such a
     
    53515354    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code>
    53525355</em></span>
    5353 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561084"></a>
     5356</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561108"></a>
    53545357
    53555358username level (G)
    5356 </h3></div></div></div><a class="indexterm" name="id2561085"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
     5359</h3></div></div></div><a class="indexterm" name="id2561110"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
    53575360    the real UNIX username, as many DOS clients send an all-uppercase
    53585361    username. By default Samba tries all lowercase, followed by the
     
    53695372</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code>
    53705373</em></span>
    5371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561166"></a>
     5374</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561190"></a>
    53725375
    53735376username map script (G)
    5374 </h3></div></div></div><a class="indexterm" name="id2561167"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
     5377</h3></div></div></div><a class="indexterm" name="id2561191"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
    53755378        <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter.  This parameter
    53765379        specifies and external program or script that must accept a single
     
    53835386</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code>
    53845387</em></span>
    5385 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561243"></a>
     5388</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561267"></a>
    53865389
    53875390username map (G)
    5388 </h3></div></div></div><a class="indexterm" name="id2561244"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5391</h3></div></div></div><a class="indexterm" name="id2561268"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    53895392        This option allows you to specify a file containing a mapping of usernames from the clients to the server.
    53905393        This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
     
    54705473# no username map</code>
    54715474</em></span>
    5472 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561523"></a>
     5475</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561547"></a>
    54735476
    54745477<a name="USER"></a>user
    5475 </h3></div></div></div><a class="indexterm" name="id2561524"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561555"></a>
     5478</h3></div></div></div><a class="indexterm" name="id2561548"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561579"></a>
    54765479
    54775480<a name="USERS"></a>users
    5478 </h3></div></div></div><a class="indexterm" name="id2561556"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561586"></a>
     5481</h3></div></div></div><a class="indexterm" name="id2561580"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561611"></a>
    54795482
    54805483username (S)
    5481 </h3></div></div></div><a class="indexterm" name="id2561587"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
     5484</h3></div></div></div><a class="indexterm" name="id2561612"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
    54825485    list, in which case the supplied password will be tested against
    54835486    each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when
     
    55175520</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code>
    55185521</em></span>
    5519 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561757"></a>
     5522</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561781"></a>
    55205523
    55215524usershare allow guests (G)
    5522 </h3></div></div></div><a class="indexterm" name="id2561758"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
     5525</h3></div></div></div><a class="indexterm" name="id2561782"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
    55235526        to be accessed by non-authenticated users or not. It is the equivalent
    55245527        of allowing people who can create a share the option of setting
     
    55275530        is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code>
    55285531</em></span>
    5529 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561809"></a>
     5532</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561834"></a>
    55305533
    55315534usershare max shares (G)
    5532 </h3></div></div></div><a class="indexterm" name="id2561810"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
     5535</h3></div></div></div><a class="indexterm" name="id2561835"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
    55335536        that are allowed to be created by users belonging to the group owning the
    55345537        usershare directory. If set to zero (the default) user defined shares are ignored.
    55355538        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code>
    55365539</em></span>
    5537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561854"></a>
     5540</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561879"></a>
    55385541
    55395542usershare owner only (G)
    5540 </h3></div></div></div><a class="indexterm" name="id2561856"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
     5543</h3></div></div></div><a class="indexterm" name="id2561880"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
    55415544        a user defined shares must be owned by the user creating the
    55425545        user defined share or not. If set to True (the default) then
     
    55485551        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code>
    55495552</em></span>
    5550 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561904"></a>
     5553</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561929"></a>
    55515554
    55525555usershare path (G)
    5553 </h3></div></div></div><a class="indexterm" name="id2561905"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
     5556</h3></div></div></div><a class="indexterm" name="id2561930"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
    55545557        filesystem used to store the user defined share definition files.
    55555558        This directory must be owned by root, and have no access for
     
    55725575        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code>
    55735576</em></span>
    5574 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561975"></a>
     5577</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562000"></a>
    55755578
    55765579usershare prefix allow list (G)
    5577 </h3></div></div></div><a class="indexterm" name="id2561976"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     5580</h3></div></div></div><a class="indexterm" name="id2562001"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    55785581        the root of which are allowed to be exported by user defined share definitions.
    55795582        If the pathname exported doesn't start with one of the strings in this
     
    55905593</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code>
    55915594</em></span>
    5592 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562048"></a>
     5595</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562072"></a>
    55935596
    55945597usershare prefix deny list (G)
    5595 </h3></div></div></div><a class="indexterm" name="id2562049"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     5598</h3></div></div></div><a class="indexterm" name="id2562073"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    55965599        the root of which are NOT allowed to be exported by user defined share definitions.
    55975600        If the pathname exported starts with one of the strings in this
     
    56095612</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code>
    56105613</em></span>
    5611 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562122"></a>
     5614</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562147"></a>
    56125615
    56135616usershare template share (G)
    5614 </h3></div></div></div><a class="indexterm" name="id2562123"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
     5617</h3></div></div></div><a class="indexterm" name="id2562148"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
    56155618        such as path, guest ok etc. This parameter allows usershares to
    56165619        "cloned" from an existing share. If "usershare template share"
     
    56275630</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code>
    56285631</em></span>
    5629 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562195"></a>
     5632</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562220"></a>
    56305633
    56315634use sendfile (S)
    5632 </h3></div></div></div><a class="indexterm" name="id2562196"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
     5635</h3></div></div></div><a class="indexterm" name="id2562221"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
    56335636    system call is supported by the underlying operating system, then some SMB read calls
    56345637    (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
     
    56395642    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code>
    56405643</em></span>
    5641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562253"></a>
     5644</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562277"></a>
    56425645
    56435646use spnego (G)
    5644 </h3></div></div></div><a class="indexterm" name="id2562254"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
     5647</h3></div></div></div><a class="indexterm" name="id2562278"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
    56455648    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    56465649    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
     
    56505653        disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code>
    56515654</em></span>
    5652 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562302"></a>
     5655</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562327"></a>
    56535656
    56545657utmp directory (G)
    5655 </h3></div></div></div><a class="indexterm" name="id2562303"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
     5658</h3></div></div></div><a class="indexterm" name="id2562328"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
    56565659        been configured and compiled with the option <code class="literal">
    56575660        --with-utmp</code>. It specifies a directory pathname that is
     
    56655668</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code>
    56665669</em></span>
    5667 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562380"></a>
     5670</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562405"></a>
    56685671
    56695672utmp (G)
    5670 </h3></div></div></div><a class="indexterm" name="id2562381"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5673</h3></div></div></div><a class="indexterm" name="id2562406"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56715674        This boolean parameter is only available if Samba has been configured and compiled 
    56725675        with the option <code class="literal">--with-utmp</code>. If set to
     
    56805683        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code>
    56815684</em></span>
    5682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562443"></a>
     5685</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562467"></a>
    56835686
    56845687valid users (S)
    5685 </h3></div></div></div><a class="indexterm" name="id2562444"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5688</h3></div></div></div><a class="indexterm" name="id2562468"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56865689    This is a list of users that should be allowed to login to this service. Names starting with
    56875690    '@', '+' and  '&amp;' are interpreted using the same rules as described in the
     
    56995702</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code>
    57005703</em></span>
    5701 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562534"></a>
     5704</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562559"></a>
    57025705
    57035706-valid (S)
    5704 </h3></div></div></div><a class="indexterm" name="id2562535"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
     5707</h3></div></div></div><a class="indexterm" name="id2562560"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
    57055708        valid and thus can be used. When this parameter is set to false,
    57065709        the share will be in no way visible nor accessible.
     
    57115714        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code>
    57125715</em></span>
    5713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562584"></a>
     5716</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562608"></a>
    57145717
    57155718veto files (S)
    5716 </h3></div></div></div><a class="indexterm" name="id2562585"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5719</h3></div></div></div><a class="indexterm" name="id2562610"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57175720        This is a list of files and directories that are neither visible nor accessible.  Each entry in
    57185721        the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
     
    57455748        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code>
    57465749</em></span>
    5747 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562703"></a>
     5750</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562727"></a>
    57485751
    57495752veto oplock files (S)
    5750 </h3></div></div></div><a class="indexterm" name="id2562704"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5753</h3></div></div></div><a class="indexterm" name="id2562728"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57515754        This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    57525755        parameter is turned on for a share. It allows the Samba administrator
     
    57695772# No files are vetoed for oplock grants</code>
    57705773</em></span>
    5771 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562796"></a>
     5774</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562820"></a>
    57725775
    57735776<a name="VFSOBJECT"></a>vfs object
    5774 </h3></div></div></div><a class="indexterm" name="id2562797"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562828"></a>
     5777</h3></div></div></div><a class="indexterm" name="id2562821"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562852"></a>
    57755778
    57765779vfs objects (S)
    5777 </h3></div></div></div><a class="indexterm" name="id2562829"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
     5780</h3></div></div></div><a class="indexterm" name="id2562853"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
    57785781        are used for Samba VFS I/O operations.  By default, normal
    57795782        disk I/O operations are used but these can be overloaded
     
    57825785</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code>
    57835786</em></span>
    5784 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562888"></a>
     5787</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562912"></a>
    57855788
    57865789volume (S)
    5787 </h3></div></div></div><a class="indexterm" name="id2562889"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
     5790</h3></div></div></div><a class="indexterm" name="id2562913"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
    57885791        returned for a share. Useful for CDROMs with installation programs
    57895792        that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal">
    57905793# the name of the share</code>
    57915794</em></span>
    5792 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562932"></a>
     5795</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562956"></a>
    57935796
    57945797wide links (S)
    5795 </h3></div></div></div><a class="indexterm" name="id2562933"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
     5798</h3></div></div></div><a class="indexterm" name="id2562957"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
    57965799        in the UNIX file system may be followed by the server. Links
    57975800        that point to areas within the directory tree exported by the
     
    58015804        that Samba has to  do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code>
    58025805</em></span>
    5803 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562984"></a>
     5806</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563008"></a>
    58045807
    58055808winbind cache time (G)
    5806 </h3></div></div></div><a class="indexterm" name="id2562985"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     5809</h3></div></div></div><a class="indexterm" name="id2563009"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    58075810        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache
    58085811        user and group information before querying a Windows NT server
     
    58125815        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code>
    58135816</em></span>
    5814 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563055"></a>
     5817</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563080"></a>
    58155818
    58165819winbind enum groups (G)
    5817 </h3></div></div></div><a class="indexterm" name="id2563056"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
     5820</h3></div></div></div><a class="indexterm" name="id2563081"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
    58185821        the enumeration of groups through the <code class="literal">setgrent()</code>,
    58195822        <code class="literal">getgrent()</code> and
     
    58235826        call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
    58245827</em></span>
    5825 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563146"></a>
     5828</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563170"></a>
    58265829
    58275830winbind enum users (G)
    5828 </h3></div></div></div><a class="indexterm" name="id2563147"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
     5831</h3></div></div></div><a class="indexterm" name="id2563171"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
    58295832        necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>,
    58305833         <code class="literal">getpwent()</code> and
     
    58385841        usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code>
    58395842</em></span>
    5840 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563239"></a>
     5843</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563264"></a>
    58415844
    58425845winbind nested groups (G)
    5843 </h3></div></div></div><a class="indexterm" name="id2563240"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
     5846</h3></div></div></div><a class="indexterm" name="id2563265"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
    58445847                 groups. Nested groups are also called local groups or
    58455848                 aliases. They work like their counterparts in Windows: Nested
     
    58495852                 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code>
    58505853</em></span>
    5851 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563290"></a>
     5854</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563315"></a>
    58525855
    58535856winbind normalize names (G)
    5854 </h3></div></div></div><a class="indexterm" name="id2563291"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
     5857</h3></div></div></div><a class="indexterm" name="id2563316"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
    58555858        whitespace in user and group names with an underscore (_) character.
    58565859        For example, whether the name "Space Kadet" should be
     
    58645867</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code>
    58655868</em></span>
    5866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563357"></a>
     5869</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563381"></a>
    58675870
    58685871winbind nss info (G)
    5869 </h3></div></div></div><a class="indexterm" name="id2563358"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
     5872</h3></div></div></div><a class="indexterm" name="id2563382"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
    58705873        Service Information to construct a user's home directory and login shell.
    58715874        Currently the following settings are available:
     
    58895892</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code>
    58905893</em></span>
    5891 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563476"></a>
     5894</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563501"></a>
    58925895
    58935896winbind offline logon (G)
    5894 </h3></div></div></div><a class="indexterm" name="id2563477"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
     5897</h3></div></div></div><a class="indexterm" name="id2563502"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
    58955898        allow to login with the <em class="parameter"><code>pam_winbind</code></em>
    58965899        module using Cached Credentials. If enabled, winbindd will store user credentials
     
    59005903</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code>
    59015904</em></span>
    5902 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563545"></a>
     5905</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563570"></a>
    59035906
    59045907winbind refresh tickets (G)
    5905 </h3></div></div></div><a class="indexterm" name="id2563546"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
     5908</h3></div></div></div><a class="indexterm" name="id2563571"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
    59065909        retrieved using the <em class="parameter"><code>pam_winbind</code></em> module.
    59075910
     
    59105913</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code>
    59115914</em></span>
    5912 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563612"></a>
     5915</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563637"></a>
    59135916
    59145917winbind separator (G)
    5915 </h3></div></div></div><a class="indexterm" name="id2563613"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
     5918</h3></div></div></div><a class="indexterm" name="id2563638"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
    59165919        used when listing a username of the form of <em class="replaceable"><code>DOMAIN
    59175920        </code></em>\<em class="replaceable"><code>user</code></em>.  This parameter
     
    59245927</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code>
    59255928</em></span>
    5926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563699"></a>
     5929</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563724"></a>
    59275930
    59285931winbind trusted domains only (G)
    5929 </h3></div></div></div><a class="indexterm" name="id2563700"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5932</h3></div></div></div><a class="indexterm" name="id2563725"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59305933        This parameter is designed to allow Samba servers that are members
    59315934        of a Samba controlled domain to use UNIX accounts distributed via NIS,
     
    59395942        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code>
    59405943</em></span>
    5941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563778"></a>
     5944</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563803"></a>
    59425945
    59435946winbind use default domain (G)
    5944 </h3></div></div></div><a class="indexterm" name="id2563780"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
     5947</h3></div></div></div><a class="indexterm" name="id2563804"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
    59455948         <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 
    59465949        without domain component in their username. Users without a domain
     
    59525955</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code>
    59535956</em></span>
    5954 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563850"></a>
     5957</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563875"></a>
    59555958
    59565959wins hook (G)
    5957 </h3></div></div></div><a class="indexterm" name="id2563852"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
     5960</h3></div></div></div><a class="indexterm" name="id2563876"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
    59585961        allows you to call an external program for all changes to the
    59595962        WINS database. The primary use for this option is to allow the
     
    59765979                        empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update
    59775980        program <code class="literal">nsupdate</code> is provided in the examples
    5978         directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563957"></a>
     5981        directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563982"></a>
    59795982
    59805983wins proxy (G)
    5981 </h3></div></div></div><a class="indexterm" name="id2563958"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
     5984</h3></div></div></div><a class="indexterm" name="id2563983"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
    59825985        queries on behalf of  other hosts. You may need to set this
    59835986        to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code>
    59845987</em></span>
    5985 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564012"></a>
     5988</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564036"></a>
    59865989
    59875990wins server (G)
    5988 </h3></div></div></div><a class="indexterm" name="id2564013"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
     5991</h3></div></div></div><a class="indexterm" name="id2564037"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
    59895992        address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on
    59905993        your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a
     
    60056008</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code>
    60066009</em></span>
    6007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564122"></a>
     6010</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564147"></a>
    60086011
    60096012wins support (G)
    6010 </h3></div></div></div><a class="indexterm" name="id2564123"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
     6013</h3></div></div></div><a class="indexterm" name="id2564148"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
    60116014        not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and
    60126015        you wish a particular <code class="literal">nmbd</code> to be your WINS server.
     
    60146017        on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code>
    60156018</em></span>
    6016 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564192"></a>
     6019</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564216"></a>
    60176020
    60186021workgroup (G)
    6019 </h3></div></div></div><a class="indexterm" name="id2564193"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
     6022</h3></div></div></div><a class="indexterm" name="id2564217"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
    60206023        appear to be in when queried by clients. Note that this parameter
    60216024        also controls the Domain name used with
     
    60256028</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code>
    60266029</em></span>
    6027 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564264"></a>
     6030</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564288"></a>
    60286031
    60296032<a name="WRITABLE"></a>writable
    6030 </h3></div></div></div><a class="indexterm" name="id2564265"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564295"></a>
     6033</h3></div></div></div><a class="indexterm" name="id2564290"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564320"></a>
    60316034
    60326035writeable (S)
    6033 </h3></div></div></div><a class="indexterm" name="id2564296"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
    6034 </em></span>
    6035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564346"></a>
     6036</h3></div></div></div><a class="indexterm" name="id2564321"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
     6037</em></span>
     6038</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564371"></a>
    60366039
    60376040write cache size (S)
    6038 </h3></div></div></div><a class="indexterm" name="id2564348"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
     6041</h3></div></div></div><a class="indexterm" name="id2564372"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
    60396042    Samba will create an in-memory cache for each oplocked file
    60406043    (it does <span class="emphasis"><em>not</em></span> do this for
     
    60546057#  for a 256k cache size per file</code>
    60556058</em></span>
    6056 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564430"></a>
     6059</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564454"></a>
    60576060
    60586061write list (S)
    6059 </h3></div></div></div><a class="indexterm" name="id2564431"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6062</h3></div></div></div><a class="indexterm" name="id2564455"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    60606063    This is a list of users that are given read-write access to a service. If the
    60616064    connecting user is in this list then they will be given write access, no matter
     
    60726075</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code>
    60736076</em></span>
    6074 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564523"></a>
     6077</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564548"></a>
    60756078
    60766079write raw (G)
    6077 </h3></div></div></div><a class="indexterm" name="id2564524"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     6080</h3></div></div></div><a class="indexterm" name="id2564549"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    60786081    will support raw write SMB's when transferring data from clients.
    60796082    You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code>
    60806083</em></span>
    6081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564567"></a>
     6084</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564592"></a>
    60826085
    60836086wtmp directory (G)
    6084 </h3></div></div></div><a class="indexterm" name="id2564568"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6087</h3></div></div></div><a class="indexterm" name="id2564593"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    60856088        This parameter is only available if Samba has been configured and compiled with the option <code class="literal">
    60866089        --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
     
    60946097</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code>
    60956098</em></span>
    6096 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2564651"></a><h2>WARNINGS</h2><p>
     6099</p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2564675"></a><h2>WARNINGS</h2><p>
    60976100        Although the configuration file permits service names to contain spaces, your client software may not.
    60986101        Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
     
    61076110        care when designing these sections. In particular, ensure that the permissions on spool directories are
    61086111        correct.
    6109         </p></div><div class="refsect1" lang="en"><a name="id2564701"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2564712"></a><h2>SEE ALSO</h2><p>
    6110         <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2564791"></a><h2>AUTHOR</h2><p>
     6112        </p></div><div class="refsect1" lang="en"><a name="id2564725"></a><h2>VERSION</h2><p>This man page is correct for version 3.0 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2564736"></a><h2>SEE ALSO</h2><p>
     6113        <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2564816"></a><h2>AUTHOR</h2><p>
    61116114        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
    61126115        by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note: See TracChangeset for help on using the changeset viewer.