Ignore:
Timestamp:
Jan 15, 2010, 8:21:06 AM (16 years ago)
Author:
Herwig Bauernfeind
Message:

Update Samba 3.3 to 3.3.10 (docs)

File:
1 edited

Legend:

Unmodified
Added
Removed

  • branches/samba-3.3.x/docs/manpages/smb.conf.5

    r342 r368  
     1'\" t
    12.\"     Title: smb.conf
    23.\"    Author: [see the "AUTHOR" section]
    3 .\" Generator: DocBook XSL Stylesheets v1.74.0 <http://docbook.sf.net/>
    4 .\"      Date: 10/12/2009
     4.\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
     5.\"      Date: 01/14/2010
    56.\"    Manual: File Formats and Conventions
    67.\"    Source: Samba 3.3
    78.\"  Language: English
    89.\"
    9 .TH "SMB\&.CONF" "5" "10/12/2009" "Samba 3\&.3" "File Formats and Conventions"
    10 .\" -----------------------------------------------------------------
    11 .\" * (re)Define some macros
    12 .\" -----------------------------------------------------------------
    13 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    14 .\" toupper - uppercase a string (locale-aware)
    15 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    16 .de toupper
    17 .tr aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ
    18 \\$*
    19 .tr aabbccddeeffgghhiijjkkllmmnnooppqqrrssttuuvvwwxxyyzz
    20 ..
    21 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    22 .\" SH-xref - format a cross-reference to an SH section
    23 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    24 .de SH-xref
    25 .ie n \{\
    26 .\}
    27 .toupper \\$*
    28 .el \{\
    29 \\$*
    30 .\}
    31 ..
    32 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    33 .\" SH - level-one heading that works better for non-TTY output
    34 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    35 .de1 SH
    36 .\" put an extra blank line of space above the head in non-TTY output
    37 .if t \{\
    38 .sp 1
    39 .\}
    40 .sp \\n[PD]u
    41 .nr an-level 1
    42 .set-an-margin
    43 .nr an-prevailing-indent \\n[IN]
    44 .fi
    45 .in \\n[an-margin]u
    46 .ti 0
    47 .HTML-TAG ".NH \\n[an-level]"
    48 .it 1 an-trap
    49 .nr an-no-space-flag 1
    50 .nr an-break-flag 1
    51 \." make the size of the head bigger
    52 .ps +3
    53 .ft B
    54 .ne (2v + 1u)
    55 .ie n \{\
    56 .\" if n (TTY output), use uppercase
    57 .toupper \\$*
    58 .\}
    59 .el \{\
    60 .nr an-break-flag 0
    61 .\" if not n (not TTY), use normal case (not uppercase)
    62 \\$1
    63 .in \\n[an-margin]u
    64 .ti 0
    65 .\" if not n (not TTY), put a border/line under subheading
    66 .sp -.6
    67 \l'\n(.lu'
    68 .\}
    69 ..
    70 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    71 .\" SS - level-two heading that works better for non-TTY output
    72 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    73 .de1 SS
    74 .sp \\n[PD]u
    75 .nr an-level 1
    76 .set-an-margin
    77 .nr an-prevailing-indent \\n[IN]
    78 .fi
    79 .in \\n[IN]u
    80 .ti \\n[SN]u
    81 .it 1 an-trap
    82 .nr an-no-space-flag 1
    83 .nr an-break-flag 1
    84 .ps \\n[PS-SS]u
    85 \." make the size of the head bigger
    86 .ps +2
    87 .ft B
    88 .ne (2v + 1u)
    89 .if \\n[.$] \&\\$*
    90 ..
    91 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    92 .\" BB/BE - put background/screen (filled box) around block of text
    93 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    94 .de BB
    95 .if t \{\
    96 .sp -.5
    97 .br
    98 .in +2n
    99 .ll -2n
    100 .gcolor red
    101 .di BX
    102 .\}
    103 ..
    104 .de EB
    105 .if t \{\
    106 .if "\\$2"adjust-for-leading-newline" \{\
    107 .sp -1
    108 .\}
    109 .br
    110 .di
    111 .in
    112 .ll
    113 .gcolor
    114 .nr BW \\n(.lu-\\n(.i
    115 .nr BH \\n(dn+.5v
    116 .ne \\n(BHu+.5v
    117 .ie "\\$2"adjust-for-leading-newline" \{\
    118 \M[\\$1]\h'1n'\v'+.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[]
    119 .\}
    120 .el \{\
    121 \M[\\$1]\h'1n'\v'-.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[]
    122 .\}
    123 .in 0
    124 .sp -.5v
    125 .nf
    126 .BX
    127 .in
    128 .sp .5v
    129 .fi
    130 .\}
    131 ..
    132 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    133 .\" BM/EM - put colored marker in margin next to block of text
    134 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    135 .de BM
    136 .if t \{\
    137 .br
    138 .ll -2n
    139 .gcolor red
    140 .di BX
    141 .\}
    142 ..
    143 .de EM
    144 .if t \{\
    145 .br
    146 .di
    147 .ll
    148 .gcolor
    149 .nr BH \\n(dn
    150 .ne \\n(BHu
    151 \M[\\$1]\D'P -.75n 0 0 \\n(BHu -(\\n[.i]u - \\n(INu - .75n) 0 0 -\\n(BHu'\M[]
    152 .in 0
    153 .nf
    154 .BX
    155 .in
    156 .fi
    157 .\}
    158 ..
     10.TH "SMB\&.CONF" "5" "01/14/2010" "Samba 3\&.3" "File Formats and Conventions"
    15911.\" -----------------------------------------------------------------
    16012.\" * set default formatting
    … …  
    16719.\" * MAIN CONTENT STARTS HERE *
    16820.\" -----------------------------------------------------------------
    169 .SH "Name"
     21.SH "NAME"
    17022smb.conf \- The configuration file for the Samba suite
    17123.SH "SYNOPSIS"
    17224.PP
    17325The
    174 \FCsmb\&.conf\F[]
     26smb\&.conf
    17527file is a configuration file for the Samba suite\&.
    176 \FCsmb\&.conf\F[]
     28smb\&.conf
    17729contains runtime configuration information for the Samba programs\&. The
    178 \FCsmb\&.conf\F[]
     30smb\&.conf
    17931file is designed to be configured and administered by the
    18032\fBswat\fR(8)
    … …  
    18739.RS 4
    18840.\}
    189 .fam C
    190 .ps -1
    19141.nf
    192 .if t \{\
    193 .sp -1
    194 .\}
    195 .BB lightgray adjust-for-leading-newline
    196 .sp -1
    197 
    19842\fIname\fR = \fIvalue \fR
    199 .EB lightgray adjust-for-leading-newline
    200 .if t \{\
    201 .sp 1
    202 .\}
    20343.fi
    204 .fam
    205 .ps +1
    20644.if n \{\
    20745.RE
    … …  
    21755.PP
    21856Any line ending in a
    219 \(lq\FC\e\F[]\(rq
     57\(lq\e\(rq
    22058is continued on the next line in the customary UNIX fashion\&.
    22159.PP
    … …  
    24078.PP
    24179Sections other than guest services will require a password to access them\&. The client provides the username\&. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the
    242 \FCuser =\F[]
     80user =
    24381option in the share definition\&. For modern clients such as Windows 95/98/ME/NT/2000, this should not be necessary\&.
    24482.PP
    … …  
    24684.PP
    24785The following sample section defines a file space share\&. The user has write access to the path
    248 \FC/home/bar\F[]\&. The share is accessed via the share name
    249 \FCfoo\F[]:
     86/home/bar\&. The share is accessed via the share name
     87foo:
    25088.sp
    25189.if n \{\
    25290.RS 4
    25391.\}
    254 .fam C
    255 .ps -1
    25692.nf
    257 .if t \{\
    258 .sp -1
    259 .\}
    260 .BB lightgray adjust-for-leading-newline
    261 .sp -1
    262 
    26393        \fI[foo]\fR
    26494        \m[blue]\fBpath = /home/bar\fR\m[]
    26595        \m[blue]\fBread only = no\fR\m[]
    266 .EB lightgray adjust-for-leading-newline
    267 .if t \{\
    268 .sp 1
    269 .\}
    27096.fi
    271 .fam
    272 .ps +1
    27397.if n \{\
    27498.RE
    … …  
    282106.RS 4
    283107.\}
    284 .fam C
    285 .ps -1
    286108.nf
    287 .if t \{\
    288 .sp -1
    289 .\}
    290 .BB lightgray adjust-for-leading-newline
    291 .sp -1
    292 
    293109        \fI[aprinter]\fR
    294110        \m[blue]\fBpath = /usr/spool/public\fR\m[]
    … …  
    296112        \m[blue]\fBprintable = yes\fR\m[]
    297113        \m[blue]\fBguest ok = yes\fR\m[]
    298 .EB lightgray adjust-for-leading-newline
    299 .if t \{\
    300 .sp 1
    301 .\}
    302114.fi
    303 .fam
    304 .ps +1
    305115.if n \{\
    306116.RE
    … …  
    349159.RS 4
    350160.\}
    351 .fam C
    352 .ps -1
    353161.nf
    354 .if t \{\
    355 .sp -1
    356 .\}
    357 .BB lightgray adjust-for-leading-newline
    358 .sp -1
    359 
    360162\fBpath = /data/pchome/%S\fR
    361 .EB lightgray adjust-for-leading-newline
    362 .if t \{\
    363 .sp 1
    364 .\}
    365163.fi
    366 .fam
    367 .ps +1
    368164.if n \{\
    369165.RE
    … …  
    382178.RS 4
    383179.\}
    384 .fam C
    385 .ps -1
    386180.nf
    387 .if t \{\
    388 .sp -1
    389 .\}
    390 .BB lightgray adjust-for-leading-newline
    391 .sp -1
    392 
    393181\fI[homes]\fR
    394182\m[blue]\fBread only = no\fR\m[]
    395 .EB lightgray adjust-for-leading-newline
    396 .if t \{\
    397 .sp 1
    398 .\}
    399183.fi
    400 .fam
    401 .ps +1
    402184.if n \{\
    403185.RE
    … …  
    464246.RS 4
    465247.\}
    466 .fam C
    467 .ps -1
    468248.nf
    469 .if t \{\
    470 .sp -1
    471 .\}
    472 .BB lightgray adjust-for-leading-newline
    473 .sp -1
    474 
    475249\fI[printers]\fR
    476250\m[blue]\fBpath = /usr/spool/public\fR\m[]
    477251\m[blue]\fBguest ok = yes\fR\m[]
    478252\m[blue]\fBprintable = yes\fR\m[]
    479 .EB lightgray adjust-for-leading-newline
    480 .if t \{\
    481 .sp 1
    482 .\}
    483253.fi
    484 .fam
    485 .ps +1
    486254.if n \{\
    487255.RE
    … …  
    493261.RS 4
    494262.\}
    495 .fam C
    496 .ps -1
    497263.nf
    498 .if t \{\
    499 .sp -1
    500 .\}
    501 .BB lightgray adjust-for-leading-newline
    502 .sp -1
    503 
    504264alias|alias|alias|alias\&.\&.\&.   
    505 .EB lightgray adjust-for-leading-newline
    506 .if t \{\
    507 .sp 1
    508 .\}
    509265.fi
    510 .fam
    511 .ps +1
    512266.if n \{\
    513267.RE
    … …  
    516270Each alias should be an acceptable printer name for your printing subsystem\&. In the [global] section, specify the new file as your printcap\&. The server will only recognize names found in your pseudo\-printcap, which of course can contain whatever aliases you like\&. The same technique could be used simply to limit access to a subset of your local printers\&.
    517271.PP
    518 An alias, by the way, is defined as any component of the first entry of a printcap record\&. Records are separated by newlines, components (if there are more than one) are separated by vertical bar symbols (\FC|\F[])\&.
     272An alias, by the way, is defined as any component of the first entry of a printcap record\&. Records are separated by newlines, components (if there are more than one) are separated by vertical bar symbols (|)\&.
    519273.if n \{\
    520274.sp
    521275.\}
    522276.RS 4
    523 .BM yellow
    524277.it 1 an-trap
    525278.nr an-no-space-flag 1
    … …  
    532285.PP
    533286On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use
    534 \FCprintcap name = lpstat\F[]
     287printcap name = lpstat
    535288to automatically obtain a list of printers\&. See the
    536 \FCprintcap name\F[]
     289printcap name
    537290option for more details\&.
    538291.sp .5v
    539 .EM yellow
    540292.RE
    541293.SH "USERSHARES"
    … …  
    581333.PP
    582334To allow members of the UNIX group
    583 \FCfoo\F[]
     335foo
    584336to create user defined shares, create the directory to contain the share definitions as follows:
    585337.PP
    … …  
    589341.RS 4
    590342.\}
    591 .fam C
    592 .ps -1
    593343.nf
    594 .if t \{\
    595 .sp -1
    596 .\}
    597 .BB lightgray adjust-for-leading-newline
    598 .sp -1
    599 
    600344mkdir /usr/local/samba/lib/usershares
    601345chgrp foo /usr/local/samba/lib/usershares
    602346chmod 1770 /usr/local/samba/lib/usershares
    603 .EB lightgray adjust-for-leading-newline
    604 .if t \{\
    605 .sp 1
    606 .\}
    607347.fi
    608 .fam
    609 .ps +1
    610348.if n \{\
    611349.RE
    … …  
    617355.RS 4
    618356.\}
    619 .fam C
    620 .ps -1
    621357.nf
    622 .if t \{\
    623 .sp -1
    624 .\}
    625 .BB lightgray adjust-for-leading-newline
    626 .sp -1
    627 
    628358        \m[blue]\fBusershare path = /usr/local/samba/lib/usershares\fR\m[]
    629359        \m[blue]\fBusershare max shares = 10\fR\m[] # (or the desired number of shares)
    630 .EB lightgray adjust-for-leading-newline
    631 .if t \{\
    632 .sp 1
    633 .\}
    634360.fi
    635 .fam
    636 .ps +1
    637361.if n \{\
    638362.RE
    … …  
    640364.sp
    641365to the global section of your
    642 \FCsmb\&.conf\F[]\&. Members of the group foo may then manipulate the user defined shares using the following commands\&.
     366smb\&.conf\&. Members of the group foo may then manipulate the user defined shares using the following commands\&.
    643367.PP
    644368net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]
    … …  
    804528.RS 4
    805529the path of the service\'s home directory, obtained from your NIS auto\&.map entry\&. The NIS auto\&.map entry is split up as
    806 \FC%N:%p\F[]\&.
     530%N:%p\&.
    807531.RE
    808532.PP
    809533There are some quite creative things that can be done with these substitutions and other
    810 \FCsmb\&.conf\F[]
     534smb\&.conf
    811535options\&.
    812536.SH "NAME MANGLING"
    813537.PP
    814538Samba supports
    815 \FCname mangling\F[]
     539name mangling
    816540so that DOS and Windows clients can use files that don\'t conform to the 8\&.3 format\&. It can also be set to adjust the case of 8\&.3 format filenames\&.
    817541.PP
    … …  
    843567.RS 4
    844568controls whether new files (ie\&. files that don\'t currently exist in the filesystem) are created with the case that the client passes, or if they are forced to be the
    845 \FCdefault\F[]
     569default
    846570case\&. Default
    847571\fIyes\fR\&.
    … …  
    851575.RS 4
    852576controls if new files (ie\&. files that don\'t currently exist in the filesystem) which conform to 8\&.3 syntax, that is all in upper case and of suitable length, are created upper case, or if they are forced to be the
    853 \FCdefault\F[]
     577default
    854578case\&. This option can be used with
    855 \FCpreserve case = yes\F[]
     579preserve case = yes
    856580to permit long filenames to retain their case, while short names are lowercased\&. Default
    857581\fIyes\fR\&.
    … …  
    876600.\}
    877601If the client has passed a username/password pair and that username/password pair is validated by the UNIX system\'s password programs, the connection is made as that username\&. This includes the
    878 \FC\e\eserver\eservice\F[]%\fIusername\fR
     602\e\eserver\eservice%\fIusername\fR
    879603method of passing a username\&.
    880604.RE
    … …  
    922646.\}
    923647If a
    924 \FCuser = \F[]
     648user =
    925649field is given in the
    926 \FCsmb\&.conf\F[]
     650smb\&.conf
    927651file for the service and the client has supplied a password, and that password matches (according to the UNIX system\'s password checking) with one of the usernames from the
    928 \FCuser =\F[]
     652user =
    929653field, the connection is made as the username in the
    930 \FCuser =\F[]
     654user =
    931655line\&. If one of the usernames in the
    932 \FCuser =\F[]
     656user =
    933657list begins with a
    934 \FC@\F[], that name expands to a list of names in the group of the same name\&.
     658@, that name expands to a list of names in the group of the same name\&.
    935659.RE
    936660.sp
    … …  
    944668.\}
    945669If the service is a guest service, a connection is made as the username given in the
    946 \FCguest account =\F[]
     670guest account =
    947671for the service, irrespective of the supplied password\&.
    948672.RE
    … …  
    950674.PP
    951675Starting with Samba version 3\&.2\&.0, the capability to store Samba configuration in the registry is available\&. The configuration is stored in the registry key
    952 \fI\FCHKLM\eSoftware\eSamba\esmbconf\F[]\fR\&. There are two levels of registry configuration:
     676\fIHKLM\eSoftware\eSamba\esmbconf\fR\&. There are two levels of registry configuration:
    953677.sp
    954678.RS 4
    … …  
    1013737\fInet (rpc) registry\fR
    1014738in the key
    1015 \fI\FCHKLM\eSoftware\eSamba\esmbconf\F[]\fR\&. More conveniently, the
     739\fIHKLM\eSoftware\eSamba\esmbconf\fR\&. More conveniently, the
    1016740\fIconf\fR
    1017741subcommand of the
    … …  
    1034758.sp
    1035759Default:
    1036 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR
    1037 .sp
    1038 Example:
    1039 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI\FC/sbin/shutdown \-c\F[]\fR\fI \fR
     760\fI\fIabort shutdown script\fR\fR\fI = \fR\fI""\fR\fI \fR
     761.sp
     762Example:
     763\fI\fIabort shutdown script\fR\fR\fI = \fR\fI/sbin/shutdown \-c\fR\fI \fR
    1040764.RE
    1041765
    … …  
    1050774.sp
    1051775Default:
    1052 \fI\fIacl check permissions\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR
     776\fI\fIacl check permissions\fR\fR\fI = \fR\fITrue\fR\fI \fR
    1053777.RE
    1054778
    … …  
    1066790.sp
    1067791Default:
    1068 \fI\fIacl compatibility\fR\fR\fI = \fR\fI\FCAuto\F[]\fR\fI \fR
    1069 .sp
    1070 Example:
    1071 \fI\fIacl compatibility\fR\fR\fI = \fR\fI\FCwin2k\F[]\fR\fI \fR
     792\fI\fIacl compatibility\fR\fR\fI = \fR\fIAuto\fR\fI \fR
     793.sp
     794Example:
     795\fI\fIacl compatibility\fR\fR\fI = \fR\fIwin2k\fR\fI \fR
    1072796.RE
    1073797
    … …  
    1095819.sp
    1096820Default:
    1097 \fI\fIacl group control\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     821\fI\fIacl group control\fR\fR\fI = \fR\fIno\fR\fI \fR
    1098822.RE
    1099823
    … …  
    1106830.sp
    1107831Default:
    1108 \fI\fIacl map full control\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR
     832\fI\fIacl map full control\fR\fR\fI = \fR\fITrue\fR\fI \fR
    1109833.RE
    1110834
    … …  
    1122846.sp
    1123847Default:
    1124 \fI\fIadd group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1125 .sp
    1126 Example:
    1127 \fI\fIadd group script\fR\fR\fI = \fR\fI\FC/usr/sbin/groupadd %g\F[]\fR\fI \fR
     848\fI\fIadd group script\fR\fR\fI = \fR\fI\fR\fI \fR
     849.sp
     850Example:
     851\fI\fIadd group script\fR\fR\fI = \fR\fI/usr/sbin/groupadd %g\fR\fI \fR
    1128852.RE
    1129853
    … …  
    1140864.sp
    1141865Default:
    1142 \fI\fIadd machine script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1143 .sp
    1144 Example:
    1145 \fI\fIadd machine script\fR\fR\fI = \fR\fI\FC/usr/sbin/adduser \-n \-g machines \-c Machine \-d /var/lib/nobody \-s /bin/false %u\F[]\fR\fI \fR
     866\fI\fIadd machine script\fR\fR\fI = \fR\fI\fR\fI \fR
     867.sp
     868Example:
     869\fI\fIadd machine script\fR\fR\fI = \fR\fI/usr/sbin/adduser \-n \-g machines \-c Machine \-d /var/lib/nobody \-s /bin/false %u\fR\fI \fR
    1146870.RE
    1147871
    … …  
    1177901.sp
    1178902Default:
    1179 \fI\fIadd port command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1180 .sp
    1181 Example:
    1182 \fI\fIadd port command\fR\fR\fI = \fR\fI\FC/etc/samba/scripts/addport\&.sh\F[]\fR\fI \fR
     903\fI\fIadd port command\fR\fR\fI = \fR\fI\fR\fI \fR
     904.sp
     905Example:
     906\fI\fIadd port command\fR\fR\fI = \fR\fI/etc/samba/scripts/addport\&.sh\fR\fI \fR
    1183907.RE
    1184908
    … …  
    1192916\fIaddprinter command\fR
    1193917defines a script to be run which will perform the necessary operations for adding the printer to the print system and to add the appropriate service definition to the
    1194 \FCsmb\&.conf\F[]
     918smb\&.conf
    1195919file in order that it can be shared by
    1196920\fBsmbd\fR(8)\&.
    … …  
    1271995\fIaddprinter command\fR
    1272996has been executed,
    1273 \FCsmbd\F[]
     997smbd
    1274998will reparse the
    1275 \FC smb\&.conf\F[]
     999smb\&.conf
    12761000to determine if the share defined by the APW exists\&. If the sharename is still invalid, then
    1277 \FCsmbd \F[]
     1001smbd
    12781002will return an ACCESS_DENIED error to the client\&.
    12791003.sp
    … …  
    12831007.sp
    12841008Default:
    1285 \fI\fIaddprinter command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1286 .sp
    1287 Example:
    1288 \fI\fIaddprinter command\fR\fR\fI = \fR\fI\FC/usr/bin/addprinter\F[]\fR\fI \fR
     1009\fI\fIaddprinter command\fR\fR\fI = \fR\fI\fR\fI \fR
     1010.sp
     1011Example:
     1012\fI\fIaddprinter command\fR\fR\fI = \fR\fI/usr/bin/addprinter\fR\fI \fR
    12891013.RE
    12901014
    … …  
    12961020\fIadd share command\fR
    12971021is used to define an external program or script which will add a new service definition to
    1298 \FCsmb\&.conf\F[]\&.
     1022smb\&.conf\&.
    12991023.sp
    13001024In order to successfully execute the
    13011025\fIadd share command\fR,
    1302 \FCsmbd\F[]
     1026smbd
    13031027requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the
    1304 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the
     1028SeDiskOperatorPrivilege\&. Scripts defined in the
    13051029\fIadd share command\fR
    13061030parameter are executed as root\&.
    13071031.sp
    13081032When executed,
    1309 \FCsmbd\F[]
     1033smbd
    13101034will automatically invoke the
    13111035\fIadd share command\fR
    … …  
    13221046\fIconfigFile\fR
    13231047\- the location of the global
    1324 \FCsmb\&.conf\F[]
     1048smb\&.conf
    13251049file\&.
    13261050.RE
    … …  
    13781102.sp
    13791103Default:
    1380 \fI\fIadd share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1381 .sp
    1382 Example:
    1383 \fI\fIadd share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/addshare\F[]\fR\fI \fR
     1104\fI\fIadd share command\fR\fR\fI = \fR\fI\fR\fI \fR
     1105.sp
     1106Example:
     1107\fI\fIadd share command\fR\fR\fI = \fR\fI/usr/local/bin/addshare\fR\fI \fR
    13841108.RE
    13851109
    … …  
    14141138\m[blue]\fBpassword server\fR\m[]
    14151139and attempts to authenticate the given user with the given password\&. If the authentication succeeds then
    1416 \FCsmbd\F[]
     1140smbd
    14171141attempts to find a UNIX user in the UNIX password database to map the Windows user into\&. If this lookup fails, and
    14181142\m[blue]\fBadd user script\fR\m[]
    14191143is set then
    1420 \FCsmbd\F[]
     1144smbd
    14211145will call the specified script
    14221146\fIAS ROOT\fR, expanding any
    … …  
    14251149.sp
    14261150If this script successfully creates the user then
    1427 \FCsmbd\F[]
     1151smbd
    14281152will continue on as though the UNIX user already existed\&. In this way, UNIX users are dynamically created to match existing Windows NT accounts\&.
    14291153.sp
    … …  
    14341158.sp
    14351159Default:
    1436 \fI\fIadd user script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1437 .sp
    1438 Example:
    1439 \fI\fIadd user script\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/add_user %u\F[]\fR\fI \fR
     1160\fI\fIadd user script\fR\fR\fI = \fR\fI\fR\fI \fR
     1161.sp
     1162Example:
     1163\fI\fIadd user script\fR\fR\fI = \fR\fI/usr/local/samba/bin/add_user %u\fR\fI \fR
    14401164.RE
    14411165
    … …  
    14531177.sp
    14541178Note that the
    1455 \FCadduser\F[]
     1179adduser
    14561180command used in the example below does not support the used syntax on all systems\&.
    14571181.sp
    14581182Default:
    1459 \fI\fIadd user to group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1460 .sp
    1461 Example:
    1462 \fI\fIadd user to group script\fR\fR\fI = \fR\fI\FC/usr/sbin/adduser %u %g\F[]\fR\fI \fR
     1183\fI\fIadd user to group script\fR\fR\fI = \fR\fI\fR\fI \fR
     1184.sp
     1185Example:
     1186\fI\fIadd user to group script\fR\fR\fI = \fR\fI/usr/sbin/adduser %u %g\fR\fI \fR
    14631187.RE
    14641188
    … …  
    14761200.sp
    14771201Default:
    1478 \fI\fIadministrative share\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1202\fI\fIadministrative share\fR\fR\fI = \fR\fIno\fR\fI \fR
    14791203.RE
    14801204
    … …  
    14921216.sp
    14931217Default:
    1494 \fI\fIadmin users\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1495 .sp
    1496 Example:
    1497 \fI\fIadmin users\fR\fR\fI = \fR\fI\FCjason\F[]\fR\fI \fR
     1218\fI\fIadmin users\fR\fR\fI = \fR\fI\fR\fI \fR
     1219.sp
     1220Example:
     1221\fI\fIadmin users\fR\fR\fI = \fR\fIjason\fR\fI \fR
    14981222.RE
    14991223
    … …  
    15071231.sp
    15081232Default:
    1509 \fI\fIafs share\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1233\fI\fIafs share\fR\fR\fI = \fR\fIno\fR\fI \fR
    15101234.RE
    15111235
    … …  
    15191243.sp
    15201244Default:
    1521 \fI\fIafs username map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1522 .sp
    1523 Example:
    1524 \fI\fIafs username map\fR\fR\fI = \fR\fI\FC%u@afs\&.samba\&.org\F[]\fR\fI \fR
     1245\fI\fIafs username map\fR\fR\fI = \fR\fI\fR\fI \fR
     1246.sp
     1247Example:
     1248\fI\fIafs username map\fR\fR\fI = \fR\fI%u@afs\&.samba\&.org\fR\fI \fR
    15251249.RE
    15261250
    … …  
    15401264.sp
    15411265Default:
    1542 \fI\fIaio read size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    1543 .sp
    1544 Example:
    1545 \fI\fIaio read size\fR\fR\fI = \fR\fI\FC16384 # Use asynchronous I/O for reads bigger than 16KB request size\F[]\fR\fI \fR
     1266\fI\fIaio read size\fR\fR\fI = \fR\fI0\fR\fI \fR
     1267.sp
     1268Example:
     1269\fI\fIaio read size\fR\fR\fI = \fR\fI16384 # Use asynchronous I/O for reads bigger than 16KB request size\fR\fI \fR
     1270.RE
     1271
     1272aio write behind (S)
     1273.\" aio write behind
     1274.PP
     1275.RS 4
     1276If Samba has been built with asynchronous I/O support, Samba will not wait until write requests are finished before returning the result to the client for files listed in this parameter\&. Instead, Samba will immediately return that the write request has been finished successfully, no matter if the operation will succeed or not\&. This might speed up clients without aio support, but is really dangerous, because data could be lost and files could be damaged\&.
     1277.sp
     1278The syntax is identical to the
     1279\m[blue]\fBveto files\fR\m[]
     1280parameter\&.
     1281.sp
     1282Default:
     1283\fI\fIaio write behind\fR\fR\fI = \fR\fI\fR\fI \fR
     1284.sp
     1285Example:
     1286\fI\fIaio write behind\fR\fR\fI = \fR\fI/*\&.tmp/\fR\fI \fR
    15461287.RE
    15471288
    … …  
    15611302.sp
    15621303Default:
    1563 \fI\fIaio write size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    1564 .sp
    1565 Example:
    1566 \fI\fIaio write size\fR\fR\fI = \fR\fI\FC16384 # Use asynchronous I/O for writes bigger than 16KB request size\F[]\fR\fI \fR
     1304\fI\fIaio write size\fR\fR\fI = \fR\fI0\fR\fI \fR
     1305.sp
     1306Example:
     1307\fI\fIaio write size\fR\fR\fI = \fR\fI16384 # Use asynchronous I/O for writes bigger than 16KB request size\fR\fI \fR
    15671308.RE
    15681309
    … …  
    15781319.sp
    15791320Default:
    1580 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
    1581 .sp
    1582 Example:
    1583 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI\FC100000\F[]\fR\fI \fR
     1321\fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI1000\fR\fI \fR
     1322.sp
     1323Example:
     1324\fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI100000\fR\fI \fR
    15841325.RE
    15851326
    … …  
    15931334.sp
    15941335Default:
    1595 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI\FC1048576\F[]\fR\fI \fR
    1596 .sp
    1597 Example:
    1598 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI\FC0 # (to disable roundups)\F[]\fR\fI \fR
     1336\fI\fIallocation roundup size\fR\fR\fI = \fR\fI1048576\fR\fI \fR
     1337.sp
     1338Example:
     1339\fI\fIallocation roundup size\fR\fR\fI = \fR\fI0 # (to disable roundups)\fR\fI \fR
    15991340.RE
    16001341
    … …  
    16141355.sp
    16151356Default:
    1616 \fI\fIallow trusted domains\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1357\fI\fIallow trusted domains\fR\fR\fI = \fR\fIyes\fR\fI \fR
    16171358.RE
    16181359
    … …  
    16261367.sp
    16271368Default:
    1628 \fI\fIannounce as\fR\fR\fI = \fR\fI\FCNT Server\F[]\fR\fI \fR
    1629 .sp
    1630 Example:
    1631 \fI\fIannounce as\fR\fR\fI = \fR\fI\FCWin95\F[]\fR\fI \fR
     1369\fI\fIannounce as\fR\fR\fI = \fR\fINT Server\fR\fI \fR
     1370.sp
     1371Example:
     1372\fI\fIannounce as\fR\fR\fI = \fR\fIWin95\fR\fI \fR
    16321373.RE
    16331374
    … …  
    16391380.sp
    16401381Default:
    1641 \fI\fIannounce version\fR\fR\fI = \fR\fI\FC4\&.9\F[]\fR\fI \fR
    1642 .sp
    1643 Example:
    1644 \fI\fIannounce version\fR\fR\fI = \fR\fI\FC2\&.0\F[]\fR\fI \fR
     1382\fI\fIannounce version\fR\fR\fI = \fR\fI4\&.9\fR\fI \fR
     1383.sp
     1384Example:
     1385\fI\fIannounce version\fR\fR\fI = \fR\fI2\&.0\fR\fI \fR
    16451386.RE
    16461387
    … …  
    16501391.RS 4
    16511392This option allows the administrator to chose what authentication methods
    1652 \FCsmbd\F[]
     1393smbd
    16531394will use when authenticating a user\&. This option defaults to sensible values based on
    16541395\m[blue]\fBsecurity\fR\m[]\&. This should be considered a developer option and used only in rare circumstances\&. In the majority (if not all) of production servers, the default setting should be adequate\&.
    … …  
    16691410.sp
    16701411Default:
    1671 \fI\fIauth methods\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1672 .sp
    1673 Example:
    1674 \fI\fIauth methods\fR\fR\fI = \fR\fI\FCguest sam winbind\F[]\fR\fI \fR
     1412\fI\fIauth methods\fR\fR\fI = \fR\fI\fR\fI \fR
     1413.sp
     1414Example:
     1415\fI\fIauth methods\fR\fR\fI = \fR\fIguest sam winbind\fR\fI \fR
    16751416.RE
    16761417
    … …  
    16851426.sp
    16861427Default:
    1687 \fI\fIavailable\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1428\fI\fIavailable\fR\fR\fI = \fR\fIyes\fR\fI \fR
    16881429.RE
    16891430
    … …  
    16991440.sp
    17001441For name service it causes
    1701 \FCnmbd\F[]
     1442nmbd
    17021443to bind to ports 137 and 138 on the interfaces listed in the
    17031444\m[blue]\fBinterfaces\fR\m[]
    17041445parameter\&.
    1705 \FCnmbd\F[]
     1446nmbd
    17061447also binds to the "all addresses" interface (0\&.0\&.0\&.0) on ports 137 and 138 for the purposes of reading broadcast messages\&. If this option is not set then
    1707 \FCnmbd\F[]
     1448nmbd
    17081449will service name requests on all of these sockets\&. If
    17091450\m[blue]\fBbind interfaces only\fR\m[]
    17101451is set then
    1711 \FCnmbd\F[]
     1452nmbd
    17121453will check the source address of any packets coming in on the broadcast sockets and discard any that don\'t match the broadcast addresses of the interfaces in the
    17131454\m[blue]\fBinterfaces\fR\m[]
    17141455parameter list\&. As unicast packets are received on the other sockets it allows
    1715 \FCnmbd\F[]
     1456nmbd
    17161457to refuse to serve names to machines that send packets that arrive through any interfaces not listed in the
    17171458\m[blue]\fBinterfaces\fR\m[]
    17181459list\&. IP Source address spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for
    1719 \FCnmbd\F[]\&.
     1460nmbd\&.
    17201461.sp
    17211462For file service it causes
    … …  
    17241465\m[blue]\fBinterfaces\fR\m[]
    17251466parameter\&. This restricts the networks that
    1726 \FCsmbd\F[]
     1467smbd
    17271468will serve, to packets coming in on those interfaces\&. Note that you should not use this parameter for machines that are serving PPP or other intermittent or non\-broadcast network interfaces as it will not cope with non\-permanent interfaces\&.
    17281469.sp
    … …  
    17401481.sp
    17411482To change a users SMB password, the
    1742 \FCsmbpasswd\F[]
     1483smbpasswd
    17431484by default connects to the
    17441485\fIlocalhost \- 127\&.0\&.0\&.1\fR
    … …  
    17501491\m[blue]\fBinterfaces\fR\m[]
    17511492parameter list then
    1752 \FC smbpasswd\F[]
     1493smbpasswd
    17531494will fail to connect in it\'s default mode\&.
    1754 \FCsmbpasswd\F[]
     1495smbpasswd
    17551496can be forced to use the primary IP interface of the local host by using its
    17561497\fBsmbpasswd\fR(8)
    … …  
    17611502.sp
    17621503The
    1763 \FCswat\F[]
     1504swat
    17641505status page tries to connect with
    1765 \FCsmbd\F[]
     1506smbd
    17661507and
    1767 \FCnmbd\F[]
     1508nmbd
    17681509at the address
    17691510\fI127\&.0\&.0\&.1\fR
    … …  
    17711512\fI127\&.0\&.0\&.1\fR
    17721513will cause
    1773 \FC smbd\F[]
     1514smbd
    17741515and
    1775 \FCnmbd\F[]
     1516nmbd
    17761517to always show "not running" even if they really are\&. This can prevent
    1777 \FC swat\F[]
     1518swat
    17781519from starting/stopping/restarting
    1779 \FCsmbd\F[]
     1520smbd
    17801521and
    1781 \FCnmbd\F[]\&.
    1782 .sp
    1783 Default:
    1784 \fI\fIbind interfaces only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1522nmbd\&.
     1523.sp
     1524Default:
     1525\fI\fIbind interfaces only\fR\fR\fI = \fR\fIno\fR\fI \fR
    17851526.RE
    17861527
    … …  
    17991540.sp
    18001541Default:
    1801 \fI\fIblocking locks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1542\fI\fIblocking locks\fR\fR\fI = \fR\fIyes\fR\fI \fR
    18021543.RE
    18031544
    … …  
    18151556.sp
    18161557Default:
    1817 \fI\fIblock size\fR\fR\fI = \fR\fI\FC1024\F[]\fR\fI \fR
    1818 .sp
    1819 Example:
    1820 \fI\fIblock size\fR\fR\fI = \fR\fI\FC4096\F[]\fR\fI \fR
     1558\fI\fIblock size\fR\fR\fI = \fR\fI1024\fR\fI \fR
     1559.sp
     1560Example:
     1561\fI\fIblock size\fR\fR\fI = \fR\fI4096\fR\fI \fR
    18211562.RE
    18221563
    … …  
    18361577.sp
    18371578Default:
    1838 \fI\fIbrowseable\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1579\fI\fIbrowseable\fR\fR\fI = \fR\fIyes\fR\fI \fR
    18391580.RE
    18401581
    … …  
    18461587\fBsmbd\fR(8)
    18471588will serve a browse list to a client doing a
    1848 \FCNetServerEnum\F[]
     1589NetServerEnum
    18491590call\&. Normally set to
    18501591\fByes\fR\&. You should never need to change this\&.
    18511592.sp
    18521593Default:
    1853 \fI\fIbrowse list\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1594\fI\fIbrowse list\fR\fR\fI = \fR\fIyes\fR\fI \fR
    18541595.RE
    18551596
    … …  
    18701611.sp
    18711612Default:
    1872 \fI\fIcase sensitive\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1613\fI\fIcase sensitive\fR\fR\fI = \fR\fIno\fR\fI \fR
    18731614.RE
    18741615
    … …  
    18821623.sp
    18831624Default:
    1884 \fI\fIchange notify\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1625\fI\fIchange notify\fR\fR\fI = \fR\fIyes\fR\fI \fR
    18851626.RE
    18861627
    … …  
    18921633\fIchange share command\fR
    18931634is used to define an external program or script which will modify an existing service definition in
    1894 \FCsmb\&.conf\F[]\&.
     1635smb\&.conf\&.
    18951636.sp
    18961637In order to successfully execute the
    18971638\fIchange share command\fR,
    1898 \FCsmbd\F[]
     1639smbd
    18991640requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the
    1900 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the
     1641SeDiskOperatorPrivilege\&. Scripts defined in the
    19011642\fIchange share command\fR
    19021643parameter are executed as root\&.
    19031644.sp
    19041645When executed,
    1905 \FCsmbd\F[]
     1646smbd
    19061647will automatically invoke the
    19071648\fIchange share command\fR
    … …  
    19181659\fIconfigFile\fR
    19191660\- the location of the global
    1920 \FCsmb\&.conf\F[]
     1661smb\&.conf
    19211662file\&.
    19221663.RE
    … …  
    19731714.sp
    19741715Default:
    1975 \fI\fIchange share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    1976 .sp
    1977 Example:
    1978 \fI\fIchange share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/changeshare\F[]\fR\fI \fR
     1716\fI\fIchange share command\fR\fR\fI = \fR\fI\fR\fI \fR
     1717.sp
     1718Example:
     1719\fI\fIchange share command\fR\fR\fI = \fR\fI/usr/local/bin/changeshare\fR\fI \fR
    19791720.RE
    19801721
    … …  
    19881729.sp
    19891730Note: In the example directory is a sample program called
    1990 \FCcrackcheck\F[]
     1731crackcheck
    19911732that uses cracklib to check the password quality\&.
    19921733.sp
    19931734Default:
    1994 \fI\fIcheck password script\fR\fR\fI = \fR\fI\FCDisabled\F[]\fR\fI \fR
    1995 .sp
    1996 Example:
    1997 \fI\fIcheck password script\fR\fR\fI = \fR\fI\FC/usr/local/sbin/crackcheck\F[]\fR\fI \fR
     1735\fI\fIcheck password script\fR\fR\fI = \fR\fIDisabled\fR\fI \fR
     1736.sp
     1737Example:
     1738\fI\fIcheck password script\fR\fR\fI = \fR\fI/usr/local/sbin/crackcheck\fR\fI \fR
    19981739.RE
    19991740
    … …  
    20091750.sp
    20101751Disabling this option will also disable the
    2011 \FCclient plaintext auth\F[]
     1752client plaintext auth
    20121753option\&.
    20131754.sp
    20141755Likewise, if the
    2015 \FCclient ntlmv2 auth\F[]
     1756client ntlmv2 auth
    20161757parameter is enabled, then only NTLMv2 logins will be attempted\&.
    20171758.sp
    20181759Default:
    2019 \fI\fIclient lanman auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1760\fI\fIclient lanman auth\fR\fR\fI = \fR\fIno\fR\fI \fR
    20201761.RE
    20211762
    … …  
    20381779are only available if Samba has been compiled against a modern OpenLDAP version (2\&.3\&.x or higher)\&.
    20391780.sp
    2040 This option is needed in the case of Domain Controllers enforcing the usage of signed LDAP connections (e\&.g\&. Windows 2000 SP3 or higher)\&. LDAP sign and seal can be controlled with the registry key "\FCHKLM\eSystem\eCurrentControlSet\eServices\e\F[]
    2041 \FCNTDS\eParameters\eLDAPServerIntegrity\F[]" on the Windows server side\&.
     1781This option is needed in the case of Domain Controllers enforcing the usage of signed LDAP connections (e\&.g\&. Windows 2000 SP3 or higher)\&. LDAP sign and seal can be controlled with the registry key "HKLM\eSystem\eCurrentControlSet\eServices\e
     1782NTDS\eParameters\eLDAPServerIntegrity" on the Windows server side\&.
    20421783.sp
    20431784Depending on the used KRB5 library (MIT and older Heimdal versions) it is possible that the message "integrity only" is not supported\&. In this case,
    … …  
    20541795.sp
    20551796Default:
    2056 \fI\fIclient ldap sasl wrapping\fR\fR\fI = \fR\fI\FCplain\F[]\fR\fI \fR
     1797\fI\fIclient ldap sasl wrapping\fR\fR\fI = \fR\fIplain\fR\fI \fR
    20571798.RE
    20581799
    … …  
    20681809.sp
    20691810Similarly, if enabled, NTLMv1,
    2070 \FCclient lanman auth\F[]
     1811client lanman auth
    20711812and
    2072 \FCclient plaintext auth\F[]
     1813client plaintext auth
    20731814authentication will be disabled\&. This also disables share\-level authentication\&.
    20741815.sp
    20751816If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of
    2076 \FCclient lanman auth\F[]\&.
     1817client lanman auth\&.
    20771818.sp
    20781819Note that some sites (particularly those following \'best practice\' security polices) only allow NTLMv2 responses, and not the weaker LM or NTLM\&.
    20791820.sp
    20801821Default:
    2081 \fI\fIclient ntlmv2 auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1822\fI\fIclient ntlmv2 auth\fR\fR\fI = \fR\fIno\fR\fI \fR
    20821823.RE
    20831824
    … …  
    20891830.sp
    20901831Default:
    2091 \fI\fIclient plaintext auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1832\fI\fIclient plaintext auth\fR\fR\fI = \fR\fIno\fR\fI \fR
    20921833.RE
    20931834
    … …  
    21051846.sp
    21061847Default:
    2107 \fI\fIclient schannel\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
    2108 .sp
    2109 Example:
    2110 \fI\fIclient schannel\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1848\fI\fIclient schannel\fR\fR\fI = \fR\fIauto\fR\fI \fR
     1849.sp
     1850Example:
     1851\fI\fIclient schannel\fR\fR\fI = \fR\fIyes\fR\fI \fR
    21111852.RE
    21121853
    … …  
    21241865.sp
    21251866Default:
    2126 \fI\fIclient signing\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
     1867\fI\fIclient signing\fR\fR\fI = \fR\fIauto\fR\fI \fR
    21271868.RE
    21281869
    … …  
    21341875.sp
    21351876Default:
    2136 \fI\fIclient use spnego\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     1877\fI\fIclient use spnego\fR\fR\fI = \fR\fIyes\fR\fI \fR
    21371878.RE
    21381879
    … …  
    21441885.sp
    21451886Default:
    2146 \fI\fIcluster addresses\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2147 .sp
    2148 Example:
    2149 \fI\fIcluster addresses\fR\fR\fI = \fR\fI\FC10\&.0\&.0\&.1 10\&.0\&.0\&.2 10\&.0\&.0\&.3\F[]\fR\fI \fR
     1887\fI\fIcluster addresses\fR\fR\fI = \fR\fI\fR\fI \fR
     1888.sp
     1889Example:
     1890\fI\fIcluster addresses\fR\fR\fI = \fR\fI10\&.0\&.0\&.1 10\&.0\&.0\&.2 10\&.0\&.0\&.3\fR\fI \fR
    21501891.RE
    21511892
    … …  
    21571898.sp
    21581899Set this parameter to
    2159 \FCyes\F[]
     1900yes
    21601901only if you have a cluster setup with ctdb running\&.
    21611902.sp
    21621903Default:
    2163 \fI\fIclustering\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     1904\fI\fIclustering\fR\fR\fI = \fR\fIno\fR\fI \fR
    21641905.RE
    21651906
    … …  
    21691910.RS 4
    21701911This is a text field that is seen next to a share when a client does a queries the server, either via the network neighborhood or via
    2171 \FCnet view\F[]
     1912net view
    21721913to list what shares are available\&.
    21731914.sp
    … …  
    21771918.sp
    21781919Default:
    2179 \fI\fIcomment\fR\fR\fI = \fR\fI\FC # No comment\F[]\fR\fI \fR
    2180 .sp
    2181 Example:
    2182 \fI\fIcomment\fR\fR\fI = \fR\fI\FCFred\'s Files\F[]\fR\fI \fR
     1920\fI\fIcomment\fR\fR\fI = \fR\fI # No comment\fR\fI \fR
     1921.sp
     1922Example:
     1923\fI\fIcomment\fR\fR\fI = \fR\fIFred\'s Files\fR\fI \fR
    21831924.RE
    21841925
    … …  
    22011942.sp
    22021943Default:
    2203 \fI\fIconfig backend\fR\fR\fI = \fR\fI\FCfile\F[]\fR\fI \fR
    2204 .sp
    2205 Example:
    2206 \fI\fIconfig backend\fR\fR\fI = \fR\fI\FCregistry\F[]\fR\fI \fR
     1944\fI\fIconfig backend\fR\fR\fI = \fR\fIfile\fR\fI \fR
     1945.sp
     1946Example:
     1947\fI\fIconfig backend\fR\fR\fI = \fR\fIregistry\fR\fI \fR
    22071948.RE
    22081949
    … …  
    22121953.RS 4
    22131954This allows you to override the config file to use, instead of the default (usually
    2214 \FCsmb\&.conf\F[])\&. There is a chicken and egg problem here as this option is set in the config file!
     1955smb\&.conf)\&. There is a chicken and egg problem here as this option is set in the config file!
    22151956.sp
    22161957For this reason, if the name of the config file has changed when the parameters are loaded then it will reload them from the new config file\&.
    … …  
    22231964.sp
    22241965Example:
    2225 \fI\fIconfig file\fR\fR\fI = \fR\fI\FC/usr/local/samba/lib/smb\&.conf\&.%m\F[]\fR\fI \fR
     1966\fI\fIconfig file\fR\fR\fI = \fR\fI/usr/local/samba/lib/smb\&.conf\&.%m\fR\fI \fR
    22261967.RE
    22271968
    … …  
    22351976.sp
    22361977Default:
    2237 \fI\fIcopy\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2238 .sp
    2239 Example:
    2240 \fI\fIcopy\fR\fR\fI = \fR\fI\FCotherservice\F[]\fR\fI \fR
     1978\fI\fIcopy\fR\fR\fI = \fR\fI\fR\fI \fR
     1979.sp
     1980Example:
     1981\fI\fIcopy\fR\fR\fI = \fR\fIotherservice\fR\fI \fR
    22411982.RE
    22421983
    … …  
    22581999.sp
    22592000The default value of this parameter removes the
    2260 \FCgroup\F[]
     2001group
    22612002and
    2262 \FCother\F[]
     2003other
    22632004write and execute bits from the UNIX modes\&.
    22642005.sp
    … …  
    22752016.sp
    22762017Default:
    2277 \fI\fIcreate mask\fR\fR\fI = \fR\fI\FC0744\F[]\fR\fI \fR
    2278 .sp
    2279 Example:
    2280 \fI\fIcreate mask\fR\fR\fI = \fR\fI\FC0775\F[]\fR\fI \fR
     2018\fI\fIcreate mask\fR\fR\fI = \fR\fI0744\fR\fI \fR
     2019.sp
     2020Example:
     2021\fI\fIcreate mask\fR\fR\fI = \fR\fI0775\fR\fI \fR
    22812022.RE
    22822023
    … …  
    22942035.sp
    22952036Default:
    2296 \fI\fIcsc policy\fR\fR\fI = \fR\fI\FCmanual\F[]\fR\fI \fR
    2297 .sp
    2298 Example:
    2299 \fI\fIcsc policy\fR\fR\fI = \fR\fI\FCprograms\F[]\fR\fI \fR
     2037\fI\fIcsc policy\fR\fR\fI = \fR\fImanual\fR\fI \fR
     2038.sp
     2039Example:
     2040\fI\fIcsc policy\fR\fR\fI = \fR\fIprograms\fR\fI \fR
    23002041.RE
    23012042
    … …  
    23052046.RS 4
    23062047If you set
    2307 \FCclustering=yes\F[], you need to tell Samba where ctdbd listens on its unix domain socket\&. The default path as of ctdb 1\&.0 is /tmp/ctdb\&.socket which you have to explicitly set for Samba in smb\&.conf\&.
    2308 .sp
    2309 Default:
    2310 \fI\fIctdbd socket\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2311 .sp
    2312 Example:
    2313 \fI\fIctdbd socket\fR\fR\fI = \fR\fI\FC/tmp/ctdb\&.socket\F[]\fR\fI \fR
     2048clustering=yes, you need to tell Samba where ctdbd listens on its unix domain socket\&. The default path as of ctdb 1\&.0 is /tmp/ctdb\&.socket which you have to explicitly set for Samba in smb\&.conf\&.
     2049.sp
     2050Default:
     2051\fI\fIctdbd socket\fR\fR\fI = \fR\fI\fR\fI \fR
     2052.sp
     2053Example:
     2054\fI\fIctdbd socket\fR\fR\fI = \fR\fI/tmp/ctdb\&.socket\fR\fI \fR
    23142055.RE
    23152056
    … …  
    23262067.sp
    23272068Default:
    2328 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR
    2329 .sp
    2330 Example:
    2331 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR
     2069\fI\fIcups connection timeout\fR\fR\fI = \fR\fI30\fR\fI \fR
     2070.sp
     2071Example:
     2072\fI\fIcups connection timeout\fR\fR\fI = \fR\fI60\fR\fI \fR
    23322073.RE
    23332074
    … …  
    23462087\fBraw\fR
    23472088if your CUPS server
    2348 \FCerror_log\F[]
     2089error_log
    23492090file contains messages such as "Unsupported format \'application/octet\-stream\'" when printing from a Windows client through Samba\&. It is no longer necessary to enable system wide raw printing in
    2350 \FC/etc/cups/mime\&.{convs,types}\F[]\&.
    2351 .sp
    2352 Default:
    2353 \fI\fIcups options\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR
    2354 .sp
    2355 Example:
    2356 \fI\fIcups options\fR\fR\fI = \fR\fI\FC"raw media=a4"\F[]\fR\fI \fR
     2091/etc/cups/mime\&.{convs,types}\&.
     2092.sp
     2093Default:
     2094\fI\fIcups options\fR\fR\fI = \fR\fI""\fR\fI \fR
     2095.sp
     2096Example:
     2097\fI\fIcups options\fR\fR\fI = \fR\fI"raw media=a4"\fR\fI \fR
    23572098.RE
    23582099
    … …  
    23672108.sp
    23682109If set, this option overrides the ServerName option in the CUPS
    2369 \FCclient\&.conf\F[]\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.
     2110client\&.conf\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.
    23702111.sp
    23712112Optionally, a port can be specified by separating the server name and port number with a colon\&. If no port was specified, the default port for IPP (631) will be used\&.
    23722113.sp
    23732114Default:
    2374 \fI\fIcups server\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR
    2375 .sp
    2376 Example:
    2377 \fI\fIcups server\fR\fR\fI = \fR\fI\FCmycupsserver\F[]\fR\fI \fR
    2378 .sp
    2379 Example:
    2380 \fI\fIcups server\fR\fR\fI = \fR\fI\FCmycupsserver:1631\F[]\fR\fI \fR
     2115\fI\fIcups server\fR\fR\fI = \fR\fI""\fR\fI \fR
     2116.sp
     2117Example:
     2118\fI\fIcups server\fR\fR\fI = \fR\fImycupsserver\fR\fI \fR
     2119.sp
     2120Example:
     2121\fI\fIcups server\fR\fR\fI = \fR\fImycupsserver:1631\fR\fI \fR
    23812122.RE
    23822123
    … …  
    23962137.sp
    23972138Default:
    2398 \fI\fIdeadtime\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    2399 .sp
    2400 Example:
    2401 \fI\fIdeadtime\fR\fR\fI = \fR\fI\FC15\F[]\fR\fI \fR
     2139\fI\fIdeadtime\fR\fR\fI = \fR\fI0\fR\fI \fR
     2140.sp
     2141Example:
     2142\fI\fIdeadtime\fR\fR\fI = \fR\fI15\fR\fI \fR
    24022143.RE
    24032144
    … …  
    24122153.sp
    24132154Default:
    2414 \fI\fIdebug class\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2155\fI\fIdebug class\fR\fR\fI = \fR\fIno\fR\fI \fR
    24152156.RE
    24162157
    … …  
    24262167.sp
    24272168Default:
    2428 \fI\fIdebug hires timestamp\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2169\fI\fIdebug hires timestamp\fR\fR\fI = \fR\fIno\fR\fI \fR
    24292170.RE
    24302171
    … …  
    24412182.sp
    24422183Default:
    2443 \fI\fIdebug pid\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2184\fI\fIdebug pid\fR\fR\fI = \fR\fIno\fR\fI \fR
    24442185.RE
    24452186
    … …  
    24572198.sp
    24582199Default:
    2459 \fI\fIdebug prefix timestamp\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2200\fI\fIdebug prefix timestamp\fR\fR\fI = \fR\fIno\fR\fI \fR
    24602201.RE
    24612202
    … …  
    24772218.sp
    24782219Default:
    2479 \fI\fIdebug timestamp\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2220\fI\fIdebug timestamp\fR\fR\fI = \fR\fIyes\fR\fI \fR
    24802221.RE
    24812222
    … …  
    24912232.sp
    24922233Default:
    2493 \fI\fIdebug uid\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2234\fI\fIdebug uid\fR\fR\fI = \fR\fIno\fR\fI \fR
    24942235.RE
    24952236
    … …  
    25042245.sp
    25052246Default:
    2506 \fI\fIdefault case\fR\fR\fI = \fR\fI\FClower\F[]\fR\fI \fR
     2247\fI\fIdefault case\fR\fR\fI = \fR\fIlower\fR\fI \fR
    25072248.RE
    25082249
    … …  
    25182259.sp
    25192260This parameter should be used with care and tested with the printer driver in question\&. It is better to leave the device mode to NULL and let the Windows client set the correct values\&. Because drivers do not do this all the time, setting
    2520 \FCdefault devmode = yes\F[]
     2261default devmode = yes
    25212262will instruct smbd to generate a default one\&.
    25222263.sp
    … …  
    25252266.sp
    25262267Default:
    2527 \fI\fIdefault devmode\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2268\fI\fIdefault devmode\fR\fR\fI = \fR\fIyes\fR\fI \fR
    25282269.RE
    25292270
    … …  
    25582299.sp
    25592300Default:
    2560 \fI\fIdefault service\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2561 .sp
    2562 Example:
    2563 \fI\fIdefault service\fR\fR\fI = \fR\fI\FCpub\F[]\fR\fI \fR
     2301\fI\fIdefault service\fR\fR\fI = \fR\fI\fR\fI \fR
     2302.sp
     2303Example:
     2304\fI\fIdefault service\fR\fR\fI = \fR\fIpub\fR\fI \fR
    25642305.RE
    25652306
    … …  
    25752316.sp
    25762317Default:
    2577 \fI\fIdefer sharing violations\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR
     2318\fI\fIdefer sharing violations\fR\fR\fI = \fR\fITrue\fR\fI \fR
    25782319.RE
    25792320
    … …  
    25902331.sp
    25912332Default:
    2592 \fI\fIdelete group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     2333\fI\fIdelete group script\fR\fR\fI = \fR\fI\fR\fI \fR
    25932334.RE
    25942335
    … …  
    26022343\m[blue]\fBdeleteprinter command\fR\m[]
    26032344defines a script to be run which will perform the necessary operations for removing the printer from the print system and from
    2604 \FCsmb\&.conf\F[]\&.
     2345smb\&.conf\&.
    26052346.sp
    26062347The
    … …  
    26122353\m[blue]\fBdeleteprinter command\fR\m[]
    26132354has been executed,
    2614 \FCsmbd\F[]
     2355smbd
    26152356will reparse the
    2616 \FC smb\&.conf\F[]
     2357smb\&.conf
    26172358to check that the associated printer no longer exists\&. If the sharename is still valid, then
    2618 \FCsmbd \F[]
     2359smbd
    26192360will return an ACCESS_DENIED error to the client\&.
    26202361.sp
    26212362Default:
    2622 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2623 .sp
    2624 Example:
    2625 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\FC/usr/bin/removeprinter\F[]\fR\fI \fR
     2363\fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\fR\fI \fR
     2364.sp
     2365Example:
     2366\fI\fIdeleteprinter command\fR\fR\fI = \fR\fI/usr/bin/removeprinter\fR\fI \fR
    26262367.RE
    26272368
    … …  
    26352376.sp
    26362377Default:
    2637 \fI\fIdelete readonly\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2378\fI\fIdelete readonly\fR\fR\fI = \fR\fIno\fR\fI \fR
    26382379.RE
    26392380
    … …  
    26452386\fIdelete share command\fR
    26462387is used to define an external program or script which will remove an existing service definition from
    2647 \FCsmb\&.conf\F[]\&.
     2388smb\&.conf\&.
    26482389.sp
    26492390In order to successfully execute the
    26502391\fIdelete share command\fR,
    2651 \FCsmbd\F[]
     2392smbd
    26522393requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the
    2653 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the
     2394SeDiskOperatorPrivilege\&. Scripts defined in the
    26542395\fIdelete share command\fR
    26552396parameter are executed as root\&.
    26562397.sp
    26572398When executed,
    2658 \FCsmbd\F[]
     2399smbd
    26592400will automatically invoke the
    26602401\fIdelete share command\fR
    … …  
    26712412\fIconfigFile\fR
    26722413\- the location of the global
    2673 \FCsmb\&.conf\F[]
     2414smb\&.conf
    26742415file\&.
    26752416.RE
    … …  
    26912432.sp
    26922433Default:
    2693 \fI\fIdelete share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2694 .sp
    2695 Example:
    2696 \fI\fIdelete share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/delshare\F[]\fR\fI \fR
     2434\fI\fIdelete share command\fR\fR\fI = \fR\fI\fR\fI \fR
     2435.sp
     2436Example:
     2437\fI\fIdelete share command\fR\fR\fI = \fR\fI/usr/local/bin/delshare\fR\fI \fR
    26972438.RE
    26982439
    … …  
    27102451.sp
    27112452Default:
    2712 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2713 .sp
    2714 Example:
    2715 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI\FC/usr/sbin/deluser %u %g\F[]\fR\fI \fR
     2453\fI\fIdelete user from group script\fR\fR\fI = \fR\fI\fR\fI \fR
     2454.sp
     2455Example:
     2456\fI\fIdelete user from group script\fR\fR\fI = \fR\fI/usr/sbin/deluser %u %g\fR\fI \fR
    27162457.RE
    27172458
    … …  
    27252466.sp
    27262467This script is called when a remote client removes a user from the server, normally using \'User Manager for Domains\' or
    2727 \FCrpcclient\F[]\&.
     2468rpcclient\&.
    27282469.sp
    27292470This script should delete the given UNIX username\&.
    27302471.sp
    27312472Default:
    2732 \fI\fIdelete user script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    2733 .sp
    2734 Example:
    2735 \fI\fIdelete user script\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/del_user %u\F[]\fR\fI \fR
     2473\fI\fIdelete user script\fR\fR\fI = \fR\fI\fR\fI \fR
     2474.sp
     2475Example:
     2476\fI\fIdelete user script\fR\fR\fI = \fR\fI/usr/local/samba/bin/del_user %u\fR\fI \fR
    27362477.RE
    27372478
    … …  
    27482489If this option is set to
    27492490\fByes\fR, then Samba will attempt to recursively delete any files and directories within the vetoed directory\&. This can be useful for integration with file serving systems such as NetAtalk which create meta\-files within directories you might normally veto DOS/Windows users from seeing (e\&.g\&.
    2750 \FC\&.AppleDouble\F[])
     2491\&.AppleDouble)
    27512492.sp
    27522493Setting
    … …  
    27552496.sp
    27562497Default:
    2757 \fI\fIdelete veto files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2498\fI\fIdelete veto files\fR\fR\fI = \fR\fIno\fR\fI \fR
    27582499.RE
    27592500
    … …  
    27752516.sp
    27762517Example:
    2777 \fI\fIdfree cache time\fR\fR\fI = \fR\fI\FCdfree cache time = 60\F[]\fR\fI \fR
     2518\fI\fIdfree cache time\fR\fR\fI = \fR\fIdfree cache time = 60\fR\fI \fR
    27782519.RE
    27792520
    … …  
    27932534.sp
    27942535The external program will be passed a single parameter indicating a directory in the filesystem being queried\&. This will typically consist of the string
    2795 \FC\&./\F[]\&. The script should return two integers in ASCII\&. The first should be the total disk space in blocks, and the second should be the number of available blocks\&. An optional third return value can give the block size in bytes\&. The default blocksize is 1024 bytes\&.
     2536\&./\&. The script should return two integers in ASCII\&. The first should be the total disk space in blocks, and the second should be the number of available blocks\&. An optional third return value can give the block size in bytes\&. The default blocksize is 1024 bytes\&.
    27962537.sp
    27972538Note: Your script should
    … …  
    28042545.RS 4
    28052546.\}
    2806 .fam C
    2807 .ps -1
    28082547.nf
    2809 .BB lightgray
    28102548 
    28112549#!/bin/sh
    28122550df $1 | tail \-1 | awk \'{print $(NF\-4),$(NF\-2)}\'
    2813 .EB lightgray
    28142551.fi
    2815 .fam
    2816 .ps +1
    28172552.if n \{\
    28182553.RE
    … …  
    28242559.RS 4
    28252560.\}
    2826 .fam C
    2827 .ps -1
    28282561.nf
    2829 .BB lightgray
    28302562 
    28312563#!/bin/sh
    28322564/usr/bin/df \-k $1 | tail \-1 | awk \'{print $3" "$5}\'
    2833 .EB lightgray
    28342565.fi
    2835 .fam
    2836 .ps +1
    28372566.if n \{\
    28382567.RE
    … …  
    28462575.sp
    28472576Example:
    2848 \fI\fIdfree command\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/dfree\F[]\fR\fI \fR
     2577\fI\fIdfree command\fR\fR\fI = \fR\fI/usr/local/samba/bin/dfree\fR\fI \fR
    28492578.RE
    28502579
    … …  
    28772606.sp
    28782607Default:
    2879 \fI\fIdirectory mask\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR
    2880 .sp
    2881 Example:
    2882 \fI\fIdirectory mask\fR\fR\fI = \fR\fI\FC0775\F[]\fR\fI \fR
     2608\fI\fIdirectory mask\fR\fR\fI = \fR\fI0755\fR\fI \fR
     2609.sp
     2610Example:
     2611\fI\fIdirectory mask\fR\fR\fI = \fR\fI0775\fR\fI \fR
    28832612.RE
    28842613
    … …  
    29012630.sp
    29022631Default:
    2903 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI\FC0777\F[]\fR\fI \fR
    2904 .sp
    2905 Example:
    2906 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI\FC0700\F[]\fR\fI \fR
     2632\fI\fIdirectory security mask\fR\fR\fI = \fR\fI0777\fR\fI \fR
     2633.sp
     2634Example:
     2635\fI\fIdirectory security mask\fR\fR\fI = \fR\fI0700\fR\fI \fR
    29072636.RE
    29082637
    … …  
    29162645.\}
    29172646.RS 4
    2918 .BM yellow
    29192647.it 1 an-trap
    29202648.nr an-no-space-flag 1
    … …  
    29272655Clients that only support netbios won\'t be able to see your samba server when netbios support is disabled\&.
    29282656.sp .5v
    2929 .EM yellow
    2930 .RE
    2931 Default:
    2932 \fI\fIdisable netbios\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2657.RE
     2658Default:
     2659\fI\fIdisable netbios\fR\fR\fI = \fR\fIno\fR\fI \fR
    29332660.RE
    29342661
    … …  
    29412668.sp
    29422669Default:
    2943 \fI\fIdisable spoolss\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2670\fI\fIdisable spoolss\fR\fR\fI = \fR\fIno\fR\fI \fR
    29442671.RE
    29452672
    … …  
    29522679.sp
    29532680Default:
    2954 \fI\fIdisplay charset\fR\fR\fI = \fR\fI\FC"LOCALE" or "ASCII" (depending on the system)\F[]\fR\fI \fR
    2955 .sp
    2956 Example:
    2957 \fI\fIdisplay charset\fR\fR\fI = \fR\fI\FCUTF8\F[]\fR\fI \fR
     2681\fI\fIdisplay charset\fR\fR\fI = \fR\fI"LOCALE" or "ASCII" (depending on the system)\fR\fI \fR
     2682.sp
     2683Example:
     2684\fI\fIdisplay charset\fR\fR\fI = \fR\fIUTF8\fR\fI \fR
    29582685.RE
    29592686
    … …  
    29692696.sp
    29702697Default:
    2971 \fI\fIdmapi support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2698\fI\fIdmapi support\fR\fR\fI = \fR\fIno\fR\fI \fR
    29722699.RE
    29732700
    … …  
    29822709Note that the maximum length for a NetBIOS name is 15 characters, so the DNS name (or DNS alias) can likewise only be 15 characters, maximum\&.
    29832710.sp
    2984 \FCnmbd\F[]
     2711nmbd
    29852712spawns a second copy of itself to do the DNS name lookup requests, as doing a name lookup is a blocking action\&.
    29862713.sp
    29872714Default:
    2988 \fI\fIdns proxy\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2715\fI\fIdns proxy\fR\fR\fI = \fR\fIyes\fR\fI \fR
    29892716.RE
    29902717
    … …  
    29992726.sp
    30002727Default:
    3001 \fI\fIdomain logons\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2728\fI\fIdomain logons\fR\fR\fI = \fR\fIno\fR\fI \fR
    30022729.RE
    30032730
    … …  
    30092736\fBsmbd\fR(8)
    30102737to enable WAN\-wide browse list collation\&. Setting this option causes
    3011 \FCnmbd\F[]
     2738nmbd
    30122739to claim a special domain specific NetBIOS name that identifies it as a domain master browser for its given
    30132740\m[blue]\fBworkgroup\fR\m[]\&. Local master browsers in the same
    30142741\m[blue]\fBworkgroup\fR\m[]
    30152742on broadcast\-isolated subnets will give this
    3016 \FCnmbd\F[]
     2743nmbd
    30172744their local browse lists, and then ask
    30182745\fBsmbd\fR(8)
    … …  
    30242751\m[blue]\fBworkgroup\fR\m[]
    30252752by default (i\&.e\&. there is no way to prevent a Windows NT PDC from attempting to do this)\&. This means that if this parameter is set and
    3026 \FCnmbd\F[]
     2753nmbd
    30272754claims the special name for a
    30282755\m[blue]\fBworkgroup\fR\m[]
    … …  
    30442771.sp
    30452772Default:
    3046 \fI\fIdomain master\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
     2773\fI\fIdomain master\fR\fR\fI = \fR\fIauto\fR\fI \fR
    30472774.RE
    30482775
    … …  
    30522779.RS 4
    30532780There are certain directories on some systems (e\&.g\&., the
    3054 \FC/proc\F[]
     2781/proc
    30552782tree under Linux) that are either not of interest to clients or are infinitely deep (recursive)\&. This parameter allows you to specify a comma\-delimited list of directories that the server should always show as empty\&.
    30562783.sp
    30572784Note that Samba can be very fussy about the exact format of the "dont descend" entries\&. For example you may need
    3058 \FC \&./proc\F[]
     2785\&./proc
    30592786instead of just
    3060 \FC/proc\F[]\&. Experimentation is the best policy :\-)
    3061 .sp
    3062 Default:
    3063 \fI\fIdont descend\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3064 .sp
    3065 Example:
    3066 \fI\fIdont descend\fR\fR\fI = \fR\fI\FC/proc,/dev\F[]\fR\fI \fR
     2787/proc\&. Experimentation is the best policy :\-)
     2788.sp
     2789Default:
     2790\fI\fIdont descend\fR\fR\fI = \fR\fI\fR\fI \fR
     2791.sp
     2792Example:
     2793\fI\fIdont descend\fR\fR\fI = \fR\fI/proc,/dev\fR\fI \fR
    30672794.RE
    30682795
    … …  
    30872814.sp
    30882815Default:
    3089 \fI\fIdos filemode\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2816\fI\fIdos filemode\fR\fR\fI = \fR\fIno\fR\fI \fR
    30902817.RE
    30912818
    … …  
    31002827.sp
    31012828Default:
    3102 \fI\fIdos filetime resolution\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2829\fI\fIdos filetime resolution\fR\fR\fI = \fR\fIno\fR\fI \fR
    31032830.RE
    31042831
    … …  
    31082835.RS 4
    31092836Under DOS and Windows, if a user can write to a file they can change the timestamp on it\&. Under POSIX semantics, only the owner of the file or root may change the timestamp\&. By default, Samba runs with POSIX semantics and refuses to change the timestamp on a file if the user
    3110 \FCsmbd\F[]
     2837smbd
    31112838is acting on behalf of is not the file owner\&. Setting this option to
    31122839\fB yes\fR
    … …  
    31162843.sp
    31172844Default:
    3118 \fI\fIdos filetimes\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2845\fI\fIdos filetimes\fR\fR\fI = \fR\fIyes\fR\fI \fR
    31192846.RE
    31202847
    … …  
    31282855.sp
    31292856Default:
    3130 \fI\fIea support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2857\fI\fIea support\fR\fR\fI = \fR\fIno\fR\fI \fR
    31312858.RE
    31322859
    … …  
    31382865.sp
    31392866Default:
    3140 \fI\fIenable asu support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2867\fI\fIenable asu support\fR\fR\fI = \fR\fIno\fR\fI \fR
     2868.RE
     2869
     2870enable core files (G)
     2871.\" enable core files
     2872.PP
     2873.RS 4
     2874This parameter specifies whether core dumps should be written on internal exits\&. Normally set to
     2875\fByes\fR\&. You should never need to change this\&.
     2876.sp
     2877Default:
     2878\fI\fIenable core files\fR\fR\fI = \fR\fIyes\fR\fI \fR
     2879.sp
     2880Example:
     2881\fI\fIenable core files\fR\fR\fI = \fR\fIno\fR\fI \fR
    31412882.RE
    31422883
    … …  
    31462887.RS 4
    31472888This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
    3148 \FCnet rpc rights\F[]
     2889net rpc rights
    31492890or one of the Windows user and group manager tools\&. This parameter is enabled by default\&. It can be disabled to prevent members of the Domain Admins group from being able to assign privileges to users or groups which can then result in certain smbd operations running as root that would normally run under the context of the connected user\&.
    31502891.sp
    … …  
    31542895.sp
    31552896Default:
    3156 \fI\fIenable privileges\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2897\fI\fIenable privileges\fR\fR\fI = \fR\fIyes\fR\fI \fR
    31572898.RE
    31582899
    … …  
    31762917\m[blue]\fBsecurity = [server|domain|ads]\fR\m[]
    31772918parameter which causes
    3178 \FCsmbd\F[]
     2919smbd
    31792920to authenticate against another server\&.
    31802921.sp
    31812922Default:
    3182 \fI\fIencrypt passwords\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2923\fI\fIencrypt passwords\fR\fR\fI = \fR\fIyes\fR\fI \fR
    31832924.RE
    31842925
    … …  
    31962937.sp
    31972938Default:
    3198 \fI\fIenhanced browsing\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     2939\fI\fIenhanced browsing\fR\fR\fI = \fR\fIyes\fR\fI \fR
    31992940.RE
    32002941
    … …  
    32032944.PP
    32042945.RS 4
    3205 The concept of a "port" is fairly foreign to UNIX hosts\&. Under Windows NT/2000 print servers, a port is associated with a port monitor and generally takes the form of a local port (i\&.e\&. LPT1:, COM1:, FILE:) or a remote port (i\&.e\&. LPD Port Monitor, etc\&.\&.\&.)\&. By default, Samba has only one port defined\-\-\fB"Samba Printer Port"\fR\&. Under Windows NT/2000, all printers must have a valid port name\&. If you wish to have a list of ports displayed (\FCsmbd \F[]
     2946The concept of a "port" is fairly foreign to UNIX hosts\&. Under Windows NT/2000 print servers, a port is associated with a port monitor and generally takes the form of a local port (i\&.e\&. LPT1:, COM1:, FILE:) or a remote port (i\&.e\&. LPD Port Monitor, etc\&.\&.\&.)\&. By default, Samba has only one port defined\-\-\fB"Samba Printer Port"\fR\&. Under Windows NT/2000, all printers must have a valid port name\&. If you wish to have a list of ports displayed (smbd
    32062947does not use a port name for anything) other than the default
    32072948\fB"Samba Printer Port"\fR, you can define
    … …  
    32102951.sp
    32112952Default:
    3212 \fI\fIenumports command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3213 .sp
    3214 Example:
    3215 \fI\fIenumports command\fR\fR\fI = \fR\fI\FC/usr/bin/listports\F[]\fR\fI \fR
     2953\fI\fIenumports command\fR\fR\fI = \fR\fI\fR\fI \fR
     2954.sp
     2955Example:
     2956\fI\fIenumports command\fR\fR\fI = \fR\fI/usr/bin/listports\fR\fI \fR
    32162957.RE
    32172958
    … …  
    32212962.RS 4
    32222963This option defines a list of log names that Samba will report to the Microsoft EventViewer utility\&. The listed eventlogs will be associated with tdb file on disk in the
    3223 \FC$(lockdir)/eventlog\F[]\&.
     2964$(lockdir)/eventlog\&.
    32242965.sp
    32252966The administrator must use an external process to parse the normal Unix logs such as
    3226 \FC/var/log/messages\F[]
     2967/var/log/messages
    32272968and write then entries to the eventlog tdb files\&. Refer to the eventlogadm(8) utility for how to write eventlog entries\&.
    32282969.sp
    32292970Default:
    3230 \fI\fIeventlog list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3231 .sp
    3232 Example:
    3233 \fI\fIeventlog list\fR\fR\fI = \fR\fI\FCSecurity Application Syslog Apache\F[]\fR\fI \fR
     2971\fI\fIeventlog list\fR\fR\fI = \fR\fI\fR\fI \fR
     2972.sp
     2973Example:
     2974\fI\fIeventlog list\fR\fR\fI = \fR\fISecurity Application Syslog Apache\fR\fI \fR
    32342975.RE
    32352976
    … …  
    32452986.sp
    32462987Default:
    3247 \fI\fIfake directory create times\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     2988\fI\fIfake directory create times\fR\fR\fI = \fR\fIno\fR\fI \fR
    32482989.RE
    32492990
    … …  
    32552996.sp
    32562997When you set
    3257 \FCfake oplocks = yes\F[],
     2998fake oplocks = yes,
    32582999\fBsmbd\fR(8)
    32593000will always grant oplock requests no matter how many clients are using the file\&.
    … …  
    32663007.sp
    32673008Default:
    3268 \fI\fIfake oplocks\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3009\fI\fIfake oplocks\fR\fR\fI = \fR\fIno\fR\fI \fR
    32693010.RE
    32703011
    … …  
    32783019\fBno\fR
    32793020prevents any file or directory that is a symbolic link from being followed (the user will get an error)\&. This option is very useful to stop users from adding a symbolic link to
    3280 \FC/etc/passwd\F[]
     3021/etc/passwd
    32813022in their home directory for instance\&. However it will slow filename lookups down slightly\&.
    32823023.sp
    32833024This option is enabled (i\&.e\&.
    3284 \FCsmbd\F[]
     3025smbd
    32853026will follow symbolic links) by default\&.
    32863027.sp
    32873028Default:
    3288 \fI\fIfollow symlinks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     3029\fI\fIfollow symlinks\fR\fR\fI = \fR\fIyes\fR\fI \fR
    32893030.RE
    32903031
    … …  
    33023043.sp
    33033044Default:
    3304 \fI\fIforce create mode\fR\fR\fI = \fR\fI\FC000\F[]\fR\fI \fR
    3305 .sp
    3306 Example:
    3307 \fI\fIforce create mode\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR
     3045\fI\fIforce create mode\fR\fR\fI = \fR\fI000\fR\fI \fR
     3046.sp
     3047Example:
     3048\fI\fIforce create mode\fR\fR\fI = \fR\fI0755\fR\fI \fR
    33083049.RE
    33093050
    … …  
    33213062.sp
    33223063Default:
    3323 \fI\fIforce directory mode\fR\fR\fI = \fR\fI\FC000\F[]\fR\fI \fR
    3324 .sp
    3325 Example:
    3326 \fI\fIforce directory mode\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR
     3064\fI\fIforce directory mode\fR\fR\fI = \fR\fI000\fR\fI \fR
     3065.sp
     3066Example:
     3067\fI\fIforce directory mode\fR\fR\fI = \fR\fI0755\fR\fI \fR
    33273068.RE
    33283069
    … …  
    33433084.\}
    33443085.RS 4
    3345 .BM yellow
    33463086.it 1 an-trap
    33473087.nr an-no-space-flag 1
    … …  
    33543094Users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems\&. Administrators of most normal systems will probably want to leave it set as 0000\&.
    33553095.sp .5v
    3356 .EM yellow
    3357 .RE
    3358 Default:
    3359 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    3360 .sp
    3361 Example:
    3362 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI\FC700\F[]\fR\fI \fR
     3096.RE
     3097Default:
     3098\fI\fIforce directory security mode\fR\fR\fI = \fR\fI0\fR\fI \fR
     3099.sp
     3100Example:
     3101\fI\fIforce directory security mode\fR\fR\fI = \fR\fI700\fR\fI \fR
    33633102.RE
    33643103
    … …  
    33783117.sp
    33793118In Samba 2\&.0\&.5 and above this parameter has extended functionality in the following way\&. If the group name listed here has a \'+\' character prepended to it then the current user accessing the share only has the primary group default assigned to this group if they are already assigned as a member of that group\&. This allows an administrator to decide that only users who are already in a particular group will create files with group ownership set to that group\&. This gives a finer granularity of ownership assignment\&. For example, the setting
    3380 \FCforce group = +sys\F[]
     3119force group = +sys
    33813120means that only users who are already in group sys will have their default primary group assigned to sys when accessing this Samba share\&. All other users will retain their ordinary primary group\&.
    33823121.sp
    … …  
    33893128.sp
    33903129Default:
    3391 \fI\fIforce group\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3392 .sp
    3393 Example:
    3394 \fI\fIforce group\fR\fR\fI = \fR\fI\FCagroup\F[]\fR\fI \fR
     3130\fI\fIforce group\fR\fR\fI = \fR\fI\fR\fI \fR
     3131.sp
     3132Example:
     3133\fI\fIforce group\fR\fR\fI = \fR\fIagroup\fR\fI \fR
    33953134.RE
    33963135
    … …  
    34003139.RS 4
    34013140When printing from Windows NT (or later), each printer in
    3402 \FCsmb\&.conf\F[]
     3141smb\&.conf
    34033142has two associated names which can be used by the client\&. The first is the sharename (or shortname) defined in smb\&.conf\&. This is the only printername available for use by Windows 9x clients\&. The second name associated with a printer can be seen when browsing to the "Printers" (or "Printers and Faxes") folder on the Samba server\&. This is referred to simply as the printername (not to be confused with the
    34043143\fIprinter name\fR
    … …  
    34133152.sp
    34143153Default:
    3415 \fI\fIforce printername\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3154\fI\fIforce printername\fR\fR\fI = \fR\fIno\fR\fI \fR
    34163155.RE
    34173156
    … …  
    34333172.sp
    34343173Default:
    3435 \fI\fIforce security mode\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    3436 .sp
    3437 Example:
    3438 \fI\fIforce security mode\fR\fR\fI = \fR\fI\FC700\F[]\fR\fI \fR
     3174\fI\fIforce security mode\fR\fR\fI = \fR\fI0\fR\fI \fR
     3175.sp
     3176Example:
     3177\fI\fIforce security mode\fR\fR\fI = \fR\fI700\fR\fI \fR
    34393178.RE
    34403179
    … …  
    34503189.sp
    34513190Default:
    3452 \fI\fIforce unknown acl user\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3191\fI\fIforce unknown acl user\fR\fR\fI = \fR\fIno\fR\fI \fR
    34533192.RE
    34543193
    … …  
    34643203.sp
    34653204Default:
    3466 \fI\fIforce user\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3467 .sp
    3468 Example:
    3469 \fI\fIforce user\fR\fR\fI = \fR\fI\FCauser\F[]\fR\fI \fR
     3205\fI\fIforce user\fR\fR\fI = \fR\fI\fR\fI \fR
     3206.sp
     3207Example:
     3208\fI\fIforce user\fR\fR\fI = \fR\fIauser\fR\fI \fR
    34703209.RE
    34713210
    … …  
    34853224.sp
    34863225Default:
    3487 \fI\fIfstype\fR\fR\fI = \fR\fI\FCNTFS\F[]\fR\fI \fR
    3488 .sp
    3489 Example:
    3490 \fI\fIfstype\fR\fR\fI = \fR\fI\FCSamba\F[]\fR\fI \fR
     3226\fI\fIfstype\fR\fR\fI = \fR\fINTFS\fR\fI \fR
     3227.sp
     3228Example:
     3229\fI\fIfstype\fR\fR\fI = \fR\fISamba\fR\fI \fR
    34913230.RE
    34923231
    … …  
    34963235.RS 4
    34973236The
    3498 \FCget quota command\F[]
     3237get quota command
    34993238should only be used whenever there is no operating system API available from the OS that samba can use\&.
    35003239.sp
    35013240This option is only available you have compiled Samba with the
    3502 \FC\-\-with\-sys\-quotas\F[]
     3241\-\-with\-sys\-quotas
    35033242option or on Linux with
    3504 \FC\-\-with\-quotas\F[]
     3243\-\-with\-quotas
    35053244and a working quota api was found in the system\&.
    35063245.sp
    … …  
    36793418.RE
    36803419Default:
    3681 \fI\fIget quota command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3682 .sp
    3683 Example:
    3684 \fI\fIget quota command\fR\fR\fI = \fR\fI\FC/usr/local/sbin/query_quota\F[]\fR\fI \fR
     3420\fI\fIget quota command\fR\fR\fI = \fR\fI\fR\fI \fR
     3421.sp
     3422Example:
     3423\fI\fIget quota command\fR\fR\fI = \fR\fI/usr/local/sbin/query_quota\fR\fI \fR
    36853424.RE
    36863425
    … …  
    36953434.sp
    36963435Default:
    3697 \fI\fIgetwd cache\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     3436\fI\fIgetwd cache\fR\fR\fI = \fR\fIyes\fR\fI \fR
    36983437.RE
    36993438
    … …  
    37073446.sp
    37083447On some systems the default guest account "nobody" may not be able to print\&. Use another account in this case\&. You should test this by trying to log in as your guest user (perhaps by using the
    3709 \FCsu \-\F[]
     3448su \-
    37103449command) and trying to print using the system print command such as
    3711 \FClpr(1)\F[]
     3450lpr(1)
    37123451or
    3713 \FC lp(1)\F[]\&.
     3452lp(1)\&.
    37143453.sp
    37153454This parameter does not accept % macros, because many parts of the system require this value to be constant for correct operation\&.
    37163455.sp
    37173456Default:
    3718 \fI\fIguest account\fR\fR\fI = \fR\fI\FCnobody # default can be changed at compile\-time\F[]\fR\fI \fR
    3719 .sp
    3720 Example:
    3721 \fI\fIguest account\fR\fR\fI = \fR\fI\FCftp\F[]\fR\fI \fR
     3457\fI\fIguest account\fR\fR\fI = \fR\fInobody # default can be changed at compile\-time\fR\fI \fR
     3458.sp
     3459Example:
     3460\fI\fIguest account\fR\fR\fI = \fR\fIftp\fR\fI \fR
    37223461.RE
    37233462
    … …  
    37473486.sp
    37483487Default:
    3749 \fI\fIguest ok\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3488\fI\fIguest ok\fR\fR\fI = \fR\fIno\fR\fI \fR
    37503489.RE
    37513490
    … …  
    37733512.sp
    37743513Default:
    3775 \fI\fIguest only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3514\fI\fIguest only\fR\fR\fI = \fR\fIno\fR\fI \fR
    37763515.RE
    37773516
    … …  
    37833522.sp
    37843523Default:
    3785 \fI\fIhide dot files\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     3524\fI\fIhide dot files\fR\fR\fI = \fR\fIyes\fR\fI \fR
    37863525.RE
    37873526
    … …  
    38093548.RS 4
    38103549.\}
    3811 .fam C
    3812 .ps -1
    38133550.nf
    3814 .if t \{\
    3815 .sp -1
    3816 .\}
    3817 .BB lightgray adjust-for-leading-newline
    3818 .sp -1
    3819 
    38203551hide files = /\&.*/DesktopFolderDB/TrashFor%m/resource\&.frk/
    3821 .EB lightgray adjust-for-leading-newline
    3822 .if t \{\
    3823 .sp 1
    3824 .\}
    38253552.fi
    3826 .fam
    3827 .ps +1
    38283553.if n \{\
    38293554.RE
    … …  
    38313556.sp
    38323557Default:
    3833 \fI\fIhide files\fR\fR\fI = \fR\fI\FC # no file are hidden\F[]\fR\fI \fR
     3558\fI\fIhide files\fR\fR\fI = \fR\fI # no file are hidden\fR\fI \fR
    38343559.RE
    38353560
    … …  
    38413566.sp
    38423567Default:
    3843 \fI\fIhide special files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3568\fI\fIhide special files\fR\fR\fI = \fR\fIno\fR\fI \fR
    38443569.RE
    38453570
    … …  
    38513576.sp
    38523577Default:
    3853 \fI\fIhide unreadable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3578\fI\fIhide unreadable\fR\fR\fI = \fR\fIno\fR\fI \fR
    38543579.RE
    38553580
    … …  
    38613586.sp
    38623587Default:
    3863 \fI\fIhide unwriteable files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3588\fI\fIhide unwriteable files\fR\fR\fI = \fR\fIno\fR\fI \fR
    38643589.RE
    38653590
    … …  
    38803605.RS 4
    38813606.\}
    3882 .fam C
    3883 .ps -1
    38843607.nf
    3885 .if t \{\
    3886 .sp -1
    3887 .\}
    3888 .BB lightgray adjust-for-leading-newline
    3889 .sp -1
    3890 
    3891 \FCusername server:/some/file/system\F[]
    3892 .EB lightgray adjust-for-leading-newline
    3893 .if t \{\
    3894 .sp 1
    3895 .\}
     3608username server:/some/file/system
    38963609.fi
    3897 .fam
    3898 .ps +1
    38993610.if n \{\
    39003611.RE
    … …  
    39063617.\}
    39073618.RS 4
    3908 .BM yellow
    39093619.it 1 an-trap
    39103620.nr an-no-space-flag 1
    … …  
    39173627A working NIS client is required on the system for this option to work\&.
    39183628.sp .5v
    3919 .EM yellow
    3920 .RE
    3921 Default:
    3922 \fI\fIhomedir map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    3923 .sp
    3924 Example:
    3925 \fI\fIhomedir map\fR\fR\fI = \fR\fI\FCamd\&.homedir\F[]\fR\fI \fR
     3629.RE
     3630Default:
     3631\fI\fIhomedir map\fR\fR\fI = \fR\fI\fR\fI \fR
     3632.sp
     3633Example:
     3634\fI\fIhomedir map\fR\fR\fI = \fR\fIamd\&.homedir\fR\fI \fR
    39263635.RE
    39273636
    … …  
    39383647.sp
    39393648Default:
    3940 \fI\fIhost msdfs\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     3649\fI\fIhost msdfs\fR\fR\fI = \fR\fIyes\fR\fI \fR
    39413650.RE
    39423651
    … …  
    39463655.RS 4
    39473656Specifies whether samba should use (expensive) hostname lookups or use the ip addresses instead\&. An example place where hostname lookups are currently used is when checking the
    3948 \FChosts deny\F[]
     3657hosts deny
    39493658and
    3950 \FChosts allow\F[]\&.
    3951 .sp
    3952 Default:
    3953 \fI\fIhostname lookups\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
    3954 .sp
    3955 Example:
    3956 \fI\fIhostname lookups\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     3659hosts allow\&.
     3660.sp
     3661Default:
     3662\fI\fIhostname lookups\fR\fR\fI = \fR\fIno\fR\fI \fR
     3663.sp
     3664Example:
     3665\fI\fIhostname lookups\fR\fR\fI = \fR\fIyes\fR\fI \fR
    39573666.RE
    39583667
    … …  
    39773686.sp
    39783687You can specify the hosts by name or IP number\&. For example, you could restrict access to only the hosts on a Class C subnet with something like
    3979 \FCallow hosts = 150\&.203\&.5\&.\F[]\&. The full syntax of the list is described in the man page
    3980 \FChosts_access(5)\F[]\&. Note that this man page may not be present on your system, so a brief description will be given here also\&.
     3688allow hosts = 150\&.203\&.5\&.\&. The full syntax of the list is described in the man page
     3689hosts_access(5)\&. Note that this man page may not be present on your system, so a brief description will be given here also\&.
    39813690.sp
    39823691Note that the localhost address 127\&.0\&.0\&.1 will always be allowed access unless specifically denied by a
    … …  
    39903699Example 1: allow all IPs in 150\&.203\&.*\&.*; except one
    39913700.sp
    3992 \FChosts allow = 150\&.203\&. EXCEPT 150\&.203\&.6\&.66\F[]
     3701hosts allow = 150\&.203\&. EXCEPT 150\&.203\&.6\&.66
    39933702.sp
    39943703Example 2: allow hosts that match the given network/netmask
    39953704.sp
    3996 \FChosts allow = 150\&.203\&.15\&.0/255\&.255\&.255\&.0\F[]
     3705hosts allow = 150\&.203\&.15\&.0/255\&.255\&.255\&.0
    39973706.sp
    39983707Example 3: allow a couple of hosts
    39993708.sp
    4000 \FChosts allow = lapland, arvidsjaur\F[]
     3709hosts allow = lapland, arvidsjaur
    40013710.sp
    40023711Example 4: allow only hosts in NIS netgroup "foonet", but deny access from one particular host
    40033712.sp
    4004 \FChosts allow = @foonet\F[]
    4005 .sp
    4006 \FChosts deny = pirate\F[]
     3713hosts allow = @foonet
     3714.sp
     3715hosts deny = pirate
    40073716.if n \{\
    40083717.sp
    40093718.\}
    40103719.RS 4
    4011 .BM yellow
    40123720.it 1 an-trap
    40133721.nr an-no-space-flag 1
    … …  
    40203728Note that access still requires suitable user\-level passwords\&.
    40213729.sp .5v
    4022 .EM yellow
    40233730.RE
    40243731See
    … …  
    40273734.sp
    40283735Default:
    4029 \fI\fIhosts allow\fR\fR\fI = \fR\fI\FC # none (i\&.e\&., all hosts permitted access)\F[]\fR\fI \fR
    4030 .sp
    4031 Example:
    4032 \fI\fIhosts allow\fR\fR\fI = \fR\fI\FC150\&.203\&.5\&. myhost\&.mynet\&.edu\&.au\F[]\fR\fI \fR
     3736\fI\fIhosts allow\fR\fR\fI = \fR\fI # none (i\&.e\&., all hosts permitted access)\fR\fI \fR
     3737.sp
     3738Example:
     3739\fI\fIhosts allow\fR\fR\fI = \fR\fI150\&.203\&.5\&. myhost\&.mynet\&.edu\&.au\fR\fI \fR
    40333740.RE
    40343741
    … …  
    40543761.sp
    40553762In the event that it is necessary to deny all by default, use the keyword ALL (or the netmask
    4056 \FC0\&.0\&.0\&.0/0\F[]) and then explicitly specify to the
     37630\&.0\&.0\&.0/0) and then explicitly specify to the
    40573764\m[blue]\fBhosts allow = hosts allow\fR\m[]
    40583765parameter those hosts that should be permitted access\&.
    40593766.sp
    40603767Default:
    4061 \fI\fIhosts deny\fR\fR\fI = \fR\fI\FC # none (i\&.e\&., no hosts specifically excluded)\F[]\fR\fI \fR
    4062 .sp
    4063 Example:
    4064 \fI\fIhosts deny\fR\fR\fI = \fR\fI\FC150\&.203\&.4\&. badhost\&.mynet\&.edu\&.au\F[]\fR\fI \fR
     3768\fI\fIhosts deny\fR\fR\fI = \fR\fI # none (i\&.e\&., no hosts specifically excluded)\fR\fI \fR
     3769.sp
     3770Example:
     3771\fI\fIhosts deny\fR\fR\fI = \fR\fI150\&.203\&.4\&. badhost\&.mynet\&.edu\&.au\fR\fI \fR
    40653772.RE
    40663773
    … …  
    40823789.sp
    40833790Example:
    4084 \fI\fIidmap alloc backend\fR\fR\fI = \fR\fI\FCtdb\F[]\fR\fI \fR
     3791\fI\fIidmap alloc backend\fR\fR\fI = \fR\fItdb\fR\fI \fR
    40853792.RE
    40863793
    … …  
    41243831.sp
    41253832Default:
    4126 \fI\fIidmap backend\fR\fR\fI = \fR\fI\FCtdb\F[]\fR\fI \fR
     3833\fI\fIidmap backend\fR\fR\fI = \fR\fItdb\fR\fI \fR
    41273834.RE
    41283835
    … …  
    41343841.sp
    41353842Default:
    4136 \fI\fIidmap cache time\fR\fR\fI = \fR\fI\FC604800 (one week)\F[]\fR\fI \fR
     3843\fI\fIidmap cache time\fR\fR\fI = \fR\fI604800 (one week)\fR\fI \fR
    41373844.RE
    41383845
    … …  
    41673874.RS 4
    41683875.\}
    4169 .fam C
    4170 .ps -1
    41713876.nf
    4172 .if t \{\
    4173 .sp -1
    4174 .\}
    4175 .BB lightgray adjust-for-leading-newline
    4176 .sp -1
    4177 
    41783877        idmap backend = tdb
    41793878        idmap uid = 1000000\-1999999
    … …  
    41833882        idmap config CORP : range = 1000\-999999
    41843883       
    4185 .EB lightgray adjust-for-leading-newline
    4186 .if t \{\
    4187 .sp 1
    4188 .\}
    41893884.fi
    4190 .fam
    4191 .ps +1
    41923885.if n \{\
    41933886.RE
    … …  
    42173910.sp
    42183911Default:
    4219 \fI\fIidmap gid\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4220 .sp
    4221 Example:
    4222 \fI\fIidmap gid\fR\fR\fI = \fR\fI\FC10000\-20000\F[]\fR\fI \fR
     3912\fI\fIidmap gid\fR\fR\fI = \fR\fI\fR\fI \fR
     3913.sp
     3914Example:
     3915\fI\fIidmap gid\fR\fR\fI = \fR\fI10000\-20000\fR\fI \fR
    42233916.RE
    42243917
    … …  
    42303923.sp
    42313924Default:
    4232 \fI\fIidmap negative cache time\fR\fR\fI = \fR\fI\FC120\F[]\fR\fI \fR
     3925\fI\fIidmap negative cache time\fR\fR\fI = \fR\fI120\fR\fI \fR
    42333926.RE
    42343927
    … …  
    42543947.sp
    42553948Default:
    4256 \fI\fIidmap uid\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4257 .sp
    4258 Example:
    4259 \fI\fIidmap uid\fR\fR\fI = \fR\fI\FC10000\-20000\F[]\fR\fI \fR
     3949\fI\fIidmap uid\fR\fR\fI = \fR\fI\fR\fI \fR
     3950.sp
     3951Example:
     3952\fI\fIidmap uid\fR\fR\fI = \fR\fI10000\-20000\fR\fI \fR
    42603953.RE
    42613954
    … …  
    42813974.sp
    42823975Default:
    4283 \fI\fIinclude\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4284 .sp
    4285 Example:
    4286 \fI\fIinclude\fR\fR\fI = \fR\fI\FC/usr/local/samba/lib/admin_smb\&.conf\F[]\fR\fI \fR
     3976\fI\fIinclude\fR\fR\fI = \fR\fI\fR\fI \fR
     3977.sp
     3978Example:
     3979\fI\fIinclude\fR\fR\fI = \fR\fI/usr/local/samba/lib/admin_smb\&.conf\fR\fI \fR
    42873980.RE
    42883981
    … …  
    42943987.sp
    42953988Default:
    4296 \fI\fIinherit acls\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     3989\fI\fIinherit acls\fR\fR\fI = \fR\fIno\fR\fI \fR
    42973990.RE
    42983991
    … …  
    43063999.sp
    43074000Default:
    4308 \fI\fIinherit owner\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4001\fI\fIinherit owner\fR\fR\fI = \fR\fIno\fR\fI \fR
    43094002.RE
    43104003
    … …  
    43374030.sp
    43384031Default:
    4339 \fI\fIinherit permissions\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4032\fI\fIinherit permissions\fR\fR\fI = \fR\fIno\fR\fI \fR
    43404033.RE
    43414034
    … …  
    43514044.sp
    43524045Default:
    4353 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4354 .sp
    4355 Example:
    4356 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\FC150\&.203\&.5\&. myhost\&.mynet\&.de\F[]\fR\fI \fR
     4046\fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\fR\fI \fR
     4047.sp
     4048Example:
     4049\fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI150\&.203\&.5\&. myhost\&.mynet\&.de\fR\fI \fR
    43574050.RE
    43584051
    … …  
    43654058.sp
    43664059Default:
    4367 \fI\fIinit logon delay\fR\fR\fI = \fR\fI\FC100\F[]\fR\fI \fR
     4060\fI\fIinit logon delay\fR\fR\fI = \fR\fI100\fR\fI \fR
    43684061.RE
    43694062
    … …  
    44294122.sp
    44304123Default:
    4431 \fI\fIinterfaces\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4432 .sp
    4433 Example:
    4434 \fI\fIinterfaces\fR\fR\fI = \fR\fI\FCeth0 192\&.168\&.2\&.10/24 192\&.168\&.3\&.10/255\&.255\&.255\&.0\F[]\fR\fI \fR
     4124\fI\fIinterfaces\fR\fR\fI = \fR\fI\fR\fI \fR
     4125.sp
     4126Example:
     4127\fI\fIinterfaces\fR\fR\fI = \fR\fIeth0 192\&.168\&.2\&.10/24 192\&.168\&.3\&.10/255\&.255\&.255\&.0\fR\fI \fR
    44354128.RE
    44364129
    … …  
    44554148.sp
    44564149Default:
    4457 \fI\fIinvalid users\fR\fR\fI = \fR\fI\FC # no invalid users\F[]\fR\fI \fR
    4458 .sp
    4459 Example:
    4460 \fI\fIinvalid users\fR\fR\fI = \fR\fI\FCroot fred admin @wheel\F[]\fR\fI \fR
     4150\fI\fIinvalid users\fR\fR\fI = \fR\fI # no invalid users\fR\fI \fR
     4151.sp
     4152Example:
     4153\fI\fIinvalid users\fR\fR\fI = \fR\fIroot fred admin @wheel\fR\fI \fR
    44614154.RE
    44624155
    … …  
    44714164.sp
    44724165If set, this option overrides the ServerName option in the CUPS
    4473 \FCclient\&.conf\F[]\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.
    4474 .sp
    4475 Default:
    4476 \fI\fIiprint server\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR
    4477 .sp
    4478 Example:
    4479 \fI\fIiprint server\fR\fR\fI = \fR\fI\FCMYCUPSSERVER\F[]\fR\fI \fR
     4166client\&.conf\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.
     4167.sp
     4168Default:
     4169\fI\fIiprint server\fR\fR\fI = \fR\fI""\fR\fI \fR
     4170.sp
     4171Example:
     4172\fI\fIiprint server\fR\fR\fI = \fR\fIMYCUPSSERVER\fR\fI \fR
    44804173.RE
    44814174
    … …  
    44924185.sp
    44934186Default:
    4494 \fI\fIkeepalive\fR\fR\fI = \fR\fI\FC300\F[]\fR\fI \fR
    4495 .sp
    4496 Example:
    4497 \fI\fIkeepalive\fR\fR\fI = \fR\fI\FC600\F[]\fR\fI \fR
     4187\fI\fIkeepalive\fR\fR\fI = \fR\fI300\fR\fI \fR
     4188.sp
     4189Example:
     4190\fI\fIkeepalive\fR\fR\fI = \fR\fI600\fR\fI \fR
    44984191.RE
    44994192
    … …  
    45074200.sp
    45084201Default:
    4509 \fI\fIkernel change notify\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4202\fI\fIkernel change notify\fR\fR\fI = \fR\fIyes\fR\fI \fR
    45104203.RE
    45114204
    … …  
    45304223.sp
    45314224Default:
    4532 \fI\fIkernel oplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4225\fI\fIkernel oplocks\fR\fR\fI = \fR\fIyes\fR\fI \fR
    45334226.RE
    45344227
    … …  
    45444237.sp
    45454238Unlike the
    4546 \FCencrypt passwords\F[]
     4239encrypt passwords
    45474240option, this parameter cannot alter client behaviour, and the LANMAN response will still be sent over the network\&. See the
    4548 \FCclient lanman auth\F[]
     4241client lanman auth
    45494242to disable this for Samba\'s clients (such as smbclient)
    45504243.sp
    45514244If this option, and
    4552 \FCntlm auth\F[]
     4245ntlm auth
    45534246are both disabled, then only NTLMv2 logins will be permited\&. Not all clients support NTLMv2, and most will require special configuration to use it\&.
    45544247.sp
    45554248Default:
    4556 \fI\fIlanman auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4249\fI\fIlanman auth\fR\fR\fI = \fR\fIno\fR\fI \fR
    45574250.RE
    45584251
    … …  
    45664259.sp
    45674260Default:
    4568 \fI\fIlarge readwrite\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4261\fI\fIlarge readwrite\fR\fR\fI = \fR\fIyes\fR\fI \fR
    45694262.RE
    45704263
    … …  
    45784271\m[blue]\fBldap admin dn\fR\m[]
    45794272is used in conjunction with the admin dn password stored in the
    4580 \FCprivate/secrets\&.tdb\F[]
     4273private/secrets\&.tdb
    45814274file\&. See the
    45824275\fBsmbpasswd\fR(8)
    … …  
    46044297.sp
    46054298Default:
    4606 \fI\fIldap connection timeout\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR
     4299\fI\fIldap connection timeout\fR\fR\fI = \fR\fI2\fR\fI \fR
    46074300.RE
    46084301
    … …  
    46214314.sp
    46224315Default:
    4623 \fI\fIldap debug level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    4624 .sp
    4625 Example:
    4626 \fI\fIldap debug level\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR
     4316\fI\fIldap debug level\fR\fR\fI = \fR\fI0\fR\fI \fR
     4317.sp
     4318Example:
     4319\fI\fIldap debug level\fR\fR\fI = \fR\fI1\fR\fI \fR
    46274320.RE
    46284321
    … …  
    46364329.sp
    46374330Default:
    4638 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR
    4639 .sp
    4640 Example:
    4641 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI\FC5\F[]\fR\fI \fR
     4331\fI\fIldap debug threshold\fR\fR\fI = \fR\fI10\fR\fI \fR
     4332.sp
     4333Example:
     4334\fI\fIldap debug threshold\fR\fR\fI = \fR\fI5\fR\fI \fR
    46424335.RE
    46434336
    … …  
    46494342.sp
    46504343Default:
    4651 \fI\fIldap delete dn\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4344\fI\fIldap delete dn\fR\fR\fI = \fR\fIno\fR\fI \fR
    46524345.RE
    46534346
    … …  
    46634356.sp
    46644357Default:
    4665 \fI\fIldap group suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4666 .sp
    4667 Example:
    4668 \fI\fIldap group suffix\fR\fR\fI = \fR\fI\FCou=Groups\F[]\fR\fI \fR
     4358\fI\fIldap group suffix\fR\fR\fI = \fR\fI\fR\fI \fR
     4359.sp
     4360Example:
     4361\fI\fIldap group suffix\fR\fR\fI = \fR\fIou=Groups\fR\fI \fR
    46694362.RE
    46704363
    … …  
    46804373.sp
    46814374Default:
    4682 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4683 .sp
    4684 Example:
    4685 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\FCou=Idmap\F[]\fR\fI \fR
     4375\fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\fR\fI \fR
     4376.sp
     4377Example:
     4378\fI\fIldap idmap suffix\fR\fR\fI = \fR\fIou=Idmap\fR\fI \fR
    46864379.RE
    46874380
    … …  
    46974390.sp
    46984391Default:
    4699 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    4700 .sp
    4701 Example:
    4702 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI\FCou=Computers\F[]\fR\fI \fR
     4392\fI\fIldap machine suffix\fR\fR\fI = \fR\fI\fR\fI \fR
     4393.sp
     4394Example:
     4395\fI\fIldap machine suffix\fR\fR\fI = \fR\fIou=Computers\fR\fI \fR
     4396.RE
     4397
     4398ldap page size (G)
     4399.\" ldap page size
     4400.PP
     4401.RS 4
     4402This parameter specifies the number of entries per page\&.
     4403.sp
     4404If the LDAP server supports paged results, clients can request subsets of search results (pages) instead of the entire list\&. This parameter specifies the size of these pages\&.
     4405.sp
     4406Default:
     4407\fI\fIldap page size\fR\fR\fI = \fR\fI1024\fR\fI \fR
     4408.sp
     4409Example:
     4410\fI\fIldap page size\fR\fR\fI = \fR\fI512\fR\fI \fR
    47034411.RE
    47044412
    … …  
    47504458.RE
    47514459Default:
    4752 \fI\fIldap passwd sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4460\fI\fIldap passwd sync\fR\fR\fI = \fR\fIno\fR\fI \fR
    47534461.RE
    47544462
    … …  
    47644472.sp
    47654473Default:
    4766 \fI\fIldap replication sleep\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
     4474\fI\fIldap replication sleep\fR\fR\fI = \fR\fI1000\fR\fI \fR
    47674475.RE
    47684476
    … …  
    47744482.sp
    47754483To use this option, a basic ldap tree must be provided and the ldap suffix parameters must be properly configured\&. On virgin servers the default users and groups (Administrator, Guest, Domain Users, Domain Admins, Domain Guests) can be precreated with the command
    4776 \FCnet sam provision\F[]\&. To run this command the ldap server must be running, Winindd must be running and the smb\&.conf ldap options must be properly configured\&. The typical ldap setup used with the
     4484net sam provision\&. To run this command the ldap server must be running, Winindd must be running and the smb\&.conf ldap options must be properly configured\&. The typical ldap setup used with the
    47774485\m[blue]\fBldapsam:trusted = yes\fR\m[]
    47784486option is usually sufficient to use
    … …  
    47854493.RS 4
    47864494.\}
    4787 .fam C
    4788 .ps -1
    47894495.nf
    4790 .if t \{\
    4791 .sp -1
    4792 .\}
    4793 .BB lightgray adjust-for-leading-newline
    4794 .sp -1
    4795 
    47964496        encrypt passwords = true
    47974497        passdb backend = ldapsam
    … …  
    48134513        idmap gid = 5000\-50000
    48144514       
    4815 .EB lightgray adjust-for-leading-newline
    4816 .if t \{\
    4817 .sp 1
    4818 .\}
    48194515.fi
    4820 .fam
    4821 .ps +1
    48224516.if n \{\
    48234517.RE
    … …  
    48294523.RS 4
    48304524.\}
    4831 .fam C
    4832 .ps -1
    48334525.nf
    4834 .if t \{\
    4835 .sp -1
    4836 .\}
    4837 .BB lightgray adjust-for-leading-newline
    4838 .sp -1
    4839 
    48404526        dn: dc=samba,dc=org
    48414527        objectClass: top
    … …  
    48724558        ou: computers
    48734559       
    4874 .EB lightgray adjust-for-leading-newline
    4875 .if t \{\
    4876 .sp 1
    4877 .\}
    48784560.fi
    4879 .fam
    4880 .ps +1
    48814561.if n \{\
    48824562.RE
    … …  
    48844564.sp
    48854565Default:
    4886 \fI\fIldapsam:editposix\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4566\fI\fIldapsam:editposix\fR\fR\fI = \fR\fIno\fR\fI \fR
    48874567.RE
    48884568
    … …  
    49004580.sp
    49014581Default:
    4902 \fI\fIldapsam:trusted\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4582\fI\fIldapsam:trusted\fR\fR\fI = \fR\fIno\fR\fI \fR
    49034583.RE
    49044584
    … …  
    49204600.sp
    49214601Default:
    4922 \fI\fIldap ssl ads\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     4602\fI\fIldap ssl ads\fR\fR\fI = \fR\fIno\fR\fI \fR
    49234603.RE
    49244604
    … …  
    49304610\fINOT\fR
    49314611related to Samba\'s previous SSL support which was enabled by specifying the
    4932 \FC\-\-with\-ssl\F[]
     4612\-\-with\-ssl
    49334613option to the
    4934 \FCconfigure\F[]
     4614configure
    49354615script\&.
    49364616.sp
    … …  
    49854665.sp
    49864666Default:
    4987 \fI\fIldap ssl\fR\fR\fI = \fR\fI\FCstart tls\F[]\fR\fI \fR
     4667\fI\fIldap ssl\fR\fR\fI = \fR\fIstart tls\fR\fI \fR
    49884668.RE
    49894669
    … …  
    50024682.sp
    50034683Default:
    5004 \fI\fIldap suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5005 .sp
    5006 Example:
    5007 \fI\fIldap suffix\fR\fR\fI = \fR\fI\FCdc=samba,dc=org\F[]\fR\fI \fR
     4684\fI\fIldap suffix\fR\fR\fI = \fR\fI\fR\fI \fR
     4685.sp
     4686Example:
     4687\fI\fIldap suffix\fR\fR\fI = \fR\fIdc=samba,dc=org\fR\fI \fR
    50084688.RE
    50094689
    … …  
    50154695.sp
    50164696Default:
    5017 \fI\fIldap timeout\fR\fR\fI = \fR\fI\FC15\F[]\fR\fI \fR
     4697\fI\fIldap timeout\fR\fR\fI = \fR\fI15\fR\fI \fR
    50184698.RE
    50194699
    … …  
    50294709.sp
    50304710Default:
    5031 \fI\fIldap user suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5032 .sp
    5033 Example:
    5034 \fI\fIldap user suffix\fR\fR\fI = \fR\fI\FCou=people\F[]\fR\fI \fR
     4711\fI\fIldap user suffix\fR\fR\fI = \fR\fI\fR\fI \fR
     4712.sp
     4713Example:
     4714\fI\fIldap user suffix\fR\fR\fI = \fR\fIou=people\fR\fI \fR
    50354715.RE
    50364716
    … …  
    50594739.sp
    50604740Default:
    5061 \fI\fIlevel2 oplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4741\fI\fIlevel2 oplocks\fR\fR\fI = \fR\fIyes\fR\fI \fR
    50624742.RE
    50634743
    … …  
    50834763.sp
    50844764Default:
    5085 \fI\fIlm announce\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
    5086 .sp
    5087 Example:
    5088 \fI\fIlm announce\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4765\fI\fIlm announce\fR\fR\fI = \fR\fIauto\fR\fI \fR
     4766.sp
     4767Example:
     4768\fI\fIlm announce\fR\fR\fI = \fR\fIyes\fR\fI \fR
    50894769.RE
    50904770
    … …  
    51004780.sp
    51014781Default:
    5102 \fI\fIlm interval\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR
    5103 .sp
    5104 Example:
    5105 \fI\fIlm interval\fR\fR\fI = \fR\fI\FC120\F[]\fR\fI \fR
     4782\fI\fIlm interval\fR\fR\fI = \fR\fI60\fR\fI \fR
     4783.sp
     4784Example:
     4785\fI\fIlm interval\fR\fR\fI = \fR\fI120\fR\fI \fR
    51064786.RE
    51074787
    … …  
    51154795.sp
    51164796Default:
    5117 \fI\fIload printers\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4797\fI\fIload printers\fR\fR\fI = \fR\fIyes\fR\fI \fR
    51184798.RE
    51194799
    … …  
    51274807\fBno\fR
    51284808then
    5129 \FC nmbd\F[]
     4809nmbd
    51304810will not attempt to become a local master browser on a subnet and will also lose in all browsing elections\&. By default this value is set to
    51314811\fByes\fR\&. Setting this value to
    … …  
    51344814\fIbecome\fR
    51354815the local master browser on a subnet, just that
    5136 \FCnmbd\F[]
     4816nmbd
    51374817will
    51384818\fIparticipate\fR
    … …  
    51424822\fBno\fR
    51434823will cause
    5144 \FCnmbd\F[]
     4824nmbd
    51454825\fInever\fR
    51464826to become a local master browser\&.
    51474827.sp
    51484828Default:
    5149 \fI\fIlocal master\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     4829\fI\fIlocal master\fR\fR\fI = \fR\fIyes\fR\fI \fR
    51504830.RE
    51514831
    … …  
    51694849.sp
    51704850Default:
    5171 \fI\fIlock directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR
    5172 .sp
    5173 Example:
    5174 \fI\fIlock directory\fR\fR\fI = \fR\fI\FC/var/run/samba/locks\F[]\fR\fI \fR
     4851\fI\fIlock directory\fR\fR\fI = \fR\fI${prefix}/var/locks\fR\fI \fR
     4852.sp
     4853Example:
     4854\fI\fIlock directory\fR\fR\fI = \fR\fI/var/run/samba/locks\fR\fI \fR
    51754855.RE
    51764856
    … …  
    51824862.sp
    51834863If
    5184 \FClocking = no\F[], all lock and unlock requests will appear to succeed and all lock queries will report that the file in question is available for locking\&.
     4864locking = no, all lock and unlock requests will appear to succeed and all lock queries will report that the file in question is available for locking\&.
    51854865.sp
    51864866If
    5187 \FClocking = yes\F[], real locking will be performed by the server\&.
     4867locking = yes, real locking will be performed by the server\&.
    51884868.sp
    51894869This option
    … …  
    52084888.sp
    52094889Default:
    5210 \fI\fIlock spin count\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     4890\fI\fIlock spin count\fR\fR\fI = \fR\fI0\fR\fI \fR
    52114891.RE
    52124892
    … …  
    52204900.sp
    52214901Default:
    5222 \fI\fIlock spin time\fR\fR\fI = \fR\fI\FC200\F[]\fR\fI \fR
     4902\fI\fIlock spin time\fR\fR\fI = \fR\fI200\fR\fI \fR
    52234903.RE
    52244904
    … …  
    52344914.sp
    52354915Example:
    5236 \fI\fIlog file\fR\fR\fI = \fR\fI\FC/usr/local/samba/var/log\&.%m\F[]\fR\fI \fR
     4916\fI\fIlog file\fR\fR\fI = \fR\fI/usr/local/samba/var/log\&.%m\fR\fI \fR
    52374917.RE
    52384918
    … …  
    52504930.RS 4
    52514931The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
    5252 \FCsmb\&.conf\F[]
     4932smb\&.conf
    52534933file\&.
    52544934.sp
    … …  
    54765156.RE
    54775157Default:
    5478 \fI\fIlog level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    5479 .sp
    5480 Example:
    5481 \fI\fIlog level\fR\fR\fI = \fR\fI\FC3 passdb:5 auth:10 winbind:2\F[]\fR\fI \fR
     5158\fI\fIlog level\fR\fR\fI = \fR\fI0\fR\fI \fR
     5159.sp
     5160Example:
     5161\fI\fIlog level\fR\fR\fI = \fR\fI3 passdb:5 auth:10 winbind:2\fR\fI \fR
    54825162.RE
    54835163
    … …  
    54925172.sp
    54935173Default:
    5494 \fI\fIlogon drive\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5495 .sp
    5496 Example:
    5497 \fI\fIlogon drive\fR\fR\fI = \fR\fI\FCh:\F[]\fR\fI \fR
     5174\fI\fIlogon drive\fR\fR\fI = \fR\fI\fR\fI \fR
     5175.sp
     5176Example:
     5177\fI\fIlogon drive\fR\fR\fI = \fR\fIh:\fR\fI \fR
    54985178.RE
    54995179
    … …  
    55055185.sp
    55065186
    5507 \FCC:\e>\F[]\fBNET USE H: /HOME\fR
     5187C:\e>\fBNET USE H: /HOME\fR
    55085188.sp
    55095189from a command prompt, for example\&.
    … …  
    55145194.sp
    55155195
    5516 \FClogon home = \e\e%N\e%U\eprofile\F[]
     5196logon home = \e\e%N\e%U\eprofile
    55175197.sp
    55185198This tells Samba to return the above string, with substitutions made when a client requests the info, generally in a NetUserGetInfo request\&. Win9X clients truncate the info to \e\eserver\eshare when a user does
    5519 \FCnet use /home\F[]
     5199net use /home
    55205200but use the whole string when dealing with profiles\&.
    55215201.sp
    … …  
    55245204was returned rather than
    55255205\fIlogon home\fR\&. This broke
    5526 \FCnet use /home\F[]
     5206net use /home
    55275207but allowed profiles outside the home directory\&. The current implementation is correct, and can be used for profiles if you use the above trick\&.
    55285208.sp
    … …  
    55345214.sp
    55355215Default:
    5536 \fI\fIlogon home\fR\fR\fI = \fR\fI\FC\e\e%N\e%U\F[]\fR\fI \fR
    5537 .sp
    5538 Example:
    5539 \fI\fIlogon home\fR\fR\fI = \fR\fI\FC\e\eremote_smb_server\e%U\F[]\fR\fI \fR
     5216\fI\fIlogon home\fR\fR\fI = \fR\fI\e\e%N\e%U\fR\fI \fR
     5217.sp
     5218Example:
     5219\fI\fIlogon home\fR\fR\fI = \fR\fI\e\eremote_smb_server\e%U\fR\fI \fR
    55405220.RE
    55415221
    … …  
    55495229.sp
    55505230This option takes the standard substitutions, allowing you to have separate logon scripts for each user or machine\&. It also specifies the directory from which the "Application Data",
    5551 \FCdesktop\F[],
    5552 \FCstart menu\F[],
    5553 \FCnetwork neighborhood\F[],
    5554 \FCprograms\F[]
     5231desktop,
     5232start menu,
     5233network neighborhood,
     5234programs
    55555235and other folders, and their contents, are loaded and displayed on your Windows NT client\&.
    55565236.sp
    … …  
    55655245.\}
    55665246.RS 4
    5567 .BM yellow
    55685247.it 1 an-trap
    55695248.nr an-no-space-flag 1
    … …  
    55785257will break profile handling\&. Where the tdbsam or ldapsam passdb backend is used, at the time the user account is created the value configured for this parameter is written to the passdb backend and that value will over\-ride the parameter value present in the smb\&.conf file\&. Any error present in the passdb backend account record must be editted using the appropriate tool (pdbedit on the command\-line, or any other locally provided system tool)\&.
    55795258.sp .5v
    5580 .EM yellow
    55815259.RE
    55825260Note that this option is only useful if Samba is set up as a domain controller\&.
    … …  
    55905268.RS 4
    55915269.\}
    5592 .fam C
    5593 .ps -1
    55945270.nf
    5595 .if t \{\
    5596 .sp -1
    5597 .\}
    5598 .BB lightgray adjust-for-leading-newline
    5599 .sp -1
    5600 
    56015271logon path = \e\ePROFILESERVER\ePROFILE\e%U
    5602 .EB lightgray adjust-for-leading-newline
    5603 .if t \{\
    5604 .sp 1
    5605 .\}
    56065272.fi
    5607 .fam
    5608 .ps +1
    56095273.if n \{\
    56105274.RE
    … …  
    56125276.sp
    56135277Default:
    5614 \fI\fIlogon path\fR\fR\fI = \fR\fI\FC\e\e%N\e%U\eprofile\F[]\fR\fI \fR
     5278\fI\fIlogon path\fR\fR\fI = \fR\fI\e\e%N\e%U\eprofile\fR\fI \fR
    56155279.RE
    56165280
    … …  
    56195283.PP
    56205284.RS 4
    5621 This parameter specifies the batch file (\FC\&.bat\F[]) or NT command file (\FC\&.cmd\F[]) to be downloaded and run on a machine when a user successfully logs in\&. The file must contain the DOS style CR/LF line endings\&. Using a DOS\-style editor to create the file is recommended\&.
     5285This parameter specifies the batch file (\&.bat) or NT command file (\&.cmd) to be downloaded and run on a machine when a user successfully logs in\&. The file must contain the DOS style CR/LF line endings\&. Using a DOS\-style editor to create the file is recommended\&.
    56225286.sp
    56235287The script must be a relative path to the
    … …  
    56265290\m[blue]\fBpath\fR\m[]
    56275291of
    5628 \FC/usr/local/samba/netlogon\F[], and
     5292/usr/local/samba/netlogon, and
    56295293\m[blue]\fBlogon script = STARTUP\&.BAT\fR\m[], then the file that will be downloaded is:
    56305294.sp
    … …  
    56325296.RS 4
    56335297.\}
    5634 .fam C
    5635 .ps -1
    56365298.nf
    5637 .if t \{\
    5638 .sp -1
    5639 .\}
    5640 .BB lightgray adjust-for-leading-newline
    5641 .sp -1
    5642 
    56435299        /usr/local/samba/netlogon/STARTUP\&.BAT
    5644 .EB lightgray adjust-for-leading-newline
    5645 .if t \{\
    5646 .sp 1
    5647 .\}
    56485300.fi
    5649 .fam
    5650 .ps +1
    56515301.if n \{\
    56525302.RE
    … …  
    56545304.sp
    56555305The contents of the batch file are entirely your choice\&. A suggested command would be to add
    5656 \FCNET TIME \e\eSERVER /SET /YES\F[], to force every machine to synchronize clocks with the same time server\&. Another use would be to add
    5657 \FCNET USE U: \e\eSERVER\eUTILS\F[]
     5306NET TIME \e\eSERVER /SET /YES, to force every machine to synchronize clocks with the same time server\&. Another use would be to add
     5307NET USE U: \e\eSERVER\eUTILS
    56585308for commonly used utilities, or
    56595309.sp
    … …  
    56615311.RS 4
    56625312.\}
    5663 .fam C
    5664 .ps -1
    56655313.nf
    5666 .if t \{\
    5667 .sp -1
    5668 .\}
    5669 .BB lightgray adjust-for-leading-newline
    5670 .sp -1
    5671 
    56725314\fBNET USE Q: \e\eSERVER\eISO9001_QA\fR
    5673 .EB lightgray adjust-for-leading-newline
    5674 .if t \{\
    5675 .sp 1
    5676 .\}
    56775315.fi
    5678 .fam
    5679 .ps +1
    56805316.if n \{\
    56815317.RE
    … …  
    56915327.sp
    56925328Default:
    5693 \fI\fIlogon script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5694 .sp
    5695 Example:
    5696 \fI\fIlogon script\fR\fR\fI = \fR\fI\FCscripts\e%U\&.bat\F[]\fR\fI \fR
     5329\fI\fIlogon script\fR\fR\fI = \fR\fI\fR\fI \fR
     5330.sp
     5331Example:
     5332\fI\fIlogon script\fR\fR\fI = \fR\fIscripts\e%U\&.bat\fR\fI \fR
    56975333.RE
    56985334
    … …  
    57175353.sp
    57185354Default:
    5719 \fI\fIlppause command\fR\fR\fI = \fR\fI\FC # Currently no default value is given to this string, unless the value of the \m[blue]\fBprinting\fR\m[] parameter is \fBSYSV\fR, in which case the default is : \FClp \-i %p\-%j \-H hold\F[] or if the value of the \fIprinting\fR parameter is \fBSOFTQ\fR, then the default is: \FCqstat \-s \-j%j \-h\F[]\&. \F[]\fR\fI \fR
    5720 .sp
    5721 Example:
    5722 \fI\fIlppause command\fR\fR\fI = \fR\fI\FC/usr/bin/lpalt %p\-%j \-p0\F[]\fR\fI \fR
     5355\fI\fIlppause command\fR\fR\fI = \fR\fI # Currently no default value is given to this string, unless the value of the \m[blue]\fBprinting\fR\m[] parameter is \fBSYSV\fR, in which case the default is : lp \-i %p\-%j \-H hold or if the value of the \fIprinting\fR parameter is \fBSOFTQ\fR, then the default is: qstat \-s \-j%j \-h\&. \fR\fI \fR
     5356.sp
     5357Example:
     5358\fI\fIlppause command\fR\fR\fI = \fR\fI/usr/bin/lpalt %p\-%j \-p0\fR\fI \fR
    57235359.RE
    57245360
    … …  
    57285364.RS 4
    57295365This controls how long lpq info will be cached for to prevent the
    5730 \FClpq\F[]
     5366lpq
    57315367command being called too often\&. A separate cache is kept for each variation of the
    5732 \FC lpq\F[]
     5368lpq
    57335369command used by the system, so if you use different
    5734 \FClpq\F[]
     5370lpq
    57355371commands for different users then they won\'t share cache information\&.
    57365372.sp
    57375373The cache files are stored in
    5738 \FC/tmp/lpq\&.xxxx\F[]
     5374/tmp/lpq\&.xxxx
    57395375where xxxx is a hash of the
    5740 \FClpq\F[]
     5376lpq
    57415377command in use\&.
    57425378.sp
    57435379The default is 30 seconds, meaning that the cached results of a previous identical
    5744 \FClpq\F[]
     5380lpq
    57455381command will be used if the cached data is less than 30 seconds old\&. A large value may be advisable if your
    5746 \FClpq\F[]
     5382lpq
    57475383command is very slow\&.
    57485384.sp
    … …  
    57505386.sp
    57515387Default:
    5752 \fI\fIlpq cache time\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR
    5753 .sp
    5754 Example:
    5755 \fI\fIlpq cache time\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR
     5388\fI\fIlpq cache time\fR\fR\fI = \fR\fI30\fR\fI \fR
     5389.sp
     5390Example:
     5391\fI\fIlpq cache time\fR\fR\fI = \fR\fI10\fR\fI \fR
    57565392.RE
    57575393
    … …  
    57615397.RS 4
    57625398This parameter specifies the command to be executed on the server host in order to obtain
    5763 \FClpq \F[]\-style printer status information\&.
     5399lpq\-style printer status information\&.
    57645400.sp
    57655401This command should be a program or script which takes a printer name as its only parameter and outputs printer status information\&.
    … …  
    57845420.sp
    57855421Default:
    5786 \fI\fIlpq command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5787 .sp
    5788 Example:
    5789 \fI\fIlpq command\fR\fR\fI = \fR\fI\FC/usr/bin/lpq \-P%p\F[]\fR\fI \fR
     5422\fI\fIlpq command\fR\fR\fI = \fR\fI\fR\fI \fR
     5423.sp
     5424Example:
     5425\fI\fIlpq command\fR\fR\fI = \fR\fI/usr/bin/lpq \-P%p\fR\fI \fR
    57905426.RE
    57915427
    … …  
    58195455\fBSYSV\fR, in which case the default is:
    58205456.sp
    5821 \FClp \-i %p\-%j \-H resume\F[]
     5457lp \-i %p\-%j \-H resume
    58225458.sp
    58235459or if the value of the
    … …  
    58265462\fBSOFTQ\fR, then the default is:
    58275463.sp
    5828 \FCqstat \-s \-j%j \-r\F[]
     5464qstat \-s \-j%j \-r
    58295465.sp
    58305466\fINo default\fR
    58315467.sp
    58325468Example:
    5833 \fI\fIlpresume command\fR\fR\fI = \fR\fI\FC/usr/bin/lpalt %p\-%j \-p2\F[]\fR\fI \fR
     5469\fI\fIlpresume command\fR\fR\fI = \fR\fI/usr/bin/lpalt %p\-%j \-p2\fR\fI \fR
    58345470.RE
    58355471
    … …  
    58575493.RS 4
    58585494.\}
    5859 .fam C
    5860 .ps -1
    58615495.nf
    5862 .if t \{\
    5863 .sp -1
    5864 .\}
    5865 .BB lightgray adjust-for-leading-newline
    5866 .sp -1
    5867 
    58685496lprm command = /usr/bin/lprm \-P%p %j
    58695497
    … …  
    58715499
    58725500lprm command = /usr/bin/cancel %p\-%j
    5873 .EB lightgray adjust-for-leading-newline
    5874 .if t \{\
    5875 .sp 1
    5876 .\}
    58775501.fi
    5878 .fam
    5879 .ps +1
    58805502.if n \{\
    58815503.RE
    … …  
    58835505.sp
    58845506Default:
    5885 \fI\fIlprm command\fR\fR\fI = \fR\fI\FC determined by printing parameter\F[]\fR\fI \fR
     5507\fI\fIlprm command\fR\fR\fI = \fR\fI determined by printing parameter\fR\fI \fR
    58865508.RE
    58875509
    … …  
    58935515\m[blue]\fBsecurity = domain\fR\m[]
    58945516parameter) then periodically a running smbd process will try and change the MACHINE ACCOUNT PASSWORD stored in the TDB called
    5895 \FCprivate/secrets\&.tdb \F[]\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&.
     5517private/secrets\&.tdb\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&.
    58965518.sp
    58975519See also
    … …  
    59015523.sp
    59025524Default:
    5903 \fI\fImachine password timeout\fR\fR\fI = \fR\fI\FC604800\F[]\fR\fI \fR
     5525\fI\fImachine password timeout\fR\fR\fI = \fR\fI604800\fR\fI \fR
    59045526.RE
    59055527
    … …  
    59155537.\}
    59165538.RS 4
    5917 .BM yellow
    59185539.it 1 an-trap
    59195540.nr an-no-space-flag 1
    … …  
    59285549in the same directory the output file content is undefined\&.
    59295550.sp .5v
    5930 .EM yellow
    5931 .RE
    5932 Default:
    5933 \fI\fImagic output\fR\fR\fI = \fR\fI\FC<magic script name>\&.out\F[]\fR\fI \fR
    5934 .sp
    5935 Example:
    5936 \fI\fImagic output\fR\fR\fI = \fR\fI\FCmyfile\&.txt\F[]\fR\fI \fR
     5551.RE
     5552Default:
     5553\fI\fImagic output\fR\fR\fI = \fR\fI<magic script name>\&.out\fR\fI \fR
     5554.sp
     5555Example:
     5556\fI\fImagic output\fR\fR\fI = \fR\fImyfile\&.txt\fR\fI \fR
    59375557.RE
    59385558
    … …  
    59605580.sp
    59615581Default:
    5962 \fI\fImagic script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    5963 .sp
    5964 Example:
    5965 \fI\fImagic script\fR\fR\fI = \fR\fI\FCuser\&.csh\F[]\fR\fI \fR
     5582\fI\fImagic script\fR\fR\fI = \fR\fI\fR\fI \fR
     5583.sp
     5584Example:
     5585\fI\fImagic script\fR\fR\fI = \fR\fIuser\&.csh\fR\fI \fR
    59665586.RE
    59675587
    … …  
    60225642.sp
    60235643Default:
    6024 \fI\fImangled names\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     5644\fI\fImangled names\fR\fR\fI = \fR\fIyes\fR\fI \fR
    60255645.RE
    60265646
    … …  
    60345654.sp
    60355655Default:
    6036 \fI\fImangle prefix\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR
    6037 .sp
    6038 Example:
    6039 \fI\fImangle prefix\fR\fR\fI = \fR\fI\FC4\F[]\fR\fI \fR
     5656\fI\fImangle prefix\fR\fR\fI = \fR\fI1\fR\fI \fR
     5657.sp
     5658Example:
     5659\fI\fImangle prefix\fR\fR\fI = \fR\fI4\fR\fI \fR
    60405660.RE
    60415661
    … …  
    60505670.sp
    60515671Default:
    6052 \fI\fImangling char\fR\fR\fI = \fR\fI\FC~\F[]\fR\fI \fR
    6053 .sp
    6054 Example:
    6055 \fI\fImangling char\fR\fR\fI = \fR\fI\FC^\F[]\fR\fI \fR
     5672\fI\fImangling char\fR\fR\fI = \fR\fI~\fR\fI \fR
     5673.sp
     5674Example:
     5675\fI\fImangling char\fR\fR\fI = \fR\fI^\fR\fI \fR
    60565676.RE
    60575677
    … …  
    60635683.sp
    60645684Default:
    6065 \fI\fImangling method\fR\fR\fI = \fR\fI\FChash2\F[]\fR\fI \fR
    6066 .sp
    6067 Example:
    6068 \fI\fImangling method\fR\fR\fI = \fR\fI\FChash\F[]\fR\fI \fR
     5685\fI\fImangling method\fR\fR\fI = \fR\fIhash2\fR\fI \fR
     5686.sp
     5687Example:
     5688\fI\fImangling method\fR\fR\fI = \fR\fIhash\fR\fI \fR
    60695689.RE
    60705690
    … …  
    60785698.sp
    60795699Default:
    6080 \fI\fImap acl inherit\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     5700\fI\fImap acl inherit\fR\fR\fI = \fR\fIno\fR\fI \fR
    60815701.RE
    60825702
    … …  
    60945714.sp
    60955715Default:
    6096 \fI\fImap archive\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     5716\fI\fImap archive\fR\fR\fI = \fR\fIyes\fR\fI \fR
    60975717.RE
    60985718
    … …  
    61765796.RE
    61775797Default:
    6178 \fI\fImap read only\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     5798\fI\fImap read only\fR\fR\fI = \fR\fIyes\fR\fI \fR
    61795799.RE
    61805800
    … …  
    61925812.sp
    61935813Default:
    6194 \fI\fImap system\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     5814\fI\fImap system\fR\fR\fI = \fR\fIno\fR\fI \fR
    61955815.RE
    61965816
    … …  
    62825902.sp
    62835903Default:
    6284 \fI\fImap to guest\fR\fR\fI = \fR\fI\FCNever\F[]\fR\fI \fR
    6285 .sp
    6286 Example:
    6287 \fI\fImap to guest\fR\fR\fI = \fR\fI\FCBad User\F[]\fR\fI \fR
     5904\fI\fImap to guest\fR\fR\fI = \fR\fINever\fR\fI \fR
     5905.sp
     5906Example:
     5907\fI\fImap to guest\fR\fR\fI = \fR\fIBad User\fR\fI \fR
    62885908.RE
    62895909
    … …  
    63015921.sp
    63025922Default:
    6303 \fI\fImax connections\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    6304 .sp
    6305 Example:
    6306 \fI\fImax connections\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR
     5923\fI\fImax connections\fR\fR\fI = \fR\fI0\fR\fI \fR
     5924.sp
     5925Example:
     5926\fI\fImax connections\fR\fR\fI = \fR\fI10\fR\fI \fR
    63075927.RE
    63085928
    … …  
    63235943.sp
    63245944Default:
    6325 \fI\fImax disk size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    6326 .sp
    6327 Example:
    6328 \fI\fImax disk size\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
     5945\fI\fImax disk size\fR\fR\fI = \fR\fI0\fR\fI \fR
     5946.sp
     5947Example:
     5948\fI\fImax disk size\fR\fR\fI = \fR\fI1000\fR\fI \fR
    63295949.RE
    63305950
    … …  
    63345954.RS 4
    63355955This option (an integer in kilobytes) specifies the max size the log file should grow to\&. Samba periodically checks the size and if it is exceeded it will rename the file, adding a
    6336 \FC\&.old\F[]
     5956\&.old
    63375957extension\&.
    63385958.sp
    … …  
    63405960.sp
    63415961Default:
    6342 \fI\fImax log size\fR\fR\fI = \fR\fI\FC5000\F[]\fR\fI \fR
    6343 .sp
    6344 Example:
    6345 \fI\fImax log size\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
     5962\fI\fImax log size\fR\fR\fI = \fR\fI5000\fR\fI \fR
     5963.sp
     5964Example:
     5965\fI\fImax log size\fR\fR\fI = \fR\fI1000\fR\fI \fR
    63465966.RE
    63475967
    … …  
    63535973.sp
    63545974Default:
    6355 \fI\fImax mux\fR\fR\fI = \fR\fI\FC50\F[]\fR\fI \fR
     5975\fI\fImax mux\fR\fR\fI = \fR\fI50\fR\fI \fR
    63565976.RE
    63575977
    … …  
    63675987.sp
    63685988Default:
    6369 \fI\fImax open files\fR\fR\fI = \fR\fI\FC10000\F[]\fR\fI \fR
     5989\fI\fImax open files\fR\fR\fI = \fR\fI10000\fR\fI \fR
    63705990.RE
    63715991
    … …  
    63795999.sp
    63806000Default:
    6381 \fI\fImax print jobs\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
    6382 .sp
    6383 Example:
    6384 \fI\fImax print jobs\fR\fR\fI = \fR\fI\FC5000\F[]\fR\fI \fR
     6001\fI\fImax print jobs\fR\fR\fI = \fR\fI1000\fR\fI \fR
     6002.sp
     6003Example:
     6004\fI\fImax print jobs\fR\fR\fI = \fR\fI5000\fR\fI \fR
    63856005.RE
    63866006
    … …  
    64616081.sp
    64626082Default:
    6463 \fI\fImax protocol\fR\fR\fI = \fR\fI\FCNT1\F[]\fR\fI \fR
    6464 .sp
    6465 Example:
    6466 \fI\fImax protocol\fR\fR\fI = \fR\fI\FCLANMAN1\F[]\fR\fI \fR
     6083\fI\fImax protocol\fR\fR\fI = \fR\fINT1\fR\fI \fR
     6084.sp
     6085Example:
     6086\fI\fImax protocol\fR\fR\fI = \fR\fILANMAN1\fR\fI \fR
    64676087.RE
    64686088
    … …  
    64746094.sp
    64756095Default:
    6476 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    6477 .sp
    6478 Example:
    6479 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
     6096\fI\fImax reported print jobs\fR\fR\fI = \fR\fI0\fR\fI \fR
     6097.sp
     6098Example:
     6099\fI\fImax reported print jobs\fR\fR\fI = \fR\fI1000\fR\fI \fR
    64806100.RE
    64816101
    … …  
    64916111.sp
    64926112Default:
    6493 \fI\fImax smbd processes\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    6494 .sp
    6495 Example:
    6496 \fI\fImax smbd processes\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR
     6113\fI\fImax smbd processes\fR\fR\fI = \fR\fI0\fR\fI \fR
     6114.sp
     6115Example:
     6116\fI\fImax smbd processes\fR\fR\fI = \fR\fI1000\fR\fI \fR
    64976117.RE
    64986118
    … …  
    65066126.sp
    65076127Default:
    6508 \fI\fImax stat cache size\fR\fR\fI = \fR\fI\FC256\F[]\fR\fI \fR
    6509 .sp
    6510 Example:
    6511 \fI\fImax stat cache size\fR\fR\fI = \fR\fI\FC100\F[]\fR\fI \fR
     6128\fI\fImax stat cache size\fR\fR\fI = \fR\fI256\fR\fI \fR
     6129.sp
     6130Example:
     6131\fI\fImax stat cache size\fR\fR\fI = \fR\fI100\fR\fI \fR
    65126132.RE
    65136133
    … …  
    65196139\fBnmbd\fR(8)
    65206140what the default \'time to live\' of NetBIOS names should be (in seconds) when
    6521 \FCnmbd\F[]
     6141nmbd
    65226142is requesting a name using either a broadcast packet or from a WINS server\&. You should never need to change this parameter\&. The default is 3 days\&.
    65236143.sp
    65246144Default:
    6525 \fI\fImax ttl\fR\fR\fI = \fR\fI\FC259200\F[]\fR\fI \fR
     6145\fI\fImax ttl\fR\fR\fI = \fR\fI259200\fR\fI \fR
    65266146.RE
    65276147
    … …  
    65336153\fBsmbd\fR(8)
    65346154when acting as a WINS server (\m[blue]\fBwins support = yes\fR\m[]) what the maximum \'time to live\' of NetBIOS names that
    6535 \FCnmbd\F[]
     6155nmbd
    65366156will grant will be (in seconds)\&. You should never need to change this parameter\&. The default is 6 days (518400 seconds)\&.
    65376157.sp
    65386158Default:
    6539 \fI\fImax wins ttl\fR\fR\fI = \fR\fI\FC518400\F[]\fR\fI \fR
     6159\fI\fImax wins ttl\fR\fR\fI = \fR\fI518400\fR\fI \fR
    65406160.RE
    65416161
    … …  
    65476167.sp
    65486168Default:
    6549 \fI\fImax xmit\fR\fR\fI = \fR\fI\FC16644\F[]\fR\fI \fR
    6550 .sp
    6551 Example:
    6552 \fI\fImax xmit\fR\fR\fI = \fR\fI\FC8192\F[]\fR\fI \fR
     6169\fI\fImax xmit\fR\fR\fI = \fR\fI16644\fR\fI \fR
     6170.sp
     6171Example:
     6172\fI\fImax xmit\fR\fR\fI = \fR\fI8192\fR\fI \fR
    65536173.RE
    65546174
    … …  
    65666186.RS 4
    65676187.\}
    6568 .fam C
    6569 .ps -1
    65706188.nf
    6571 .if t \{\
    6572 .sp -1
    6573 .\}
    6574 .BB lightgray adjust-for-leading-newline
    6575 .sp -1
    6576 
    6577 \FCmessage command = csh \-c \'xedit %s;rm %s\' &\F[]
    6578 .EB lightgray adjust-for-leading-newline
    6579 .if t \{\
    6580 .sp 1
    6581 .\}
     6189message command = csh \-c \'xedit %s;rm %s\' &
    65826190.fi
    6583 .fam
    6584 .ps +1
    65856191.if n \{\
    65866192.RE
    … …  
    65886194.sp
    65896195This delivers the message using
    6590 \FCxedit\F[], then removes it afterwards\&.
     6196xedit, then removes it afterwards\&.
    65916197\fINOTE THAT IT IS VERY IMPORTANT THAT THIS COMMAND RETURN IMMEDIATELY\fR\&. That\'s why I have the \'&\' on the end\&. If it doesn\'t return immediately then your PCs may freeze when sending messages (they should recover after 30 seconds, hopefully)\&.
    65926198.sp
    … …  
    66416247.RS 4
    66426248.\}
    6643 .fam C
    6644 .ps -1
    66456249.nf
    6646 .if t \{\
    6647 .sp -1
    6648 .\}
    6649 .BB lightgray adjust-for-leading-newline
    6650 .sp -1
    6651 
    6652 \FCmessage command = /bin/mail \-s \'message from %f on %m\' root < %s; rm %s\F[]
    6653 .EB lightgray adjust-for-leading-newline
    6654 .if t \{\
    6655 .sp 1
    6656 .\}
     6250message command = /bin/mail \-s \'message from %f on %m\' root < %s; rm %s
    66576251.fi
    6658 .fam
    6659 .ps +1
    66606252.if n \{\
    66616253.RE
    … …  
    66696261.RS 4
    66706262.\}
    6671 .fam C
    6672 .ps -1
    66736263.nf
    6674 .if t \{\
    6675 .sp -1
    6676 .\}
    6677 .BB lightgray adjust-for-leading-newline
    6678 .sp -1
    6679 
    6680 \FCmessage command = rm %s\F[]
    6681 .EB lightgray adjust-for-leading-newline
    6682 .if t \{\
    6683 .sp 1
    6684 .\}
     6264message command = rm %s
    66856265.fi
    6686 .fam
    6687 .ps +1
    66886266.if n \{\
    66896267.RE
    … …  
    66916269.sp
    66926270Default:
    6693 \fI\fImessage command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    6694 .sp
    6695 Example:
    6696 \fI\fImessage command\fR\fR\fI = \fR\fI\FCcsh \-c \'xedit %s; rm %s\' &\F[]\fR\fI \fR
     6271\fI\fImessage command\fR\fR\fI = \fR\fI\fR\fI \fR
     6272.sp
     6273Example:
     6274\fI\fImessage command\fR\fR\fI = \fR\fIcsh \-c \'xedit %s; rm %s\' &\fR\fI \fR
    66976275.RE
    66986276
    … …  
    67046282.sp
    67056283Default:
    6706 \fI\fImin print space\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    6707 .sp
    6708 Example:
    6709 \fI\fImin print space\fR\fR\fI = \fR\fI\FC2000\F[]\fR\fI \fR
     6284\fI\fImin print space\fR\fR\fI = \fR\fI0\fR\fI \fR
     6285.sp
     6286Example:
     6287\fI\fImin print space\fR\fR\fI = \fR\fI2000\fR\fI \fR
    67106288.RE
    67116289
    … …  
    67176295\m[blue]\fBmax protocol\fR\m[]
    67186296parameter for a list of valid protocol names and a brief description of each\&. You may also wish to refer to the C source code in
    6719 \FCsource/smbd/negprot\&.c\F[]
     6297source/smbd/negprot\&.c
    67206298for a listing of known protocol dialects supported by clients\&.
    67216299.sp
    … …  
    67256303.sp
    67266304Default:
    6727 \fI\fImin protocol\fR\fR\fI = \fR\fI\FCCORE\F[]\fR\fI \fR
    6728 .sp
    6729 Example:
    6730 \fI\fImin protocol\fR\fR\fI = \fR\fI\FCNT1\F[]\fR\fI \fR
     6305\fI\fImin protocol\fR\fR\fI = \fR\fICORE\fR\fI \fR
     6306.sp
     6307Example:
     6308\fI\fImin protocol\fR\fR\fI = \fR\fINT1\fR\fI \fR
    67316309.RE
    67326310
    … …  
    67446322.sp
    67456323Default:
    6746 \fI\fImin receivefile size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     6324\fI\fImin receivefile size\fR\fR\fI = \fR\fI0\fR\fI \fR
    67476325.RE
    67486326
    … …  
    67546332\fBnmbd\fR(8)
    67556333when acting as a WINS server (\m[blue]\fBwins support = yes\fR\m[]) what the minimum \'time to live\' of NetBIOS names that
    6756 \FCnmbd\F[]
     6334nmbd
    67576335will grant will be (in seconds)\&. You should never need to change this parameter\&. The default is 6 hours (21600 seconds)\&.
    67586336.sp
    67596337Default:
    6760 \fI\fImin wins ttl\fR\fR\fI = \fR\fI\FC21600\F[]\fR\fI \fR
     6338\fI\fImin wins ttl\fR\fR\fI = \fR\fI21600\fR\fI \fR
    67616339.RE
    67626340
    … …  
    67766354.sp
    67776355Example:
    6778 \fI\fImsdfs proxy\fR\fR\fI = \fR\fI\FC\eotherserver\esomeshare\F[]\fR\fI \fR
     6356\fI\fImsdfs proxy\fR\fR\fI = \fR\fI\eotherserver\esomeshare\fR\fI \fR
    67796357.RE
    67806358
    … …  
    67856363If set to
    67866364\fByes\fR, Samba treats the share as a Dfs root and allows clients to browse the distributed file system tree rooted at the share directory\&. Dfs links are specified in the share directory by symbolic links of the form
    6787 \FCmsdfs:serverA\e\eshareA,serverB\e\eshareB\F[]
     6365msdfs:serverA\e\eshareA,serverB\e\eshareB
    67886366and so on\&. For more information on setting up a Dfs tree on Samba, refer to the MSDFS chapter in the Samba3\-HOWTO book\&.
    67896367.sp
    67906368Default:
    6791 \fI\fImsdfs root\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6369\fI\fImsdfs root\fR\fR\fI = \fR\fIno\fR\fI \fR
    67926370.RE
    67936371
    … …  
    67996377.sp
    68006378Default:
    6801 \fI\fIname cache timeout\fR\fR\fI = \fR\fI\FC660\F[]\fR\fI \fR
    6802 .sp
    6803 Example:
    6804 \fI\fIname cache timeout\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     6379\fI\fIname cache timeout\fR\fR\fI = \fR\fI660\fR\fI \fR
     6380.sp
     6381Example:
     6382\fI\fIname cache timeout\fR\fR\fI = \fR\fI0\fR\fI \fR
    68056383.RE
    68066384
    … …  
    68376415\fBhost\fR
    68386416: Do a standard host name to IP address resolution, using the system
    6839 \FC/etc/hosts \F[], NIS, or DNS lookups\&. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the
    6840 \FC/etc/nsswitch\&.conf\F[]
     6417/etc/hosts, NIS, or DNS lookups\&. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the
     6418/etc/nsswitch\&.conf
    68416419file\&. Note that this method is used only if the NetBIOS name type being queried is the 0x20 (server) name type or 0x1c (domain controllers)\&. The latter case is only useful for active directory domains and results in a DNS query for the SRV RR entry matching _ldap\&._tcp\&.domain\&.
    68426420.RE
    … …  
    68726450The example below will cause the local lmhosts file to be examined first, followed by a broadcast attempt, followed by a normal system hostname lookup\&.
    68736451.sp
    6874 When Samba is functioning in ADS security mode (\FCsecurity = ads\F[]) it is advised to use following settings for
     6452When Samba is functioning in ADS security mode (security = ads) it is advised to use following settings for
    68756453\fIname resolve order\fR:
    68766454.sp
    6877 \FCname resolve order = wins bcast\F[]
     6455name resolve order = wins bcast
    68786456.sp
    68796457DC lookups will still be done via DNS, but fallbacks to netbios names will not inundate your DNS servers with needless querys for DOMAIN<0x1c> lookups\&.
    68806458.sp
    68816459Default:
    6882 \fI\fIname resolve order\fR\fR\fI = \fR\fI\FClmhosts host wins bcast\F[]\fR\fI \fR
    6883 .sp
    6884 Example:
    6885 \fI\fIname resolve order\fR\fR\fI = \fR\fI\FClmhosts bcast host\F[]\fR\fI \fR
     6460\fI\fIname resolve order\fR\fR\fI = \fR\fIlmhosts host wins bcast\fR\fI \fR
     6461.sp
     6462Example:
     6463\fI\fIname resolve order\fR\fR\fI = \fR\fIlmhosts bcast host\fR\fI \fR
    68866464.RE
    68876465
    … …  
    68936471.sp
    68946472Default:
    6895 \fI\fInetbios aliases\fR\fR\fI = \fR\fI\FC # empty string (no additional names)\F[]\fR\fI \fR
    6896 .sp
    6897 Example:
    6898 \fI\fInetbios aliases\fR\fR\fI = \fR\fI\FCTEST TEST1 TEST2\F[]\fR\fI \fR
     6473\fI\fInetbios aliases\fR\fR\fI = \fR\fI # empty string (no additional names)\fR\fI \fR
     6474.sp
     6475Example:
     6476\fI\fInetbios aliases\fR\fR\fI = \fR\fITEST TEST1 TEST2\fR\fI \fR
    68996477.RE
    69006478
    … …  
    69066484.sp
    69076485There is a bug in Samba\-3 that breaks operation of browsing and access to shares if the netbios name is set to the literal name
    6908 \FCPIPE\F[]\&. To avoid this problem, do not name your Samba\-3 server
    6909 \FCPIPE\F[]\&.
    6910 .sp
    6911 Default:
    6912 \fI\fInetbios name\fR\fR\fI = \fR\fI\FC # machine DNS name\F[]\fR\fI \fR
    6913 .sp
    6914 Example:
    6915 \fI\fInetbios name\fR\fR\fI = \fR\fI\FCMYNAME\F[]\fR\fI \fR
     6486PIPE\&. To avoid this problem, do not name your Samba\-3 server
     6487PIPE\&.
     6488.sp
     6489Default:
     6490\fI\fInetbios name\fR\fR\fI = \fR\fI # machine DNS name\fR\fI \fR
     6491.sp
     6492Example:
     6493\fI\fInetbios name\fR\fR\fI = \fR\fIMYNAME\fR\fI \fR
    69166494.RE
    69176495
    … …  
    69236501.sp
    69246502Default:
    6925 \fI\fInetbios scope\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     6503\fI\fInetbios scope\fR\fR\fI = \fR\fI\fR\fI \fR
    69266504.RE
    69276505
    … …  
    69416519.sp
    69426520Default:
    6943 \fI\fInis homedir\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6521\fI\fInis homedir\fR\fR\fI = \fR\fIno\fR\fI \fR
    69446522.RE
    69456523
    … …  
    69536531.sp
    69546532Default:
    6955 \fI\fInt acl support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6533\fI\fInt acl support\fR\fR\fI = \fR\fIyes\fR\fI \fR
    69566534.RE
    69576535
    … …  
    69656543.sp
    69666544If this option, and
    6967 \FClanman auth\F[]
     6545lanman auth
    69686546are both disabled, then only NTLMv2 logins will be permited\&. Not all clients support NTLMv2, and most will require special configuration to use it\&.
    69696547.sp
    69706548Default:
    6971 \fI\fIntlm auth\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6549\fI\fIntlm auth\fR\fR\fI = \fR\fIyes\fR\fI \fR
    69726550.RE
    69736551
    … …  
    69836561.sp
    69846562Default:
    6985 \fI\fInt pipe support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6563\fI\fInt pipe support\fR\fR\fI = \fR\fIyes\fR\fI \fR
    69866564.RE
    69876565
    … …  
    69996577.sp
    70006578Default:
    7001 \fI\fInt status support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6579\fI\fInt status support\fR\fR\fI = \fR\fIyes\fR\fI \fR
    70026580.RE
    70036581
    … …  
    70126590.sp
    70136591Default:
    7014 \fI\fInull passwords\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6592\fI\fInull passwords\fR\fR\fI = \fR\fIno\fR\fI \fR
    70156593.RE
    70166594
    … …  
    70236601.sp
    70246602Default:
    7025 \fI\fIobey pam restrictions\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6603\fI\fIobey pam restrictions\fR\fR\fI = \fR\fIno\fR\fI \fR
    70266604.RE
    70276605
    … …  
    70396617.sp
    70406618Note that this also means Samba won\'t try to deduce usernames from the service name\&. This can be annoying for the [homes] section\&. To get around this you could use
    7041 \FCuser = %S\F[]
     6619user = %S
    70426620which means your
    70436621\fIuser\fR
    … …  
    70456623.sp
    70466624Default:
    7047 \fI\fIonly user\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6625\fI\fIonly user\fR\fR\fI = \fR\fIno\fR\fI \fR
    70486626.RE
    70496627
    … …  
    70576635.\}
    70586636.RS 4
    7059 .BM yellow
    70606637.it 1 an-trap
    70616638.nr an-no-space-flag 1
    … …  
    70686645DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE\&.
    70696646.sp .5v
    7070 .EM yellow
    7071 .RE
    7072 Default:
    7073 \fI\fIoplock break wait time\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     6647.RE
     6648Default:
     6649\fI\fIoplock break wait time\fR\fR\fI = \fR\fI0\fR\fI \fR
    70746650.RE
    70756651
    … …  
    70866662In brief it specifies a number, which causes
    70876663\fBsmbd\fR(8)not to grant an oplock even when requested if the approximate number of clients contending for an oplock on the same file goes over this limit\&. This causes
    7088 \FCsmbd\F[]
     6664smbd
    70896665to behave in a similar way to Windows NT\&.
    70906666.if n \{\
    … …  
    70926668.\}
    70936669.RS 4
    7094 .BM yellow
    70956670.it 1 an-trap
    70966671.nr an-no-space-flag 1
    … …  
    71036678DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE\&.
    71046679.sp .5v
    7105 .EM yellow
    7106 .RE
    7107 Default:
    7108 \fI\fIoplock contention limit\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR
     6680.RE
     6681Default:
     6682\fI\fIoplock contention limit\fR\fR\fI = \fR\fI2\fR\fI \fR
    71096683.RE
    71106684
    … …  
    71146688.RS 4
    71156689This boolean option tells
    7116 \FCsmbd\F[]
     6690smbd
    71176691whether to issue oplocks (opportunistic locks) to file open requests on this share\&. The oplock code can dramatically (approx\&. 30% or more) improve the speed of access to files on Samba servers\&. It allows the clients to aggressively cache files locally and you may want to disable this option for unreliable network environments (it is turned on by default in Windows NT Servers)\&. For more information see the file
    7118 \FCSpeed\&.txt\F[]
     6692Speed\&.txt
    71196693in the Samba
    7120 \FCdocs/\F[]
     6694docs/
    71216695directory\&.
    71226696.sp
    … …  
    71286702.sp
    71296703Default:
    7130 \fI\fIoplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6704\fI\fIoplocks\fR\fR\fI = \fR\fIyes\fR\fI \fR
    71316705.RE
    71326706
    … …  
    71406714.sp
    71416715For example, a valid entry using the HP LaserJet 5 printer driver would appear as
    7142 \FCHP LaserJet 5L = LASERJET\&.HP LaserJet 5L\F[]\&.
     6716HP LaserJet 5L = LASERJET\&.HP LaserJet 5L\&.
    71436717.sp
    71446718The need for the file is due to the printer driver namespace problem described in the chapter on Classical Printing in the Samba3\-HOWTO book\&. For more details on OS/2 clients, please refer to chapter on other clients in the Samba3\-HOWTO book\&.
    71456719.sp
    71466720Default:
    7147 \fI\fIos2 driver map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     6721\fI\fIos2 driver map\fR\fR\fI = \fR\fI\fR\fI \fR
    71486722.RE
    71496723
    … …  
    71646738.sp
    71656739Default:
    7166 \fI\fIos level\fR\fR\fI = \fR\fI\FC20\F[]\fR\fI \fR
    7167 .sp
    7168 Example:
    7169 \fI\fIos level\fR\fR\fI = \fR\fI\FC65\F[]\fR\fI \fR
     6740\fI\fIos level\fR\fR\fI = \fR\fI20\fR\fI \fR
     6741.sp
     6742Example:
     6743\fI\fIos level\fR\fR\fI = \fR\fI65\fR\fI \fR
    71706744.RE
    71716745
    … …  
    71806754.sp
    71816755Default:
    7182 \fI\fIpam password change\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6756\fI\fIpam password change\fR\fR\fI = \fR\fIno\fR\fI \fR
    71836757.RE
    71846758
    … …  
    71946768.sp
    71956769Default:
    7196 \fI\fIpanic action\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7197 .sp
    7198 Example:
    7199 \fI\fIpanic action\fR\fR\fI = \fR\fI\FC"/bin/sleep 90000"\F[]\fR\fI \fR
     6770\fI\fIpanic action\fR\fR\fI = \fR\fI\fR\fI \fR
     6771.sp
     6772Example:
     6773\fI\fIpanic action\fR\fR\fI = \fR\fI"/bin/sleep 90000"\fR\fI \fR
    72006774.RE
    72016775
    … …  
    72096783.sp
    72106784Default:
    7211 \fI\fIparanoid server security\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     6785\fI\fIparanoid server security\fR\fR\fI = \fR\fIyes\fR\fI \fR
    72126786.RE
    72136787
    … …  
    72306804.IP \(bu 2.3
    72316805.\}
    7232 \FCsmbpasswd\F[]
     6806smbpasswd
    72336807\- The default smbpasswd backend\&. Takes a path to the smbpasswd file as an optional argument\&.
    72346808.RE
    … …  
    72426816.IP \(bu 2.3
    72436817.\}
    7244 \FCtdbsam\F[]
     6818tdbsam
    72456819\- The TDB based password storage backend\&. Takes a path to the TDB as an optional argument (defaults to passdb\&.tdb in the
    72466820\m[blue]\fBprivate dir\fR\m[]
    … …  
    72566830.IP \(bu 2.3
    72576831.\}
    7258 \FCldapsam\F[]
     6832ldapsam
    72596833\- The LDAP based passdb backend\&. Takes an LDAP URL as an optional argument (defaults to
    7260 \FCldap://localhost\F[])
     6834ldap://localhost)
    72616835.sp
    72626836LDAP connections should be secured where possible\&. This may be done using either Start\-TLS (see
    … …  
    72746848.RS 4
    72756849.\}
    7276 .fam C
    7277 .ps -1
    72786850.nf
    7279 .if t \{\
    7280 .sp -1
    7281 .\}
    7282 .BB lightgray adjust-for-leading-newline
    7283 .sp -1
    7284 
    72856851passdb backend = tdbsam:/etc/samba/private/passdb\&.tdb
    72866852
    … …  
    72926858
    72936859passdb backend = ldapsam:"ldap://ldap\-1\&.example\&.com ldap\-2\&.example\&.com"
    7294 .EB lightgray adjust-for-leading-newline
    7295 .if t \{\
    7296 .sp 1
    7297 .\}
    72986860.fi
    7299 .fam
    7300 .ps +1
    73016861.if n \{\
    73026862.RE
    … …  
    73046864.sp
    73056865Default:
    7306 \fI\fIpassdb backend\fR\fR\fI = \fR\fI\FCsmbpasswd\F[]\fR\fI \fR
     6866\fI\fIpassdb backend\fR\fR\fI = \fR\fIsmbpasswd\fR\fI \fR
    73076867.RE
    73086868
    … …  
    73146874.sp
    73156875Default:
    7316 \fI\fIpassdb expand explicit\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6876\fI\fIpassdb expand explicit\fR\fR\fI = \fR\fIno\fR\fI \fR
    73176877.RE
    73186878
    … …  
    73286888\m[blue]\fBdebug level\fR\m[]
    73296889of 100\&. This is a dangerous option as it will allow plaintext passwords to be seen in the
    7330 \FCsmbd\F[]
     6890smbd
    73316891log\&. It is available to help Samba admins debug their
    73326892\fIpasswd chat\fR
    … …  
    73386898.sp
    73396899Default:
    7340 \fI\fIpasswd chat debug\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     6900\fI\fIpasswd chat debug\fR\fR\fI = \fR\fIno\fR\fI \fR
    73416901.RE
    73426902
    … …  
    73486908.sp
    73496909Default:
    7350 \fI\fIpasswd chat timeout\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR
     6910\fI\fIpasswd chat timeout\fR\fR\fI = \fR\fI2\fR\fI \fR
    73516911.RE
    73526912
    … …  
    73906950.sp
    73916951Default:
    7392 \fI\fIpasswd chat\fR\fR\fI = \fR\fI\FC*new*password* %n\en*new*password* %n\en *changed*\F[]\fR\fI \fR
    7393 .sp
    7394 Example:
    7395 \fI\fIpasswd chat\fR\fR\fI = \fR\fI\FC"*Enter NEW password*" %n\en "*Reenter NEW password*" %n\en "*Password changed*"\F[]\fR\fI \fR
     6952\fI\fIpasswd chat\fR\fR\fI = \fR\fI*new*password* %n\en*new*password* %n\en *changed*\fR\fI \fR
     6953.sp
     6954Example:
     6955\fI\fIpasswd chat\fR\fR\fI = \fR\fI"*Enter NEW password*" %n\en "*Reenter NEW password*" %n\en "*Password changed*"\fR\fI \fR
    73966956.RE
    73976957
    … …  
    74166976\fIAS ROOT\fR
    74176977before the SMB password in the smbpasswd file is changed\&. If this UNIX password change fails, then
    7418 \FCsmbd\F[]
     6978smbd
    74196979will fail to change the SMB password also (this is by design)\&.
    74206980.sp
    … …  
    74316991.sp
    74326992Default:
    7433 \fI\fIpasswd program\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7434 .sp
    7435 Example:
    7436 \fI\fIpasswd program\fR\fR\fI = \fR\fI\FC/bin/passwd %u\F[]\fR\fI \fR
     6993\fI\fIpasswd program\fR\fR\fI = \fR\fI\fR\fI \fR
     6994.sp
     6995Example:
     6996\fI\fIpasswd program\fR\fR\fI = \fR\fI/bin/passwd %u\fR\fI \fR
    74376997.RE
    74386998
    … …  
    74677027.sp
    74687028Default:
    7469 \fI\fIpassword level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    7470 .sp
    7471 Example:
    7472 \fI\fIpassword level\fR\fR\fI = \fR\fI\FC4\F[]\fR\fI \fR
     7029\fI\fIpassword level\fR\fR\fI = \fR\fI0\fR\fI \fR
     7030.sp
     7031Example:
     7032\fI\fIpassword level\fR\fR\fI = \fR\fI4\fR\fI \fR
    74737033.RE
    74747034
    … …  
    74787038.RS 4
    74797039By specifying the name of another SMB server or Active Directory domain controller with this option, and using
    7480 \FCsecurity = [ads|domain|server]\F[]
     7040security = [ads|domain|server]
    74817041it is possible to get Samba to do all its username/password validation using a specific remote server\&.
    74827042.sp
    … …  
    74927052.\}
    74937053.RS 4
    7494 .BM yellow
    74957054.it 1 an-trap
    74967055.nr an-no-space-flag 1
    … …  
    75047063\fIDO NOT CHOOSE A PASSWORD SERVER THAT YOU DON\'T COMPLETELY TRUST\fR\&.
    75057064.sp .5v
    7506 .EM yellow
    75077065.RE
    75087066Never point a Samba server at itself for password serving\&. This will cause a loop and could lock up your Samba server!
    … …  
    75177075or
    75187076\fBads\fR, then the list of machines in this option must be a list of Primary or Backup Domain controllers for the Domain or the character \'*\', as the Samba server is effectively in that domain, and will use cryptographically authenticated RPC calls to authenticate the user logging on\&. The advantage of using
    7519 \FC security = domain\F[]
     7077security = domain
    75207078is that if you list several hosts in the
    75217079\fIpassword server\fR
    75227080option then
    7523 \FCsmbd \F[]
     7081smbd
    75247082will try each in turn till it finds one that responds\&. This is useful in case your primary server goes down\&.
    75257083.sp
    … …  
    75367094parameter is set to
    75377095\fBserver\fR, then there are different restrictions that
    7538 \FCsecurity = domain\F[]
     7096security = domain
    75397097doesn\'t suffer from:
    75407098.sp
    … …  
    75507108\fIpassword server\fR
    75517109parameter, however if an
    7552 \FCsmbd\F[]
     7110smbd
    75537111makes a connection to a password server, and then the password server fails, no more users will be able to be authenticated from this
    7554 \FCsmbd\F[]\&. This is a restriction of the SMB/CIFS protocol when in
    7555 \FCsecurity = server \F[]
     7112smbd\&. This is a restriction of the SMB/CIFS protocol when in
     7113security = server
    75567114mode and cannot be fixed in Samba\&.
    75577115.RE
    … …  
    75667124.\}
    75677125If you are using a Windows NT server as your password server then you will have to ensure that your users are able to login from the Samba server, as when in
    7568 \FC security = server\F[]
     7126security = server
    75697127mode the network logon will appear to come from there rather than from the users workstation\&.
    75707128.sp
    75717129.RE
    75727130Default:
    7573 \fI\fIpassword server\fR\fR\fI = \fR\fI\FC*\F[]\fR\fI \fR
    7574 .sp
    7575 Example:
    7576 \fI\fIpassword server\fR\fR\fI = \fR\fI\FCNT\-PDC, NT\-BDC1, NT\-BDC2, *\F[]\fR\fI \fR
    7577 .sp
    7578 Example:
    7579 \fI\fIpassword server\fR\fR\fI = \fR\fI\FCwindc\&.mydomain\&.com:389 192\&.168\&.1\&.101 *\F[]\fR\fI \fR
     7131\fI\fIpassword server\fR\fR\fI = \fR\fI*\fR\fI \fR
     7132.sp
     7133Example:
     7134\fI\fIpassword server\fR\fR\fI = \fR\fINT\-PDC, NT\-BDC1, NT\-BDC2, *\fR\fI \fR
     7135.sp
     7136Example:
     7137\fI\fIpassword server\fR\fR\fI = \fR\fIwindc\&.mydomain\&.com:389 192\&.168\&.1\&.101 *\fR\fI \fR
    75807138.RE
    75817139
    … …  
    76077165.sp
    76087166Default:
    7609 \fI\fIpath\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7610 .sp
    7611 Example:
    7612 \fI\fIpath\fR\fR\fI = \fR\fI\FC/home/fred\F[]\fR\fI \fR
     7167\fI\fIpath\fR\fR\fI = \fR\fI\fR\fI \fR
     7168.sp
     7169Example:
     7170\fI\fIpath\fR\fR\fI = \fR\fI/home/fred\fR\fI \fR
    76137171.RE
    76147172
    … …  
    76207178.sp
    76217179Default:
    7622 \fI\fIpid directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR
    7623 .sp
    7624 Example:
    7625 \fI\fIpid directory\fR\fR\fI = \fR\fI\FCpid directory = /var/run/\F[]\fR\fI \fR
     7180\fI\fIpid directory\fR\fR\fI = \fR\fI${prefix}/var/locks\fR\fI \fR
     7181.sp
     7182Example:
     7183\fI\fIpid directory\fR\fR\fI = \fR\fIpid directory = /var/run/\fR\fI \fR
    76267184.RE
    76277185
    … …  
    76357193.sp
    76367194Default:
    7637 \fI\fIposix locking\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     7195\fI\fIposix locking\fR\fR\fI = \fR\fIyes\fR\fI \fR
    76387196.RE
    76397197
    … …  
    76467204An interesting example may be to unmount server resources:
    76477205.sp
    7648 \FCpostexec = /etc/umount /cdrom\F[]
    7649 .sp
    7650 Default:
    7651 \fI\fIpostexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7652 .sp
    7653 Example:
    7654 \fI\fIpostexec\fR\fR\fI = \fR\fI\FCecho \e"%u disconnected from %S from %m (%I)\e" >> /tmp/log\F[]\fR\fI \fR
     7206postexec = /etc/umount /cdrom
     7207.sp
     7208Default:
     7209\fI\fIpostexec\fR\fR\fI = \fR\fI\fR\fI \fR
     7210.sp
     7211Example:
     7212\fI\fIpostexec\fR\fR\fI = \fR\fIecho \e"%u disconnected from %S from %m (%I)\e" >> /tmp/log\fR\fI \fR
    76557213.RE
    76567214
    … …  
    76647222.sp
    76657223Default:
    7666 \fI\fIpreexec close\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     7224\fI\fIpreexec close\fR\fR\fI = \fR\fIno\fR\fI \fR
    76677225.RE
    76687226
    … …  
    76847242.sp
    76857243
    7686 \FCpreexec = csh \-c \'echo \e"Welcome to %S!\e" | /usr/local/samba/bin/smbclient \-M %m \-I %I\' & \F[]
     7244preexec = csh \-c \'echo \e"Welcome to %S!\e" | /usr/local/samba/bin/smbclient \-M %m \-I %I\' &
    76877245.sp
    76887246Of course, this could get annoying after a while :\-)
    … …  
    76947252.sp
    76957253Default:
    7696 \fI\fIpreexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7697 .sp
    7698 Example:
    7699 \fI\fIpreexec\fR\fR\fI = \fR\fI\FCecho \e"%u connected to %S from %m (%I)\e" >> /tmp/log\F[]\fR\fI \fR
     7254\fI\fIpreexec\fR\fR\fI = \fR\fI\fR\fI \fR
     7255.sp
     7256Example:
     7257\fI\fIpreexec\fR\fR\fI = \fR\fIecho \e"%u connected to %S from %m (%I)\e" >> /tmp/log\fR\fI \fR
    77007258.RE
    77017259
    … …  
    77187276If this is set to
    77197277\fByes\fR, on startup,
    7720 \FCnmbd\F[]
     7278nmbd
    77217279will force an election, and it will have a slight advantage in winning the election\&. It is recommended that this parameter is used in conjunction with
    77227280\m[blue]\fBdomain master = yes\fR\m[], so that
    7723 \FCnmbd\F[]
     7281nmbd
    77247282can guarantee becoming a domain master\&.
    77257283.sp
    … …  
    77277285.sp
    77287286Default:
    7729 \fI\fIpreferred master\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
     7287\fI\fIpreferred master\fR\fR\fI = \fR\fIauto\fR\fI \fR
    77307288.RE
    77317289
    … …  
    77377295.sp
    77387296Default:
    7739 \fI\fIpreload modules\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7740 .sp
    7741 Example:
    7742 \fI\fIpreload modules\fR\fR\fI = \fR\fI\FC/usr/lib/samba/passdb/mysql\&.so\F[]\fR\fI \fR
     7297\fI\fIpreload modules\fR\fR\fI = \fR\fI\fR\fI \fR
     7298.sp
     7299Example:
     7300\fI\fIpreload modules\fR\fR\fI = \fR\fI/usr/lib/samba/passdb/mysql\&.so\fR\fI \fR
    77437301.RE
    77447302
    … …  
    77627320.sp
    77637321Default:
    7764 \fI\fIpreload\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    7765 .sp
    7766 Example:
    7767 \fI\fIpreload\fR\fR\fI = \fR\fI\FCfred lp colorlp\F[]\fR\fI \fR
     7322\fI\fIpreload\fR\fR\fI = \fR\fI\fR\fI \fR
     7323.sp
     7324Example:
     7325\fI\fIpreload\fR\fR\fI = \fR\fIfred lp colorlp\fR\fI \fR
    77687326.RE
    77697327
    … …  
    77807338.sp
    77817339Default:
    7782 \fI\fIpreserve case\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     7340\fI\fIpreserve case\fR\fR\fI = \fR\fIyes\fR\fI \fR
    77837341.RE
    77847342
    … …  
    78037361.sp
    78047362Default:
    7805 \fI\fIprintable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     7363\fI\fIprintable\fR\fR\fI = \fR\fIno\fR\fI \fR
    78067364.RE
    78077365
    … …  
    78157373.sp
    78167374Default:
    7817 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI\FC750\F[]\fR\fI \fR
    7818 .sp
    7819 Example:
    7820 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI\FC600\F[]\fR\fI \fR
     7375\fI\fIprintcap cache time\fR\fR\fI = \fR\fI750\fR\fI \fR
     7376.sp
     7377Example:
     7378\fI\fIprintcap cache time\fR\fR\fI = \fR\fI600\fR\fI \fR
    78217379.RE
    78227380
    … …  
    78347392.RS 4
    78357393This parameter may be used to override the compiled\-in default printcap name used by the server (usually
    7836 \FC /etc/printcap\F[])\&. See the discussion of the
     7394/etc/printcap)\&. See the discussion of the
    78377395[printers]
    78387396section above for reasons why you might want to do this\&.
    78397397.sp
    78407398To use the CUPS printing interface set
    7841 \FCprintcap name = cups \F[]\&. This should be supplemented by an addtional setting
     7399printcap name = cups\&. This should be supplemented by an addtional setting
    78427400\m[blue]\fBprinting = cups\fR\m[]
    78437401in the [global] section\&.
    7844 \FCprintcap name = cups\F[]
     7402printcap name = cups
    78457403will use the "dummy" printcap created by CUPS, as specified in your CUPS configuration file\&.
    78467404.sp
    78477405On System V systems that use
    7848 \FClpstat\F[]
     7406lpstat
    78497407to list available printers you can use
    7850 \FCprintcap name = lpstat \F[]
     7408printcap name = lpstat
    78517409to automatically obtain lists of available printers\&. This is the default for systems that define SYSV at configure time in Samba (this includes most System V based systems)\&. If
    78527410\fI printcap name\fR
    78537411is set to
    7854 \FClpstat\F[]
     7412lpstat
    78557413on these systems then Samba will launch
    7856 \FClpstat \-v\F[]
     7414lpstat \-v
    78577415and attempt to parse the output to obtain a printer list\&.
    78587416.sp
    … …  
    78627420.RS 4
    78637421.\}
    7864 .fam C
    7865 .ps -1
    78667422.nf
    7867 .if t \{\
    7868 .sp -1
    7869 .\}
    7870 .BB lightgray adjust-for-leading-newline
    7871 .sp -1
    7872 
    78737423print1|My Printer 1
    78747424print2|My Printer 2
    … …  
    78767426print4|My Printer 4
    78777427print5|My Printer 5
    7878 .EB lightgray adjust-for-leading-newline
    7879 .if t \{\
    7880 .sp 1
    7881 .\}
    78827428.fi
    7883 .fam
    7884 .ps +1
    78857429.if n \{\
    78867430.RE
    … …  
    78927436.\}
    78937437.RS 4
    7894 .BM yellow
    78957438.it 1 an-trap
    78967439.nr an-no-space-flag 1
    … …  
    79027445.br
    79037446Under AIX the default printcap name is
    7904 \FC/etc/qconfig\F[]\&. Samba will assume the file is in AIX
    7905 \FCqconfig\F[]
     7447/etc/qconfig\&. Samba will assume the file is in AIX
     7448qconfig
    79067449format if the string
    7907 \FCqconfig\F[]
     7450qconfig
    79087451appears in the printcap filename\&.
    79097452.sp .5v
    7910 .EM yellow
    7911 .RE
    7912 Default:
    7913 \fI\fIprintcap name\fR\fR\fI = \fR\fI\FC/etc/printcap\F[]\fR\fI \fR
    7914 .sp
    7915 Example:
    7916 \fI\fIprintcap name\fR\fR\fI = \fR\fI\FC/etc/myprintcap\F[]\fR\fI \fR
     7453.RE
     7454Default:
     7455\fI\fIprintcap name\fR\fR\fI = \fR\fI/etc/printcap\fR\fI \fR
     7456.sp
     7457Example:
     7458\fI\fIprintcap name\fR\fR\fI = \fR\fI/etc/myprintcap\fR\fI \fR
    79177459.RE
    79187460
    … …  
    79227464.RS 4
    79237465After a print job has finished spooling to a service, this command will be used via a
    7924 \FCsystem()\F[]
     7466system()
    79257467call to process the spool file\&. Typically the command specified will submit the spool file to the host\'s printing subsystem, but there is no requirement that this be the case\&. The server will not remove the spool file, so whatever command you specify should remove the spool file when it has been processed, otherwise you will need to manually remove old spool files\&.
    79267468.sp
    … …  
    79617503You can form quite complex print commands by realizing that they are just passed to a shell\&. For example the following will log a print job, print the file, then remove it\&. Note that \';\' is the usual separator for command in shell scripts\&.
    79627504.sp
    7963 \FCprint command = echo Printing %s >> /tmp/print\&.log; lpr \-P %p %s; rm %s\F[]
     7505print command = echo Printing %s >> /tmp/print\&.log; lpr \-P %p %s; rm %s
    79647506.sp
    79657507You may have to vary this command considerably depending on how you normally print files on your system\&. The default for the parameter varies depending on the setting of the
    … …  
    79687510.sp
    79697511Default: For
    7970 \FCprinting = BSD, AIX, QNX, LPRNG or PLP :\F[]
    7971 .sp
    7972 \FCprint command = lpr \-r \-P%p %s\F[]
     7512printing = BSD, AIX, QNX, LPRNG or PLP :
     7513.sp
     7514print command = lpr \-r \-P%p %s
    79737515.sp
    79747516For
    7975 \FCprinting = SYSV or HPUX :\F[]
    7976 .sp
    7977 \FCprint command = lp \-c \-d%p %s; rm %s\F[]
     7517printing = SYSV or HPUX :
     7518.sp
     7519print command = lp \-c \-d%p %s; rm %s
    79787520.sp
    79797521For
    7980 \FCprinting = SOFTQ :\F[]
    7981 .sp
    7982 \FCprint command = lp \-d%p \-s %s; rm %s\F[]
     7522printing = SOFTQ :
     7523.sp
     7524print command = lp \-d%p \-s %s; rm %s
    79837525.sp
    79847526For printing = CUPS : If SAMBA is compiled against libcups, then
    79857527\m[blue]\fBprintcap = cups\fR\m[]
    79867528uses the CUPS API to submit jobs, etc\&. Otherwise it maps to the System V commands with the \-oraw option for printing, i\&.e\&. it uses
    7987 \FClp \-c \-d%p \-oraw; rm %s\F[]\&. With
    7988 \FCprinting = cups\F[], and if SAMBA is compiled against libcups, any manually set print command will be ignored\&.
     7529lp \-c \-d%p \-oraw; rm %s\&. With
     7530printing = cups, and if SAMBA is compiled against libcups, any manually set print command will be ignored\&.
    79897531.sp
    79907532\fINo default\fR
    79917533.sp
    79927534Example:
    7993 \fI\fIprint command\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/myprintscript %p %s\F[]\fR\fI \fR
     7535\fI\fIprint command\fR\fR\fI = \fR\fI/usr/local/samba/bin/myprintscript %p %s\fR\fI \fR
    79947536.RE
    79957537
    … …  
    80037545.sp
    80047546Default:
    8005 \fI\fIprinter admin\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    8006 .sp
    8007 Example:
    8008 \fI\fIprinter admin\fR\fR\fI = \fR\fI\FCadmin, @staff\F[]\fR\fI \fR
     7547\fI\fIprinter admin\fR\fR\fI = \fR\fI\fR\fI \fR
     7548.sp
     7549Example:
     7550\fI\fIprinter admin\fR\fR\fI = \fR\fIadmin, @staff\fR\fI \fR
    80097551.RE
    80107552
    … …  
    80287570\m[blue]\fBprinter name\fR\m[]
    80297571may be
    8030 \FClp\F[]
     7572lp
    80317573on many systems\&.
    80327574.sp
    80337575Default:
    8034 \fI\fIprinter name\fR\fR\fI = \fR\fI\FCnone\F[]\fR\fI \fR
    8035 .sp
    8036 Example:
    8037 \fI\fIprinter name\fR\fR\fI = \fR\fI\FClaserwriter\F[]\fR\fI \fR
     7576\fI\fIprinter name\fR\fR\fI = \fR\fInone\fR\fI \fR
     7577.sp
     7578Example:
     7579\fI\fIprinter name\fR\fR\fI = \fR\fIlaserwriter\fR\fI \fR
    80387580.RE
    80397581
    … …  
    80747616.sp
    80757617Default:
    8076 \fI\fIprinting\fR\fR\fI = \fR\fI\FCDepends on the operating system, see \FCtestparm \-v\&.\F[]\F[]\fR\fI \fR
     7618\fI\fIprinting\fR\fR\fI = \fR\fIDepends on the operating system, see testparm \-v\&.\fR\fI \fR
    80777619.RE
    80787620
    … …  
    80847626.sp
    80857627Default:
    8086 \fI\fIprintjob username\fR\fR\fI = \fR\fI\FC%U\F[]\fR\fI \fR
    8087 .sp
    8088 Example:
    8089 \fI\fIprintjob username\fR\fR\fI = \fR\fI\FC%D\e%U\F[]\fR\fI \fR
     7628\fI\fIprintjob username\fR\fR\fI = \fR\fI%U\fR\fI \fR
     7629.sp
     7630Example:
     7631\fI\fIprintjob username\fR\fR\fI = \fR\fI%D\e%U\fR\fI \fR
    80907632.RE
    80917633
    … …  
    80957637.RS 4
    80967638This parameters defines the directory smbd will use for storing such files as
    8097 \FCsmbpasswd\F[]
     7639smbpasswd
    80987640and
    8099 \FCsecrets\&.tdb\F[]\&.
    8100 .sp
    8101 Default:
    8102 \fI\fIprivate dir\fR\fR\fI = \fR\fI\FC${prefix}/private\F[]\fR\fI \fR
     7641secrets\&.tdb\&.
     7642.sp
     7643Default:
     7644\fI\fIprivate dir\fR\fR\fI = \fR\fI${prefix}/private\fR\fI \fR
    81037645.RE
    81047646
    … …  
    81147656.sp
    81157657Default:
    8116 \fI\fIprofile acls\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     7658\fI\fIprofile acls\fR\fR\fI = \fR\fIno\fR\fI \fR
    81177659.RE
    81187660
    … …  
    81367678.sp
    81377679Example:
    8138 \fI\fIqueuepause command\fR\fR\fI = \fR\fI\FCdisable %p\F[]\fR\fI \fR
     7680\fI\fIqueuepause command\fR\fR\fI = \fR\fIdisable %p\fR\fI \fR
    81397681.RE
    81407682
    … …  
    81567698.sp
    81577699Default:
    8158 \fI\fIqueueresume command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    8159 .sp
    8160 Example:
    8161 \fI\fIqueueresume command\fR\fR\fI = \fR\fI\FCenable %p\F[]\fR\fI \fR
     7700\fI\fIqueueresume command\fR\fR\fI = \fR\fI\fR\fI \fR
     7701.sp
     7702Example:
     7703\fI\fIqueueresume command\fR\fR\fI = \fR\fIenable %p\fR\fI \fR
    81627704.RE
    81637705
    … …  
    81777719.sp
    81787720Default:
    8179 \fI\fIread list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    8180 .sp
    8181 Example:
    8182 \fI\fIread list\fR\fR\fI = \fR\fI\FCmary, @students\F[]\fR\fI \fR
     7721\fI\fIread list\fR\fR\fI = \fR\fI\fR\fI \fR
     7722.sp
     7723Example:
     7724\fI\fIread list\fR\fR\fI = \fR\fImary, @students\fR\fI \fR
    81837725.RE
    81847726
    … …  
    81937735\fByes\fR, then users of a service may not create or modify files in the service\'s directory\&.
    81947736.sp
    8195 Note that a printable service (\FCprintable = yes\F[]) will
     7737Note that a printable service (printable = yes) will
    81967738\fIALWAYS\fR
    81977739allow writing to the directory (user privileges permitting), but only via spooling operations\&.
    81987740.sp
    81997741Default:
    8200 \fI\fIread only\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     7742\fI\fIread only\fR\fR\fI = \fR\fIyes\fR\fI \fR
    82017743.RE
    82027744
    … …  
    82147756.sp
    82157757Default:
    8216 \fI\fIread raw\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     7758\fI\fIread raw\fR\fR\fI = \fR\fIyes\fR\fI \fR
    82177759.RE
    82187760
    … …  
    82227764.RS 4
    82237765This option specifies the kerberos realm to use\&. The realm is used as the ADS equivalent of the NT4
    8224 \FCdomain\F[]\&. It is usually set to the DNS name of the kerberos server\&.
    8225 .sp
    8226 Default:
    8227 \fI\fIrealm\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    8228 .sp
    8229 Example:
    8230 \fI\fIrealm\fR\fR\fI = \fR\fI\FCmysambabox\&.mycompany\&.com\F[]\fR\fI \fR
     7766domain\&. It is usually set to the DNS name of the kerberos server\&.
     7767.sp
     7768Default:
     7769\fI\fIrealm\fR\fR\fI = \fR\fI\fR\fI \fR
     7770.sp
     7771Example:
     7772\fI\fIrealm\fR\fR\fI = \fR\fImysambabox\&.mycompany\&.com\fR\fI \fR
    82317773.RE
    82327774
    … …  
    82487790.sp
    82497791Default:
    8250 \fI\fIregistry shares\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
    8251 .sp
    8252 Example:
    8253 \fI\fIregistry shares\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     7792\fI\fIregistry shares\fR\fR\fI = \fR\fIno\fR\fI \fR
     7793.sp
     7794Example:
     7795\fI\fIregistry shares\fR\fR\fI = \fR\fIyes\fR\fI \fR
    82547796.RE
    82557797
    … …  
    82697811.RS 4
    82707812.\}
    8271 .fam C
    8272 .ps -1
    82737813.nf
    8274 .if t \{\
    8275 .sp -1
    8276 .\}
    8277 .BB lightgray adjust-for-leading-newline
    8278 .sp -1
    8279 
    8280 \FCremote announce = 192\&.168\&.2\&.255/SERVERS 192\&.168\&.4\&.255/STAFF\F[]
    8281 .EB lightgray adjust-for-leading-newline
    8282 .if t \{\
    8283 .sp 1
    8284 .\}
     7814remote announce = 192\&.168\&.2\&.255/SERVERS 192\&.168\&.4\&.255/STAFF
    82857815.fi
    8286 .fam
    8287 .ps +1
    82887816.if n \{\
    82897817.RE
    … …  
    82917819.sp
    82927820the above line would cause
    8293 \FCnmbd\F[]
     7821nmbd
    82947822to announce itself to the two given IP addresses using the given workgroup names\&. If you leave out the workgroup name, then the one given in the
    82957823\m[blue]\fBworkgroup\fR\m[]
    … …  
    83017829.sp
    83027830Default:
    8303 \fI\fIremote announce\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     7831\fI\fIremote announce\fR\fR\fI = \fR\fI\fR\fI \fR
    83047832.RE
    83057833
    … …  
    83197847.RS 4
    83207848.\}
    8321 .fam C
    8322 .ps -1
    83237849.nf
    8324 .if t \{\
    8325 .sp -1
    8326 .\}
    8327 .BB lightgray adjust-for-leading-newline
    8328 .sp -1
    8329 
    83307850\fIremote browse sync = 192\&.168\&.2\&.255 192\&.168\&.4\&.255\fR
    8331 .EB lightgray adjust-for-leading-newline
    8332 .if t \{\
    8333 .sp 1
    8334 .\}
    83357851.fi
    8336 .fam
    8337 .ps +1
    83387852.if n \{\
    83397853.RE
    … …  
    83417855.sp
    83427856the above line would cause
    8343 \FCnmbd\F[]
     7857nmbd
    83447858to request the master browser on the specified subnets or addresses to synchronize their browse lists with the local server\&.
    83457859.sp
    … …  
    83517865.sp
    83527866Default:
    8353 \fI\fIremote browse sync\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     7867\fI\fIremote browse sync\fR\fR\fI = \fR\fI\fR\fI \fR
    83547868.RE
    83557869
    … …  
    83637877.sp
    83647878When a user with admin authority or SeAddUserPrivilege rights renames a user (e\&.g\&.: from the NT4 User Manager for Domains), this script will be run to rename the POSIX user\&. Two variables,
    8365 \FC%uold\F[]
     7879%uold
    83667880and
    8367 \FC%unew\F[], will be substituted with the old and new usernames, respectively\&. The script should return 0 upon successful completion, and nonzero otherwise\&.
     7881%unew, will be substituted with the old and new usernames, respectively\&. The script should return 0 upon successful completion, and nonzero otherwise\&.
    83687882.if n \{\
    83697883.sp
    83707884.\}
    83717885.RS 4
    8372 .BM yellow
    83737886.it 1 an-trap
    83747887.nr an-no-space-flag 1
    … …  
    83817894The script has all responsibility to rename all the necessary data that is accessible in this posix method\&. This can mean different requirements for different backends\&. The tdbsam and smbpasswd backends will take care of the contents of their respective files, so the script is responsible only for changing the POSIX username, and other data that may required for your circumstances, such as home directory\&. Please also consider whether or not you need to rename the actual home directories themselves\&. The ldapsam backend will not make any changes, because of the potential issues with renaming the LDAP naming attribute\&. In this case the script is responsible for changing the attribute that samba uses (uid) for locating users, as well as any data that needs to change for other applications using the same directory\&.
    83827895.sp .5v
    8383 .EM yellow
    8384 .RE
    8385 Default:
    8386 \fI\fIrename user script\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     7896.RE
     7897Default:
     7898\fI\fIrename user script\fR\fR\fI = \fR\fIno\fR\fI \fR
    83877899.RE
    83887900
    … …  
    83947906.sp
    83957907Default:
    8396 \fI\fIreset on zero vc\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     7908\fI\fIreset on zero vc\fR\fR\fI = \fR\fIno\fR\fI \fR
    83977909.RE
    83987910
    … …  
    84067918.RS 4
    84077919.\}
    8408 .fam C
    8409 .ps -1
    84107920.nf
    8411 .if t \{\
    8412 .sp -1
    8413 .\}
    8414 .BB lightgray adjust-for-leading-newline
    8415 .sp -1
    8416 
    84177921HKEY_LOCAL_MACHINE\eSYSTEM\eCurrentControlSet\e
    84187922           Control\eLSA\eRestrictAnonymous
    8419 .EB lightgray adjust-for-leading-newline
    8420 .if t \{\
    8421 .sp 1
    8422 .\}
    84237923.fi
    8424 .fam
    8425 .ps +1
    84267924.if n \{\
    84277925.RE
    … …  
    84357933.\}
    84367934.RS 4
    8437 .BM yellow
    84387935.it 1 an-trap
    84397936.nr an-no-space-flag 1
    … …  
    84487945on any share\&.
    84497946.sp .5v
    8450 .EM yellow
    8451 .RE
    8452 Default:
    8453 \fI\fIrestrict anonymous\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     7947.RE
     7948Default:
     7949\fI\fIrestrict anonymous\fR\fR\fI = \fR\fI0\fR\fI \fR
    84547950.RE
    84557951
    … …  
    84757971.RS 4
    84767972The server will
    8477 \FCchroot()\F[]
     7973chroot()
    84787974(i\&.e\&. Change its root directory) to this directory on startup\&. This is not strictly necessary for secure operation\&. Even without it the server will deny access to files not in one of the service entries\&. It may also check for, and deny access to, soft links to other parts of the filesystem, or attempts to use "\&.\&." in file names to access other directories (depending on the setting of the
    84797975\m[blue]\fBwide smbconfoptions\fR\m[]
    … …  
    84897985\fIroot directory\fR
    84907986tree\&. In particular you will need to mirror
    8491 \FC/etc/passwd\F[]
     7987/etc/passwd
    84927988(or a subset of it), and any binaries or configuration files needed for printing (if required)\&. The set of files that must be mirrored is operating system dependent\&.
    84937989.sp
    84947990Default:
    8495 \fI\fIroot directory\fR\fR\fI = \fR\fI\FC/\F[]\fR\fI \fR
    8496 .sp
    8497 Example:
    8498 \fI\fIroot directory\fR\fR\fI = \fR\fI\FC/homes/smb\F[]\fR\fI \fR
     7991\fI\fIroot directory\fR\fR\fI = \fR\fI/\fR\fI \fR
     7992.sp
     7993Example:
     7994\fI\fIroot directory\fR\fR\fI = \fR\fI/homes/smb\fR\fI \fR
    84997995.RE
    85007996
    … …  
    85088004.sp
    85098005Default:
    8510 \fI\fIroot postexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     8006\fI\fIroot postexec\fR\fR\fI = \fR\fI\fR\fI \fR
    85118007.RE
    85128008
    … …  
    85208016.sp
    85218017Default:
    8522 \fI\fIroot preexec close\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     8018\fI\fIroot preexec close\fR\fR\fI = \fR\fIno\fR\fI \fR
    85238019.RE
    85248020
    … …  
    85328028.sp
    85338029Default:
    8534 \fI\fIroot preexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
     8030\fI\fIroot preexec\fR\fR\fI = \fR\fI\fR\fI \fR
    85358031.RE
    85368032
    … …  
    85538049.sp
    85548050Default:
    8555 \fI\fIsecurity mask\fR\fR\fI = \fR\fI\FC0777\F[]\fR\fI \fR
    8556 .sp
    8557 Example:
    8558 \fI\fIsecurity mask\fR\fR\fI = \fR\fI\FC0770\F[]\fR\fI \fR
     8051\fI\fIsecurity mask\fR\fR\fI = \fR\fI0777\fR\fI \fR
     8052.sp
     8053Example:
     8054\fI\fIsecurity mask\fR\fR\fI = \fR\fI0770\fR\fI \fR
    85598055.RE
    85608056
    … …  
    85648060.RS 4
    85658061This option affects how clients respond to Samba and is one of the most important settings in the
    8566 \FC smb\&.conf\F[]
     8062smb\&.conf
    85678063file\&.
    85688064.sp
    … …  
    85728068.sp
    85738069The default is
    8574 \FCsecurity = user\F[], as this is the most common setting needed when talking to Windows 98 and Windows NT\&.
     8070security = user, as this is the most common setting needed when talking to Windows 98 and Windows NT\&.
    85758071.sp
    85768072The alternatives are
    8577 \FCsecurity = share\F[],
    8578 \FCsecurity = server\F[]
     8073security = share,
     8074security = server
    85798075or
    8580 \FCsecurity = domain \F[]\&.
     8076security = domain\&.
    85818077.sp
    85828078In versions of Samba prior to 2\&.0\&.0, the default was
    8583 \FCsecurity = share\F[]
     8079security = share
    85848080mainly because that was the only option at one stage\&.
    85858081.sp
    … …  
    85878083.sp
    85888084If your PCs use usernames that are the same as their usernames on the UNIX machine then you will want to use
    8589 \FCsecurity = user\F[]\&. If you mostly use usernames that don\'t exist on the UNIX box then use
    8590 \FCsecurity = share\F[]\&.
     8085security = user\&. If you mostly use usernames that don\'t exist on the UNIX box then use
     8086security = share\&.
    85918087.sp
    85928088You should also use
    8593 \FCsecurity = share\F[]
     8089security = share
    85948090if you want to mainly setup shares without a password (guest shares)\&. This is commonly used for a shared printer server\&. It is more difficult to setup guest shares with
    8595 \FCsecurity = user\F[], see the
     8091security = user, see the
    85968092\m[blue]\fBmap to guest\fR\m[]
    85978093parameter for details\&.
    85988094.sp
    85998095It is possible to use
    8600 \FCsmbd\F[]
     8096smbd
    86018097in a
    86028098\fI hybrid mode\fR
    … …  
    86098105.sp
    86108106When clients connect to a share level security server, they need not log onto the server with a valid username and password before attempting to connect to a shared resource (although modern clients such as Windows 95/98 and Windows NT will send a logon request with a username but no password when talking to a
    8611 \FCsecurity = share \F[]
     8107security = share
    86128108server)\&. Instead, the clients send authentication information (passwords) on a per\-share basis, at the time they attempt to connect to that share\&.
    86138109.sp
    86148110Note that
    8615 \FCsmbd\F[]
     8111smbd
    86168112\fIALWAYS\fR
    86178113uses a valid UNIX user to act on behalf of the client, even in
    8618 \FCsecurity = share\F[]
     8114security = share
    86198115level security\&.
    86208116.sp
    86218117As clients are not required to send a username to the server in share level security,
    8622 \FCsmbd\F[]
     8118smbd
    86238119uses several techniques to determine the correct UNIX user to use on behalf of the client\&.
    86248120.sp
    … …  
    87538249\fINote\fR
    87548250that from the client\'s point of view
    8755 \FCsecurity = domain\F[]
     8251security = domain
    87568252is the same as
    8757 \FCsecurity = user\F[]\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
     8253security = user\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
    87588254.sp
    87598255\fINote\fR
    … …  
    87778273.sp
    87788274In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an NT box\&. If this fails it will revert to
    8779 \FCsecurity = user\F[]\&. It expects the
     8275security = user\&. It expects the
    87808276\m[blue]\fBencrypted passwords\fR\m[]
    87818277parameter to be set to
    87828278\fByes\fR, unless the remote server does not support them\&. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid
    8783 \FCsmbpasswd\F[]
     8279smbpasswd
    87848280file to check users against\&. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up\&.
    87858281.if n \{\
    … …  
    87878283.\}
    87888284.RS 4
    8789 .BM yellow
    87908285.it 1 an-trap
    87918286.nr an-no-space-flag 1
    … …  
    87988293This mode of operation has significant pitfalls since it is more vulnerable to man\-in\-the\-middle attacks and server impersonation\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user\'s session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authentications to the Samba server may fail (from a single client, till it disconnects)\&.
    87998294.sp .5v
    8800 .EM yellow
    88018295.RE
    88028296.if n \{\
    … …  
    88048298.\}
    88058299.RS 4
    8806 .BM yellow
    88078300.it 1 an-trap
    88088301.nr an-no-space-flag 1
    … …  
    88148307.br
    88158308From the client\'s point of view,
    8816 \FCsecurity = server\F[]
     8309security = server
    88178310is the same as
    8818 \FCsecurity = user\F[]\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
     8311security = user\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.
    88198312.sp .5v
    8820 .EM yellow
    88218313.RE
    88228314\fINote\fR
    … …  
    88468338.sp
    88478339Default:
    8848 \fI\fIsecurity\fR\fR\fI = \fR\fI\FCUSER\F[]\fR\fI \fR
    8849 .sp
    8850 Example:
    8851 \fI\fIsecurity\fR\fR\fI = \fR\fI\FCDOMAIN\F[]\fR\fI \fR
     8340\fI\fIsecurity\fR\fR\fI = \fR\fIUSER\fR\fI \fR
     8341.sp
     8342Example:
     8343\fI\fIsecurity\fR\fR\fI = \fR\fIDOMAIN\fR\fI \fR
    88528344.RE
    88538345
    … …  
    88658357.sp
    88668358Please note that with this set to
    8867 \FCno\F[], you will have to apply the WindowsXP
    8868 \FCWinXP_SignOrSeal\&.reg\F[]
     8359no, you will have to apply the WindowsXP
     8360WinXP_SignOrSeal\&.reg
    88698361registry patch found in the docs/registry subdirectory of the Samba distribution tarball\&.
    88708362.sp
    88718363Default:
    8872 \fI\fIserver schannel\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
    8873 .sp
    8874 Example:
    8875 \fI\fIserver schannel\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     8364\fI\fIserver schannel\fR\fR\fI = \fR\fIauto\fR\fI \fR
     8365.sp
     8366Example:
     8367\fI\fIserver schannel\fR\fR\fI = \fR\fIyes\fR\fI \fR
    88768368.RE
    88778369
    … …  
    88898381.sp
    88908382Default:
    8891 \fI\fIserver signing\fR\fR\fI = \fR\fI\FCDisabled\F[]\fR\fI \fR
     8383\fI\fIserver signing\fR\fR\fI = \fR\fIDisabled\fR\fI \fR
    88928384.RE
    88938385
    … …  
    88978389.RS 4
    88988390This controls what string will show up in the printer comment box in print manager and next to the IPC connection in
    8899 \FCnet view\F[]\&. It can be any string that you wish to show to your users\&.
     8391net view\&. It can be any string that you wish to show to your users\&.
    89008392.sp
    89018393It also sets what will appear in browse lists next to the machine name\&.
    … …  
    89108402.sp
    89118403Default:
    8912 \fI\fIserver string\fR\fR\fI = \fR\fI\FCSamba %v\F[]\fR\fI \fR
    8913 .sp
    8914 Example:
    8915 \fI\fIserver string\fR\fR\fI = \fR\fI\FCUniversity of GNUs Samba Server\F[]\fR\fI \fR
     8404\fI\fIserver string\fR\fR\fI = \fR\fISamba %v\fR\fI \fR
     8405.sp
     8406Example:
     8407\fI\fIserver string\fR\fR\fI = \fR\fIUniversity of GNUs Samba Server\fR\fI \fR
    89168408.RE
    89178409
    … …  
    89218413.RS 4
    89228414If
    8923 \FCset directory = no\F[], then users of the service may not use the setdir command to change directory\&.
     8415set directory = no, then users of the service may not use the setdir command to change directory\&.
    89248416.sp
    89258417The
    8926 \FCsetdir\F[]
     8418setdir
    89278419command is only implemented in the Digital Pathworks client\&. See the Pathworks documentation for details\&.
    89288420.sp
    89298421Default:
    8930 \fI\fIset directory\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     8422\fI\fIset directory\fR\fR\fI = \fR\fIno\fR\fI \fR
    89318423.RE
    89328424
    … …  
    89368428.RS 4
    89378429Thanks to the Posix subsystem in NT a Windows User has a primary group in addition to the auxiliary groups\&. This script sets the primary group in the unix userdatase when an administrator sets the primary group from the windows user manager or when fetching a SAM with
    8938 \FCnet rpc vampire\F[]\&.
     8430net rpc vampire\&.
    89398431\fI%u\fR
    89408432will be replaced with the user whose primary group is to be set\&.
    … …  
    89438435.sp
    89448436Default:
    8945 \fI\fIset primary group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    8946 .sp
    8947 Example:
    8948 \fI\fIset primary group script\fR\fR\fI = \fR\fI\FC/usr/sbin/usermod \-g \'%g\' \'%u\'\F[]\fR\fI \fR
     8437\fI\fIset primary group script\fR\fR\fI = \fR\fI\fR\fI \fR
     8438.sp
     8439Example:
     8440\fI\fIset primary group script\fR\fR\fI = \fR\fI/usr/sbin/usermod \-g \'%g\' \'%u\'\fR\fI \fR
    89498441.RE
    89508442
    … …  
    89548446.RS 4
    89558447The
    8956 \FCset quota command\F[]
     8448set quota command
    89578449should only be used whenever there is no operating system API available from the OS that samba can use\&.
    89588450.sp
    89598451This option is only available if Samba was configured with the argument
    8960 \FC\-\-with\-sys\-quotas\F[]
     8452\-\-with\-sys\-quotas
    89618453or on linux when
    8962 \FC\&./configure \-\-with\-quotas\F[]
     8454\&./configure \-\-with\-quotas
    89638455was used and a working quota api was found in the system\&. Most packages are configured with these options already\&.
    89648456.sp
    … …  
    91038595.sp
    91048596Default:
    9105 \fI\fIset quota command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    9106 .sp
    9107 Example:
    9108 \fI\fIset quota command\fR\fR\fI = \fR\fI\FC/usr/local/sbin/set_quota\F[]\fR\fI \fR
     8597\fI\fIset quota command\fR\fR\fI = \fR\fI\fR\fI \fR
     8598.sp
     8599Example:
     8600\fI\fIset quota command\fR\fR\fI = \fR\fI/usr/local/sbin/set_quota\fR\fI \fR
    91098601.RE
    91108602
    … …  
    91308622.sp
    91318623Default:
    9132 \fI\fIshare modes\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     8624\fI\fIshare modes\fR\fR\fI = \fR\fIyes\fR\fI \fR
    91338625.RE
    91348626
    … …  
    91468638.sp
    91478639Default:
    9148 \fI\fIshort preserve case\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     8640\fI\fIshort preserve case\fR\fR\fI = \fR\fIyes\fR\fI \fR
    91498641.RE
    91508642
    … …  
    91668658.\}
    91678659.RS 4
    9168 .BM yellow
    91698660.it 1 an-trap
    91708661.nr an-no-space-flag 1
    … …  
    91778668This does not prevent the same user from having administrative privilege on an individual printer\&.
    91788669.sp .5v
    9179 .EM yellow
    9180 .RE
    9181 Default:
    9182 \fI\fIshow add printer wizard\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     8670.RE
     8671Default:
     8672\fI\fIshow add printer wizard\fR\fR\fI = \fR\fIyes\fR\fI \fR
    91838673.RE
    91848674
    … …  
    92518741.RS 4
    92528742.\}
    9253 .fam C
    9254 .ps -1
    92558743.nf
    9256 .if t \{\
    9257 .sp -1
    9258 .\}
    9259 .BB lightgray adjust-for-leading-newline
    9260 .sp -1
    9261 
    92628744#!/bin/bash
    92638745
    … …  
    92688750/sbin/shutdown $3 $4 +$time $1 &
    92698751
    9270 .EB lightgray adjust-for-leading-newline
    9271 .if t \{\
    9272 .sp 1
    9273 .\}
    92748752.fi
    9275 .fam
    9276 .ps +1
    92778753.if n \{\
    92788754.RE
    … …  
    92828758.sp
    92838759Default:
    9284 \fI\fIshutdown script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    9285 .sp
    9286 Example:
    9287 \fI\fIshutdown script\fR\fR\fI = \fR\fI\FC/usr/local/samba/sbin/shutdown %m %t %r %f\F[]\fR\fI \fR
     8760\fI\fIshutdown script\fR\fR\fI = \fR\fI\fR\fI \fR
     8761.sp
     8762Example:
     8763\fI\fIshutdown script\fR\fR\fI = \fR\fI/usr/local/samba/sbin/shutdown %m %t %r %f\fR\fI \fR
    92888764.RE
    92898765
    … …  
    93098785.sp
    93108786Default:
    9311 \fI\fIsmb encrypt\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR
     8787\fI\fIsmb encrypt\fR\fR\fI = \fR\fIauto\fR\fI \fR
    93128788.RE
    93138789
    … …  
    93238799.RS 4
    93248800.\}
    9325 .fam C
    9326 .ps -1
    93278801.nf
    9328 .if t \{\
    9329 .sp -1
    9330 .\}
    9331 .BB lightgray adjust-for-leading-newline
    9332 .sp -1
    9333 
    93348802smb passwd file = /etc/samba/smbpasswd
    9335 .EB lightgray adjust-for-leading-newline
    9336 .if t \{\
    9337 .sp 1
    9338 .\}
    93398803.fi
    9340 .fam
    9341 .ps +1
    93428804.if n \{\
    93438805.RE
    … …  
    93458807.sp
    93468808Default:
    9347 \fI\fIsmb passwd file\fR\fR\fI = \fR\fI\FC${prefix}/private/smbpasswd\F[]\fR\fI \fR
     8809\fI\fIsmb passwd file\fR\fR\fI = \fR\fI${prefix}/private/smbpasswd\fR\fI \fR
    93488810.RE
    93498811
    … …  
    93558817.sp
    93568818Default:
    9357 \fI\fIsmb ports\fR\fR\fI = \fR\fI\FC445 139\F[]\fR\fI \fR
     8819\fI\fIsmb ports\fR\fR\fI = \fR\fI445 139\fR\fI \fR
    93588820.RE
    93598821
    … …  
    93698831.sp
    93708832Default:
    9371 \fI\fIsocket address\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    9372 .sp
    9373 Example:
    9374 \fI\fIsocket address\fR\fR\fI = \fR\fI\FC192\&.168\&.2\&.20\F[]\fR\fI \fR
     8833\fI\fIsocket address\fR\fR\fI = \fR\fI\fR\fI \fR
     8834.sp
     8835Example:
     8836\fI\fIsocket address\fR\fR\fI = \fR\fI192\&.168\&.2\&.20\fR\fI \fR
    93758837.RE
    93768838
    … …  
    93848846.sp
    93858847This option will typically be used to tune your Samba server for optimal performance for your local network\&. There is no way that Samba can know what the optimal parameters are for your net, so you must experiment and choose them yourself\&. We strongly suggest you read the appropriate documentation for your operating system first (perhaps
    9386 \FCman setsockopt\F[]
     8848man setsockopt
    93878849will help)\&.
    93888850.sp
    … …  
    95098971.sp
    95108972To specify an argument use the syntax SOME_OPTION = VALUE for example
    9511 \FCSO_SNDBUF = 8192\F[]\&. Note that you must not have any spaces before or after the = sign\&.
     8973SO_SNDBUF = 8192\&. Note that you must not have any spaces before or after the = sign\&.
    95128974.sp
    95138975If you are on a local network then a sensible option might be:
    95148976.sp
    9515 \FCsocket options = IPTOS_LOWDELAY\F[]
     8977socket options = IPTOS_LOWDELAY
    95168978.sp
    95178979If you have a local network then you could try:
    95188980.sp
    9519 \FCsocket options = IPTOS_LOWDELAY TCP_NODELAY\F[]
     8981socket options = IPTOS_LOWDELAY TCP_NODELAY
    95208982.sp
    95218983If you are on a wide area network then perhaps try setting IPTOS_THROUGHPUT\&.
    … …  
    95248986.sp
    95258987Default:
    9526 \fI\fIsocket options\fR\fR\fI = \fR\fI\FCTCP_NODELAY\F[]\fR\fI \fR
    9527 .sp
    9528 Example:
    9529 \fI\fIsocket options\fR\fR\fI = \fR\fI\FCIPTOS_LOWDELAY\F[]\fR\fI \fR
     8988\fI\fIsocket options\fR\fR\fI = \fR\fITCP_NODELAY\fR\fI \fR
     8989.sp
     8990Example:
     8991\fI\fIsocket options\fR\fR\fI = \fR\fIIPTOS_LOWDELAY\fR\fI \fR
    95308992.RE
    95318993
    … …  
    95399001.sp
    95409002Default:
    9541 \fI\fIstat cache\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9003\fI\fIstat cache\fR\fR\fI = \fR\fIyes\fR\fI \fR
    95429004.RE
    95439005
    … …  
    95589020.sp
    95599021Default:
    9560 \fI\fIstore dos attributes\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9022\fI\fIstore dos attributes\fR\fR\fI = \fR\fIno\fR\fI \fR
    95619023.RE
    95629024
    … …  
    95789040.sp
    95799041Default:
    9580 \fI\fIstrict allocate\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9042\fI\fIstrict allocate\fR\fR\fI = \fR\fIno\fR\fI \fR
    95819043.RE
    95829044
    … …  
    95939055.sp
    95949056Well\-behaved clients always ask for lock checks when it is important\&. So in the vast majority of cases,
    9595 \FCstrict locking = Auto\F[]
     9057strict locking = Auto
    95969058or
    9597 \FCstrict locking = no\F[]
     9059strict locking = no
    95989060is acceptable\&.
    95999061.sp
    96009062Default:
    9601 \fI\fIstrict locking\fR\fR\fI = \fR\fI\FCAuto\F[]\fR\fI \fR
     9063\fI\fIstrict locking\fR\fR\fI = \fR\fIAuto\fR\fI \fR
    96029064.RE
    96039065
    … …  
    96139075.sp
    96149076Default:
    9615 \fI\fIstrict sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9077\fI\fIstrict sync\fR\fR\fI = \fR\fIno\fR\fI \fR
    96169078.RE
    96179079
    … …  
    96239085.sp
    96249086The administrator must create a directory name
    9625 \FCsvcctl\F[]
     9087svcctl
    96269088in Samba\'s $(libdir) and create symbolic links to the init scripts in
    9627 \FC/etc/init\&.d/\F[]\&. The name of the links must match the names given as part of the
     9089/etc/init\&.d/\&. The name of the links must match the names given as part of the
    96289090\fIsvcctl list\fR\&.
    96299091.sp
    96309092Default:
    9631 \fI\fIsvcctl list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    9632 .sp
    9633 Example:
    9634 \fI\fIsvcctl list\fR\fR\fI = \fR\fI\FCcups postfix portmap httpd\F[]\fR\fI \fR
     9093\fI\fIsvcctl list\fR\fR\fI = \fR\fI\fR\fI \fR
     9094.sp
     9095Example:
     9096\fI\fIsvcctl list\fR\fR\fI = \fR\fIcups postfix portmap httpd\fR\fI \fR
    96359097.RE
    96369098
    … …  
    96449106\fByes\fR
    96459107then every write will be followed by a
    9646 \FCfsync() \F[]
     9108fsync()
    96479109call to ensure the data is written to disk\&. Note that the
    96489110\fIstrict sync\fR
    … …  
    96529114.sp
    96539115Default:
    9654 \fI\fIsync always\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9116\fI\fIsync always\fR\fR\fI = \fR\fIno\fR\fI \fR
    96559117.RE
    96569118
    … …  
    96649126.sp
    96659127Default:
    9666 \fI\fIsyslog only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9128\fI\fIsyslog only\fR\fR\fI = \fR\fIno\fR\fI \fR
    96679129.RE
    96689130
    … …  
    96829144.sp
    96839145Default:
    9684 \fI\fIsyslog\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR
     9146\fI\fIsyslog\fR\fR\fI = \fR\fI1\fR\fI \fR
    96859147.RE
    96869148
    … …  
    96989160.sp
    96999161Default:
    9700 \fI\fItemplate homedir\fR\fR\fI = \fR\fI\FC/home/%D/%U\F[]\fR\fI \fR
     9162\fI\fItemplate homedir\fR\fR\fI = \fR\fI/home/%D/%U\fR\fI \fR
    97019163.RE
    97029164
    … …  
    97199181.sp
    97209182Default:
    9721 \fI\fItime offset\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    9722 .sp
    9723 Example:
    9724 \fI\fItime offset\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR
     9183\fI\fItime offset\fR\fR\fI = \fR\fI0\fR\fI \fR
     9184.sp
     9185Example:
     9186\fI\fItime offset\fR\fR\fI = \fR\fI60\fR\fI \fR
    97259187.RE
    97269188
    … …  
    97349196.sp
    97359197Default:
    9736 \fI\fItime server\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9198\fI\fItime server\fR\fR\fI = \fR\fIno\fR\fI \fR
    97379199.RE
    97389200
    … …  
    97469208.sp
    97479209Default:
    9748 \fI\fIunix charset\fR\fR\fI = \fR\fI\FCUTF8\F[]\fR\fI \fR
    9749 .sp
    9750 Example:
    9751 \fI\fIunix charset\fR\fR\fI = \fR\fI\FCASCII\F[]\fR\fI \fR
     9210\fI\fIunix charset\fR\fR\fI = \fR\fIUTF8\fR\fI \fR
     9211.sp
     9212Example:
     9213\fI\fIunix charset\fR\fR\fI = \fR\fIASCII\fR\fI \fR
    97529214.RE
    97539215
    … …  
    97599221.sp
    97609222Default:
    9761 \fI\fIunix extensions\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9223\fI\fIunix extensions\fR\fR\fI = \fR\fIyes\fR\fI \fR
    97629224.RE
    97639225
    … …  
    97759237.sp
    97769238Default:
    9777 \fI\fIunix password sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9239\fI\fIunix password sync\fR\fR\fI = \fR\fIno\fR\fI \fR
    97789240.RE
    97799241
    … …  
    97969258.sp
    97979259Note that even when this parameter is set, a user authenticating to
    9798 \FCsmbd\F[]
     9260smbd
    97999261must still enter a valid password in order to connect correctly, and to update their hashed (smbpasswd) passwords\&.
    98009262.sp
    98019263Default:
    9802 \fI\fIupdate encrypted\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9264\fI\fIupdate encrypted\fR\fR\fI = \fR\fIno\fR\fI \fR
    98039265.RE
    98049266
    … …  
    98089270.RS 4
    98099271This parameter applies only to Windows NT/2000 clients\&. It has no effect on Windows 95/98/ME clients\&. When serving a printer to Windows NT/2000 clients without first installing a valid printer driver on the Samba host, the client will be required to install a local printer driver\&. From this point on, the client will treat the print as a local printer and not a network printer connection\&. This is much the same behavior that will occur when
    9810 \FCdisable spoolss = yes\F[]\&.
     9272disable spoolss = yes\&.
    98119273.sp
    98129274The differentiating factor is that under normal circumstances, the NT/2000 client will attempt to open the network printer using MS\-RPC\&. The problem is that because the client considers the printer to be local, it will attempt to issue the OpenPrinterEx() call requesting access rights associated with the logged on user\&. If the user possesses local administator rights but not root privilege on the Samba host (often the case), the OpenPrinterEx() call will fail\&. The result is that the client will now display an "Access Denied; Unable to connect" message in the printer queue window (even though jobs may successfully be printed)\&.
    … …  
    98169278.sp
    98179279Default:
    9818 \fI\fIuse client driver\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9280\fI\fIuse client driver\fR\fR\fI = \fR\fIno\fR\fI \fR
    98199281.RE
    98209282
    … …  
    98299291.sp
    98309292When you are using the heimdal Kerberos libraries, you must also specify the following in
    9831 \FC/etc/krb5\&.conf\F[]:
     9293/etc/krb5\&.conf:
    98329294.sp
    98339295.if n \{\
    98349296.RS 4
    98359297.\}
    9836 .fam C
    9837 .ps -1
    98389298.nf
    9839 .if t \{\
    9840 .sp -1
    9841 .\}
    9842 .BB lightgray adjust-for-leading-newline
    9843 .sp -1
    9844 
    98459299[libdefaults]
    98469300default_keytab_name = FILE:/etc/krb5\&.keytab
    9847 .EB lightgray adjust-for-leading-newline
    9848 .if t \{\
    9849 .sp 1
    9850 .\}
    98519301.fi
    9852 .fam
    9853 .ps +1
    98549302.if n \{\
    98559303.RE
    … …  
    98579305.sp
    98589306Default:
    9859 \fI\fIuse kerberos keytab\fR\fR\fI = \fR\fI\FCFalse\F[]\fR\fI \fR
     9307\fI\fIuse kerberos keytab\fR\fR\fI = \fR\fIFalse\fR\fI \fR
    98609308.RE
    98619309
    … …  
    98699317.sp
    98709318Default:
    9871 \fI\fIuse mmap\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9319\fI\fIuse mmap\fR\fR\fI = \fR\fIyes\fR\fI \fR
    98729320.RE
    98739321
    … …  
    98849332.sp
    98859333Default:
    9886 \fI\fIusername level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    9887 .sp
    9888 Example:
    9889 \fI\fIusername level\fR\fR\fI = \fR\fI\FC5\F[]\fR\fI \fR
     9334\fI\fIusername level\fR\fR\fI = \fR\fI0\fR\fI \fR
     9335.sp
     9336Example:
     9337\fI\fIusername level\fR\fR\fI = \fR\fI5\fR\fI \fR
    98909338.RE
    98919339
    … …  
    98999347.sp
    99009348Default:
    9901 \fI\fIusername map script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    9902 .sp
    9903 Example:
    9904 \fI\fIusername map script\fR\fR\fI = \fR\fI\FC/etc/samba/scripts/mapusers\&.sh\F[]\fR\fI \fR
     9349\fI\fIusername map script\fR\fR\fI = \fR\fI\fR\fI \fR
     9350.sp
     9351Example:
     9352\fI\fIusername map script\fR\fR\fI = \fR\fI/etc/samba/scripts/mapusers\&.sh\fR\fI \fR
    99059353.RE
    99069354
    … …  
    99129360.sp
    99139361Please note that for user or share mode security, the username map is applied prior to validating the user credentials\&. Domain member servers (domain or ads) apply the username map after the user has been successfully authenticated by the domain controller and require fully qualified enties in the map table (e\&.g\&. biddle =
    9914 \FCDOMAIN\efoo\F[])\&.
     9362DOMAIN\efoo)\&.
    99159363.sp
    99169364The map file is parsed line by line\&. Each line should contain a single UNIX username on the left then a \'=\' followed by a list of usernames on the right\&. The list of usernames on the right may contain names of the form @group in which case they will match any UNIX username in that group\&. The special client name \'*\' is a wildcard and matches any name\&. Each line of the map file may be up to 1023 characters long\&.
    … …  
    99339381.RS 4
    99349382.\}
    9935 .fam C
    9936 .ps -1
    99379383.nf
    9938 .if t \{\
    9939 .sp -1
    9940 .\}
    9941 .BB lightgray adjust-for-leading-newline
    9942 .sp -1
    9943 
    9944 \FCroot = admin administrator\F[]
    9945 .EB lightgray adjust-for-leading-newline
    9946 .if t \{\
    9947 .sp 1
    9948 .\}
     9384root = admin administrator
    99499385.fi
    9950 .fam
    9951 .ps +1
    99529386.if n \{\
    99539387.RE
    … …  
    99639397.RS 4
    99649398.\}
    9965 .fam C
    9966 .ps -1
    99679399.nf
    9968 .if t \{\
    9969 .sp -1
    9970 .\}
    9971 .BB lightgray adjust-for-leading-newline
    9972 .sp -1
    9973 
    9974 \FCsys = @system\F[]
    9975 .EB lightgray adjust-for-leading-newline
    9976 .if t \{\
    9977 .sp 1
    9978 .\}
     9400sys = @system
    99799401.fi
    9980 .fam
    9981 .ps +1
    99829402.if n \{\
    99839403.RE
    … …  
    99879407.sp
    99889408If your system supports the NIS NETGROUP option then the netgroup database is checked before the
    9989 \FC/etc/group \F[]
     9409/etc/group
    99909410database for matching groups\&.
    99919411.sp
    … …  
    99959415.RS 4
    99969416.\}
    9997 .fam C
    9998 .ps -1
    99999417.nf
    10000 .if t \{\
    10001 .sp -1
    10002 .\}
    10003 .BB lightgray adjust-for-leading-newline
    10004 .sp -1
    10005 
    10006 \FCtridge = "Andrew Tridgell"\F[]
    10007 .EB lightgray adjust-for-leading-newline
    10008 .if t \{\
    10009 .sp 1
    10010 .\}
     9418tridge = "Andrew Tridgell"
    100119419.fi
    10012 .fam
    10013 .ps +1
    100149420.if n \{\
    100159421.RE
    … …  
    100239429.RS 4
    100249430.\}
    10025 .fam C
    10026 .ps -1
    100279431.nf
    10028 .if t \{\
    10029 .sp -1
    10030 .\}
    10031 .BB lightgray adjust-for-leading-newline
    10032 .sp -1
    10033 
    100349432!sys = mary fred
    100359433guest = *
    10036 .EB lightgray adjust-for-leading-newline
    10037 .if t \{\
    10038 .sp 1
    10039 .\}
    100409434.fi
    10041 .fam
    10042 .ps +1
    100439435.if n \{\
    100449436.RE
    … …  
    100599451.sp
    100609452Samba versions prior to 3\&.0\&.8 would only support reading the fully qualified username (e\&.g\&.:
    10061 \FCDOMAIN\euser\F[]) from the username map when performing a kerberos login from a client\&. However, when looking up a map entry for a user authenticated by NTLM[SSP], only the login name would be used for matches\&. This resulted in inconsistent behavior sometimes even on the same server\&.
     9453DOMAIN\euser) from the username map when performing a kerberos login from a client\&. However, when looking up a map entry for a user authenticated by NTLM[SSP], only the login name would be used for matches\&. This resulted in inconsistent behavior sometimes even on the same server\&.
    100629454.sp
    100639455The following functionality is obeyed in version 3\&.0\&.8 and later:
    … …  
    100669458.sp
    100679459When relying upon a external domain controller for validating authentication requests, smbd will apply the username map to the fully qualified username (i\&.e\&.
    10068 \FCDOMAIN\euser\F[]) only after the user has been successfully authenticated\&.
     9460DOMAIN\euser) only after the user has been successfully authenticated\&.
    100699461.sp
    100709462An example of use is:
    … …  
    100739465.RS 4
    100749466.\}
    10075 .fam C
    10076 .ps -1
    100779467.nf
    10078 .if t \{\
    10079 .sp -1
    10080 .\}
    10081 .BB lightgray adjust-for-leading-newline
    10082 .sp -1
    10083 
    100849468username map = /usr/local/samba/lib/users\&.map
    10085 .EB lightgray adjust-for-leading-newline
    10086 .if t \{\
    10087 .sp 1
    10088 .\}
    100899469.fi
    10090 .fam
    10091 .ps +1
    100929470.if n \{\
    100939471.RE
    … …  
    100959473.sp
    100969474Default:
    10097 \fI\fIusername map\fR\fR\fI = \fR\fI\FC # no username map\F[]\fR\fI \fR
     9475\fI\fIusername map\fR\fR\fI = \fR\fI # no username map\fR\fI \fR
    100989476.RE
    100999477
    … …  
    101499527.sp
    101509528Default:
    10151 \fI\fIusername\fR\fR\fI = \fR\fI\FC # The guest account if a guest service, else <empty string>\&.\F[]\fR\fI \fR
    10152 .sp
    10153 Example:
    10154 \fI\fIusername\fR\fR\fI = \fR\fI\FCfred, mary, jack, jane, @users, @pcgroup\F[]\fR\fI \fR
     9529\fI\fIusername\fR\fR\fI = \fR\fI # The guest account if a guest service, else <empty string>\&.\fR\fI \fR
     9530.sp
     9531Example:
     9532\fI\fIusername\fR\fR\fI = \fR\fIfred, mary, jack, jane, @users, @pcgroup\fR\fI \fR
    101559533.RE
    101569534
    … …  
    101649542.sp
    101659543Default:
    10166 \fI\fIusershare allow guests\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9544\fI\fIusershare allow guests\fR\fR\fI = \fR\fIno\fR\fI \fR
    101679545.RE
    101689546
    … …  
    101749552.sp
    101759553Default:
    10176 \fI\fIusershare max shares\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
     9554\fI\fIusershare max shares\fR\fR\fI = \fR\fI0\fR\fI \fR
    101779555.RE
    101789556
    … …  
    101849562.sp
    101859563Default:
    10186 \fI\fIusershare owner only\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR
     9564\fI\fIusershare owner only\fR\fR\fI = \fR\fITrue\fR\fI \fR
    101879565.RE
    101889566
    … …  
    102009578.RS 4
    102019579.\}
    10202 .fam C
    10203 .ps -1
    102049580.nf
    10205 .if t \{\
    10206 .sp -1
    10207 .\}
    10208 .BB lightgray adjust-for-leading-newline
    10209 .sp -1
    10210 
    102119581        ls \-ld /usr/local/samba/lib/usershares/
    102129582        drwxrwx\-\-T  2 root power_users 4096 2006\-05\-05 12:27 /usr/local/samba/lib/usershares/
    102139583       
    10214 .EB lightgray adjust-for-leading-newline
    10215 .if t \{\
    10216 .sp 1
    10217 .\}
    102189584.fi
    10219 .fam
    10220 .ps +1
    102219585.if n \{\
    102229586.RE
    … …  
    102269590.sp
    102279591Default:
    10228 \fI\fIusershare path\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR
     9592\fI\fIusershare path\fR\fR\fI = \fR\fINULL\fR\fI \fR
    102299593.RE
    102309594
    … …  
    102389602.sp
    102399603Default:
    10240 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR
    10241 .sp
    10242 Example:
    10243 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI\FC/home /data /space\F[]\fR\fI \fR
     9604\fI\fIusershare prefix allow list\fR\fR\fI = \fR\fINULL\fR\fI \fR
     9605.sp
     9606Example:
     9607\fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI/home /data /space\fR\fI \fR
    102449608.RE
    102459609
    … …  
    102539617.sp
    102549618Default:
    10255 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR
    10256 .sp
    10257 Example:
    10258 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI\FC/etc /dev /private\F[]\fR\fI \fR
     9619\fI\fIusershare prefix deny list\fR\fR\fI = \fR\fINULL\fR\fI \fR
     9620.sp
     9621Example:
     9622\fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI/etc /dev /private\fR\fI \fR
    102599623.RE
    102609624
    … …  
    102689632.sp
    102699633Default:
    10270 \fI\fIusershare template share\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR
    10271 .sp
    10272 Example:
    10273 \fI\fIusershare template share\fR\fR\fI = \fR\fI\FCtemplate_share\F[]\fR\fI \fR
     9634\fI\fIusershare template share\fR\fR\fI = \fR\fINULL\fR\fI \fR
     9635.sp
     9636Example:
     9637\fI\fIusershare template share\fR\fR\fI = \fR\fItemplate_share\fR\fI \fR
    102749638.RE
    102759639
    … …  
    102849648.sp
    102859649Default:
    10286 \fI\fIuse sendfile\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR
     9650\fI\fIuse sendfile\fR\fR\fI = \fR\fIfalse\fR\fI \fR
    102879651.RE
    102889652
    … …  
    102969660.sp
    102979661Default:
    10298 \fI\fIuse spnego\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9662\fI\fIuse spnego\fR\fR\fI = \fR\fIyes\fR\fI \fR
    102999663.RE
    103009664
    … …  
    103049668.RS 4
    103059669This parameter is only available if Samba has been configured and compiled with the option
    10306 \FC \-\-with\-utmp\F[]\&. It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server\&. By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually
    10307 \FC/var/run/utmp\F[]
     9670\-\-with\-utmp\&. It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server\&. By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually
     9671/var/run/utmp
    103089672on Linux)\&.
    103099673.sp
    103109674Default:
    10311 \fI\fIutmp directory\fR\fR\fI = \fR\fI\FC # Determined automatically\F[]\fR\fI \fR
    10312 .sp
    10313 Example:
    10314 \fI\fIutmp directory\fR\fR\fI = \fR\fI\FC/var/run/utmp\F[]\fR\fI \fR
     9675\fI\fIutmp directory\fR\fR\fI = \fR\fI # Determined automatically\fR\fI \fR
     9676.sp
     9677Example:
     9678\fI\fIutmp directory\fR\fR\fI = \fR\fI/var/run/utmp\fR\fI \fR
    103159679.RE
    103169680
    … …  
    103209684.RS 4
    103219685This boolean parameter is only available if Samba has been configured and compiled with the option
    10322 \FC\-\-with\-utmp\F[]\&. If set to
     9686\-\-with\-utmp\&. If set to
    103239687\fByes\fR
    103249688then Samba will attempt to add utmp or utmpx records (depending on the UNIX system) whenever a connection is made to a Samba server\&. Sites may use this to record the user connecting to a Samba share\&.
    … …  
    103279691.sp
    103289692Default:
    10329 \fI\fIutmp\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9693\fI\fIutmp\fR\fR\fI = \fR\fIno\fR\fI \fR
    103309694.RE
    103319695
    … …  
    103469710.sp
    103479711Default:
    10348 \fI\fIvalid users\fR\fR\fI = \fR\fI\FC # No valid users list (anyone can login) \F[]\fR\fI \fR
    10349 .sp
    10350 Example:
    10351 \fI\fIvalid users\fR\fR\fI = \fR\fI\FCgreg, @pcusers\F[]\fR\fI \fR
     9712\fI\fIvalid users\fR\fR\fI = \fR\fI # No valid users list (anyone can login) \fR\fI \fR
     9713.sp
     9714Example:
     9715\fI\fIvalid users\fR\fR\fI = \fR\fIgreg, @pcusers\fR\fI \fR
    103529716.RE
    103539717
    … …  
    103619725.sp
    103629726Default:
    10363 \fI\fI\-valid\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9727\fI\fI\-valid\fR\fR\fI = \fR\fIyes\fR\fI \fR
    103649728.RE
    103659729
    … …  
    103929756.RS 4
    103939757.\}
    10394 .fam C
    10395 .ps -1
    103969758.nf
    10397 .if t \{\
    10398 .sp -1
    10399 .\}
    10400 .BB lightgray adjust-for-leading-newline
    10401 .sp -1
    10402 
    104039759; Veto any files containing the word Security,
    104049760; any ending in \&.tmp, and any directory containing the
    … …  
    104099765; creates\&.
    104109766veto files = /\&.AppleDouble/\&.bin/\&.AppleDesktop/Network Trash Folder/
    10411 .EB lightgray adjust-for-leading-newline
    10412 .if t \{\
    10413 .sp 1
    10414 .\}
    104159767.fi
    10416 .fam
    10417 .ps +1
    104189768.if n \{\
    104199769.RE
    … …  
    104219771.sp
    104229772Default:
    10423 \fI\fIveto files\fR\fR\fI = \fR\fI\FCNo files or directories are vetoed\&.\F[]\fR\fI \fR
     9773\fI\fIveto files\fR\fR\fI = \fR\fINo files or directories are vetoed\&.\fR\fI \fR
    104249774.RE
    104259775
    … …  
    104359785.sp
    104369786You might want to do this on files that you know will be heavily contended for by clients\&. A good example of this is in the NetBench SMB benchmark program, which causes heavy client contention for files ending in
    10437 \FC\&.SEM\F[]\&. To cause Samba not to grant oplocks on these files you would use the line (either in the [global] section or in the section for the particular NetBench share\&.
     9787\&.SEM\&. To cause Samba not to grant oplocks on these files you would use the line (either in the [global] section or in the section for the particular NetBench share\&.
    104389788.sp
    104399789An example of use is:
    … …  
    104429792.RS 4
    104439793.\}
    10444 .fam C
    10445 .ps -1
    104469794.nf
    10447 .if t \{\
    10448 .sp -1
    10449 .\}
    10450 .BB lightgray adjust-for-leading-newline
    10451 .sp -1
    10452 
    104539795veto oplock files = /\&.*SEM/
    10454 .EB lightgray adjust-for-leading-newline
    10455 .if t \{\
    10456 .sp 1
    10457 .\}
    104589796.fi
    10459 .fam
    10460 .ps +1
    104619797.if n \{\
    104629798.RE
    … …  
    104649800.sp
    104659801Default:
    10466 \fI\fIveto oplock files\fR\fR\fI = \fR\fI\FC # No files are vetoed for oplock grants\F[]\fR\fI \fR
     9802\fI\fIveto oplock files\fR\fR\fI = \fR\fI # No files are vetoed for oplock grants\fR\fI \fR
    104679803.RE
    104689804
    … …  
    104829818.sp
    104839819Default:
    10484 \fI\fIvfs objects\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    10485 .sp
    10486 Example:
    10487 \fI\fIvfs objects\fR\fR\fI = \fR\fI\FCextd_audit recycle\F[]\fR\fI \fR
     9820\fI\fIvfs objects\fR\fR\fI = \fR\fI\fR\fI \fR
     9821.sp
     9822Example:
     9823\fI\fIvfs objects\fR\fR\fI = \fR\fIextd_audit recycle\fR\fI \fR
    104889824.RE
    104899825
    … …  
    104959831.sp
    104969832Default:
    10497 \fI\fIvolume\fR\fR\fI = \fR\fI\FC # the name of the share\F[]\fR\fI \fR
     9833\fI\fIvolume\fR\fR\fI = \fR\fI # the name of the share\fR\fI \fR
    104989834.RE
    104999835
    … …  
    105079843.sp
    105089844Default:
    10509 \fI\fIwide links\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9845\fI\fIwide links\fR\fR\fI = \fR\fIyes\fR\fI \fR
    105109846.RE
    105119847
    … …  
    105239859.sp
    105249860Default:
    10525 \fI\fIwinbind cache time\fR\fR\fI = \fR\fI\FC300\F[]\fR\fI \fR
     9861\fI\fIwinbind cache time\fR\fR\fI = \fR\fI300\fR\fI \fR
    105269862.RE
    105279863
    … …  
    105339869\fBwinbindd\fR(8)
    105349870it may be necessary to suppress the enumeration of groups through the
    10535 \FCsetgrent()\F[],
    10536 \FCgetgrent()\F[]
     9871setgrent(),
     9872getgrent()
    105379873and
    10538 \FCendgrent()\F[]
     9874endgrent()
    105399875group of system calls\&. If the
    105409876\fIwinbind enum groups\fR
    105419877parameter is
    105429878\fBno\fR, calls to the
    10543 \FCgetgrent()\F[]
     9879getgrent()
    105449880system call will not return any data\&.
    105459881.if n \{\
    … …  
    105479883.\}
    105489884.RS 4
    10549 .BM yellow
    105509885.it 1 an-trap
    105519886.nr an-no-space-flag 1
    … …  
    105589893Turning off group enumeration may cause some programs to behave oddly\&.
    105599894.sp .5v
    10560 .EM yellow
    10561 .RE
    10562 Default:
    10563 \fI\fIwinbind enum groups\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9895.RE
     9896Default:
     9897\fI\fIwinbind enum groups\fR\fR\fI = \fR\fIno\fR\fI \fR
    105649898.RE
    105659899
    … …  
    105719905\fBwinbindd\fR(8)
    105729906it may be necessary to suppress the enumeration of users through the
    10573 \FCsetpwent()\F[],
    10574 \FCgetpwent()\F[]
     9907setpwent(),
     9908getpwent()
    105759909and
    10576 \FCendpwent()\F[]
     9910endpwent()
    105779911group of system calls\&. If the
    105789912\fIwinbind enum users\fR
    105799913parameter is
    105809914\fBno\fR, calls to the
    10581 \FCgetpwent\F[]
     9915getpwent
    105829916system call will not return any data\&.
    105839917.if n \{\
    … …  
    105859919.\}
    105869920.RS 4
    10587 .BM yellow
    105889921.it 1 an-trap
    105899922.nr an-no-space-flag 1
    … …  
    105969929Turning off user enumeration may cause some programs to behave oddly\&. For example, the finger program relies on having access to the full user list when searching for matching usernames\&.
    105979930.sp .5v
    10598 .EM yellow
    10599 .RE
    10600 Default:
    10601 \fI\fIwinbind enum users\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     9931.RE
     9932Default:
     9933\fI\fIwinbind enum users\fR\fR\fI = \fR\fIno\fR\fI \fR
    106029934.RE
    106039935
    … …  
    106139945.sp
    106149946Default:
    10615 \fI\fIwinbind expand groups\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR
     9947\fI\fIwinbind expand groups\fR\fR\fI = \fR\fI1\fR\fI \fR
    106169948.RE
    106179949
    … …  
    106239955.sp
    106249956Default:
    10625 \fI\fIwinbind nested groups\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9957\fI\fIwinbind nested groups\fR\fR\fI = \fR\fIyes\fR\fI \fR
    106269958.RE
    106279959
    … …  
    106359967.sp
    106369968Default:
    10637 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
    10638 .sp
    10639 Example:
    10640 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     9969\fI\fIwinbind normalize names\fR\fR\fI = \fR\fIno\fR\fI \fR
     9970.sp
     9971Example:
     9972\fI\fIwinbind normalize names\fR\fR\fI = \fR\fIyes\fR\fI \fR
    106419973.RE
    106429974
    … …  
    1068010012.sp
    1068110013Default:
    10682 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI\FCtemplate\F[]\fR\fI \fR
    10683 .sp
    10684 Example:
    10685 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI\FCtemplate sfu\F[]\fR\fI \fR
     10014\fI\fIwinbind nss info\fR\fR\fI = \fR\fItemplate\fR\fI \fR
     10015.sp
     10016Example:
     10017\fI\fIwinbind nss info\fR\fR\fI = \fR\fItemplate sfu\fR\fI \fR
    1068610018.RE
    1068710019
    … …  
    1069510027.sp
    1069610028Default:
    10697 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR
    10698 .sp
    10699 Example:
    10700 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI\FCtrue\F[]\fR\fI \fR
     10029\fI\fIwinbind offline logon\fR\fR\fI = \fR\fIfalse\fR\fI \fR
     10030.sp
     10031Example:
     10032\fI\fIwinbind offline logon\fR\fR\fI = \fR\fItrue\fR\fI \fR
    1070110033.RE
    1070210034
    … …  
    1071010042.sp
    1071110043Default:
    10712 \fI\fIwinbind reconnect delay\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR
     10044\fI\fIwinbind reconnect delay\fR\fR\fI = \fR\fI30\fR\fI \fR
    1071310045.RE
    1071410046
    … …  
    1072210054.sp
    1072310055Default:
    10724 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR
    10725 .sp
    10726 Example:
    10727 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI\FCtrue\F[]\fR\fI \fR
     10056\fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fIfalse\fR\fI \fR
     10057.sp
     10058Example:
     10059\fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fItrue\fR\fI \fR
    1072810060.RE
    1072910061
    … …  
    1073310065.RS 4
    1073410066Setting this parameter to
    10735 \FCyes\F[]
     10067yes
    1073610068forces winbindd to use RPC instead of LDAP to retrieve information from Domain Controllers\&.
    1073710069.sp
    1073810070Default:
    10739 \fI\fIwinbind rpc only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     10071\fI\fIwinbind rpc only\fR\fR\fI = \fR\fIno\fR\fI \fR
    1074010072.RE
    1074110073
    … …  
    1074610078This parameter allows an admin to define the character used when listing a username of the form of
    1074710079\fIDOMAIN \fR\e\fIuser\fR\&. This parameter is only applicable when using the
    10748 \FCpam_winbind\&.so\F[]
     10080pam_winbind\&.so
    1074910081and
    10750 \FCnss_winbind\&.so\F[]
     10082nss_winbind\&.so
    1075110083modules for UNIX services\&.
    1075210084.sp
    … …  
    1075410086.sp
    1075510087Default:
    10756 \fI\fIwinbind separator\fR\fR\fI = \fR\fI\FC\'\e\'\F[]\fR\fI \fR
    10757 .sp
    10758 Example:
    10759 \fI\fIwinbind separator\fR\fR\fI = \fR\fI\FC+\F[]\fR\fI \fR
     10088\fI\fIwinbind separator\fR\fR\fI = \fR\fI\'\e\'\fR\fI \fR
     10089.sp
     10090Example:
     10091\fI\fIwinbind separator\fR\fR\fI = \fR\fI+\fR\fI \fR
    1076010092.RE
    1076110093
    … …  
    1076510097.RS 4
    1076610098This parameter is designed to allow Samba servers that are members of a Samba controlled domain to use UNIX accounts distributed via NIS, rsync, or LDAP as the uid\'s for winbindd users in the hosts primary domain\&. Therefore, the user
    10767 \FCDOMAIN\euser1\F[]
     10099DOMAIN\euser1
    1076810100would be mapped to the account user1 in /etc/passwd instead of allocating a new uid for him or her\&.
    1076910101.sp
    … …  
    1077310105.sp
    1077410106Default:
    10775 \fI\fIwinbind trusted domains only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     10107\fI\fIwinbind trusted domains only\fR\fR\fI = \fR\fIno\fR\fI \fR
    1077610108.RE
    1077710109
    … …  
    1078510117.sp
    1078610118Default:
    10787 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
    10788 .sp
    10789 Example:
    10790 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     10119\fI\fIwinbind use default domain\fR\fR\fI = \fR\fIno\fR\fI \fR
     10120.sp
     10121Example:
     10122\fI\fIwinbind use default domain\fR\fR\fI = \fR\fIyes\fR\fI \fR
    1079110123.RE
    1079210124
    … …  
    1079910131The wins hook parameter specifies the name of a script or executable that will be called as follows:
    1080010132.sp
    10801 \FCwins_hook operation name nametype ttl IP_list\F[]
     10133wins_hook operation name nametype ttl IP_list
    1080210134.sp
    1080310135.RS 4
    … …  
    1085710189.RE
    1085810190An example script that calls the BIND dynamic DNS update program
    10859 \FCnsupdate\F[]
     10191nsupdate
    1086010192is provided in the examples directory of the Samba source code\&.
    1086110193.sp
    … …  
    1087410206.sp
    1087510207Default:
    10876 \fI\fIwins proxy\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     10208\fI\fIwins proxy\fR\fR\fI = \fR\fIno\fR\fI \fR
    1087710209.RE
    1087810210
    … …  
    1089210224.\}
    1089310225.RS 4
    10894 .BM yellow
    1089510226.it 1 an-trap
    1089610227.nr an-no-space-flag 1
    … …  
    1090310234You need to set up Samba to point to a WINS server if you have multiple subnets and wish cross\-subnet browsing to work correctly\&.
    1090410235.sp .5v
    10905 .EM yellow
    1090610236.RE
    1090710237See the chapter in the Samba3\-HOWTO on Network Browsing\&.
    1090810238.sp
    1090910239Default:
    10910 \fI\fIwins server\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    10911 .sp
    10912 Example:
    10913 \fI\fIwins server\fR\fR\fI = \fR\fI\FCmary:192\&.9\&.200\&.1 fred:192\&.168\&.3\&.199 mary:192\&.168\&.2\&.61 # For this example when querying a certain name, 192\&.19\&.200\&.1 will be asked first and if that doesn\'t respond 192\&.168\&.2\&.61\&. If either of those doesn\'t know the name 192\&.168\&.3\&.199 will be queried\&.\F[]\fR\fI \fR
    10914 .sp
    10915 Example:
    10916 \fI\fIwins server\fR\fR\fI = \fR\fI\FC192\&.9\&.200\&.1 192\&.168\&.2\&.61\F[]\fR\fI \fR
     10240\fI\fIwins server\fR\fR\fI = \fR\fI\fR\fI \fR
     10241.sp
     10242Example:
     10243\fI\fIwins server\fR\fR\fI = \fR\fImary:192\&.9\&.200\&.1 fred:192\&.168\&.3\&.199 mary:192\&.168\&.2\&.61 # For this example when querying a certain name, 192\&.19\&.200\&.1 will be asked first and if that doesn\'t respond 192\&.168\&.2\&.61\&. If either of those doesn\'t know the name 192\&.168\&.3\&.199 will be queried\&.\fR\fI \fR
     10244.sp
     10245Example:
     10246\fI\fIwins server\fR\fR\fI = \fR\fI192\&.9\&.200\&.1 192\&.168\&.2\&.61\fR\fI \fR
    1091710247.RE
    1091810248
    … …  
    1092610256\fByes\fR
    1092710257unless you have a multi\-subnetted network and you wish a particular
    10928 \FCnmbd\F[]
     10258nmbd
    1092910259to be your WINS server\&. Note that you should
    1093010260\fINEVER\fR
    … …  
    1093410264.sp
    1093510265Default:
    10936 \fI\fIwins support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     10266\fI\fIwins support\fR\fR\fI = \fR\fIno\fR\fI \fR
    1093710267.RE
    1093810268
    … …  
    1094610276.sp
    1094710277Default:
    10948 \fI\fIworkgroup\fR\fR\fI = \fR\fI\FCWORKGROUP\F[]\fR\fI \fR
    10949 .sp
    10950 Example:
    10951 \fI\fIworkgroup\fR\fR\fI = \fR\fI\FCMYGROUP\F[]\fR\fI \fR
     10278\fI\fIworkgroup\fR\fR\fI = \fR\fIWORKGROUP\fR\fI \fR
     10279.sp
     10280Example:
     10281\fI\fIworkgroup\fR\fR\fI = \fR\fIMYGROUP\fR\fI \fR
    1095210282.RE
    1095310283
    … …  
    1096810298.sp
    1096910299Default:
    10970 \fI\fIwriteable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR
     10300\fI\fIwriteable\fR\fR\fI = \fR\fIno\fR\fI \fR
    1097110301.RE
    1097210302
    … …  
    1098410314.sp
    1098510315Default:
    10986 \fI\fIwrite cache size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR
    10987 .sp
    10988 Example:
    10989 \fI\fIwrite cache size\fR\fR\fI = \fR\fI\FC262144 # for a 256k cache size per file\F[]\fR\fI \fR
     10316\fI\fIwrite cache size\fR\fR\fI = \fR\fI0\fR\fI \fR
     10317.sp
     10318Example:
     10319\fI\fIwrite cache size\fR\fR\fI = \fR\fI262144 # for a 256k cache size per file\fR\fI \fR
    1099010320.RE
    1099110321
    … …  
    1100510335.sp
    1100610336Default:
    11007 \fI\fIwrite list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    11008 .sp
    11009 Example:
    11010 \fI\fIwrite list\fR\fR\fI = \fR\fI\FCadmin, root, @staff\F[]\fR\fI \fR
     10337\fI\fIwrite list\fR\fR\fI = \fR\fI\fR\fI \fR
     10338.sp
     10339Example:
     10340\fI\fIwrite list\fR\fR\fI = \fR\fIadmin, root, @staff\fR\fI \fR
    1101110341.RE
    1101210342
    … …  
    1101810348.sp
    1101910349Default:
    11020 \fI\fIwrite raw\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR
     10350\fI\fIwrite raw\fR\fR\fI = \fR\fIyes\fR\fI \fR
    1102110351.RE
    1102210352
    … …  
    1102610356.RS 4
    1102710357This parameter is only available if Samba has been configured and compiled with the option
    11028 \FC \-\-with\-utmp\F[]\&. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on the UNIX system) that record user connections to a Samba server\&. The difference with the utmp directory is the fact that user info is kept after a user has logged out\&.
     10358\-\-with\-utmp\&. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on the UNIX system) that record user connections to a Samba server\&. The difference with the utmp directory is the fact that user info is kept after a user has logged out\&.
    1102910359.sp
    1103010360By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually
    11031 \FC/var/run/wtmp\F[]
     10361/var/run/wtmp
    1103210362on Linux)\&.
    1103310363.sp
    1103410364Default:
    11035 \fI\fIwtmp directory\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR
    11036 .sp
    11037 Example:
    11038 \fI\fIwtmp directory\fR\fR\fI = \fR\fI\FC/var/log/wtmp\F[]\fR\fI \fR
     10365\fI\fIwtmp directory\fR\fR\fI = \fR\fI\fR\fI \fR
     10366.sp
     10367Example:
     10368\fI\fIwtmp directory\fR\fR\fI = \fR\fI/var/log/wtmp\fR\fI \fR
    1103910369.RE
    1104010370.SH "WARNINGS"
    … …  
    1104710377.PP
    1104810378Use of the
    11049 \FC[homes]\F[]
     10379[homes]
    1105010380and
    11051 \FC[printers]\F[]
     10381[printers]
    1105210382special sections make life for an administrator easy, but the various combinations of default attributes can be tricky\&. Take extreme care when designing these sections\&. In particular, ensure that the permissions on spool directories are correct\&.
    1105310383.SH "VERSION"
Note: See TracChangeset for help on using the changeset viewer.