- Timestamp:
- Mar 1, 2010, 3:05:48 PM (15 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/samba-3.3.x/docs/htmldocs/manpages/smb.conf.5.html
r368 r411 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.7 5.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id2528887"></a><h2>SYNOPSIS</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2522906"></a><h2>SYNOPSIS</h2><p> 2 2 The <code class="filename">smb.conf</code> file is a configuration file for the Samba suite. <code class="filename">smb.conf</code> contains runtime configuration information for the Samba programs. The 3 3 <code class="filename">smb.conf</code> file is designed to be configured and administered by the 4 4 <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> program. The 5 5 complete description of the file format and possible parameters held within are here for reference purposes. 6 </p></div><div class="refsect1" title="FILE FORMAT"><a name="FILEFORMATSECT"></a><h2>FILE FORMAT</h2><p>6 </p></div><div class="refsect1" lang="en"><a name="FILEFORMATSECT"></a><h2>FILE FORMAT</h2><p> 7 7 The file consists of sections and parameters. A section begins with the name of the section in square brackets 8 8 and continues until the next section begins. Sections contain parameters of the form: … … 19 19 retained verbatim. 20 20 </p><p> 21 Any line beginning with a semicolon ( <span class="quote">“<span class="quote">;</span>”</span>) or a hash (<span class="quote">“<span class="quote">#</span>”</span>)21 Any line beginning with a semicolon (“<span class="quote">;</span>”) or a hash (“<span class="quote">#</span>”) 22 22 character is ignored, as are lines containing only whitespace. 23 23 </p><p> 24 Any line ending in a <span class="quote">“<span class="quote"><code class="literal">\</code></span>”</span>is continued on the next line in the customary UNIX fashion.24 Any line ending in a “<span class="quote"><code class="literal">\</code></span>” is continued on the next line in the customary UNIX fashion. 25 25 </p><p> 26 26 The values following the equals sign in parameters are all either a string (no quotes needed) or a boolean, 27 27 which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved 28 28 in string values. Some items such as create masks are numeric. 29 </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id2489374"></a><h2>SECTION DESCRIPTIONS</h2><p>29 </p></div><div class="refsect1" lang="en"><a name="id2483390"></a><h2>SECTION DESCRIPTIONS</h2><p> 30 30 Each section in the configuration file (except for the [global] section) describes a shared resource (known as 31 a <span class="quote">“<span class="quote">share</span>”</span>). The section name is the name of the shared resource and the parameters within the31 a “<span class="quote">share</span>”). The section name is the name of the shared resource and the parameters within the 32 32 section define the shares attributes. 33 33 </p><p> … … 70 70 <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a> 71 71 </pre><p> 72 </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id2487452"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id2487457"></a><h3>The [global] section</h3><p>72 </p></div><div class="refsect1" lang="en"><a name="id2481471"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2481477"></a><h3>The [global] section</h3><p> 73 73 Parameters in this section apply to the server as a whole, or are defaults for sections that do not 74 74 specifically define certain items. See the notes under PARAMETERS for more information. 75 </p></div><div class="refsect2" title="The [homes] section"><a name="HOMESECT"></a><h3>The [homes] section</h3><p>75 </p></div><div class="refsect2" lang="en"><a name="HOMESECT"></a><h3>The [homes] section</h3><p> 76 76 If a section called [homes] is included in the configuration file, services connecting clients 77 77 to their home directories can be created on the fly by the server. … … 83 83 </p><p> 84 84 Some modifications are then made to the newly created share: 85 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>85 </p><div class="itemizedlist"><ul type="disc"><li><p> 86 86 The share name is changed from homes to the located username. 87 </p></li><li class="listitem"><p>87 </p></li><li><p> 88 88 If no path was given, the path is set to the user's home directory. 89 89 </p></li></ul></div><p> … … 98 98 of fuss. 99 99 </p><p> 100 A similar process occurs if the requested section name is <span class="quote">“<span class="quote">homes</span>”</span>, except that the share100 A similar process occurs if the requested section name is “<span class="quote">homes</span>”, except that the share 101 101 name is not changed to that of the requesting user. This method of using the [homes] section works well if 102 102 different users share a client PC. … … 116 116 flag, not the [homes] browseable flag. This is useful as it means setting <span class="emphasis"><em>browseable = no</em></span> in 117 117 the [homes] section will hide the [homes] share but make any auto home directories visible. 118 </p></div><div class="refsect2" title="The [printers] section"><a name="PRINTERSSECT"></a><h3>The [printers] section</h3><p>118 </p></div><div class="refsect2" lang="en"><a name="PRINTERSSECT"></a><h3>The [printers] section</h3><p> 119 119 This section works like [homes], but for printers. 120 120 </p><p> … … 129 129 </p><p> 130 130 A few modifications are then made to the newly created share: 131 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The share name is set to the located printer name</p></li><li class="listitem"><p>If no printer name was given, the printer name is set to the located printer name</p></li><li class="listitem"><p>If the share does not permit guest access and no username was given, the username is set131 </p><div class="itemizedlist"><ul type="disc"><li><p>The share name is set to the located printer name</p></li><li><p>If no printer name was given, the printer name is set to the located printer name</p></li><li><p>If the share does not permit guest access and no username was given, the username is set 132 132 to the located printer name.</p></li></ul></div><p> 133 133 The [printers] service MUST be printable - if you specify otherwise, the server will refuse … … 157 157 An alias, by the way, is defined as any component of the first entry of a printcap record. Records are separated by newlines, 158 158 components (if there are more than one) are separated by vertical bar symbols (<code class="literal">|</code>). 159 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>159 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 160 160 On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use 161 161 <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the 162 162 <code class="literal">printcap name</code> option for more details. 163 </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id2487774"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete163 </p></div></div></div><div class="refsect1" lang="en"><a name="id2481792"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete 164 164 their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and 165 165 is controlled by a set of parameters in the [global] section of the smb.conf. … … 185 185 to the global 186 186 section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares 187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id2488001"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2482019"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p> 188 188 Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>). Some parameters 189 189 are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal … … 197 197 find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred 198 198 synonym. 199 </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id2538515"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>199 </p></div><div class="refsect1" lang="en"><a name="id2532531"></a><h2>VARIABLE SUBSTITUTIONS</h2><p> 200 200 Many of the strings that are settable in the config file can take substitutions. For example the option 201 <span class="quote">“<span class="quote">path = /tmp/%u</span>”</span> is interpreted as <span class="quote">“<span class="quote">path = /tmp/john</span>”</span>if the user connected with the201 “<span class="quote">path = /tmp/%u</span>” is interpreted as “<span class="quote">path = /tmp/john</span>” if the user connected with the 202 202 username john. 203 203 </p><p> … … 211 211 functionality to function as it did with Samba 2.x. 212 212 </p></dd><dt><span class="term">%L</span></dt><dd><p>the NetBIOS name of the server. This allows you to change your config based on what 213 the client calls you. Your server can have a <span class="quote">“<span class="quote">dual personality</span>”</span>.213 the client calls you. Your server can have a “<span class="quote">dual personality</span>”. 214 214 </p></dd><dt><span class="term">%M</span></dt><dd><p>the Internet name of the client machine. 215 215 </p></dd><dt><span class="term">%R</span></dt><dd><p>the selected protocol level after protocol negotiation. It can be one of CORE, COREPLUS, … … 239 239 There are some quite creative things that can be done with these substitutions and other 240 240 <code class="filename">smb.conf</code> options. 241 </p></div><div class="refsect1" title="NAME MANGLING"><a name="NAMEMANGLINGSECT"></a><h2>NAME MANGLING</h2><p>241 </p></div><div class="refsect1" lang="en"><a name="NAMEMANGLINGSECT"></a><h2>NAME MANGLING</h2><p> 242 242 Samba supports <code class="literal">name mangling</code> so that DOS and Windows clients can use files that don't 243 243 conform to the 8.3 format. It can also be set to adjust the case of 8.3 format filenames. … … 277 277 then the "default case" option will be applied and will modify all filenames sent from the client 278 278 when accessing this share. 279 </p></div><div class="refsect1" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"><a name="VALIDATIONSECT"></a><h2>NOTE ABOUT USERNAME/PASSWORD VALIDATION</h2><p>279 </p></div><div class="refsect1" lang="en"><a name="VALIDATIONSECT"></a><h2>NOTE ABOUT USERNAME/PASSWORD VALIDATION</h2><p> 280 280 There are a number of ways in which a user can connect to a service. The server uses the following steps 281 281 in determining if it will allow a connection to a specified service. If all the steps fail, the connection 282 282 request is rejected. However, if one of the steps succeeds, the following steps are not checked. 283 283 </p><p> 284 If the service is marked <span class="quote">“<span class="quote">guest only = yes</span>”</span>and the server is running with share-level285 security ( <span class="quote">“<span class="quote">security = share</span>”</span>, steps 1 to 5 are skipped.286 </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>284 If the service is marked “<span class="quote">guest only = yes</span>” and the server is running with share-level 285 security (“<span class="quote">security = share</span>”, steps 1 to 5 are skipped. 286 </p><div class="orderedlist"><ol type="1"><li><p> 287 287 If the client has passed a username/password pair and that username/password pair is validated by the UNIX 288 288 system's password programs, the connection is made as that username. This includes the 289 289 <code class="literal">\\server\service</code>%<em class="replaceable"><code>username</code></em> method of passing a username. 290 </p></li><li class="listitem"><p>290 </p></li><li><p> 291 291 If the client has previously registered a username with the system and now supplies a correct password for that 292 292 username, the connection is allowed. 293 </p></li><li class="listitem"><p>293 </p></li><li><p> 294 294 The client's NetBIOS name and any previously used usernames are checked against the supplied password. If 295 295 they match, the connection is allowed as the corresponding user. 296 </p></li><li class="listitem"><p>296 </p></li><li><p> 297 297 If the client has previously validated a username/password pair with the server and the client has passed 298 298 the validation token, that username is used. 299 </p></li><li class="listitem"><p>299 </p></li><li><p> 300 300 If a <code class="literal">user = </code> field is given in the <code class="filename">smb.conf</code> file for the 301 301 service and the client has supplied a password, and that password matches (according to the UNIX system's … … 303 303 the username in the <code class="literal">user =</code> line. If one of the usernames in the <code class="literal">user =</code> list 304 304 begins with a <code class="literal">@</code>, that name expands to a list of names in the group of the same name. 305 </p></li><li class="listitem"><p>305 </p></li><li><p> 306 306 If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account 307 307 =</code> for the service, irrespective of the supplied password. 308 </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id2539216"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>308 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2533232"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p> 309 309 Starting with Samba version 3.2.0, the capability to 310 310 store Samba configuration in the registry is available. … … 312 312 <span class="emphasis"><em><code class="literal">HKLM\Software\Samba\smbconf</code></em></span>. 313 313 There are two levels of registry configuration: 314 </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Share definitions stored in registry are used.314 </p><div class="orderedlist"><ol type="1"><li><p>Share definitions stored in registry are used. 315 315 This is triggered by setting the global 316 316 parameter <em class="parameter"><code>registry shares</code></em> 317 to <span class="quote">“<span class="quote">yes</span>”</span>in <span class="emphasis"><em>smb.conf</em></span>.317 to “<span class="quote">yes</span>” in <span class="emphasis"><em>smb.conf</em></span>. 318 318 </p><p>The registry shares are loaded not at startup but 319 319 on demand at runtime by <span class="emphasis"><em>smbd</em></span>. 320 320 Shares defined in <span class="emphasis"><em>smb.conf</em></span> take 321 321 priority over shares of the same name defined in 322 registry.</p></li><li class="listitem"><p>Global <span class="emphasis"><em>smb.conf</em></span>322 registry.</p></li><li><p>Global <span class="emphasis"><em>smb.conf</em></span> 323 323 options stored in registry are used. This can be activated 324 324 in two different ways:</p><p>Firstly, a registry only configuration is triggered … … 361 361 accessing the database file, circumventing the 362 362 server. 363 </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id2539391"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2539402"></a>363 </p></div><div class="refsect1" lang="en"><a name="id2533407"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533418"></a> 364 364 365 365 abort shutdown script (G) 366 </h3></div></div></div><a class="indexterm" name="id253 9403"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that366 </h3></div></div></div><a class="indexterm" name="id2533419"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 367 367 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 368 368 right, this command will be run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> … … 370 370 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> 371 371 </em></span> 372 </p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2539481"></a>372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533498"></a> 373 373 374 374 acl check permissions (S) 375 </h3></div></div></div><a class="indexterm" name="id253 9482"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"375 </h3></div></div></div><a class="indexterm" name="id2533499"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 376 376 from a Windows client. If a Windows client doesn't have permissions to delete a file then they 377 377 expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by … … 393 393 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code> 394 394 </em></span> 395 </p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2487333"></a>395 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2481353"></a> 396 396 397 397 acl compatibility (G) 398 </h3></div></div></div><a class="indexterm" name="id248 7334"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should398 </h3></div></div></div><a class="indexterm" name="id2481354"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should 399 399 be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4, 400 400 <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>. … … 405 405 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code> 406 406 </em></span> 407 </p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2487409"></a>407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2481430"></a> 408 408 409 409 acl group control (S) 410 </h3></div></div></div><a class="indexterm" name="id248 7410"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>410 </h3></div></div></div><a class="indexterm" name="id2481431"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 411 411 In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions 412 412 and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the … … 435 435 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code> 436 436 </em></span> 437 </p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2539872"></a>437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533889"></a> 438 438 439 439 acl map full control (S) 440 </h3></div></div></div><a class="indexterm" name="id253 9873"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>440 </h3></div></div></div><a class="indexterm" name="id2533890"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 441 441 This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 442 442 allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX … … 446 446 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code> 447 447 </em></span> 448 </p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2539923"></a>448 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533940"></a> 449 449 450 450 add group script (G) 451 </h3></div></div></div><a class="indexterm" name="id253 9924"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>451 </h3></div></div></div><a class="indexterm" name="id2533941"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 452 452 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 453 453 will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful … … 459 459 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code> 460 460 </em></span> 461 </p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2539998"></a>461 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534015"></a> 462 462 463 463 add machine script (G) 464 </h3></div></div></div><a class="indexterm" name="id253 9999"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>464 </h3></div></div></div><a class="indexterm" name="id2534016"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 465 465 This is the full pathname to a script that will be run by 466 466 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is … … 473 473 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code> 474 474 </em></span> 475 </p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540077"></a>475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534094"></a> 476 476 477 477 add port command (G) 478 </h3></div></div></div><a class="indexterm" name="id25 40078"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports478 </h3></div></div></div><a class="indexterm" name="id2534095"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports 479 479 remotely using the Windows "Add Standard TCP/IP Port Wizard". 480 480 This option defines an external program to be executed when 481 481 smbd receives a request to add a new Port to the system. 482 The script is passed two parameters:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://<hostname>[:<portnumber>]482 The script is passed two parameters:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://<hostname>[:<portnumber>] 483 483 or lpd://<hostname>/<queuename>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal"></code> 484 484 </em></span> 485 485 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code> 486 486 </em></span> 487 </p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540161"></a>487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534176"></a> 488 488 489 489 addprinter command (G) 490 </h3></div></div></div><a class="indexterm" name="id25 40162"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing490 </h3></div></div></div><a class="indexterm" name="id2534177"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing 491 491 support for Windows NT/2000 clients in Samba 2.2, The MS Add 492 492 Printer Wizard (APW) icon is now also available in the … … 502 502 shared by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>The <em class="parameter"><code>addprinter command</code></em> is 503 503 automatically invoked with the following parameter (in 504 order):</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>printer name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>share name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>driver name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>location</code></em></p></li><li class="listitem"><p><em class="parameter"><code>Windows 9x driver location</code></em></p></li></ul></div><p>All parameters are filled in from the PRINTER_INFO_2 structure sent504 order):</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>printer name</code></em></p></li><li><p><em class="parameter"><code>share name</code></em></p></li><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>driver name</code></em></p></li><li><p><em class="parameter"><code>location</code></em></p></li><li><p><em class="parameter"><code>Windows 9x driver location</code></em></p></li></ul></div><p>All parameters are filled in from the PRINTER_INFO_2 structure sent 505 505 by the Windows NT/2000 client with one exception. The "Windows 9x 506 506 driver location" parameter is included for backwards compatibility … … 519 519 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code> 520 520 </em></span> 521 </p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540350"></a>521 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534364"></a> 522 522 523 523 add share command (G) 524 </h3></div></div></div><a class="indexterm" name="id25 40351"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>524 </h3></div></div></div><a class="indexterm" name="id2534365"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 525 525 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 526 526 Manager. The <em class="parameter"><code>add share command</code></em> is used to define an external program … … 538 538 When executed, <code class="literal">smbd</code> will automatically invoke the 539 539 <em class="parameter"><code>add share command</code></em> with five parameters. 540 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location of the global <code class="filename">smb.conf</code> file.541 </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of the new share.542 </p></li><li class="listitem"><p><em class="parameter"><code>pathName</code></em> - path to an **existing**540 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location of the global <code class="filename">smb.conf</code> file. 541 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new share. 542 </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing** 543 543 directory on disk. 544 </p></li><li class="listitem"><p><em class="parameter"><code>comment</code></em> - comment string to associate with the new544 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate with the new 545 545 share. 546 </p></li><li class="listitem"><p><em class="parameter"><code>max546 </p></li><li><p><em class="parameter"><code>max 547 547 connections</code></em> 548 548 Number of maximum simultaneous connections to this … … 554 554 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 555 555 </em></span> 556 </p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540535"></a>556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534551"></a> 557 557 558 558 add user script (G) 559 </h3></div></div></div><a class="indexterm" name="id25 40536"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>559 </h3></div></div></div><a class="indexterm" name="id2534552"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 560 560 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by 561 561 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 592 592 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code> 593 593 </em></span> 594 </p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540746"></a>594 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534762"></a> 595 595 596 596 add user to group script (G) 597 </h3></div></div></div><a class="indexterm" name="id25 40747"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>597 </h3></div></div></div><a class="indexterm" name="id2534763"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 598 598 Full path to the script that will be called when a user is added to a group using the Windows NT domain administration 599 599 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 607 607 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code> 608 608 </em></span> 609 </p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540833"></a>609 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534849"></a> 610 610 611 611 administrative share (S) 612 </h3></div></div></div><a class="indexterm" name="id25 40834"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for612 </h3></div></div></div><a class="indexterm" name="id2534850"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for 613 613 a share, then the share will be an administrative share. The Administrative 614 614 Shares are the default network shares created by all Windows NT-based … … 617 617 information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code> 618 618 </em></span> 619 </p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540891"></a>619 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534907"></a> 620 620 621 621 admin users (S) 622 </h3></div></div></div><a class="indexterm" name="id25 40892"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted622 </h3></div></div></div><a class="indexterm" name="id2534908"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted 623 623 administrative privileges on the share. This means that they 624 624 will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in … … 629 629 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code> 630 630 </em></span> 631 </p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2540963"></a>631 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534980"></a> 632 632 633 633 afs share (S) 634 </h3></div></div></div><a class="indexterm" name="id25 40964"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled634 </h3></div></div></div><a class="indexterm" name="id2534981"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled 635 635 for this share. If enabled, it assumes that the directory exported via 636 636 the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The … … 639 639 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code> 640 640 </em></span> 641 </p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541011"></a>641 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535027"></a> 642 642 643 643 afs username map (G) 644 </h3></div></div></div><a class="indexterm" name="id25 41012"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might644 </h3></div></div></div><a class="indexterm" name="id2535028"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might 645 645 want to hand-craft the usernames you are creating tokens for. 646 646 For example this is necessary if you have users from several domain … … 652 652 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code> 653 653 </em></span> 654 </p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541073"></a>654 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535089"></a> 655 655 656 656 aio read size (S) 657 </h3></div></div></div><a class="indexterm" name="id25 41074"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this657 </h3></div></div></div><a class="indexterm" name="id2535090"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 658 658 integer parameter is set to non-zero value, 659 659 Samba will read from file asynchronously when size of request is bigger … … 666 666 request size</code> 667 667 </em></span> 668 </p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541160"></a>668 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535176"></a> 669 669 670 670 aio write behind (S) 671 </h3></div></div></div><a class="indexterm" name="id25 41161"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,671 </h3></div></div></div><a class="indexterm" name="id2535177"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support, 672 672 Samba will not wait until write requests are finished before returning 673 673 the result to the client for files listed in this parameter. … … 684 684 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write behind</code></em> = <code class="literal">/*.tmp/</code> 685 685 </em></span> 686 </p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541231"></a>686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535247"></a> 687 687 688 688 aio write size (S) 689 </h3></div></div></div><a class="indexterm" name="id25 41232"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this689 </h3></div></div></div><a class="indexterm" name="id2535248"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 690 690 integer parameter is set to non-zero value, 691 691 Samba will write to file asynchronously when size of request is bigger … … 698 698 request size</code> 699 699 </em></span> 700 </p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541317"></a>700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535333"></a> 701 701 702 702 algorithmic rid base (G) 703 </h3></div></div></div><a class="indexterm" name="id25 41318"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its703 </h3></div></div></div><a class="indexterm" name="id2535334"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its 704 704 algorithmic mapping from uids/gid to the RIDs needed to construct 705 705 NT Security Identifiers. … … 716 716 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code> 717 717 </em></span> 718 </p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541387"></a>718 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535403"></a> 719 719 720 720 allocation roundup size (S) 721 </h3></div></div></div><a class="indexterm" name="id25 41388"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the721 </h3></div></div></div><a class="indexterm" name="id2535404"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the 722 722 allocation size reported to Windows clients. The default 723 723 size of 1Mb generally results in improved Windows client … … 731 731 # (to disable roundups)</code> 732 732 </em></span> 733 </p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541452"></a>733 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535468"></a> 734 734 735 735 allow trusted domains (G) 736 </h3></div></div></div><a class="indexterm" name="id25 41453"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>736 </h3></div></div></div><a class="indexterm" name="id2535469"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 737 737 This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> option is set to 738 738 <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. … … 749 749 can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code> 750 750 </em></span> 751 </p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541524"></a>751 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535540"></a> 752 752 753 753 announce as (G) 754 </h3></div></div></div><a class="indexterm" name="id25 41525"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse754 </h3></div></div></div><a class="indexterm" name="id2535541"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 755 755 list. By default this is set to Windows NT. The valid options 756 756 are : "NT Server" (which can also be written as "NT"), … … 764 764 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code> 765 765 </em></span> 766 </p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541593"></a>766 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535609"></a> 767 767 768 768 announce version (G) 769 </h3></div></div></div><a class="indexterm" name="id25 41594"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers769 </h3></div></div></div><a class="indexterm" name="id2535610"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers 770 770 that nmbd will use when announcing itself as a server. The default 771 771 is 4.9. Do not change this parameter unless you have a specific … … 774 774 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code> 775 775 </em></span> 776 </p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541650"></a>776 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535666"></a> 777 777 778 778 auth methods (G) 779 </h3></div></div></div><a class="indexterm" name="id25 41651"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>779 </h3></div></div></div><a class="indexterm" name="id2535667"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p> 780 780 This option allows the administrator to chose what authentication methods <code class="literal">smbd</code> 781 781 will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>. … … 798 798 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code> 799 799 </em></span> 800 </p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541755"></a>800 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535772"></a> 801 801 802 802 available (S) 803 </h3></div></div></div><a class="indexterm" name="id25 41756"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If803 </h3></div></div></div><a class="indexterm" name="id2535773"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If 804 804 <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span> 805 805 attempts to connect to the service will fail. Such failures are 806 806 logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code> 807 807 </em></span> 808 </p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2541803"></a>808 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535819"></a> 809 809 810 810 bind interfaces only (G) 811 </h3></div></div></div><a class="indexterm" name="id25 41804"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin811 </h3></div></div></div><a class="indexterm" name="id2535820"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin 812 812 to limit what interfaces on a machine will serve SMB requests. It 813 813 affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p> … … 850 850 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code> 851 851 </em></span> 852 </p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542130"></a>852 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536146"></a> 853 853 854 854 blocking locks (S) 855 </h3></div></div></div><a class="indexterm" name="id25 42131"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior855 </h3></div></div></div><a class="indexterm" name="id2536148"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior 856 856 of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 857 857 to obtain a byte range lock on a region of an open file, and the … … 864 864 cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code> 865 865 </em></span> 866 </p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542194"></a>866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536211"></a> 867 867 868 868 block size (S) 869 </h3></div></div></div><a class="indexterm" name="id25 42195"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free869 </h3></div></div></div><a class="indexterm" name="id2536212"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 870 870 sizes. By default, this reports a disk block size of 1024 bytes. 871 871 </p><p>Changing this parameter may have some effect on the … … 881 881 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code> 882 882 </em></span> 883 </p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id2542279"></a>883 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536295"></a> 884 884 885 885 <a name="BROWSABLE"></a>browsable 886 </h3></div></div></div><a class="indexterm" name="id25 42280"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542306"></a>886 </h3></div></div></div><a class="indexterm" name="id2536296"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536322"></a> 887 887 888 888 browseable (S) 889 </h3></div></div></div><a class="indexterm" name="id25 42307"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in889 </h3></div></div></div><a class="indexterm" name="id2536323"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in 890 890 the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code> 891 891 </em></span> 892 </p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542345"></a>892 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536361"></a> 893 893 894 894 browse list (G) 895 </h3></div></div></div><a class="indexterm" name="id25 42346"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to895 </h3></div></div></div><a class="indexterm" name="id2536362"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 896 896 a client doing a <code class="literal">NetServerEnum</code> call. Normally 897 897 set to <code class="constant">yes</code>. You should never need to change 898 898 this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code> 899 899 </em></span> 900 </p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id2542399"></a>900 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536415"></a> 901 901 902 902 <a name="CASESIGNAMES"></a>casesignames 903 </h3></div></div></div><a class="indexterm" name="id25 42400"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542426"></a>903 </h3></div></div></div><a class="indexterm" name="id2536416"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536442"></a> 904 904 905 905 case sensitive (S) 906 </h3></div></div></div><a class="indexterm" name="id25 42427"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>907 </em></span> 908 </p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542473"></a>906 </h3></div></div></div><a class="indexterm" name="id2536443"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 907 </em></span> 908 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536489"></a> 909 909 910 910 change notify (S) 911 </h3></div></div></div><a class="indexterm" name="id25 42474"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply911 </h3></div></div></div><a class="indexterm" name="id2536490"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply 912 912 to a client's file change notify requests. 913 913 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code> 914 914 </em></span> 915 </p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542515"></a>915 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536532"></a> 916 916 917 917 change share command (G) 918 </h3></div></div></div><a class="indexterm" name="id25 42516"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>918 </h3></div></div></div><a class="indexterm" name="id2536533"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 919 919 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 920 920 Manager. The <em class="parameter"><code>change share command</code></em> is used to define an external … … 931 931 When executed, <code class="literal">smbd</code> will automatically invoke the 932 932 <em class="parameter"><code>change share command</code></em> with five parameters. 933 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location933 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 934 934 of the global <code class="filename">smb.conf</code> file. 935 </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of the new935 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new 936 936 share. 937 </p></li><li class="listitem"><p><em class="parameter"><code>pathName</code></em> - path to an **existing**937 </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing** 938 938 directory on disk. 939 </p></li><li class="listitem"><p><em class="parameter"><code>comment</code></em> - comment string to associate939 </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate 940 940 with the new share. 941 </p></li><li class="listitem"><p><em class="parameter"><code>max941 </p></li><li><p><em class="parameter"><code>max 942 942 connections</code></em> 943 943 Number of maximum simultaneous connections to this … … 951 951 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/changeshare</code> 952 952 </em></span> 953 </p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542694"></a>953 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536710"></a> 954 954 955 955 check password script (G) 956 </h3></div></div></div><a class="indexterm" name="id25 42695"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password956 </h3></div></div></div><a class="indexterm" name="id2536711"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password 957 957 complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value 958 958 if the password is bad. … … 963 963 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">/usr/local/sbin/crackcheck</code> 964 964 </em></span> 965 </p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542767"></a>965 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536784"></a> 966 966 967 967 client lanman auth (G) 968 </h3></div></div></div><a class="indexterm" name="id25 42768"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client968 </h3></div></div></div><a class="indexterm" name="id2536785"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 969 969 tools will attempt to authenticate itself to servers using the 970 970 weaker LANMAN password hash. If disabled, only server which support NT … … 977 977 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code> 978 978 </em></span> 979 </p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542843"></a>979 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536860"></a> 980 980 981 981 client ldap sasl wrapping (G) 982 </h3></div></div></div><a class="indexterm" name="id25 42844"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>982 </h3></div></div></div><a class="indexterm" name="id2536861"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p> 983 983 The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING" target="_top">client ldap sasl wrapping</a> defines whether 984 984 ldap traffic will be signed or signed and encrypted (sealed). … … 1008 1008 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code> 1009 1009 </em></span> 1010 </p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2542959"></a>1010 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536975"></a> 1011 1011 1012 1012 client ntlmv2 auth (G) 1013 </h3></div></div></div><a class="indexterm" name="id25 42960"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to1013 </h3></div></div></div><a class="indexterm" name="id2536976"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 1014 1014 authenticate itself to servers using the NTLMv2 encrypted password 1015 1015 response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more … … 1023 1023 responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code> 1024 1024 </em></span> 1025 </p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543046"></a>1025 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537063"></a> 1026 1026 1027 1027 client plaintext auth (G) 1028 </h3></div></div></div><a class="indexterm" name="id25 43047"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext1028 </h3></div></div></div><a class="indexterm" name="id2537064"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext 1029 1029 password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code> 1030 1030 </em></span> 1031 </p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543086"></a>1031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537102"></a> 1032 1032 1033 1033 client schannel (G) 1034 </h3></div></div></div><a class="indexterm" name="id25 43087"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>1034 </h3></div></div></div><a class="indexterm" name="id2537103"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 1035 1035 This controls whether the client offers or even demands the use of the netlogon schannel. 1036 1036 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = no</a> does not offer the schannel, … … 1042 1042 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code> 1043 1043 </em></span> 1044 </p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543170"></a>1044 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537186"></a> 1045 1045 1046 1046 client signing (G) 1047 </h3></div></div></div><a class="indexterm" name="id25 43171"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values1047 </h3></div></div></div><a class="indexterm" name="id2537187"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 1048 1048 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 1049 1049 and <span class="emphasis"><em>disabled</em></span>. … … 1053 1053 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 1054 1054 </em></span> 1055 </p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543224"></a>1055 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537240"></a> 1056 1056 1057 1057 client use spnego (G) 1058 </h3></div></div></div><a class="indexterm" name="id25 43225"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try1058 </h3></div></div></div><a class="indexterm" name="id2537242"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 1059 1059 to use Simple and Protected NEGOciation (as specified by rfc2478) with 1060 1060 supporting servers (including WindowsXP, Windows2000 and Samba … … 1062 1062 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 1063 1063 </em></span> 1064 </p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543266"></a>1064 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537282"></a> 1065 1065 1066 1066 cluster addresses (G) 1067 </h3></div></div></div><a class="indexterm" name="id25 43267"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses1067 </h3></div></div></div><a class="indexterm" name="id2537284"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses 1068 1068 nmbd will register with a WINS server. These addresses are not 1069 1069 necessarily present on all nodes simultaneously, but they will … … 1074 1074 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code> 1075 1075 </em></span> 1076 </p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543322"></a>1076 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537338"></a> 1077 1077 1078 1078 clustering (G) 1079 </h3></div></div></div><a class="indexterm" name="id25 43323"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact1079 </h3></div></div></div><a class="indexterm" name="id2537340"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact 1080 1080 ctdb for accessing its tdb files and use ctdb as a backend 1081 1081 for its messaging backend. … … 1084 1084 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code> 1085 1085 </em></span> 1086 </p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543371"></a>1086 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537387"></a> 1087 1087 1088 1088 comment (S) 1089 </h3></div></div></div><a class="indexterm" name="id25 43372"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share1089 </h3></div></div></div><a class="indexterm" name="id2537388"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 1090 1090 when a client does a queries the server, either via the network 1091 1091 neighborhood or via <code class="literal">net view</code> to list what shares … … 1096 1096 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 1097 1097 </em></span> 1098 </p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543445"></a>1098 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537462"></a> 1099 1099 1100 1100 config backend (G) 1101 </h3></div></div></div><a class="indexterm" name="id25 43446"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>1101 </h3></div></div></div><a class="indexterm" name="id2537463"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1102 1102 This controls the backend for storing the configuration. 1103 1103 Possible values are <span class="emphasis"><em>file</em></span> (the default) … … 1117 1117 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code> 1118 1118 </em></span> 1119 </p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543534"></a>1119 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537551"></a> 1120 1120 1121 1121 config file (G) 1122 </h3></div></div></div><a class="indexterm" name="id25 43535"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file1122 </h3></div></div></div><a class="indexterm" name="id2537552"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file 1123 1123 to use, instead of the default (usually <code class="filename">smb.conf</code>). 1124 1124 There is a chicken and egg problem here as this option is set … … 1130 1130 clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code> 1131 1131 </em></span> 1132 </p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543600"></a>1132 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537616"></a> 1133 1133 1134 1134 copy (S) 1135 </h3></div></div></div><a class="indexterm" name="id25 43601"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service1135 </h3></div></div></div><a class="indexterm" name="id2537617"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service 1136 1136 entries. The specified service is simply duplicated under the 1137 1137 current service's name. Any parameters specified in the current … … 1143 1143 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code> 1144 1144 </em></span> 1145 </p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id2543662"></a>1145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537678"></a> 1146 1146 1147 1147 <a name="CREATEMODE"></a>create mode 1148 </h3></div></div></div><a class="indexterm" name="id25 43663"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543689"></a>1148 </h3></div></div></div><a class="indexterm" name="id2537680"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537705"></a> 1149 1149 1150 1150 create mask (S) 1151 </h3></div></div></div><a class="indexterm" name="id25 43690"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>1151 </h3></div></div></div><a class="indexterm" name="id2537706"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 1152 1152 When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to 1153 1153 UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may … … 1170 1170 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 1171 1171 </em></span> 1172 </p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543810"></a>1172 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537827"></a> 1173 1173 1174 1174 csc policy (S) 1175 </h3></div></div></div><a class="indexterm" name="id25 43811"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>1175 </h3></div></div></div><a class="indexterm" name="id2537828"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 1176 1176 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 1177 1177 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 1185 1185 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code> 1186 1186 </em></span> 1187 </p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543886"></a>1187 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537902"></a> 1188 1188 1189 1189 ctdbd socket (G) 1190 </h3></div></div></div><a class="indexterm" name="id25 43887"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,1190 </h3></div></div></div><a class="indexterm" name="id2537903"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>, 1191 1191 you need to tell Samba where ctdbd listens on its unix domain 1192 1192 socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which … … 1196 1196 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code> 1197 1197 </em></span> 1198 </p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2543946"></a>1198 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537962"></a> 1199 1199 1200 1200 cups connection timeout (G) 1201 </h3></div></div></div><a class="indexterm" name="id25 43947"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>1201 </h3></div></div></div><a class="indexterm" name="id2537963"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 1202 1202 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>. 1203 1203 </p><p> … … 1209 1209 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups connection timeout</code></em> = <code class="literal">60</code> 1210 1210 </em></span> 1211 </p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544018"></a>1211 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538034"></a> 1212 1212 1213 1213 cups options (S) 1214 </h3></div></div></div><a class="indexterm" name="id25 44019"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1214 </h3></div></div></div><a class="indexterm" name="id2538035"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1215 1215 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is 1216 1216 set to <code class="constant">cups</code>. Its value is a free form string of options … … 1234 1234 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code> 1235 1235 </em></span> 1236 </p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544116"></a>1236 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538132"></a> 1237 1237 1238 1238 cups server (G) 1239 </h3></div></div></div><a class="indexterm" name="id25 44117"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>1239 </h3></div></div></div><a class="indexterm" name="id2538133"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1240 1240 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>. 1241 1241 </p><p> … … 1251 1251 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code> 1252 1252 </em></span> 1253 </p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544214"></a>1253 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538230"></a> 1254 1254 1255 1255 deadtime (G) 1256 </h3></div></div></div><a class="indexterm" name="id25 44215"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)1256 </h3></div></div></div><a class="indexterm" name="id2538231"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer) 1257 1257 represents the number of minutes of inactivity before a connection 1258 1258 is considered dead, and it is disconnected. The deadtime only takes … … 1266 1266 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code> 1267 1267 </em></span> 1268 </p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544290"></a>1268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538307"></a> 1269 1269 1270 1270 debug class (G) 1271 </h3></div></div></div><a class="indexterm" name="id25 44292"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>1271 </h3></div></div></div><a class="indexterm" name="id2538308"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1272 1272 With this boolean parameter enabled, the debug class (DBGC_CLASS) 1273 1273 will be displayed in the debug header. … … 1277 1277 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code> 1278 1278 </em></span> 1279 </p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544342"></a>1279 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538358"></a> 1280 1280 1281 1281 debug hires timestamp (G) 1282 </h3></div></div></div><a class="indexterm" name="id25 44343"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1282 </h3></div></div></div><a class="indexterm" name="id2538359"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1283 1283 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 1284 1284 boolean parameter adds microsecond resolution to the timestamp message header when turned on. … … 1287 1287 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">no</code> 1288 1288 </em></span> 1289 </p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544397"></a>1289 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538413"></a> 1290 1290 1291 1291 debug pid (G) 1292 </h3></div></div></div><a class="indexterm" name="id25 44398"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>1292 </h3></div></div></div><a class="indexterm" name="id2538414"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1293 1293 When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 1294 1294 message. This boolean parameter is adds the process-id to the timestamp message headers in the … … 1298 1298 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code> 1299 1299 </em></span> 1300 </p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544459"></a>1300 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538475"></a> 1301 1301 1302 1302 debug prefix timestamp (G) 1303 </h3></div></div></div><a class="indexterm" name="id25 44460"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1303 </h3></div></div></div><a class="indexterm" name="id2538476"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1304 1304 With this option enabled, the timestamp message header is prefixed to the debug message without the 1305 1305 filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> … … 1309 1309 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 1310 1310 </em></span> 1311 </p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id2544522"></a>1311 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538538"></a> 1312 1312 1313 1313 <a name="TIMESTAMPLOGS"></a>timestamp logs 1314 </h3></div></div></div><a class="indexterm" name="id25 44523"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544549"></a>1314 </h3></div></div></div><a class="indexterm" name="id2538539"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538565"></a> 1315 1315 1316 1316 debug timestamp (G) 1317 </h3></div></div></div><a class="indexterm" name="id25 44550"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1317 </h3></div></div></div><a class="indexterm" name="id2538566"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1318 1318 Samba debug log messages are timestamped by default. If you are running at a high 1319 1319 <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This … … 1321 1321 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 1322 1322 </em></span> 1323 </p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544597"></a>1323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538614"></a> 1324 1324 1325 1325 debug uid (G) 1326 </h3></div></div></div><a class="indexterm" name="id25 44598"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>1326 </h3></div></div></div><a class="indexterm" name="id2538615"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1327 1327 Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the 1328 1328 current euid, egid, uid and gid to the timestamp message headers in the log file if turned on. … … 1331 1331 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 1332 1332 </em></span> 1333 </p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544651"></a>1333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538667"></a> 1334 1334 1335 1335 default case (S) 1336 </h3></div></div></div><a class="indexterm" name="id25 44652"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.1336 </h3></div></div></div><a class="indexterm" name="id2538668"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. 1337 1337 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1338 1338 </em></span> 1339 </p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544705"></a>1339 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538721"></a> 1340 1340 1341 1341 default devmode (S) 1342 </h3></div></div></div><a class="indexterm" name="id25 44706"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.1342 </h3></div></div></div><a class="indexterm" name="id2538722"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services. 1343 1343 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 1344 1344 server has a Device Mode which defines things such as paper size and … … 1363 1363 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 1364 1364 </em></span> 1365 </p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id2544801"></a>1365 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538818"></a> 1366 1366 1367 1367 <a name="DEFAULT"></a>default 1368 </h3></div></div></div><a class="indexterm" name="id25 44802"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544828"></a>1368 </h3></div></div></div><a class="indexterm" name="id2538819"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538845"></a> 1369 1369 1370 1370 default service (G) 1371 </h3></div></div></div><a class="indexterm" name="id25 44829"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service1371 </h3></div></div></div><a class="indexterm" name="id2538846"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 1372 1372 which will be connected to if the service actually requested cannot 1373 1373 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 1383 1383 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code> 1384 1384 </em></span> 1385 </p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544930"></a>1385 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538946"></a> 1386 1386 1387 1387 defer sharing violations (G) 1388 </h3></div></div></div><a class="indexterm" name="id25 44931"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1388 </h3></div></div></div><a class="indexterm" name="id2538947"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1389 1389 Windows allows specifying how a file will be shared with 1390 1390 other processes when it is opened. Sharing violations occur when … … 1399 1399 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code> 1400 1400 </em></span> 1401 </p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2544985"></a>1401 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539001"></a> 1402 1402 1403 1403 delete group script (G) 1404 </h3></div></div></div><a class="indexterm" name="id25 44986"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1404 </h3></div></div></div><a class="indexterm" name="id2539002"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1405 1405 be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1406 1406 It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. … … 1408 1408 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code> 1409 1409 </em></span> 1410 </p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545041"></a>1410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539057"></a> 1411 1411 1412 1412 deleteprinter command (G) 1413 </h3></div></div></div><a class="indexterm" name="id25 45042"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer1413 </h3></div></div></div><a class="indexterm" name="id2539058"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer 1414 1414 support for Windows NT/2000 clients in Samba 2.2, it is now 1415 1415 possible to delete a printer at run time by issuing the … … 1429 1429 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1430 1430 </em></span> 1431 </p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545168"></a>1431 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539185"></a> 1432 1432 1433 1433 delete readonly (S) 1434 </h3></div></div></div><a class="indexterm" name="id25 45169"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted.1434 </h3></div></div></div><a class="indexterm" name="id2539186"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1435 1435 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1436 1436 as rcs, where UNIX file ownership prevents changing file 1437 1437 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1438 1438 </em></span> 1439 </p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545214"></a>1439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539230"></a> 1440 1440 1441 1441 delete share command (G) 1442 </h3></div></div></div><a class="indexterm" name="id25 45215"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1442 </h3></div></div></div><a class="indexterm" name="id2539231"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1443 1443 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 1444 1444 Manager. The <em class="parameter"><code>delete share command</code></em> is used to define an external … … 1455 1455 When executed, <code class="literal">smbd</code> will automatically invoke the 1456 1456 <em class="parameter"><code>delete share command</code></em> with two parameters. 1457 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location1457 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location 1458 1458 of the global <code class="filename">smb.conf</code> file. 1459 </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of1459 </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of 1460 1460 the existing service. 1461 1461 </p></li></ul></div><p> … … 1466 1466 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1467 1467 </em></span> 1468 </p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545365"></a>1468 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539382"></a> 1469 1469 1470 1470 delete user from group script (G) 1471 </h3></div></div></div><a class="indexterm" name="id25 45366"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when1471 </h3></div></div></div><a class="indexterm" name="id2539383"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1472 1472 a user is removed from a group using the Windows NT domain administration 1473 1473 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. … … 1478 1478 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code> 1479 1479 </em></span> 1480 </p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545445"></a>1480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539461"></a> 1481 1481 1482 1482 delete user script (G) 1483 </h3></div></div></div><a class="indexterm" name="id25 45446"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1483 </h3></div></div></div><a class="indexterm" name="id2539462"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1484 1484 be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1485 1485 with remote RPC (NT) tools. … … 1490 1490 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1491 1491 </em></span> 1492 </p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545522"></a>1492 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539538"></a> 1493 1493 1494 1494 delete veto files (S) 1495 </h3></div></div></div><a class="indexterm" name="id25 45523"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to1495 </h3></div></div></div><a class="indexterm" name="id2539539"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to 1496 1496 delete a directory that contains one or more vetoed directories 1497 1497 (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a> … … 1507 1507 is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code> 1508 1508 </em></span> 1509 </p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545607"></a>1509 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539623"></a> 1510 1510 1511 1511 dfree cache time (S) 1512 </h3></div></div></div><a class="indexterm" name="id25 45608"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>1512 </h3></div></div></div><a class="indexterm" name="id2539624"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 1513 1513 The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem 1514 1514 occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur … … 1523 1523 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code> 1524 1524 </em></span> 1525 </p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545680"></a>1525 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539696"></a> 1526 1526 1527 1527 dfree command (S) 1528 </h3></div></div></div><a class="indexterm" name="id25 45681"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1528 </h3></div></div></div><a class="indexterm" name="id2539697"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1529 1529 The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a 1530 1530 problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may … … 1564 1564 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code> 1565 1565 </em></span> 1566 </p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id2545801"></a>1566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539817"></a> 1567 1567 1568 1568 <a name="DIRECTORYMODE"></a>directory mode 1569 </h3></div></div></div><a class="indexterm" name="id25 45802"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545828"></a>1569 </h3></div></div></div><a class="indexterm" name="id2539818"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539844"></a> 1570 1570 1571 1571 directory mask (S) 1572 </h3></div></div></div><a class="indexterm" name="id25 45829"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are1572 </h3></div></div></div><a class="indexterm" name="id2539845"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are 1573 1573 used when converting DOS modes to UNIX modes when creating UNIX 1574 1574 directories.</p><p>When a directory is created, the necessary permissions are … … 1588 1588 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1589 1589 </em></span> 1590 </p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2545933"></a>1590 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539950"></a> 1591 1591 1592 1592 directory security mask (S) 1593 </h3></div></div></div><a class="indexterm" name="id25 45934"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits1593 </h3></div></div></div><a class="indexterm" name="id2539951"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1594 1594 will be set when a Windows NT client is manipulating the UNIX 1595 1595 permission on a directory using the native NT security dialog … … 1611 1611 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code> 1612 1612 </em></span> 1613 </p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546034"></a>1613 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540050"></a> 1614 1614 1615 1615 disable netbios (G) 1616 </h3></div></div></div><a class="indexterm" name="id254 6035"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support1616 </h3></div></div></div><a class="indexterm" name="id2540051"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support 1617 1617 in Samba. Netbios is the only available form of browsing in 1618 all windows versions except for 2000 and XP. </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to1618 all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to 1619 1619 see your samba server when netbios support is disabled. 1620 1620 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code> 1621 1621 </em></span> 1622 </p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546080"></a>1622 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540096"></a> 1623 1623 1624 1624 disable spoolss (G) 1625 </h3></div></div></div><a class="indexterm" name="id254 6081"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support1625 </h3></div></div></div><a class="indexterm" name="id2540097"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support 1626 1626 for the SPOOLSS set of MS-RPC's and will yield identical behavior 1627 1627 as Samba 2.0.x. Windows NT/2000 clients will downgrade to using … … 1635 1635 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code> 1636 1636 </em></span> 1637 </p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546131"></a>1637 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540147"></a> 1638 1638 1639 1639 display charset (G) 1640 </h3></div></div></div><a class="indexterm" name="id254 6132"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>1640 </h3></div></div></div><a class="indexterm" name="id2540148"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p> 1641 1641 Specifies the charset that samba will use to print messages to stdout and stderr. 1642 1642 The default value is "LOCALE", which means automatically set, depending on the … … 1647 1647 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1648 1648 </em></span> 1649 </p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546197"></a>1649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540214"></a> 1650 1650 1651 1651 dmapi support (S) 1652 </h3></div></div></div><a class="indexterm" name="id254 6198"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to1652 </h3></div></div></div><a class="indexterm" name="id2540215"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1653 1653 determine whether a file is offline or not. This would typically 1654 1654 be used in conjunction with a hierarchical storage system that … … 1665 1665 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1666 1666 </em></span> 1667 </p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546256"></a>1667 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540272"></a> 1668 1668 1669 1669 dns proxy (G) 1670 </h3></div></div></div><a class="indexterm" name="id254 6257"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and1670 </h3></div></div></div><a class="indexterm" name="id2540274"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1671 1671 finding that a NetBIOS name has not been registered, should treat the 1672 1672 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1677 1677 action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code> 1678 1678 </em></span> 1679 </p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546320"></a>1679 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540336"></a> 1680 1680 1681 1681 domain logons (G) 1682 </h3></div></div></div><a class="indexterm" name="id254 6321"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1682 </h3></div></div></div><a class="indexterm" name="id2540337"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1683 1683 If set to <code class="constant">yes</code>, the Samba server will 1684 1684 provide the netlogon service for Windows 9X network logons for the … … 1690 1690 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code> 1691 1691 </em></span> 1692 </p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546373"></a>1692 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540389"></a> 1693 1693 1694 1694 domain master (G) 1695 </h3></div></div></div><a class="indexterm" name="id254 6374"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>1695 </h3></div></div></div><a class="indexterm" name="id2540390"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1696 1696 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1697 1697 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a … … 1719 1719 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1720 1720 </em></span> 1721 </p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546564"></a>1721 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540580"></a> 1722 1722 1723 1723 dont descend (S) 1724 </h3></div></div></div><a class="indexterm" name="id254 6565"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems1724 </h3></div></div></div><a class="indexterm" name="id2540582"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1725 1725 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1726 1726 of interest to clients or are infinitely deep (recursive). This … … 1733 1733 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1734 1734 </em></span> 1735 </p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546642"></a>1735 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540659"></a> 1736 1736 1737 1737 dos charset (G) 1738 </h3></div></div></div><a class="indexterm" name="id254 6643"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has1738 </h3></div></div></div><a class="indexterm" name="id2540660"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1739 1739 the same charset as they do. This option specifies which 1740 1740 charset Samba should talk to DOS clients. 1741 1741 </p><p>The default depends on which charsets you have installed. 1742 1742 Samba tries to use charset 850 but falls back to ASCII in 1743 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546684"></a>1743 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540700"></a> 1744 1744 1745 1745 dos filemode (S) 1746 </h3></div></div></div><a class="indexterm" name="id254 6685"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide1746 </h3></div></div></div><a class="indexterm" name="id2540701"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide 1747 1747 UNIX-like behavior where only the owner of a file/directory is 1748 1748 able to change the permissions on it. However, this behavior … … 1755 1755 file/directory may also be changed.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1756 1756 </em></span> 1757 </p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546730"></a>1757 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540746"></a> 1758 1758 1759 1759 dos filetime resolution (S) 1760 </h3></div></div></div><a class="indexterm" name="id254 6731"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest1760 </h3></div></div></div><a class="indexterm" name="id2540748"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1761 1761 granularity on time resolution is two seconds. Setting this parameter 1762 1762 for a share causes Samba to round the reported time down to the … … 1773 1773 happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code> 1774 1774 </em></span> 1775 </p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546794"></a>1775 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540810"></a> 1776 1776 1777 1777 dos filetimes (S) 1778 </h3></div></div></div><a class="indexterm" name="id254 6795"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a1778 </h3></div></div></div><a class="indexterm" name="id2540811"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a 1779 1779 file they can change the timestamp on it. Under POSIX semantics, 1780 1780 only the owner of the file or root may change the timestamp. By … … 1790 1790 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1791 1791 </em></span> 1792 </p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546859"></a>1792 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540876"></a> 1793 1793 1794 1794 ea support (S) 1795 </h3></div></div></div><a class="indexterm" name="id254 6860"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended1795 </h3></div></div></div><a class="indexterm" name="id2540877"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1796 1796 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1797 1797 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1800 1800 extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code> 1801 1801 </em></span> 1802 </p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546913"></a>1802 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540929"></a> 1803 1803 1804 1804 enable asu support (G) 1805 </h3></div></div></div><a class="indexterm" name="id254 6914"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product1805 </h3></div></div></div><a class="indexterm" name="id2540930"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1806 1806 require some special accomodations such as creating a builtin [ADMIN$] 1807 1807 share that only supports IPC connections. The has been the default … … 1811 1811 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1812 1812 </em></span> 1813 </p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2546957"></a>1813 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540974"></a> 1814 1814 1815 1815 enable core files (G) 1816 </h3></div></div></div><a class="indexterm" name="id254 6958"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written1816 </h3></div></div></div><a class="indexterm" name="id2540975"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written 1817 1817 on internal exits. Normally set to <code class="constant">yes</code>. 1818 1818 You should never need to change this. … … 1821 1821 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enable core files</code></em> = <code class="literal">no</code> 1822 1822 </em></span> 1823 </p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547016"></a>1823 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541032"></a> 1824 1824 1825 1825 enable privileges (G) 1826 </h3></div></div></div><a class="indexterm" name="id254 7017"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>1826 </h3></div></div></div><a class="indexterm" name="id2541033"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1827 1827 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1828 1828 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1837 1837 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code> 1838 1838 </em></span> 1839 </p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547076"></a>1839 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541092"></a> 1840 1840 1841 1841 encrypt passwords (G) 1842 </h3></div></div></div><a class="indexterm" name="id254 7077"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords1842 </h3></div></div></div><a class="indexterm" name="id2541094"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords 1843 1843 will be negotiated with the client. Note that Windows NT 4.0 SP3 and 1844 1844 above and also Windows 98 will by default expect encrypted passwords … … 1863 1863 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1864 1864 </em></span> 1865 </p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547180"></a>1865 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541197"></a> 1866 1866 1867 1867 enhanced browsing (G) 1868 </h3></div></div></div><a class="indexterm" name="id254 7182"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to1868 </h3></div></div></div><a class="indexterm" name="id2541198"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1869 1869 cross-subnet browse propagation that have been added in Samba 1870 1870 but which are not standard in Microsoft implementations. … … 1879 1879 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> 1880 1880 </em></span> 1881 </p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547242"></a>1881 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541258"></a> 1882 1882 1883 1883 enumports command (G) 1884 </h3></div></div></div><a class="indexterm" name="id254 7243"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign1884 </h3></div></div></div><a class="indexterm" name="id2541259"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign 1885 1885 to UNIX hosts. Under Windows NT/2000 print servers, a port 1886 1886 is associated with a port monitor and generally takes the form of … … 1899 1899 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 1900 1900 </em></span> 1901 </p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547323"></a>1901 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541339"></a> 1902 1902 1903 1903 eventlog list (G) 1904 </h3></div></div></div><a class="indexterm" name="id254 7324"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will1904 </h3></div></div></div><a class="indexterm" name="id2541340"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 1905 1905 report to the Microsoft EventViewer utility. The listed 1906 1906 eventlogs will be associated with tdb file on disk in the … … 1915 1915 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 1916 1916 </em></span> 1917 </p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547396"></a>1917 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541412"></a> 1918 1918 1919 1919 fake directory create times (S) 1920 </h3></div></div></div><a class="indexterm" name="id254 7397"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create1920 </h3></div></div></div><a class="indexterm" name="id2541413"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create 1921 1921 time for all files and directories. This is not the same as the 1922 1922 ctime - status change time - that Unix keeps, so Samba by default … … 1940 1940 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 1941 1941 </em></span> 1942 </p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547463"></a>1942 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541479"></a> 1943 1943 1944 1944 fake oplocks (S) 1945 </h3></div></div></div><a class="indexterm" name="id254 7464"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission1945 </h3></div></div></div><a class="indexterm" name="id2541480"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 1946 1946 from a server to locally cache file operations. If a server grants 1947 1947 an oplock (opportunistic lock) then the client is free to assume … … 1959 1959 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 1960 1960 </em></span> 1961 </p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547554"></a>1961 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541570"></a> 1962 1962 1963 1963 follow symlinks (S) 1964 </h3></div></div></div><a class="indexterm" name="id254 7555"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>1964 </h3></div></div></div><a class="indexterm" name="id2541571"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1965 1965 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 1966 1966 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being … … 1972 1972 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 1973 1973 </em></span> 1974 </p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547624"></a>1974 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541640"></a> 1975 1975 1976 1976 force create mode (S) 1977 </h3></div></div></div><a class="indexterm" name="id254 7625"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1977 </h3></div></div></div><a class="indexterm" name="id2541641"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1978 1978 permissions that will <span class="emphasis"><em>always</em></span> be set on a 1979 1979 file created by Samba. This is done by bitwise 'OR'ing these bits onto … … 1987 1987 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code> 1988 1988 </em></span> 1989 </p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547698"></a>1989 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541714"></a> 1990 1990 1991 1991 force directory mode (S) 1992 </h3></div></div></div><a class="indexterm" name="id254 7699"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit1992 </h3></div></div></div><a class="indexterm" name="id2541715"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 1993 1993 permissions that will <span class="emphasis"><em>always</em></span> be set on a directory 1994 1994 created by Samba. This is done by bitwise 'OR'ing these bits onto the … … 2003 2003 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 2004 2004 </em></span> 2005 </p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547778"></a>2005 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541794"></a> 2006 2006 2007 2007 force directory security mode (S) 2008 </h3></div></div></div><a class="indexterm" name="id254 7779"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2008 </h3></div></div></div><a class="indexterm" name="id2541795"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2009 2009 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2010 2010 the UNIX permission on a directory using the native NT security dialog box. … … 2019 2019 If not set explicitly this parameter is 0000, which allows a user to modify all the user/group/world 2020 2020 permissions on a directory without restrictions. 2021 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>2021 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 2022 2022 Users who can access the Samba server through other means can easily bypass this restriction, so it is 2023 2023 primarily useful for standalone "appliance" systems. Administrators of most normal systems will … … 2027 2027 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code> 2028 2028 </em></span> 2029 </p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id2547874"></a>2029 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541891"></a> 2030 2030 2031 2031 <a name="GROUP"></a>group 2032 </h3></div></div></div><a class="indexterm" name="id254 7875"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2547903"></a>2032 </h3></div></div></div><a class="indexterm" name="id2541892"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541921"></a> 2033 2033 2034 2034 force group (S) 2035 </h3></div></div></div><a class="indexterm" name="id254 7904"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be2035 </h3></div></div></div><a class="indexterm" name="id2541922"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be 2036 2036 assigned as the default primary group for all users connecting 2037 2037 to this service. This is useful for sharing files by ensuring … … 2057 2057 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code> 2058 2058 </em></span> 2059 </p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548027"></a>2059 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542046"></a> 2060 2060 2061 2061 force printername (S) 2062 </h3></div></div></div><a class="indexterm" name="id254 8028"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),2062 </h3></div></div></div><a class="indexterm" name="id2542047"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later), 2063 2063 each printer in <code class="filename">smb.conf</code> has two 2064 2064 associated names which can be used by the client. The first … … 2083 2083 folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code> 2084 2084 </em></span> 2085 </p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548119"></a>2085 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542137"></a> 2086 2086 2087 2087 force security mode (S) 2088 </h3></div></div></div><a class="indexterm" name="id254 8120"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2088 </h3></div></div></div><a class="indexterm" name="id2542138"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2089 2089 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2090 2090 the UNIX permission on a file using the native NT security dialog box. … … 2106 2106 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code> 2107 2107 </em></span> 2108 </p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548221"></a>2108 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542239"></a> 2109 2109 2110 2110 force unknown acl user (S) 2111 </h3></div></div></div><a class="indexterm" name="id254 8222"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>2111 </h3></div></div></div><a class="indexterm" name="id2542240"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2112 2112 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 2113 2113 representation of a user or group id) as the owner or group owner of the file will be silently … … 2123 2123 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code> 2124 2124 </em></span> 2125 </p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548284"></a>2125 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542302"></a> 2126 2126 2127 2127 force user (S) 2128 </h3></div></div></div><a class="indexterm" name="id254 8285"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be2128 </h3></div></div></div><a class="indexterm" name="id2542303"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be 2129 2129 assigned as the default user for all users connecting to this service. 2130 2130 This is useful for sharing files. You should also use it carefully … … 2140 2140 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code> 2141 2141 </em></span> 2142 </p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548360"></a>2142 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542378"></a> 2143 2143 2144 2144 fstype (S) 2145 </h3></div></div></div><a class="indexterm" name="id254 8361"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>2145 </h3></div></div></div><a class="indexterm" name="id2542379"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2146 2146 This parameter allows the administrator to configure the string that specifies the type of filesystem a share 2147 2147 is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 2153 2153 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code> 2154 2154 </em></span> 2155 </p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548442"></a>2155 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542460"></a> 2156 2156 2157 2157 get quota command (G) 2158 </h3></div></div></div><a class="indexterm" name="id254 8443"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used2158 </h3></div></div></div><a class="indexterm" name="id2542461"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used 2159 2159 whenever there is no operating system API available from the OS that 2160 2160 samba can use.</p><p>This option is only available you have compiled Samba with the … … 2164 2164 queries the quota information for the specified 2165 2165 user/group for the partition that 2166 the specified directory is on.</p><p>Such a script should take 3 arguments:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>directory</p></li><li class="listitem"><p>type of query</p></li><li class="listitem"><p>uid of user or gid of group</p></li></ul></div><p>The type of query can be one of :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>1 - user quotas</p></li><li class="listitem"><p>2 - user default quotas (uid = -1)</p></li><li class="listitem"><p>3 - group quotas</p></li><li class="listitem"><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>This script should print one line as output with spaces between the arguments. The arguments are:2167 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</p></li><li class="listitem"><p>Arg 2 - number of currently used blocks</p></li><li class="listitem"><p>Arg 3 - the softlimit number of blocks</p></li><li class="listitem"><p>Arg 4 - the hardlimit number of blocks</p></li><li class="listitem"><p>Arg 5 - currently used number of inodes</p></li><li class="listitem"><p>Arg 6 - the softlimit number of inodes</p></li><li class="listitem"><p>Arg 7 - the hardlimit number of inodes</p></li><li class="listitem"><p>Arg 8(optional) - the number of bytes in a block(default is 1024)</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal"></code>2166 the specified directory is on.</p><p>Such a script should take 3 arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>directory</p></li><li><p>type of query</p></li><li><p>uid of user or gid of group</p></li></ul></div><p>The type of query can be one of :</p><div class="itemizedlist"><ul type="disc"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>This script should print one line as output with spaces between the arguments. The arguments are: 2167 </p><div class="itemizedlist"><ul type="disc"><li><p>Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</p></li><li><p>Arg 2 - number of currently used blocks</p></li><li><p>Arg 3 - the softlimit number of blocks</p></li><li><p>Arg 4 - the hardlimit number of blocks</p></li><li><p>Arg 5 - currently used number of inodes</p></li><li><p>Arg 6 - the softlimit number of inodes</p></li><li><p>Arg 7 - the hardlimit number of inodes</p></li><li><p>Arg 8(optional) - the number of bytes in a block(default is 1024)</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal"></code> 2168 2168 </em></span> 2169 2169 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code> 2170 2170 </em></span> 2171 </p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548628"></a>2171 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542647"></a> 2172 2172 2173 2173 getwd cache (G) 2174 </h3></div></div></div><a class="indexterm" name="id254 8630"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a2174 </h3></div></div></div><a class="indexterm" name="id2542648"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a 2175 2175 caching algorithm will be used to reduce the time taken for getwd() 2176 2176 calls. This can have a significant impact on performance, especially 2177 2177 when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 2178 2178 </em></span> 2179 </p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548689"></a>2179 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542707"></a> 2180 2180 2181 2181 guest account (G) 2182 </h3></div></div></div><a class="indexterm" name="id254 8690"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access2182 </h3></div></div></div><a class="indexterm" name="id2542708"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 2183 2183 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this 2184 2184 user has will be available to any client connecting to the guest service. … … 2198 2198 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code> 2199 2199 </em></span> 2200 </p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id2548797"></a>2200 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542815"></a> 2201 2201 2202 2202 <a name="PUBLIC"></a>public 2203 </h3></div></div></div><a class="indexterm" name="id254 8798"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548828"></a>2203 </h3></div></div></div><a class="indexterm" name="id2542816"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542846"></a> 2204 2204 2205 2205 guest ok (S) 2206 </h3></div></div></div><a class="indexterm" name="id254 8829"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2206 </h3></div></div></div><a class="indexterm" name="id2542847"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2207 2207 a service, then no password is required to connect to the service. 2208 2208 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This paramater nullifies the benifits of setting … … 2211 2211 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 2212 2212 </em></span> 2213 </p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id2548916"></a>2213 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542934"></a> 2214 2214 2215 2215 <a name="ONLYGUEST"></a>only guest 2216 </h3></div></div></div><a class="indexterm" name="id254 8917"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2548949"></a>2216 </h3></div></div></div><a class="indexterm" name="id2542935"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542967"></a> 2217 2217 2218 2218 guest only (S) 2219 </h3></div></div></div><a class="indexterm" name="id254 8950"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2219 </h3></div></div></div><a class="indexterm" name="id2542968"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2220 2220 a service, then only guest connections to the service are permitted. 2221 2221 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option. 2222 2222 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 2223 2223 </em></span> 2224 </p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549021"></a>2224 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543040"></a> 2225 2225 2226 2226 hide dot files (S) 2227 </h3></div></div></div><a class="indexterm" name="id254 9022"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether2227 </h3></div></div></div><a class="indexterm" name="id2543041"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 2228 2228 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 2229 2229 </em></span> 2230 </p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549064"></a>2230 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543082"></a> 2231 2231 2232 2232 hide files (S) 2233 </h3></div></div></div><a class="indexterm" name="id254 9065"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not2233 </h3></div></div></div><a class="indexterm" name="id2543083"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 2234 2234 visible but are accessible. The DOS 'hidden' attribute is applied 2235 2235 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 2253 2253 # no file are hidden</code> 2254 2254 </em></span> 2255 </p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549152"></a>2255 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543171"></a> 2256 2256 2257 2257 hide special files (S) 2258 </h3></div></div></div><a class="indexterm" name="id254 9153"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2258 </h3></div></div></div><a class="indexterm" name="id2543172"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2259 2259 This parameter prevents clients from seeing special files such as sockets, devices and 2260 2260 fifo's in directory listings. 2261 2261 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 2262 2262 </em></span> 2263 </p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549195"></a>2263 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543214"></a> 2264 2264 2265 2265 hide unreadable (S) 2266 </h3></div></div></div><a class="indexterm" name="id254 9196"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the2266 </h3></div></div></div><a class="indexterm" name="id2543215"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the 2267 2267 existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code> 2268 2268 </em></span> 2269 </p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549238"></a>2269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543256"></a> 2270 2270 2271 2271 hide unwriteable files (S) 2272 </h3></div></div></div><a class="indexterm" name="id254 9239"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2272 </h3></div></div></div><a class="indexterm" name="id2543257"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2273 2273 This parameter prevents clients from seeing the existance of files that cannot be written to. 2274 2274 Defaults to off. Note that unwriteable directories are shown as usual. 2275 2275 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code> 2276 2276 </em></span> 2277 </p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549282"></a>2277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543301"></a> 2278 2278 2279 2279 homedir map (G) 2280 </h3></div></div></div><a class="indexterm" name="id254 9284"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>2280 </h3></div></div></div><a class="indexterm" name="id2543302"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2281 2281 If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 2282 2282 then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. … … 2287 2287 and the program will extract the servername from before the first ':'. There should probably be a better parsing system 2288 2288 that copes with different map formats and also Amd (another automounter) maps. 2289 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>2289 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 2290 2290 A working NIS client is required on the system for this option to work. 2291 2291 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal"></code> … … 2293 2293 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 2294 2294 </em></span> 2295 </p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549395"></a>2295 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543413"></a> 2296 2296 2297 2297 host msdfs (G) 2298 </h3></div></div></div><a class="indexterm" name="id254 9396"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>2298 </h3></div></div></div><a class="indexterm" name="id2543414"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2299 2299 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 2300 2300 Dfs trees hosted on the server. … … 2304 2304 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 2305 2305 </em></span> 2306 </p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549459"></a>2306 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543478"></a> 2307 2307 2308 2308 hostname lookups (G) 2309 </h3></div></div></div><a class="indexterm" name="id254 9460"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)2309 </h3></div></div></div><a class="indexterm" name="id2543479"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 2310 2310 hostname lookups or use the ip addresses instead. An example place 2311 2311 where hostname lookups are currently used is when checking … … 2315 2315 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code> 2316 2316 </em></span> 2317 </p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id2549533"></a>2317 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543551"></a> 2318 2318 2319 2319 <a name="ALLOWHOSTS"></a>allow hosts 2320 </h3></div></div></div><a class="indexterm" name="id254 9534"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549565"></a>2320 </h3></div></div></div><a class="indexterm" name="id2543552"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543583"></a> 2321 2321 2322 2322 hosts allow (S) 2323 </h3></div></div></div><a class="indexterm" name="id254 9566"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited2323 </h3></div></div></div><a class="indexterm" name="id2543584"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 2324 2324 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 2325 2325 apply to all services, regardless of whether the individual … … 2335 2335 <span class="emphasis"><em>EXCEPT</em></span> keyword can also be used to limit a 2336 2336 wildcard list. The following examples may provide some help:</p><p>Example 1: allow all IPs in 150.203.*.*; except one</p><p><code class="literal">hosts allow = 150.203. EXCEPT 150.203.6.66</code></p><p>Example 2: allow hosts that match the given network/netmask</p><p><code class="literal">hosts allow = 150.203.15.0/255.255.255.0</code></p><p>Example 3: allow a couple of hosts</p><p><code class="literal">hosts allow = lapland, arvidsjaur</code></p><p>Example 4: allow only hosts in NIS netgroup "foonet", but 2337 deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access2337 deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access 2338 2338 to see if it does what you expect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal"> 2339 2339 # none (i.e., all hosts permitted access)</code> … … 2341 2341 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 2342 2342 </em></span> 2343 </p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id2549767"></a>2343 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543786"></a> 2344 2344 2345 2345 <a name="DENYHOSTS"></a>deny hosts 2346 </h3></div></div></div><a class="indexterm" name="id254 9768"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549799"></a>2346 </h3></div></div></div><a class="indexterm" name="id2543787"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543817"></a> 2347 2347 2348 2348 hosts deny (S) 2349 </h3></div></div></div><a class="indexterm" name="id254 9800"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>2349 </h3></div></div></div><a class="indexterm" name="id2543818"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 2350 2350 - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to 2351 2351 services unless the specific services have their own lists to override … … 2361 2361 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code> 2362 2362 </em></span> 2363 </p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2549901"></a>2363 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543919"></a> 2364 2364 2365 2365 idmap alloc backend (G) 2366 </h3></div></div></div><a class="indexterm" name="id254 9902"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2366 </h3></div></div></div><a class="indexterm" name="id2543920"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2367 2367 The idmap alloc backend provides a plugin interface for Winbind to use 2368 2368 when allocating Unix uids/gids for Windows SIDs. This option refers … … 2381 2381 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 2382 2382 </em></span> 2383 </p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550006"></a>2383 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544024"></a> 2384 2384 2385 2385 idmap alloc config (G) 2386 </h3></div></div></div><a class="indexterm" name="id25 50007"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2386 </h3></div></div></div><a class="indexterm" name="id2544026"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2387 2387 The idmap alloc config prefix provides a means of managing settings 2388 2388 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a> 2389 2389 parameter. Refer to the man page for each idmap plugin regarding 2390 2390 specific configuration details. 2391 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550051"></a>2391 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544069"></a> 2392 2392 2393 2393 idmap backend (G) 2394 </h3></div></div></div><a class="indexterm" name="id25 50052"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2394 </h3></div></div></div><a class="indexterm" name="id2544070"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2395 2395 The idmap backend provides a plugin interface for Winbind to use 2396 2396 varying backends to store SID/uid/gid mapping tables. … … 2413 2413 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code> 2414 2414 </em></span> 2415 </p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550222"></a>2415 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544241"></a> 2416 2416 2417 2417 idmap cache time (G) 2418 </h3></div></div></div><a class="indexterm" name="id25 50224"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2418 </h3></div></div></div><a class="indexterm" name="id2544242"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2419 2419 idmap interface will cache positive SID/uid/gid query results. 2420 2420 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">604800 (one week)</code> 2421 2421 </em></span> 2422 </p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550266"></a>2422 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544285"></a> 2423 2423 2424 2424 idmap config (G) 2425 </h3></div></div></div><a class="indexterm" name="id25 50267"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2425 </h3></div></div></div><a class="indexterm" name="id2544286"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2426 2426 The idmap config prefix provides a means of managing each trusted 2427 2427 domain separately. The idmap config prefix should be followed by the … … 2455 2455 idmap config CORP : backend = ad 2456 2456 idmap config CORP : range = 1000-999999 2457 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id2550400"></a>2457 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544418"></a> 2458 2458 2459 2459 <a name="WINBINDGID"></a>winbind gid 2460 </h3></div></div></div><a class="indexterm" name="id25 50401"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550431"></a>2460 </h3></div></div></div><a class="indexterm" name="id2544419"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544449"></a> 2461 2461 2462 2462 idmap gid (G) 2463 </h3></div></div></div><a class="indexterm" name="id25 50432"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids2463 </h3></div></div></div><a class="indexterm" name="id2544450"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 2464 2464 that are allocated for the purpose of mapping UNX groups to NT group 2465 2465 SIDs. This range of group ids should have no … … 2471 2471 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code> 2472 2472 </em></span> 2473 </p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550518"></a>2473 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544536"></a> 2474 2474 2475 2475 idmap negative cache time (G) 2476 </h3></div></div></div><a class="indexterm" name="id25 50519"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2476 </h3></div></div></div><a class="indexterm" name="id2544537"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2477 2477 idmap interface will cache negative SID/uid/gid query results. 2478 2478 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code> 2479 2479 </em></span> 2480 </p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id2550562"></a>2480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544580"></a> 2481 2481 2482 2482 <a name="WINBINDUID"></a>winbind uid 2483 </h3></div></div></div><a class="indexterm" name="id25 50563"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550593"></a>2483 </h3></div></div></div><a class="indexterm" name="id2544581"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544611"></a> 2484 2484 2485 2485 idmap uid (G) 2486 </h3></div></div></div><a class="indexterm" name="id25 50594"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>2486 </h3></div></div></div><a class="indexterm" name="id2544612"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 2487 2487 The idmap uid parameter specifies the range of user ids that are 2488 2488 allocated for use in mapping UNIX users to NT user SIDs. This … … 2494 2494 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 2495 2495 </em></span> 2496 </p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550679"></a>2496 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544697"></a> 2497 2497 2498 2498 include (G) 2499 </h3></div></div></div><a class="indexterm" name="id25 50680"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>2499 </h3></div></div></div><a class="indexterm" name="id2544698"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2500 2500 This allows you to include one config file inside another. The file is included literally, as though typed 2501 2501 in place. … … 2515 2515 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 2516 2516 </em></span> 2517 </p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550780"></a>2517 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544798"></a> 2518 2518 2519 2519 inherit acls (S) 2520 </h3></div></div></div><a class="indexterm" name="id25 50781"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls2520 </h3></div></div></div><a class="indexterm" name="id2544799"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 2521 2521 exist on parent directories, they are always honored when creating a 2522 2522 new file or subdirectory in these parent directories. The default … … 2526 2526 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 2527 2527 </em></span> 2528 </p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550827"></a>2528 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544845"></a> 2529 2529 2530 2530 inherit owner (S) 2531 </h3></div></div></div><a class="indexterm" name="id25 50828"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories2531 </h3></div></div></div><a class="indexterm" name="id2544846"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 2532 2532 is normally governed by effective uid of the connected user. 2533 2533 This option allows the Samba administrator to specify that … … 2538 2538 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 2539 2539 </em></span> 2540 </p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2550880"></a>2540 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544898"></a> 2541 2541 2542 2542 inherit permissions (S) 2543 </h3></div></div></div><a class="indexterm" name="id25 50881"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>2543 </h3></div></div></div><a class="indexterm" name="id2544899"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2544 2544 The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>, 2545 2545 <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this. … … 2553 2553 share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code> 2554 2554 </em></span> 2555 </p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551029"></a>2555 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545047"></a> 2556 2556 2557 2557 init logon delayed hosts (G) 2558 </h3></div></div></div><a class="indexterm" name="id25 51030"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>2558 </h3></div></div></div><a class="indexterm" name="id2545048"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2559 2559 This parameter takes a list of host names, addresses or networks for 2560 2560 which the initial samlogon reply should be delayed (so other DCs get … … 2567 2567 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>init logon delayed hosts</code></em> = <code class="literal">150.203.5. myhost.mynet.de</code> 2568 2568 </em></span> 2569 </p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551107"></a>2569 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545125"></a> 2570 2570 2571 2571 init logon delay (G) 2572 </h3></div></div></div><a class="indexterm" name="id25 51108"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>2572 </h3></div></div></div><a class="indexterm" name="id2545126"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p> 2573 2573 This parameter specifies a delay in milliseconds for the hosts configured 2574 2574 for delayed initial samlogon with … … 2576 2576 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>init logon delay</code></em> = <code class="literal">100</code> 2577 2577 </em></span> 2578 </p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551162"></a>2578 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545180"></a> 2579 2579 2580 2580 interfaces (G) 2581 </h3></div></div></div><a class="indexterm" name="id25 51163"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default2581 </h3></div></div></div><a class="indexterm" name="id2545181"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default 2582 2582 network interfaces list that Samba will use for browsing, name 2583 2583 registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query 2584 2584 the kernel for the list of all active interfaces and use any 2585 2585 interfaces except 127.0.0.1 that are broadcast capable.</p><p>The option takes a list of interface strings. Each string 2586 can be in any of the following forms:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>a network interface name (such as eth0).2586 can be in any of the following forms:</p><div class="itemizedlist"><ul type="disc"><li><p>a network interface name (such as eth0). 2587 2587 This may include shell-like wildcards so eth* will match 2588 any interface starting with the substring "eth"</p></li><li class="listitem"><p>an IP address. In this case the netmask is2588 any interface starting with the substring "eth"</p></li><li><p>an IP address. In this case the netmask is 2589 2589 determined from the list of interfaces obtained from the 2590 kernel</p></li><li class="listitem"><p>an IP/mask pair. </p></li><li class="listitem"><p>a broadcast/mask pair.</p></li></ul></div><p>The "mask" parameters can either be a bit length (such2590 kernel</p></li><li><p>an IP/mask pair. </p></li><li><p>a broadcast/mask pair.</p></li></ul></div><p>The "mask" parameters can either be a bit length (such 2591 2591 as 24 for a C class network) or a full netmask in dotted 2592 2592 decimal form.</p><p>The "IP" parameters above can either be a full dotted … … 2603 2603 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code> 2604 2604 </em></span> 2605 </p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551279"></a>2605 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545297"></a> 2606 2606 2607 2607 invalid users (S) 2608 </h3></div></div></div><a class="indexterm" name="id25 51280"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed2608 </h3></div></div></div><a class="indexterm" name="id2545298"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed 2609 2609 to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span> 2610 2610 check to absolutely ensure an improper setting does not breach … … 2626 2626 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 2627 2627 </em></span> 2628 </p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551393"></a>2628 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545411"></a> 2629 2629 2630 2630 iprint server (G) 2631 </h3></div></div></div><a class="indexterm" name="id25 51394"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>2631 </h3></div></div></div><a class="indexterm" name="id2545412"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2632 2632 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>. 2633 2633 </p><p> … … 2638 2638 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code> 2639 2639 </em></span> 2640 </p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551480"></a>2640 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545498"></a> 2641 2641 2642 2642 keepalive (G) 2643 </h3></div></div></div><a class="indexterm" name="id25 51481"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents2643 </h3></div></div></div><a class="indexterm" name="id2545499"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents 2644 2644 the number of seconds between <em class="parameter"><code>keepalive</code></em> 2645 2645 packets. If this parameter is zero, no keepalive packets will be … … 2651 2651 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 2652 2652 </em></span> 2653 </p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551567"></a>2653 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545585"></a> 2654 2654 2655 2655 kernel change notify (S) 2656 </h3></div></div></div><a class="indexterm" name="id25 51568"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the2656 </h3></div></div></div><a class="indexterm" name="id2545586"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 2657 2657 kernel for change notifications in directories so that 2658 2658 SMB clients can refresh whenever the data on the server changes. … … 2661 2661 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 2662 2662 </em></span> 2663 </p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551617"></a>2663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545635"></a> 2664 2664 2665 2665 kernel oplocks (G) 2666 </h3></div></div></div><a class="indexterm" name="id25 51618"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>2666 </h3></div></div></div><a class="indexterm" name="id2545636"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 2667 2667 (currently only IRIX and the Linux 2.4 kernel), this parameter 2668 2668 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks … … 2674 2674 You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code> 2675 2675 </em></span> 2676 </p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551706"></a>2676 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545724"></a> 2677 2677 2678 2678 lanman auth (G) 2679 </h3></div></div></div><a class="indexterm" name="id25 51707"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to2679 </h3></div></div></div><a class="indexterm" name="id2545725"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 2680 2680 authenticate users or permit password changes 2681 2681 using the LANMAN password hash. If disabled, only clients which support NT … … 2694 2694 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code> 2695 2695 </em></span> 2696 </p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551798"></a>2696 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545816"></a> 2697 2697 2698 2698 large readwrite (G) 2699 </h3></div></div></div><a class="indexterm" name="id25 51799"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not2699 </h3></div></div></div><a class="indexterm" name="id2545817"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2700 2700 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2701 streaming read and write vari ent SMB requests introduced with2701 streaming read and write variant SMB requests introduced with 2702 2702 Windows 2000. Note that due to Windows 2000 client redirector bugs 2703 2703 this requires Samba to be running on a 64-bit capable operating … … 2706 2706 tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code> 2707 2707 </em></span> 2708 </p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551855"></a>2708 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545873"></a> 2709 2709 2710 2710 ldap admin dn (G) 2711 </h3></div></div></div><a class="indexterm" name="id25 51856"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>2711 </h3></div></div></div><a class="indexterm" name="id2545874"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2712 2712 The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished Name (DN) name used by Samba to contact 2713 2713 the ldap server when retreiving user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used … … 2717 2717 </p><p> 2718 2718 The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>. 2719 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2551964"></a>2719 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545982"></a> 2720 2720 2721 2721 ldap connection timeout (G) 2722 </h3></div></div></div><a class="indexterm" name="id25 51965"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2722 </h3></div></div></div><a class="indexterm" name="id2545983"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2723 2723 This parameter tells the LDAP library calls which timeout in seconds 2724 2724 they should honor during initial connection establishments to LDAP servers. … … 2732 2732 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code> 2733 2733 </em></span> 2734 </p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552029"></a>2734 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546047"></a> 2735 2735 2736 2736 ldap debug level (G) 2737 </h3></div></div></div><a class="indexterm" name="id25 52030"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>2737 </h3></div></div></div><a class="indexterm" name="id2546048"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2738 2738 This parameter controls the debug level of the LDAP library 2739 2739 calls. In the case of OpenLDAP, it is the same … … 2752 2752 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code> 2753 2753 </em></span> 2754 </p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552117"></a>2754 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546135"></a> 2755 2755 2756 2756 ldap debug threshold (G) 2757 </h3></div></div></div><a class="indexterm" name="id25 52118"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>2757 </h3></div></div></div><a class="indexterm" name="id2546136"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2758 2758 This parameter controls the Samba debug level at which 2759 2759 the ldap library debug output is … … 2764 2764 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code> 2765 2765 </em></span> 2766 </p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552184"></a>2766 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546203"></a> 2767 2767 2768 2768 ldap delete dn (G) 2769 </h3></div></div></div><a class="indexterm" name="id25 52186"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete2769 </h3></div></div></div><a class="indexterm" name="id2546204"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete 2770 2770 operation in the ldapsam deletes the complete entry or only the attributes 2771 2771 specific to Samba. 2772 2772 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code> 2773 2773 </em></span> 2774 </p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552228"></a>2774 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546247"></a> 2775 2775 2776 2776 ldap group suffix (G) 2777 </h3></div></div></div><a class="indexterm" name="id25 52230"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is2777 </h3></div></div></div><a class="indexterm" name="id2546248"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is 2778 2778 used for groups when these are added to the LDAP directory. 2779 2779 If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2782 2782 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2783 2783 </em></span> 2784 </p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552312"></a>2784 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546330"></a> 2785 2785 2786 2786 ldap idmap suffix (G) 2787 </h3></div></div></div><a class="indexterm" name="id25 52313"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2787 </h3></div></div></div><a class="indexterm" name="id2546331"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2788 2788 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2789 2789 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix … … 2793 2793 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code> 2794 2794 </em></span> 2795 </p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552395"></a>2795 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546413"></a> 2796 2796 2797 2797 ldap machine suffix (G) 2798 </h3></div></div></div><a class="indexterm" name="id25 52396"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2798 </h3></div></div></div><a class="indexterm" name="id2546414"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2799 2799 It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of 2800 2800 <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2804 2804 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2805 2805 </em></span> 2806 </p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552477"></a>2806 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546495"></a> 2807 2807 2808 2808 ldap page size (G) 2809 </h3></div></div></div><a class="indexterm" name="id25 52478"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>2809 </h3></div></div></div><a class="indexterm" name="id2546496"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2810 2810 This parameter specifies the number of entries per page. 2811 2811 </p><p>If the LDAP server supports paged results, clients can … … 2816 2816 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap page size</code></em> = <code class="literal">512</code> 2817 2817 </em></span> 2818 </p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552543"></a>2818 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546561"></a> 2819 2819 2820 2820 ldap passwd sync (G) 2821 </h3></div></div></div><a class="indexterm" name="id25 52544"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>2821 </h3></div></div></div><a class="indexterm" name="id2546562"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2822 2822 This option is used to define whether or not Samba should sync the LDAP password with the NT 2823 2823 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password … … 2825 2825 </p><p> 2826 2826 The <a class="link" href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">ldap passwd sync</a> can be set to one of three values: 2827 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>Yes</code></em> = Try2828 to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li class="listitem"><p><em class="parameter"><code>No</code></em> = Update NT and2829 LM passwords and update the pwdLastSet time.</p></li><li class="listitem"><p><em class="parameter"><code>Only</code></em> = Only update2827 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Yes</code></em> = Try 2828 to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>No</code></em> = Update NT and 2829 LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>Only</code></em> = Only update 2830 2830 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 2831 2831 </em></span> 2832 </p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552645"></a>2832 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546663"></a> 2833 2833 2834 2834 ldap replication sleep (G) 2835 </h3></div></div></div><a class="indexterm" name="id25 52646"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>2835 </h3></div></div></div><a class="indexterm" name="id2546664"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2836 2836 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 2837 2837 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 2846 2846 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code> 2847 2847 </em></span> 2848 </p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552708"></a>2848 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546726"></a> 2849 2849 2850 2850 ldapsam:editposix (G) 2851 </h3></div></div></div><a class="indexterm" name="id25 52709"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2851 </h3></div></div></div><a class="indexterm" name="id2546728"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2852 2852 Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller 2853 2853 eliminating the need to set up custom scripts to add and manage the posix users and groups. This option … … 2927 2927 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code> 2928 2928 </em></span> 2929 </p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552841"></a>2929 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546859"></a> 2930 2930 2931 2931 ldapsam:trusted (G) 2932 </h3></div></div></div><a class="indexterm" name="id25 52842"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>2932 </h3></div></div></div><a class="indexterm" name="id2546860"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 2933 2933 By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to 2934 2934 access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group … … 2948 2948 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code> 2949 2949 </em></span> 2950 </p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2552930"></a>2950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546948"></a> 2951 2951 2952 2952 ldap ssl ads (G) 2953 </h3></div></div></div><a class="indexterm" name="id25 52931"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should2953 </h3></div></div></div><a class="indexterm" name="id2546949"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 2954 2954 use SSL when connecting to the ldap server using 2955 2955 <span class="emphasis"><em>ads</em></span> methods. … … 2961 2961 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl ads</code></em> = <code class="literal">no</code> 2962 2962 </em></span> 2963 </p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553016"></a>2963 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547034"></a> 2964 2964 2965 2965 ldap ssl (G) 2966 </h3></div></div></div><a class="indexterm" name="id25 53017"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should2966 </h3></div></div></div><a class="indexterm" name="id2547035"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 2967 2967 use SSL when connecting to the ldap server 2968 2968 This is <span class="emphasis"><em>NOT</em></span> related to … … 2975 2975 <span class="emphasis"><em>or</em></span> by specifying <em class="parameter"><code>ldaps://</code></em> in 2976 2976 the URL argument of <a class="link" href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend</a>.</p><p>The <a class="link" href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a> can be set to one of 2977 two values:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>Off</code></em> = Never2978 use SSL when querying the directory.</p></li><li class="listitem"><p><em class="parameter"><code>start tls</code></em> = Use2977 two values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never 2978 use SSL when querying the directory.</p></li><li><p><em class="parameter"><code>start tls</code></em> = Use 2979 2979 the LDAPv3 StartTLS extended operation (RFC2830) for 2980 2980 communicating with the directory server.</p></li></ul></div><p> … … 2989 2989 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start tls</code> 2990 2990 </em></span> 2991 </p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553209"></a>2991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547227"></a> 2992 2992 2993 2993 ldap suffix (G) 2994 </h3></div></div></div><a class="indexterm" name="id25 53210"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>2994 </h3></div></div></div><a class="indexterm" name="id2547228"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 2995 2995 The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>, 2996 2996 <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the … … 3001 3001 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 3002 3002 </em></span> 3003 </p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553331"></a>3003 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547349"></a> 3004 3004 3005 3005 ldap timeout (G) 3006 </h3></div></div></div><a class="indexterm" name="id25 53332"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3006 </h3></div></div></div><a class="indexterm" name="id2547350"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3007 3007 This parameter defines the number of seconds that Samba should use as timeout for LDAP operations. 3008 3008 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> 3009 3009 </em></span> 3010 </p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553374"></a>3010 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547392"></a> 3011 3011 3012 3012 ldap user suffix (G) 3013 </h3></div></div></div><a class="indexterm" name="id25 53375"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>3013 </h3></div></div></div><a class="indexterm" name="id2547393"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 3014 3014 This parameter specifies where users are added to the tree. If this parameter is unset, 3015 3015 the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix … … 3019 3019 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 3020 3020 </em></span> 3021 </p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553455"></a>3021 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547474"></a> 3022 3022 3023 3023 level2 oplocks (S) 3024 </h3></div></div></div><a class="indexterm" name="id25 53456"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports3024 </h3></div></div></div><a class="indexterm" name="id2547475"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports 3025 3025 level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients 3026 3026 that have an oplock on a file to downgrade from a read-write oplock … … 3042 3042 this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code> 3043 3043 </em></span> 3044 </p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553562"></a>3044 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547580"></a> 3045 3045 3046 3046 lm announce (G) 3047 </h3></div></div></div><a class="indexterm" name="id25 53563"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce3047 </h3></div></div></div><a class="indexterm" name="id2547581"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 3048 3048 broadcasts that are needed by OS/2 clients in order for them to see 3049 3049 the Samba server in their browse list. This parameter can have three … … 3061 3061 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 3062 3062 </em></span> 3063 </p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553684"></a>3063 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547702"></a> 3064 3064 3065 3065 lm interval (G) 3066 </h3></div></div></div><a class="indexterm" name="id25 53685"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce3066 </h3></div></div></div><a class="indexterm" name="id2547704"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 3067 3067 broadcasts needed by OS/2 clients (see the 3068 3068 <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this … … 3074 3074 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code> 3075 3075 </em></span> 3076 </p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553769"></a>3076 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547787"></a> 3077 3077 3078 3078 load printers (G) 3079 </h3></div></div></div><a class="indexterm" name="id25 53770"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all3079 </h3></div></div></div><a class="indexterm" name="id2547788"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all 3080 3080 printers in the printcap will be loaded for browsing by default. 3081 3081 See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for 3082 3082 more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code> 3083 3083 </em></span> 3084 </p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553825"></a>3084 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547843"></a> 3085 3085 3086 3086 local master (G) 3087 </h3></div></div></div><a class="indexterm" name="id25 53826"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser3087 </h3></div></div></div><a class="indexterm" name="id2547844"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 3088 3088 on a subnet. If set to <code class="constant">no</code> then <code class="literal"> 3089 3089 nmbd</code> will not attempt to become a local master browser … … 3095 3095 master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code> 3096 3096 </em></span> 3097 </p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id2553925"></a>3097 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547943"></a> 3098 3098 3099 3099 <a name="LOCKDIR"></a>lock dir 3100 </h3></div></div></div><a class="indexterm" name="id25 53926"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2553957"></a>3100 </h3></div></div></div><a class="indexterm" name="id2547944"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547975"></a> 3101 3101 3102 3102 lock directory (G) 3103 </h3></div></div></div><a class="indexterm" name="id25 53958"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock3103 </h3></div></div></div><a class="indexterm" name="id2547976"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock 3104 3104 files will be placed. The lock files are used to implement the 3105 3105 <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option. … … 3111 3111 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 3112 3112 </em></span> 3113 </p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554035"></a>3113 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548054"></a> 3114 3114 3115 3115 locking (S) 3116 </h3></div></div></div><a class="indexterm" name="id25 54036"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be3116 </h3></div></div></div><a class="indexterm" name="id2548055"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 3117 3117 performed by the server in response to lock requests from the 3118 3118 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 3124 3124 is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a 3125 3125 specific service, as lack of locking may result in data corruption. 3126 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554111"></a>3126 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548129"></a> 3127 3127 3128 3128 lock spin count (G) 3129 </h3></div></div></div><a class="indexterm" name="id25 54112"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.3129 </h3></div></div></div><a class="indexterm" name="id2548130"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 3130 3130 The functionality it contolled is now controlled by the parameter 3131 3131 <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>. 3132 3132 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 3133 3133 </em></span> 3134 </p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554166"></a>3134 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548185"></a> 3135 3135 3136 3136 lock spin time (G) 3137 </h3></div></div></div><a class="indexterm" name="id25 54168"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should3137 </h3></div></div></div><a class="indexterm" name="id2548186"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in microseconds that smbd should 3138 3138 keep waiting to see if a failed lock request can 3139 3139 be granted. This parameter has changed in default … … 3143 3143 to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code> 3144 3144 </em></span> 3145 </p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554225"></a>3145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548243"></a> 3146 3146 3147 3147 log file (G) 3148 </h3></div></div></div><a class="indexterm" name="id25 54226"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>3148 </h3></div></div></div><a class="indexterm" name="id2548244"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3149 3149 This option allows you to override the name of the Samba log file (also known as the debug file). 3150 3150 </p><p> … … 3152 3152 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 3153 3153 </em></span> 3154 </p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id2554277"></a>3154 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548295"></a> 3155 3155 3156 3156 <a name="DEBUGLEVEL"></a>debuglevel 3157 </h3></div></div></div><a class="indexterm" name="id25 54278"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554308"></a>3157 </h3></div></div></div><a class="indexterm" name="id2548296"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548326"></a> 3158 3158 3159 3159 log level (G) 3160 </h3></div></div></div><a class="indexterm" name="id25 54309"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>3160 </h3></div></div></div><a class="indexterm" name="id2548327"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3161 3161 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 3162 3162 <code class="filename">smb.conf</code> file. … … 3165 3165 debug classes. This is to give greater flexibility in the configuration 3166 3166 of the system. The following debug classes are currently implemented: 3167 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>all</code></em></p></li><li class="listitem"><p><em class="parameter"><code>tdb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>printdrivers</code></em></p></li><li class="listitem"><p><em class="parameter"><code>lanman</code></em></p></li><li class="listitem"><p><em class="parameter"><code>smb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_parse</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_srv</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_cli</code></em></p></li><li class="listitem"><p><em class="parameter"><code>passdb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>sam</code></em></p></li><li class="listitem"><p><em class="parameter"><code>auth</code></em></p></li><li class="listitem"><p><em class="parameter"><code>winbind</code></em></p></li><li class="listitem"><p><em class="parameter"><code>vfs</code></em></p></li><li class="listitem"><p><em class="parameter"><code>idmap</code></em></p></li><li class="listitem"><p><em class="parameter"><code>quota</code></em></p></li><li class="listitem"><p><em class="parameter"><code>acls</code></em></p></li><li class="listitem"><p><em class="parameter"><code>locking</code></em></p></li><li class="listitem"><p><em class="parameter"><code>msdfs</code></em></p></li><li class="listitem"><p><em class="parameter"><code>dmapi</code></em></p></li><li class="listitem"><p><em class="parameter"><code>registry</code></em></p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">0</code>3167 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>all</code></em></p></li><li><p><em class="parameter"><code>tdb</code></em></p></li><li><p><em class="parameter"><code>printdrivers</code></em></p></li><li><p><em class="parameter"><code>lanman</code></em></p></li><li><p><em class="parameter"><code>smb</code></em></p></li><li><p><em class="parameter"><code>rpc_parse</code></em></p></li><li><p><em class="parameter"><code>rpc_srv</code></em></p></li><li><p><em class="parameter"><code>rpc_cli</code></em></p></li><li><p><em class="parameter"><code>passdb</code></em></p></li><li><p><em class="parameter"><code>sam</code></em></p></li><li><p><em class="parameter"><code>auth</code></em></p></li><li><p><em class="parameter"><code>winbind</code></em></p></li><li><p><em class="parameter"><code>vfs</code></em></p></li><li><p><em class="parameter"><code>idmap</code></em></p></li><li><p><em class="parameter"><code>quota</code></em></p></li><li><p><em class="parameter"><code>acls</code></em></p></li><li><p><em class="parameter"><code>locking</code></em></p></li><li><p><em class="parameter"><code>msdfs</code></em></p></li><li><p><em class="parameter"><code>dmapi</code></em></p></li><li><p><em class="parameter"><code>registry</code></em></p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">0</code> 3168 3168 </em></span> 3169 3169 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 3170 3170 </em></span> 3171 </p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554542"></a>3171 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548560"></a> 3172 3172 3173 3173 logon drive (G) 3174 </h3></div></div></div><a class="indexterm" name="id25 54543"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3174 </h3></div></div></div><a class="indexterm" name="id2548561"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3175 3175 This parameter specifies the local path to which the home directory will be 3176 3176 connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT … … 3182 3182 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 3183 3183 </em></span> 3184 </p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554617"></a>3184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548635"></a> 3185 3185 3186 3186 logon home (G) 3187 </h3></div></div></div><a class="indexterm" name="id25 54618"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>3187 </h3></div></div></div><a class="indexterm" name="id2548636"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3188 3188 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 3189 3189 It allows you to do … … 3216 3216 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code> 3217 3217 </em></span> 3218 </p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554781"></a>3218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548800"></a> 3219 3219 3220 3220 logon path (G) 3221 </h3></div></div></div><a class="indexterm" name="id25 54782"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>3221 </h3></div></div></div><a class="indexterm" name="id2548801"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p> 3222 3222 This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are 3223 3223 stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming … … 3241 3241 </p><p> 3242 3242 This option takes the standard substitutions, allowing you to have separate logon scripts for each user or machine. 3243 </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>3244 Do not quote the value. Setting this as <span class="quote">“<span class="quote">\\%N\profile\%U</span>”</span>3243 </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> 3244 Do not quote the value. Setting this as “<span class="quote">\\%N\profile\%U</span>” 3245 3245 will break profile handling. Where the tdbsam or ldapsam passdb backend 3246 3246 is used, at the time the user account is created the value configured … … 3263 3263 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 3264 3264 </em></span> 3265 </p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2554950"></a>3265 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548968"></a> 3266 3266 3267 3267 logon script (G) 3268 </h3></div></div></div><a class="indexterm" name="id25 54951"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>3268 </h3></div></div></div><a class="indexterm" name="id2548969"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3269 3269 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 3270 3270 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 3297 3297 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 3298 3298 </em></span> 3299 </p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555120"></a>3299 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549138"></a> 3300 3300 3301 3301 lppause command (S) 3302 </h3></div></div></div><a class="indexterm" name="id25 55121"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3302 </h3></div></div></div><a class="indexterm" name="id2549139"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3303 3303 executed on the server host in order to stop printing or spooling 3304 3304 a specific print job.</p><p>This command should be a program or script which takes … … 3324 3324 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 3325 3325 </em></span> 3326 </p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555268"></a>3326 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549286"></a> 3327 3327 3328 3328 lpq cache time (G) 3329 </h3></div></div></div><a class="indexterm" name="id25 55269"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached3329 </h3></div></div></div><a class="indexterm" name="id2549287"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 3330 3330 for to prevent the <code class="literal">lpq</code> command being called too 3331 3331 often. A separate cache is kept for each variation of the <code class="literal"> … … 3340 3340 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 3341 3341 </em></span> 3342 </p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555386"></a>3342 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549404"></a> 3343 3343 3344 3344 lpq command (S) 3345 </h3></div></div></div><a class="indexterm" name="id25 55387"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3345 </h3></div></div></div><a class="indexterm" name="id2549406"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3346 3346 executed on the server host in order to obtain <code class="literal">lpq 3347 3347 </code>-style printer status information.</p><p>This command should be a program or script which … … 3365 3365 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 3366 3366 </em></span> 3367 </p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555513"></a>3367 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549531"></a> 3368 3368 3369 3369 lpresume command (S) 3370 </h3></div></div></div><a class="indexterm" name="id25 55514"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3370 </h3></div></div></div><a class="indexterm" name="id2549532"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3371 3371 executed on the server host in order to restart or continue 3372 3372 printing or spooling a specific print job.</p><p>This command should be a program or script which takes … … 3381 3381 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3382 3382 </em></span> 3383 </p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555666"></a>3383 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549684"></a> 3384 3384 3385 3385 lprm command (S) 3386 </h3></div></div></div><a class="indexterm" name="id25 55667"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3386 </h3></div></div></div><a class="indexterm" name="id2549685"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3387 3387 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 3388 3388 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 3401 3401 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 3402 3402 </em></span> 3403 </p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555753"></a>3403 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549771"></a> 3404 3404 3405 3405 machine password timeout (G) 3406 </h3></div></div></div><a class="indexterm" name="id25 55754"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3406 </h3></div></div></div><a class="indexterm" name="id2549772"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3407 3407 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change 3408 3408 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb … … 3414 3414 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 3415 3415 </em></span> 3416 </p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555841"></a>3416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549859"></a> 3417 3417 3418 3418 magic output (S) 3419 </h3></div></div></div><a class="indexterm" name="id25 55842"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3419 </h3></div></div></div><a class="indexterm" name="id2549860"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3420 3420 This parameter specifies the name of a file which will contain output created by a magic script (see the 3421 3421 <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below). 3422 </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script3422 </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script 3423 3423 </code></em> in the same directory the output file content is undefined. 3424 3424 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal"><magic script name>.out</code> … … 3426 3426 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 3427 3427 </em></span> 3428 </p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2555925"></a>3428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549943"></a> 3429 3429 3430 3430 magic script (S) 3431 </h3></div></div></div><a class="indexterm" name="id25 55926"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,3431 </h3></div></div></div><a class="indexterm" name="id2549944"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 3432 3432 if opened, will be executed by the server when the file is closed. 3433 3433 This allows a UNIX script to be sent to the Samba host and … … 3445 3445 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 3446 3446 </em></span> 3447 </p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556030"></a>3447 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550048"></a> 3448 3448 3449 3449 mangled names (S) 3450 </h3></div></div></div><a class="indexterm" name="id255 6031"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX3450 </h3></div></div></div><a class="indexterm" name="id2550050"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 3451 3451 should be mapped to DOS-compatible names ("mangled") and made visible, 3452 3452 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for 3453 details on how to control the mangling process.</p><p>If mangling is used then the mangling algorithm is as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The first (up to) five alphanumeric characters3453 details on how to control the mangling process.</p><p>If mangling is used then the mangling algorithm is as follows:</p><div class="itemizedlist"><ul type="disc"><li><p>The first (up to) five alphanumeric characters 3454 3454 before the rightmost dot of the filename are preserved, forced 3455 3455 to upper case, and appear as the first (up to) five characters 3456 of the mangled name.</p></li><li class="listitem"><p>A tilde "~" is appended to the first part of the mangled3456 of the mangled name.</p></li><li><p>A tilde "~" is appended to the first part of the mangled 3457 3457 name, followed by a two-character unique sequence, based on the 3458 3458 original root name (i.e., the original filename minus its final … … 3461 3461 characters.</p><p>Note that the character to use may be specified using 3462 3462 the <a class="link" href="smb.conf.5.html#MANGLINGCHAR" target="_top">mangling char</a> 3463 option, if you don't like '~'.</p></li><li class="listitem"><p>Files whose UNIX name begins with a dot will be3463 option, if you don't like '~'.</p></li><li><p>Files whose UNIX name begins with a dot will be 3464 3464 presented as DOS hidden files. The mangled name will be created as 3465 3465 for other filenames, but with the leading dot removed and "___" as … … 3473 3473 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 3474 3474 </em></span> 3475 </p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556167"></a>3475 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550186"></a> 3476 3476 3477 3477 mangle prefix (G) 3478 </h3></div></div></div><a class="indexterm" name="id255 6168"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix3478 </h3></div></div></div><a class="indexterm" name="id2550187"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 3479 3479 characters from the original name used when generating 3480 3480 the mangled names. A larger value will give a weaker … … 3486 3486 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 3487 3487 </em></span> 3488 </p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556234"></a>3488 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550252"></a> 3489 3489 3490 3490 mangling char (S) 3491 </h3></div></div></div><a class="indexterm" name="id255 6235"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as3491 </h3></div></div></div><a class="indexterm" name="id2550253"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3492 3492 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The 3493 3493 default is a '~' but this may interfere with some software. Use this option to set … … 3496 3496 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 3497 3497 </em></span> 3498 </p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556312"></a>3498 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550330"></a> 3499 3499 3500 3500 mangling method (G) 3501 </h3></div></div></div><a class="indexterm" name="id255 6313"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating3501 </h3></div></div></div><a class="indexterm" name="id2550331"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 3502 3502 the mangled names. Can take two different values, "hash" and 3503 3503 "hash2". "hash" is the algorithm that was used … … 3510 3510 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 3511 3511 </em></span> 3512 </p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556379"></a>3512 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550397"></a> 3513 3513 3514 3514 map acl inherit (S) 3515 </h3></div></div></div><a class="indexterm" name="id255 6380"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'3515 </h3></div></div></div><a class="indexterm" name="id2550398"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3516 3516 access control entry flags stored in Windows ACLs into an extended attribute 3517 3517 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 3521 3521 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 3522 3522 </em></span> 3523 </p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556436"></a>3523 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550454"></a> 3524 3524 3525 3525 map archive (S) 3526 </h3></div></div></div><a class="indexterm" name="id255 6437"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3526 </h3></div></div></div><a class="indexterm" name="id2550455"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3527 3527 This controls whether the DOS archive attribute 3528 3528 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 3537 3537 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 3538 3538 </em></span> 3539 </p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556511"></a>3539 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550529"></a> 3540 3540 3541 3541 map hidden (S) 3542 </h3></div></div></div><a class="indexterm" name="id255 6512"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>3542 </h3></div></div></div><a class="indexterm" name="id2550530"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3543 3543 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 3544 3544 </p><p> … … 3546 3546 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> 3547 3547 for details. 3548 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556569"></a>3548 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550587"></a> 3549 3549 3550 3550 map read only (S) 3551 </h3></div></div></div><a class="indexterm" name="id255 6570"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>3551 </h3></div></div></div><a class="indexterm" name="id2550588"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3552 3552 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 3553 3553 </p><p> … … 3556 3556 present. If <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> is set to <code class="constant">yes</code> then this 3557 3557 parameter is <span class="emphasis"><em>ignored</em></span>. This is a new parameter introduced in Samba version 3.0.21. 3558 </p><p>The three settings are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>3558 </p><p>The three settings are :</p><div class="itemizedlist"><ul type="disc"><li><p> 3559 3559 <code class="constant">Yes</code> - The read only DOS attribute is mapped to the inverse of the user 3560 3560 or owner write bit in the unix permission mode set. If the owner write bit is not set, the … … 3564 3564 If the read only DOS attribute is unset, Samba simply sets the write bit of the 3565 3565 owner to one. 3566 </p></li><li class="listitem"><p>3566 </p></li><li><p> 3567 3567 <code class="constant">Permissions</code> - The read only DOS attribute is mapped to the effective permissions of 3568 3568 the connecting user, as evaluated by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> by reading the unix permissions and POSIX ACL (if present). 3569 3569 If the connecting user does not have permission to modify the file, the read only attribute 3570 3570 is reported as being set on the file. 3571 </p></li><li class="listitem"><p>3571 </p></li><li><p> 3572 3572 <code class="constant">No</code> - The read only DOS attribute is unaffected by permissions, and can only be set by 3573 3573 the <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> method. This may be useful for exporting mounted CDs. 3574 3574 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map read only</code></em> = <code class="literal">yes</code> 3575 3575 </em></span> 3576 </p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556725"></a>3576 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550744"></a> 3577 3577 3578 3578 map system (S) 3579 </h3></div></div></div><a class="indexterm" name="id255 6726"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>3579 </h3></div></div></div><a class="indexterm" name="id2550745"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 3580 3580 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 3581 3581 </p><p> … … 3585 3585 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 3586 3586 </em></span> 3587 </p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2556795"></a>3587 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550813"></a> 3588 3588 3589 3589 map to guest (G) 3590 </h3></div></div></div><a class="indexterm" name="id255 6796"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =3590 </h3></div></div></div><a class="indexterm" name="id2550814"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY = 3591 3591 security</a> modes other than <em class="parameter"><code>security = share</code></em> 3592 3592 and <em class="parameter"><code>security = server</code></em> 3593 3593 - i.e. <code class="constant">user</code>, and <code class="constant">domain</code>.</p><p>This parameter can take four different values, which tell 3594 3594 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> what to do with user 3595 login requests that don't match a valid UNIX user in some way.</p><p>The four settings are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">Never</code> - Means user login3595 login requests that don't match a valid UNIX user in some way.</p><p>The four settings are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">Never</code> - Means user login 3596 3596 requests with an invalid password are rejected. This is the 3597 default.</p></li><li class="listitem"><p><code class="constant">Bad User</code> - Means user3597 default.</p></li><li><p><code class="constant">Bad User</code> - Means user 3598 3598 logins with an invalid password are rejected, unless the username 3599 3599 does not exist, in which case it is treated as a guest login and 3600 mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p></li><li class="listitem"><p><code class="constant">Bad Password</code> - Means user logins3600 mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins 3601 3601 with an invalid password are treated as a guest login and mapped 3602 3602 into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>. Note that … … 3607 3607 that they got their password wrong. Helpdesk services will 3608 3608 <span class="emphasis"><em>hate</em></span> you if you set the <em class="parameter"><code>map to 3609 guest</code></em> parameter this way :-).</p></li><li class="listitem"><p><code class="constant">Bad Uid</code> - Is only applicable when Samba is configured3609 guest</code></em> parameter this way :-).</p></li><li><p><code class="constant">Bad Uid</code> - Is only applicable when Samba is configured 3610 3610 in some type of domain mode security (security = {domain|ads}) and means that 3611 3611 user logins which are successfully authenticated but which have no valid Unix … … 3630 3630 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 3631 3631 </em></span> 3632 </p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557035"></a>3632 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551053"></a> 3633 3633 3634 3634 max connections (S) 3635 </h3></div></div></div><a class="indexterm" name="id255 7036"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.3635 </h3></div></div></div><a class="indexterm" name="id2551054"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3636 3636 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 3637 3637 will be refused if this number of connections to the service are already open. A value … … 3641 3641 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 3642 3642 </em></span> 3643 </p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557121"></a>3643 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551139"></a> 3644 3644 3645 3645 max disk size (G) 3646 </h3></div></div></div><a class="indexterm" name="id255 7122"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit3646 </h3></div></div></div><a class="indexterm" name="id2551140"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 3647 3647 on the apparent size of disks. If you set this option to 100 3648 3648 then all shares will appear to be not larger than 100 MB in … … 3658 3658 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 3659 3659 </em></span> 3660 </p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557213"></a>3660 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551231"></a> 3661 3661 3662 3662 max log size (G) 3663 </h3></div></div></div><a class="indexterm" name="id255 7214"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3663 </h3></div></div></div><a class="indexterm" name="id2551232"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3664 3664 This option (an integer in kilobytes) specifies the max size the log file should grow to. 3665 3665 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 3670 3670 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 3671 3671 </em></span> 3672 </p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557284"></a>3672 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551302"></a> 3673 3673 3674 3674 max mux (G) 3675 </h3></div></div></div><a class="indexterm" name="id255 7285"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of3675 </h3></div></div></div><a class="indexterm" name="id2551303"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 3676 3676 outstanding simultaneous SMB operations that Samba tells the client 3677 3677 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 3678 3678 </em></span> 3679 </p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557327"></a>3679 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551345"></a> 3680 3680 3681 3681 max open files (G) 3682 </h3></div></div></div><a class="indexterm" name="id255 7328"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3682 </h3></div></div></div><a class="indexterm" name="id2551346"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3683 3683 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3684 3684 serving process may have open for a client at any one time. The … … 3688 3688 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">10000</code> 3689 3689 </em></span> 3690 </p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557387"></a>3690 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551405"></a> 3691 3691 3692 3692 max print jobs (S) 3693 </h3></div></div></div><a class="indexterm" name="id255 7388"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3693 </h3></div></div></div><a class="indexterm" name="id2551406"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3694 3694 jobs allowable in a Samba printer queue at any given moment. 3695 3695 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. … … 3698 3698 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 3699 3699 </em></span> 3700 </p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id2557457"></a>3700 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551475"></a> 3701 3701 3702 3702 <a name="PROTOCOL"></a>protocol 3703 </h3></div></div></div><a class="indexterm" name="id255 7458"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557490"></a>3703 </h3></div></div></div><a class="indexterm" name="id2551476"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551508"></a> 3704 3704 3705 3705 max protocol (G) 3706 </h3></div></div></div><a class="indexterm" name="id255 7491"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest3707 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">CORE</code>: Earliest version. No3708 concept of user names.</p></li><li class="listitem"><p><code class="constant">COREPLUS</code>: Slight improvements on3709 CORE for efficiency.</p></li><li class="listitem"><p><code class="constant">LANMAN1</code>: First <span class="emphasis"><em>3706 </h3></div></div></div><a class="indexterm" name="id2551509"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 3707 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No 3708 concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on 3709 CORE for efficiency.</p></li><li><p><code class="constant">LANMAN1</code>: First <span class="emphasis"><em> 3710 3710 modern</em></span> version of the protocol. Long filename 3711 support.</p></li><li class="listitem"><p><code class="constant">LANMAN2</code>: Updates to Lanman1 protocol.</p></li><li class="listitem"><p><code class="constant">NT1</code>: Current up to date version of the protocol.3711 support.</p></li><li><p><code class="constant">LANMAN2</code>: Updates to Lanman1 protocol.</p></li><li><p><code class="constant">NT1</code>: Current up to date version of the protocol. 3712 3712 Used by Windows NT. Known as CIFS.</p></li></ul></div><p>Normally this option should not be set as the automatic 3713 3713 negotiation phase in the SMB protocol takes care of choosing … … 3716 3716 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 3717 3717 </em></span> 3718 </p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557615"></a>3718 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551633"></a> 3719 3719 3720 3720 max reported print jobs (S) 3721 </h3></div></div></div><a class="indexterm" name="id255 7616"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>3721 </h3></div></div></div><a class="indexterm" name="id2551634"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3722 3722 This parameter limits the maximum number of jobs displayed in a port monitor for 3723 3723 Samba printer queue at any given moment. If this number is exceeded, the excess … … 3728 3728 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 3729 3729 </em></span> 3730 </p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557679"></a>3730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551697"></a> 3731 3731 3732 3732 max smbd processes (G) 3733 </h3></div></div></div><a class="indexterm" name="id255 7680"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended3733 </h3></div></div></div><a class="indexterm" name="id2551698"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3734 3734 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 3735 3735 resources to handle more than this number of connections. Remember that under normal operating … … 3739 3739 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 3740 3740 </em></span> 3741 </p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557760"></a>3741 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551779"></a> 3742 3742 3743 3743 max stat cache size (G) 3744 </h3></div></div></div><a class="indexterm" name="id255 7762"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any3744 </h3></div></div></div><a class="indexterm" name="id2551780"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3745 3745 <em class="parameter"><code>stat cache</code></em> being used 3746 3746 to speed up case insensitive name mappings. It represents … … 3753 3753 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 3754 3754 </em></span> 3755 </p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557830"></a>3755 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551848"></a> 3756 3756 3757 3757 max ttl (G) 3758 </h3></div></div></div><a class="indexterm" name="id255 7831"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'3758 </h3></div></div></div><a class="indexterm" name="id2551849"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3759 3759 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 3760 3760 requesting a name using either a broadcast packet or from a WINS server. You should 3761 3761 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 3762 3762 </em></span> 3763 </p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557889"></a>3763 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551907"></a> 3764 3764 3765 3765 max wins ttl (G) 3766 </h3></div></div></div><a class="indexterm" name="id255 7890"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server3766 </h3></div></div></div><a class="indexterm" name="id2551908"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3767 3767 (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum 3768 3768 'time to live' of NetBIOS names that <code class="literal">nmbd</code> … … 3770 3770 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 3771 3771 </em></span> 3772 </p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2557960"></a>3772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551978"></a> 3773 3773 3774 3774 max xmit (G) 3775 </h3></div></div></div><a class="indexterm" name="id255 7961"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size3775 </h3></div></div></div><a class="indexterm" name="id2551979"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 3776 3776 that will be negotiated by Samba. The default is 16644, which 3777 3777 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 3781 3781 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 3782 3782 </em></span> 3783 </p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558023"></a>3783 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552041"></a> 3784 3784 3785 3785 message command (G) 3786 </h3></div></div></div><a class="indexterm" name="id255 8024"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the3786 </h3></div></div></div><a class="indexterm" name="id2552042"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 3787 3787 server receives a WinPopup style message.</p><p>This would normally be a command that would 3788 3788 deliver the message somehow. How this is to be done is … … 3800 3800 %u</code></em> won't work (<em class="parameter"><code>%U</code></em> may be better 3801 3801 in this case).</p><p>Apart from the standard substitutions, some additional 3802 ones apply. In particular:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>%s</code></em> = the filename containing3803 the message.</p></li><li class="listitem"><p><em class="parameter"><code>%t</code></em> = the destination that3804 the message was sent to (probably the server name).</p></li><li class="listitem"><p><em class="parameter"><code>%f</code></em> = who the message3802 ones apply. In particular:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%s</code></em> = the filename containing 3803 the message.</p></li><li><p><em class="parameter"><code>%t</code></em> = the destination that 3804 the message was sent to (probably the server name).</p></li><li><p><em class="parameter"><code>%f</code></em> = who the message 3805 3805 is from.</p></li></ul></div><p>You could make this command send mail, or whatever else 3806 3806 takes your fancy. Please let us know of any really interesting … … 3823 3823 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 3824 3824 </em></span> 3825 </p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558233"></a>3825 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552251"></a> 3826 3826 3827 3827 min print space (S) 3828 </h3></div></div></div><a class="indexterm" name="id255 8234"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk3828 </h3></div></div></div><a class="indexterm" name="id2552252"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 3829 3829 space that must be available before a user will be able to spool 3830 3830 a print job. It is specified in kilobytes. The default is 0, which … … 3833 3833 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 3834 3834 </em></span> 3835 </p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558295"></a>3835 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552313"></a> 3836 3836 3837 3837 min protocol (G) 3838 </h3></div></div></div><a class="indexterm" name="id255 8296"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the3838 </h3></div></div></div><a class="indexterm" name="id2552314"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 3839 3839 lowest SMB protocol dialect than Samba will support. Please refer 3840 3840 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a> … … 3848 3848 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 3849 3849 </em></span> 3850 </p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558394"></a>3850 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552412"></a> 3851 3851 3852 3852 min receivefile size (G) 3853 </h3></div></div></div><a class="indexterm" name="id255 8395"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming3853 </h3></div></div></div><a class="indexterm" name="id2552413"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming 3854 3854 SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will 3855 3855 be passed to any underlying kernel recvfile or splice system call (if there is no such … … 3860 3860 nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code> 3861 3861 </em></span> 3862 </p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558463"></a>3862 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552481"></a> 3863 3863 3864 3864 min wins ttl (G) 3865 </h3></div></div></div><a class="indexterm" name="id255 8464"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>3865 </h3></div></div></div><a class="indexterm" name="id2552482"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 3866 3866 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live' 3867 3867 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in … … 3869 3869 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 3870 3870 </em></span> 3871 </p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558534"></a>3871 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552552"></a> 3872 3872 3873 3873 msdfs proxy (S) 3874 </h3></div></div></div><a class="indexterm" name="id255 8535"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a3874 </h3></div></div></div><a class="indexterm" name="id2552553"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 3875 3875 stand-in for another CIFS share whose location is specified by 3876 3876 the value of the parameter. When clients attempt to connect to … … 3880 3880 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 3881 3881 </em></span> 3882 </p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558612"></a>3882 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552630"></a> 3883 3883 3884 3884 msdfs root (S) 3885 </h3></div></div></div><a class="indexterm" name="id255 8613"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the3885 </h3></div></div></div><a class="indexterm" name="id2552631"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 3886 3886 share as a Dfs root and allows clients to browse the 3887 3887 distributed file system tree rooted at the share directory. … … 3891 3891 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 3892 3892 </em></span> 3893 </p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558667"></a>3893 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552685"></a> 3894 3894 3895 3895 name cache timeout (G) 3896 </h3></div></div></div><a class="indexterm" name="id255 8668"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before3896 </h3></div></div></div><a class="indexterm" name="id2552686"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 3897 3897 entries in samba's hostname resolve cache time out. If 3898 3898 the timeout is set to 0. the caching is disabled. … … 3901 3901 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 3902 3902 </em></span> 3903 </p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558728"></a>3903 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552746"></a> 3904 3904 3905 3905 name resolve order (G) 3906 </h3></div></div></div><a class="indexterm" name="id255 8729"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba3906 </h3></div></div></div><a class="indexterm" name="id2552747"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 3907 3907 suite to determine what naming services to use and in what order 3908 3908 to resolve host names to IP addresses. Its main purpose to is to … … 3910 3910 separated string of name resolution options.</p><p>The options are: "lmhosts", "host", 3911 3911 "wins" and "bcast". They cause names to be 3912 resolved as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>3912 resolved as follows:</p><div class="itemizedlist"><ul type="disc"><li><p> 3913 3913 <code class="constant">lmhosts</code> : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has 3914 3914 no name type attached to the NetBIOS name (see the manpage for lmhosts for details) then 3915 3915 any name type matches for lookup. 3916 </p></li><li class="listitem"><p>3916 </p></li><li><p> 3917 3917 <code class="constant">host</code> : Do a standard host name to IP address resolution, using the system 3918 3918 <code class="filename">/etc/hosts </code>, NIS, or DNS lookups. This method of name resolution is … … 3921 3921 useful for active directory domains and results in a DNS query for the SRV RR entry matching 3922 3922 _ldap._tcp.domain. 3923 </p></li><li class="listitem"><p><code class="constant">wins</code> : Query a name with3923 </p></li><li><p><code class="constant">wins</code> : Query a name with 3924 3924 the IP address listed in the <a class="link" href="smb.conf.5.html#WINSSERVER" target="_top">WINSSERVER</a> parameter. If no WINS server has 3925 been specified this method will be ignored.</p></li><li class="listitem"><p><code class="constant">bcast</code> : Do a broadcast on3925 been specified this method will be ignored.</p></li><li><p><code class="constant">bcast</code> : Do a broadcast on 3926 3926 each of the known local interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a> 3927 3927 parameter. This is the least reliable of the name resolution … … 3935 3935 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 3936 3936 </em></span> 3937 </p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558930"></a>3937 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552948"></a> 3938 3938 3939 3939 netbios aliases (G) 3940 </h3></div></div></div><a class="indexterm" name="id255 8931"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will3940 </h3></div></div></div><a class="indexterm" name="id2552950"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 3941 3941 advertise as additional names by which the Samba server is known. This allows one machine 3942 3942 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 3948 3948 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 3949 3949 </em></span> 3950 </p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2558996"></a>3950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553015"></a> 3951 3951 3952 3952 netbios name (G) 3953 </h3></div></div></div><a class="indexterm" name="id255 8998"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>3953 </h3></div></div></div><a class="indexterm" name="id2553016"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3954 3954 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 3955 3955 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 3964 3964 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 3965 3965 </em></span> 3966 </p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559078"></a>3966 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553096"></a> 3967 3967 3968 3968 netbios scope (G) 3969 </h3></div></div></div><a class="indexterm" name="id255 9079"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will3969 </h3></div></div></div><a class="indexterm" name="id2553097"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 3970 3970 operate under. This should not be set unless every machine 3971 3971 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 3972 3972 </em></span> 3973 </p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559120"></a>3973 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553138"></a> 3974 3974 3975 3975 nis homedir (G) 3976 </h3></div></div></div><a class="indexterm" name="id255 9121"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For3976 </h3></div></div></div><a class="indexterm" name="id2553140"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 3977 3977 UNIX systems that use an automounter, the user's home directory 3978 3978 will often be mounted on a workstation on demand from a remote … … 3993 3993 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 3994 3994 </em></span> 3995 </p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559200"></a>3995 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553218"></a> 3996 3996 3997 3997 nt acl support (S) 3998 </h3></div></div></div><a class="indexterm" name="id255 9201"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map3998 </h3></div></div></div><a class="indexterm" name="id2553220"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 3999 3999 UNIX permissions into Windows NT access control lists. The UNIX 4000 4000 permissions considered are the the traditional UNIX owner and … … 4003 4003 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 4004 4004 </em></span> 4005 </p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559255"></a>4005 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553273"></a> 4006 4006 4007 4007 ntlm auth (G) 4008 </h3></div></div></div><a class="indexterm" name="id255 9256"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to4008 </h3></div></div></div><a class="indexterm" name="id2553274"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 4009 4009 authenticate users using the NTLM encrypted password response. 4010 4010 If disabled, either the lanman password hash or an NTLMv2 response … … 4014 4014 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 4015 4015 </em></span> 4016 </p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559319"></a>4016 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553337"></a> 4017 4017 4018 4018 nt pipe support (G) 4019 </h3></div></div></div><a class="indexterm" name="id255 9320"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether4019 </h3></div></div></div><a class="indexterm" name="id2553338"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 4020 4020 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 4021 4021 clients to connect to the NT SMB specific <code class="constant">IPC$</code> … … 4023 4023 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 4024 4024 </em></span> 4025 </p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559375"></a>4025 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553393"></a> 4026 4026 4027 4027 nt status support (G) 4028 </h3></div></div></div><a class="indexterm" name="id255 9376"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status4028 </h3></div></div></div><a class="indexterm" name="id2553394"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 4029 4029 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 4030 4030 If this option is set to <code class="constant">no</code> then Samba offers … … 4032 4032 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 4033 4033 </em></span> 4034 </p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559437"></a>4034 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553455"></a> 4035 4035 4036 4036 null passwords (G) 4037 </h3></div></div></div><a class="indexterm" name="id255 9438"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>4038 </em></span> 4039 </p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559490"></a>4037 </h3></div></div></div><a class="indexterm" name="id2553456"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 4038 </em></span> 4039 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553508"></a> 4040 4040 4041 4041 obey pam restrictions (G) 4042 </h3></div></div></div><a class="indexterm" name="id255 9491"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support4042 </h3></div></div></div><a class="indexterm" name="id2553509"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 4043 4043 (i.e. --with-pam), this parameter will control whether or not Samba 4044 4044 should obey PAM's account and session management directives. The … … 4050 4050 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 4051 4051 </em></span> 4052 </p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559555"></a>4052 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553573"></a> 4053 4053 4054 4054 only user (S) 4055 </h3></div></div></div><a class="indexterm" name="id255 9556"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether4055 </h3></div></div></div><a class="indexterm" name="id2553574"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 4056 4056 connections with usernames not in the <em class="parameter"><code>user</code></em> 4057 4057 list will be allowed. By default this option is disabled so that a … … 4066 4066 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 4067 4067 </em></span> 4068 </p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559644"></a>4068 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553662"></a> 4069 4069 4070 4070 oplock break wait time (G) 4071 </h3></div></div></div><a class="indexterm" name="id255 9645"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>4071 </h3></div></div></div><a class="indexterm" name="id2553663"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4072 4072 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 4073 4073 quickly when that client issues an SMB that can cause an oplock break request, then the network client can 4074 4074 fail and not respond to the break request. This tuning parameter (which is set in milliseconds) is the amount 4075 4075 of time Samba will wait before sending an oplock break request to such (broken) clients. 4076 </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>4076 </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> 4077 4077 DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE. 4078 4078 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 4079 4079 </em></span> 4080 </p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559698"></a>4080 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553717"></a> 4081 4081 4082 4082 oplock contention limit (S) 4083 </h3></div></div></div><a class="indexterm" name="id255 9700"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4083 </h3></div></div></div><a class="indexterm" name="id2553718"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4084 4084 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 4085 4085 granting of oplocks under multiple client contention for the same file. … … 4089 4089 limit. This causes <code class="literal">smbd</code> to behave in a similar 4090 4090 way to Windows NT. 4091 </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>4091 </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p> 4092 4092 DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE. 4093 4093 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 4094 4094 </em></span> 4095 </p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559781"></a>4095 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553799"></a> 4096 4096 4097 4097 oplocks (S) 4098 </h3></div></div></div><a class="indexterm" name="id255 9782"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>4098 </h3></div></div></div><a class="indexterm" name="id2553800"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4099 4099 This boolean option tells <code class="literal">smbd</code> whether to 4100 4100 issue oplocks (opportunistic locks) to file open requests on this … … 4115 4115 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 4116 4116 </em></span> 4117 </p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559879"></a>4117 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553898"></a> 4118 4118 4119 4119 os2 driver map (G) 4120 </h3></div></div></div><a class="indexterm" name="id255 9880"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute4120 </h3></div></div></div><a class="indexterm" name="id2553899"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 4121 4121 path to a file containing a mapping of Windows NT printer driver 4122 4122 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 4128 4128 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 4129 4129 </em></span> 4130 </p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2559947"></a>4130 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553965"></a> 4131 4131 4132 4132 os level (G) 4133 </h3></div></div></div><a class="indexterm" name="id255 9948"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4133 </h3></div></div></div><a class="indexterm" name="id2553966"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4134 4134 This integer value controls what level Samba advertises itself as for browse elections. The value of this 4135 4135 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area. … … 4147 4147 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 4148 4148 </em></span> 4149 </p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560046"></a>4149 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554064"></a> 4150 4150 4151 4151 pam password change (G) 4152 </h3></div></div></div><a class="indexterm" name="id25 60047"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,4152 </h3></div></div></div><a class="indexterm" name="id2554065"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 4153 4153 this parameter, it is possible to use PAM's password change control 4154 4154 flag for Samba. If enabled, then PAM will be used for password … … 4158 4158 <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 4159 4159 </em></span> 4160 </p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560119"></a>4160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554137"></a> 4161 4161 4162 4162 panic action (G) 4163 </h3></div></div></div><a class="indexterm" name="id25 60120"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a4163 </h3></div></div></div><a class="indexterm" name="id2554138"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 4164 4164 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 4165 4165 draw attention to the fact that a problem occurred. … … 4168 4168 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 4169 4169 </em></span> 4170 </p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560195"></a>4170 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554213"></a> 4171 4171 4172 4172 paranoid server security (G) 4173 </h3></div></div></div><a class="indexterm" name="id25 60196"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest4173 </h3></div></div></div><a class="indexterm" name="id2554214"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 4174 4174 users with a bad passowrd. When this option is enabled, samba will not 4175 4175 use a broken NT 4.x server as password server, but instead complain … … 4179 4179 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 4180 4180 </em></span> 4181 </p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560246"></a>4181 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554264"></a> 4182 4182 4183 4183 passdb backend (G) 4184 </h3></div></div></div><a class="indexterm" name="id25 60247"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend4184 </h3></div></div></div><a class="indexterm" name="id2554265"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 4185 4185 will be used for storing user and possibly group information. This allows 4186 4186 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' 4187 4187 string that has meaning only to that particular backed. These are separated 4188 4188 by a : character.</p><p>Available backends can include: 4189 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="literal">smbpasswd</code> - The default smbpasswd4189 </p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">smbpasswd</code> - The default smbpasswd 4190 4190 backend. Takes a path to the smbpasswd file as an optional argument. 4191 </p></li><li class="listitem"><p><code class="literal">tdbsam</code> - The TDB based password storage4191 </p></li><li><p><code class="literal">tdbsam</code> - The TDB based password storage 4192 4192 backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb 4193 in the <a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a> directory.</p></li><li class="listitem"><p><code class="literal">ldapsam</code> - The LDAP based passdb4193 in the <a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a> directory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb 4194 4194 backend. Takes an LDAP URL as an optional argument (defaults to 4195 4195 <code class="literal">ldap://localhost</code>)</p><p>LDAP connections should be secured where possible. This may be done using either … … 4215 4215 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">smbpasswd</code> 4216 4216 </em></span> 4217 </p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560404"></a>4217 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554422"></a> 4218 4218 4219 4219 passdb expand explicit (G) 4220 </h3></div></div></div><a class="indexterm" name="id25 60405"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4220 </h3></div></div></div><a class="indexterm" name="id2554423"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4221 4221 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 4222 4222 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 4224 4224 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 4225 4225 </em></span> 4226 </p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560450"></a>4226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554468"></a> 4227 4227 4228 4228 passwd chat debug (G) 4229 </h3></div></div></div><a class="indexterm" name="id25 60451"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script4229 </h3></div></div></div><a class="indexterm" name="id2554470"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 4230 4230 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 4231 4231 strings passed to and received from the passwd chat are printed … … 4240 4240 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 4241 4241 </em></span> 4242 </p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560554"></a>4242 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554572"></a> 4243 4243 4244 4244 passwd chat timeout (G) 4245 </h3></div></div></div><a class="indexterm" name="id25 60555"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial4245 </h3></div></div></div><a class="indexterm" name="id2554573"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 4246 4246 answer from a passwd chat script being run. Once the initial answer is received 4247 4247 the subsequent answers must be received in one tenth of this time. The default it 4248 4248 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 4249 4249 </em></span> 4250 </p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560599"></a>4250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554617"></a> 4251 4251 4252 4252 passwd chat (G) 4253 </h3></div></div></div><a class="indexterm" name="id25 60600"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>4253 </h3></div></div></div><a class="indexterm" name="id2554618"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 4254 4254 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 4255 4255 program to change the user's password. The string describes a … … 4282 4282 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 4283 4283 </em></span> 4284 </p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560804"></a>4284 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554822"></a> 4285 4285 4286 4286 passwd program (G) 4287 </h3></div></div></div><a class="indexterm" name="id25 60805"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set4287 </h3></div></div></div><a class="indexterm" name="id2554823"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 4288 4288 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 4289 4289 will be replaced with the user name. The user name is checked for … … 4306 4306 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 4307 4307 </em></span> 4308 </p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2560940"></a>4308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554958"></a> 4309 4309 4310 4310 password level (G) 4311 </h3></div></div></div><a class="indexterm" name="id25 60941"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty4311 </h3></div></div></div><a class="indexterm" name="id2554959"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 4312 4312 with mixed-case passwords. One offending client is Windows for 4313 4313 Workgroups, which for some reason forces passwords to upper … … 4331 4331 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 4332 4332 </em></span> 4333 </p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561076"></a>4333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555095"></a> 4334 4334 4335 4335 password server (G) 4336 </h3></div></div></div><a class="indexterm" name="id25 61078"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server4336 </h3></div></div></div><a class="indexterm" name="id2555096"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 4337 4337 or Active Directory domain controller with this option, 4338 4338 and using <code class="literal">security = [ads|domain|server]</code> … … 4349 4349 by any method and order described in that parameter.</p><p>The password server must be a machine capable of using 4350 4350 the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in 4351 user level security mode.</p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Using a password server means your UNIX box (running4351 user level security mode.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Using a password server means your UNIX box (running 4352 4352 Samba) is only as secure as your password server. <span class="emphasis"><em>DO NOT 4353 4353 CHOOSE A PASSWORD SERVER THAT YOU DON'T COMPLETELY TRUST</em></span>. … … 4378 4378 set to <code class="constant">server</code>, then there are different 4379 4379 restrictions that <code class="literal">security = domain</code> doesn't 4380 suffer from:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>You may list several password servers in4380 suffer from:</p><div class="itemizedlist"><ul type="disc"><li><p>You may list several password servers in 4381 4381 the <em class="parameter"><code>password server</code></em> parameter, however if an 4382 4382 <code class="literal">smbd</code> makes a connection to a password server, … … 4384 4384 to be authenticated from this <code class="literal">smbd</code>. This is a 4385 4385 restriction of the SMB/CIFS protocol when in <code class="literal">security = server 4386 </code> mode and cannot be fixed in Samba.</p></li><li class="listitem"><p>If you are using a Windows NT server as your4386 </code> mode and cannot be fixed in Samba.</p></li><li><p>If you are using a Windows NT server as your 4387 4387 password server then you will have to ensure that your users 4388 4388 are able to login from the Samba server, as when in <code class="literal"> … … 4394 4394 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code> 4395 4395 </em></span> 4396 </p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id2561375"></a>4396 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555393"></a> 4397 4397 4398 4398 <a name="DIRECTORY"></a>directory 4399 </h3></div></div></div><a class="indexterm" name="id25 61376"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561406"></a>4399 </h3></div></div></div><a class="indexterm" name="id2555394"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555424"></a> 4400 4400 4401 4401 path (S) 4402 </h3></div></div></div><a class="indexterm" name="id25 61407"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which4402 </h3></div></div></div><a class="indexterm" name="id2555425"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 4403 4403 the user of the service is to be given access. In the case of 4404 4404 printable services, this is where print data will spool prior to … … 4417 4417 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 4418 4418 </em></span> 4419 </p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561510"></a>4419 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555528"></a> 4420 4420 4421 4421 pid directory (G) 4422 </h3></div></div></div><a class="indexterm" name="id25 61511"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4422 </h3></div></div></div><a class="indexterm" name="id2555529"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4423 4423 This option specifies the directory where pid files will be placed. 4424 4424 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 4426 4426 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 4427 4427 </em></span> 4428 </p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561569"></a>4428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555588"></a> 4429 4429 4430 4430 posix locking (S) 4431 </h3></div></div></div><a class="indexterm" name="id25 61570"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>4431 </h3></div></div></div><a class="indexterm" name="id2555589"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4432 4432 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4433 4433 daemon maintains an database of file locks obtained by SMB clients. The default behavior is … … 4437 4437 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 4438 4438 </em></span> 4439 </p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561625"></a>4439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555643"></a> 4440 4440 4441 4441 postexec (S) 4442 </h3></div></div></div><a class="indexterm" name="id25 61626"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run4442 </h3></div></div></div><a class="indexterm" name="id2555644"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 4443 4443 whenever the service is disconnected. It takes the usual 4444 4444 substitutions. The command may be run as the root on some … … 4448 4448 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 4449 4449 </em></span> 4450 </p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561698"></a>4450 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555716"></a> 4451 4451 4452 4452 preexec close (S) 4453 </h3></div></div></div><a class="indexterm" name="id25 61699"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>4453 </h3></div></div></div><a class="indexterm" name="id2555717"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4454 4454 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a> 4455 4455 should close the service being connected to. 4456 4456 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4457 4457 </em></span> 4458 </p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id2561753"></a>4458 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555772"></a> 4459 4459 4460 4460 <a name="EXEC"></a>exec 4461 </h3></div></div></div><a class="indexterm" name="id25 61754"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561785"></a>4461 </h3></div></div></div><a class="indexterm" name="id2555773"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555803"></a> 4462 4462 4463 4463 preexec (S) 4464 </h3></div></div></div><a class="indexterm" name="id25 61786"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever4464 </h3></div></div></div><a class="indexterm" name="id2555804"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 4465 4465 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 4466 4466 message every time they log in. Maybe a message of the day? Here … … 4474 4474 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 4475 4475 </em></span> 4476 </p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id2561893"></a>4476 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555911"></a> 4477 4477 4478 4478 <a name="PREFEREDMASTER"></a>prefered master 4479 </h3></div></div></div><a class="indexterm" name="id25 61894"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2561926"></a>4479 </h3></div></div></div><a class="indexterm" name="id2555912"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555945"></a> 4480 4480 4481 4481 preferred master (G) 4482 </h3></div></div></div><a class="indexterm" name="id25 61927"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>4482 </h3></div></div></div><a class="indexterm" name="id2555946"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4483 4483 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4484 4484 </p><p> … … 4494 4494 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 4495 4495 </em></span> 4496 </p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562019"></a>4496 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556038"></a> 4497 4497 4498 4498 preload modules (G) 4499 </h3></div></div></div><a class="indexterm" name="id25 62020"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should4499 </h3></div></div></div><a class="indexterm" name="id2556039"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4500 4500 be loaded into smbd before a client connects. This improves 4501 4501 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> … … 4503 4503 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4504 4504 </em></span> 4505 </p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id2562080"></a>4505 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556098"></a> 4506 4506 4507 4507 <a name="AUTOSERVICES"></a>auto services 4508 </h3></div></div></div><a class="indexterm" name="id25 62081"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562113"></a>4508 </h3></div></div></div><a class="indexterm" name="id2556100"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556132"></a> 4509 4509 4510 4510 preload (G) 4511 </h3></div></div></div><a class="indexterm" name="id25 62114"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be4511 </h3></div></div></div><a class="indexterm" name="id2556133"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 4512 4512 automatically added to the browse lists. This is most useful 4513 4513 for homes and printers services that would otherwise not be … … 4520 4520 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 4521 4521 </em></span> 4522 </p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562191"></a>4522 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556210"></a> 4523 4523 4524 4524 preserve case (S) 4525 </h3></div></div></div><a class="indexterm" name="id25 62192"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4525 </h3></div></div></div><a class="indexterm" name="id2556211"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4526 4526 This controls if new filenames are created with the case that the client passes, or if 4527 4527 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 4530 4530 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 4531 4531 </em></span> 4532 </p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id2562258"></a>4532 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556276"></a> 4533 4533 4534 4534 <a name="PRINTOK"></a>print ok 4535 </h3></div></div></div><a class="indexterm" name="id25 62259"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562289"></a>4535 </h3></div></div></div><a class="indexterm" name="id2556277"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556307"></a> 4536 4536 4537 4537 printable (S) 4538 </h3></div></div></div><a class="indexterm" name="id25 62290"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then4538 </h3></div></div></div><a class="indexterm" name="id2556308"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4539 4539 clients may open, write to and submit spool files on the directory 4540 4540 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing … … 4543 4543 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 4544 4544 </em></span> 4545 </p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562352"></a>4545 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556370"></a> 4546 4546 4547 4547 printcap cache time (G) 4548 </h3></div></div></div><a class="indexterm" name="id25 62353"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing4548 </h3></div></div></div><a class="indexterm" name="id2556371"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4549 4549 subsystem is again asked for the known printers. If the value 4550 4550 is greater than 60 the initial waiting time is set to 60 seconds … … 4556 4556 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 4557 4557 </em></span> 4558 </p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id2562421"></a>4558 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556439"></a> 4559 4559 4560 4560 <a name="PRINTCAP"></a>printcap 4561 </h3></div></div></div><a class="indexterm" name="id25 62422"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562454"></a>4561 </h3></div></div></div><a class="indexterm" name="id2556440"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556472"></a> 4562 4562 4563 4563 printcap name (G) 4564 </h3></div></div></div><a class="indexterm" name="id25 62455"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4564 </h3></div></div></div><a class="indexterm" name="id2556473"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4565 4565 This parameter may be used to override the compiled-in default printcap name used by the server (usually 4566 4566 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. … … 4590 4590 where the '|' separates aliases of a printer. The fact that the second alias has a space in 4591 4591 it gives a hint to Samba that it's a comment. 4592 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>4592 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 4593 4593 Under AIX the default printcap name is <code class="filename">/etc/qconfig</code>. Samba will 4594 4594 assume the file is in AIX <code class="filename">qconfig</code> format if the string <code class="filename">qconfig</code> appears in the printcap filename. … … 4597 4597 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 4598 4598 </em></span> 4599 </p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562638"></a>4599 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556656"></a> 4600 4600 4601 4601 print command (S) 4602 </h3></div></div></div><a class="indexterm" name="id25 62639"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to4602 </h3></div></div></div><a class="indexterm" name="id2556657"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 4603 4603 a service, this command will be used via a <code class="literal">system()</code> 4604 4604 call to process the spool file. Typically the command specified will … … 4642 4642 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 4643 4643 </em></span> 4644 </p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2562908"></a>4644 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556926"></a> 4645 4645 4646 4646 printer admin (S) 4647 </h3></div></div></div><a class="indexterm" name="id25 62909"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>4647 </h3></div></div></div><a class="indexterm" name="id2556927"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 4648 4648 This lists users who can do anything to printers 4649 4649 via the remote administration interfaces offered … … 4661 4661 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 4662 4662 </em></span> 4663 </p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id2562977"></a>4663 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556995"></a> 4664 4664 4665 4665 <a name="PRINTER"></a>printer 4666 </h3></div></div></div><a class="indexterm" name="id25 62978"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563008"></a>4666 </h3></div></div></div><a class="indexterm" name="id2556996"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557027"></a> 4667 4667 4668 4668 printer name (S) 4669 </h3></div></div></div><a class="indexterm" name="id25 63010"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4669 </h3></div></div></div><a class="indexterm" name="id2557028"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4670 4670 This parameter specifies the name of the printer to which print jobs spooled through a printable service 4671 4671 will be sent. … … 4680 4680 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 4681 4681 </em></span> 4682 </p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563096"></a>4682 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557115"></a> 4683 4683 4684 4684 printing (S) 4685 </h3></div></div></div><a class="indexterm" name="id25 63097"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is4685 </h3></div></div></div><a class="indexterm" name="id2557116"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 4686 4686 interpreted on your system. It also affects the default values for 4687 4687 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 4700 4700 <code class="literal">testparm -v.</code></code> 4701 4701 </em></span> 4702 </p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563250"></a>4702 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557268"></a> 4703 4703 4704 4704 printjob username (S) 4705 </h3></div></div></div><a class="indexterm" name="id25 63251"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4705 </h3></div></div></div><a class="indexterm" name="id2557269"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4706 4706 passed to the printing system. Usually, the username is sent, 4707 4707 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4709 4709 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4710 4710 </em></span> 4711 </p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563311"></a>4711 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557329"></a> 4712 4712 4713 4713 private dir (G) 4714 </h3></div></div></div><a class="indexterm" name="id25 63312"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4714 </h3></div></div></div><a class="indexterm" name="id2557330"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4715 4715 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4716 4716 and <code class="filename">secrets.tdb</code>. 4717 4717 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4718 4718 </em></span> 4719 </p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563365"></a>4719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557383"></a> 4720 4720 4721 4721 profile acls (S) 4722 </h3></div></div></div><a class="indexterm" name="id25 63366"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4722 </h3></div></div></div><a class="indexterm" name="id2557384"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4723 4723 This boolean parameter was added to fix the problems that people have been 4724 4724 having with storing user profiles on Samba shares from Windows 2000 or … … 4748 4748 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4749 4749 </em></span> 4750 </p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563438"></a>4750 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557456"></a> 4751 4751 4752 4752 queuepause command (S) 4753 </h3></div></div></div><a class="indexterm" name="id25 63439"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4753 </h3></div></div></div><a class="indexterm" name="id2557457"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4754 4754 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4755 4755 a printer name as its only parameter and stops the printer queue, … … 4762 4762 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4763 4763 </em></span> 4764 </p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563515"></a>4764 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557533"></a> 4765 4765 4766 4766 queueresume command (S) 4767 </h3></div></div></div><a class="indexterm" name="id25 63516"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be4767 </h3></div></div></div><a class="indexterm" name="id2557534"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4768 4768 executed on the server host in order to resume the printer queue. It 4769 4769 is the command to undo the behavior that is caused by the … … 4780 4780 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4781 4781 </em></span> 4782 </p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563618"></a>4782 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557636"></a> 4783 4783 4784 4784 read list (S) 4785 </h3></div></div></div><a class="indexterm" name="id25 63619"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>4785 </h3></div></div></div><a class="indexterm" name="id2557637"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4786 4786 This is a list of users that are given read-only access to a service. If the connecting user is in this list 4787 4787 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set … … 4793 4793 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 4794 4794 </em></span> 4795 </p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563717"></a>4795 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557736"></a> 4796 4796 4797 4797 read only (S) 4798 </h3></div></div></div><a class="indexterm" name="id25 63718"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users4798 </h3></div></div></div><a class="indexterm" name="id2557737"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 4799 4799 of a service may not create or modify files in the service's 4800 4800 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 4802 4802 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 4803 4803 </em></span> 4804 </p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563793"></a>4804 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557812"></a> 4805 4805 4806 4806 read raw (G) 4807 </h3></div></div></div><a class="indexterm" name="id25 63794"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server4807 </h3></div></div></div><a class="indexterm" name="id2557814"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 4808 4808 will support the raw read SMB requests when transferring data 4809 4809 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 4814 4814 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 4815 4815 </em></span> 4816 </p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563854"></a>4816 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557872"></a> 4817 4817 4818 4818 realm (G) 4819 </h3></div></div></div><a class="indexterm" name="id25 63855"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is4819 </h3></div></div></div><a class="indexterm" name="id2557873"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 4820 4820 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 4821 4821 is usually set to the DNS name of the kerberos server. … … 4824 4824 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 4825 4825 </em></span> 4826 </p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2563918"></a>4826 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557937"></a> 4827 4827 4828 4828 registry shares (G) 4829 </h3></div></div></div><a class="indexterm" name="id25 63920"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>4829 </h3></div></div></div><a class="indexterm" name="id2557938"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p> 4830 4830 This turns on or off support for share definitions read from 4831 4831 registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take … … 4842 4842 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code> 4843 4843 </em></span> 4844 </p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564005"></a>4844 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558024"></a> 4845 4845 4846 4846 remote announce (G) 4847 </h3></div></div></div><a class="indexterm" name="id25 64006"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>4847 </h3></div></div></div><a class="indexterm" name="id2558025"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4848 4848 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself 4849 4849 to arbitrary IP addresses with an arbitrary workgroup name. … … 4869 4869 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 4870 4870 </em></span> 4871 </p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564111"></a>4871 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558129"></a> 4872 4872 4873 4873 remote browse sync (G) 4874 </h3></div></div></div><a class="indexterm" name="id25 64112"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>4874 </h3></div></div></div><a class="indexterm" name="id2558130"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4875 4875 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 4876 4876 synchronization of browse lists with the master browser of a Samba … … 4904 4904 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 4905 4905 </em></span> 4906 </p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564224"></a>4906 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558242"></a> 4907 4907 4908 4908 rename user script (G) 4909 </h3></div></div></div><a class="indexterm" name="id25 64225"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>4909 </h3></div></div></div><a class="indexterm" name="id2558243"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4910 4910 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 4911 4911 </p><p> … … 4914 4914 <code class="literal">%unew</code>, will be substituted with the old and new usernames, respectively. The script should 4915 4915 return 0 upon successful completion, and nonzero otherwise. 4916 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>4916 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 4917 4917 The script has all responsibility to rename all the necessary data that is accessible in this posix method. 4918 4918 This can mean different requirements for different backends. The tdbsam and smbpasswd backends will take care … … 4925 4925 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 4926 4926 </em></span> 4927 </p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564328"></a>4927 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558346"></a> 4928 4928 4929 4929 reset on zero vc (G) 4930 </h3></div></div></div><a class="indexterm" name="id25 64329"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>4930 </h3></div></div></div><a class="indexterm" name="id2558347"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 4931 4931 This boolean option controls whether an incoming session setup 4932 4932 should kill other connections coming from the same IP. This matches … … 4947 4947 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 4948 4948 </em></span> 4949 </p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564380"></a>4949 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558399"></a> 4950 4950 4951 4951 restrict anonymous (G) 4952 </h3></div></div></div><a class="indexterm" name="id25 64382"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and4952 </h3></div></div></div><a class="indexterm" name="id2558400"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 4953 4953 group list information is returned for an anonymous connection. 4954 4954 and mirrors the effects of the … … 4968 4968 as user and group list information can be obtained using other 4969 4969 means. 4970 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>4970 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p> 4971 4971 The security advantage of using restrict anonymous = 2 is removed 4972 4972 by setting <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a> on any share. 4973 4973 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 4974 4974 </em></span> 4975 </p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id2564465"></a>4975 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558483"></a> 4976 4976 4977 4977 <a name="ROOT"></a>root 4978 </h3></div></div></div><a class="indexterm" name="id25 64466"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id2564498"></a>4978 </h3></div></div></div><a class="indexterm" name="id2558484"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558516"></a> 4979 4979 4980 4980 <a name="ROOTDIR"></a>root dir 4981 </h3></div></div></div><a class="indexterm" name="id25 64499"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564529"></a>4981 </h3></div></div></div><a class="indexterm" name="id2558517"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558548"></a> 4982 4982 4983 4983 root directory (G) 4984 </h3></div></div></div><a class="indexterm" name="id25 64530"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.4984 </h3></div></div></div><a class="indexterm" name="id2558549"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 4985 4985 Change its root directory) to this directory on startup. This is 4986 4986 not strictly necessary for secure operation. Even without it the … … 5005 5005 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 5006 5006 </em></span> 5007 </p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564653"></a>5007 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558672"></a> 5008 5008 5009 5009 root postexec (S) 5010 </h3></div></div></div><a class="indexterm" name="id25 64654"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>5010 </h3></div></div></div><a class="indexterm" name="id2558673"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5011 5011 This is the same as the <em class="parameter"><code>postexec</code></em> 5012 5012 parameter except that the command is run as root. This is useful for … … 5014 5014 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 5015 5015 </em></span> 5016 </p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564702"></a>5016 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558720"></a> 5017 5017 5018 5018 root preexec close (S) 5019 </h3></div></div></div><a class="indexterm" name="id25 64703"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close5019 </h3></div></div></div><a class="indexterm" name="id2558721"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 5020 5020 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 5021 5021 </em></span> 5022 </p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564750"></a>5022 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558769"></a> 5023 5023 5024 5024 root preexec (S) 5025 </h3></div></div></div><a class="indexterm" name="id25 64751"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>5025 </h3></div></div></div><a class="indexterm" name="id2558770"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5026 5026 This is the same as the <em class="parameter"><code>preexec</code></em> 5027 5027 parameter except that the command is run as root. This is useful for … … 5029 5029 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 5030 5030 </em></span> 5031 </p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564799"></a>5031 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558817"></a> 5032 5032 5033 5033 security mask (S) 5034 </h3></div></div></div><a class="indexterm" name="id25 64800"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>5034 </h3></div></div></div><a class="indexterm" name="id2558818"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 5035 5035 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 5036 5036 UNIX permission on a file using the native NT security dialog box. … … 5051 5051 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 5052 5052 </em></span> 5053 </p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2564905"></a>5053 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558923"></a> 5054 5054 5055 5055 security (G) 5056 </h3></div></div></div><a class="indexterm" name="id25 64906"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to5056 </h3></div></div></div><a class="indexterm" name="id2558924"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 5057 5057 Samba and is one of the most important settings in the <code class="filename"> 5058 5058 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 5093 5093 techniques to determine the correct UNIX user to use on behalf 5094 5094 of the client.</p><p>A list of possible UNIX usernames to match with the given 5095 client password is constructed using the following methods :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> parameter is set, then all the other5095 client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> parameter is set, then all the other 5096 5096 stages are missed and only the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a> username is checked. 5097 </p></li><li class="listitem"><p>Is a username is sent with the share connection5097 </p></li><li><p>Is a username is sent with the share connection 5098 5098 request, then this username (after mapping - see <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a>), 5099 5099 is added as a potential username. 5100 </p></li><li class="listitem"><p>If the client did a previous <span class="emphasis"><em>logon5100 </p></li><li><p>If the client did a previous <span class="emphasis"><em>logon 5101 5101 </em></span> request (the SessionSetup SMB call) then the 5102 5102 username sent in this SMB will be added as a potential username. 5103 </p></li><li class="listitem"><p>The name of the service the client requested is5103 </p></li><li><p>The name of the service the client requested is 5104 5104 added as a potential username. 5105 </p></li><li class="listitem"><p>The NetBIOS name of the client is added to5105 </p></li><li><p>The NetBIOS name of the client is added to 5106 5106 the list as a potential username. 5107 </p></li><li class="listitem"><p>Any users on the <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> list are added as potential usernames.5107 </p></li><li><p>Any users on the <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> list are added as potential usernames. 5108 5108 </p></li></ul></div><p>If the <em class="parameter"><code>guest only</code></em> parameter is 5109 5109 not set, then this list is then tried with the supplied password. … … 5151 5151 revert back to checking the UNIX password file, it must have a valid <code class="filename">smbpasswd</code> file to check users against. See the chapter about the User Database in 5152 5152 the Samba HOWTO Collection for details on how to set this up. 5153 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This mode of operation has5153 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This mode of operation has 5154 5154 significant pitfalls since it is more vulnerable to 5155 5155 man-in-the-middle attacks and server impersonation. In particular, … … 5159 5159 there is no way to reestablish it, and futher authentications to the 5160 5160 Samba server may fail (from a single client, till it disconnects). 5161 </p></div><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of5161 </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of 5162 5162 view, <code class="literal">security = server</code> is the 5163 5163 same as <code class="literal">security = user</code>. It … … 5178 5178 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 5179 5179 </em></span> 5180 </p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2565784"></a>5180 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559802"></a> 5181 5181 5182 5182 server schannel (G) 5183 </h3></div></div></div><a class="indexterm" name="id25 65785"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>5183 </h3></div></div></div><a class="indexterm" name="id2559803"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 5184 5184 This controls whether the server offers or even demands the use of the netlogon schannel. 5185 5185 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. … … 5192 5192 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 5193 5193 </em></span> 5194 </p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2565900"></a>5194 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559918"></a> 5195 5195 5196 5196 server signing (G) 5197 </h3></div></div></div><a class="indexterm" name="id25 65901"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values5197 </h3></div></div></div><a class="indexterm" name="id2559919"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 5198 5198 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 5199 5199 and <span class="emphasis"><em>disabled</em></span>. … … 5202 5202 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 5203 5203 </em></span> 5204 </p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2565961"></a>5204 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559979"></a> 5205 5205 5206 5206 server string (G) 5207 </h3></div></div></div><a class="indexterm" name="id25 65962"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print5207 </h3></div></div></div><a class="indexterm" name="id2559980"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 5208 5208 manager and next to the IPC connection in <code class="literal">net view</code>. It 5209 5209 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 5214 5214 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 5215 5215 </em></span> 5216 </p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566052"></a>5216 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560070"></a> 5217 5217 5218 5218 set directory (S) 5219 </h3></div></div></div><a class="indexterm" name="id256 6053"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>5219 </h3></div></div></div><a class="indexterm" name="id2560071"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5220 5220 If <code class="literal">set directory = no</code>, then users of the 5221 5221 service may not use the setdir command to change directory. … … 5226 5226 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 5227 5227 </em></span> 5228 </p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566112"></a>5228 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560130"></a> 5229 5229 5230 5230 set primary group script (G) 5231 </h3></div></div></div><a class="indexterm" name="id256 6113"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a5231 </h3></div></div></div><a class="indexterm" name="id2560131"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 5232 5232 primary group in addition to the auxiliary groups. This script 5233 5233 sets the primary group in the unix userdatase when an … … 5241 5241 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 5242 5242 </em></span> 5243 </p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566194"></a>5243 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560212"></a> 5244 5244 5245 5245 set quota command (G) 5246 </h3></div></div></div><a class="indexterm" name="id256 6195"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used5246 </h3></div></div></div><a class="indexterm" name="id2560213"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 5247 5247 whenever there is no operating system API available from the OS that 5248 5248 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or 5249 5249 on linux when <code class="literal">./configure --with-quotas</code> was used and a working quota api 5250 5250 was found in the system. Most packages are configured with these options already.</p><p>This parameter should specify the path to a script that 5251 can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>1 - quota type5252 </p><div class="itemizedlist"><ul class="itemizedlist" type="circle"><li class="listitem"><p>1 - user quotas</p></li><li class="listitem"><p>2 - user default quotas (uid = -1)</p></li><li class="listitem"><p>3 - group quotas</p></li><li class="listitem"><p>4 - group default quotas (gid = -1)</p></li></ul></div></li><li class="listitem"><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li class="listitem"><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li class="listitem"><p>4 - block softlimit</p></li><li class="listitem"><p>5 - block hardlimit</p></li><li class="listitem"><p>6 - inode softlimit</p></li><li class="listitem"><p>7 - inode hardlimit</p></li><li class="listitem"><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code>5251 can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>1 - quota type 5252 </p><div class="itemizedlist"><ul type="circle"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div></li><li><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li><p>4 - block softlimit</p></li><li><p>5 - block hardlimit</p></li><li><p>6 - inode softlimit</p></li><li><p>7 - inode hardlimit</p></li><li><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code> 5253 5253 </em></span> 5254 5254 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 5255 5255 </em></span> 5256 </p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566357"></a>5256 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560376"></a> 5257 5257 5258 5258 share modes (S) 5259 </h3></div></div></div><a class="indexterm" name="id256 6358"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of5259 </h3></div></div></div><a class="indexterm" name="id2560377"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 5260 5260 the <em class="parameter"><code>share modes</code></em> during a file open. These 5261 5261 modes are used by clients to gain exclusive read or write access … … 5269 5269 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 5270 5270 </em></span> 5271 </p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566434"></a>5271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560452"></a> 5272 5272 5273 5273 short preserve case (S) 5274 </h3></div></div></div><a class="indexterm" name="id256 6435"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>5274 </h3></div></div></div><a class="indexterm" name="id2560453"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5275 5275 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 5276 5276 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 5279 5279 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 5280 5280 </em></span> 5281 </p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566514"></a>5281 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560532"></a> 5282 5282 5283 5283 show add printer wizard (G) 5284 </h3></div></div></div><a class="indexterm" name="id256 6515"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support5284 </h3></div></div></div><a class="indexterm" name="id2560533"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 5285 5285 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 5286 5286 appear on Samba hosts in the share listing. Normally this folder will … … 5297 5297 parameter will always cause the OpenPrinterEx() on the server 5298 5298 to fail. Thus the APW icon will never be displayed. 5299 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This does not prevent the same user from having5299 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This does not prevent the same user from having 5300 5300 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 5301 5301 </em></span> 5302 </p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566597"></a>5302 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560616"></a> 5303 5303 5304 5304 shutdown script (G) 5305 </h3></div></div></div><a class="indexterm" name="id256 6598"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5305 </h3></div></div></div><a class="indexterm" name="id2560617"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5306 5306 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5307 5307 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 5308 right, this command will be run as root.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>%z</code></em> will be substituted with the5309 shutdown message sent to the server.</p></li><li class="listitem"><p><em class="parameter"><code>%t</code></em> will be substituted with the5308 right, this command will be run as root.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%z</code></em> will be substituted with the 5309 shutdown message sent to the server.</p></li><li><p><em class="parameter"><code>%t</code></em> will be substituted with the 5310 5310 number of seconds to wait before effectively starting the 5311 shutdown procedure.</p></li><li class="listitem"><p><em class="parameter"><code>%r</code></em> will be substituted with the5311 shutdown procedure.</p></li><li><p><em class="parameter"><code>%r</code></em> will be substituted with the 5312 5312 switch <span class="emphasis"><em>-r</em></span>. It means reboot after shutdown 5313 for NT.</p></li><li class="listitem"><p><em class="parameter"><code>%f</code></em> will be substituted with the5313 for NT.</p></li><li><p><em class="parameter"><code>%f</code></em> will be substituted with the 5314 5314 switch <span class="emphasis"><em>-f</em></span>. It means force the shutdown 5315 5315 even if applications do not respond for NT.</p></li></ul></div><p>Shutdown script example: … … 5329 5329 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5330 5330 </em></span> 5331 </p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566751"></a>5331 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560770"></a> 5332 5332 5333 5333 smb encrypt (S) 5334 </h3></div></div></div><a class="indexterm" name="id256 6752"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5334 </h3></div></div></div><a class="indexterm" name="id2560771"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5335 5335 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5336 5336 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5360 5360 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5361 5361 </em></span> 5362 </p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566858"></a>5362 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560876"></a> 5363 5363 5364 5364 smb passwd file (G) 5365 </h3></div></div></div><a class="indexterm" name="id256 6859"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5365 </h3></div></div></div><a class="indexterm" name="id2560877"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5366 5366 default the path to the smbpasswd file is compiled into Samba.</p><p> 5367 5367 An example of use is: … … 5371 5371 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5372 5372 </em></span> 5373 </p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566911"></a>5373 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560929"></a> 5374 5374 5375 5375 smb ports (G) 5376 </h3></div></div></div><a class="indexterm" name="id256 6912"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5377 </em></span> 5378 </p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2566953"></a>5376 </h3></div></div></div><a class="indexterm" name="id2560930"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5377 </em></span> 5378 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560971"></a> 5379 5379 5380 5380 socket address (G) 5381 </h3></div></div></div><a class="indexterm" name="id256 6954"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5381 </h3></div></div></div><a class="indexterm" name="id2560972"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5382 5382 address Samba will listen for connections on. This is used to 5383 5383 support multiple virtual interfaces on the one server, each … … 5388 5388 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5389 5389 </em></span> 5390 </p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567023"></a>5390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561041"></a> 5391 5391 5392 5392 socket options (G) 5393 </h3></div></div></div><a class="indexterm" name="id256 7024"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5393 </h3></div></div></div><a class="indexterm" name="id2561042"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5394 5394 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5395 5395 of the operating systems which allow the connection to be … … 5407 5407 samba-technical@samba.org</a>.</p><p>Any of the supported socket options may be combined 5408 5408 in any way you like, as long as your OS allows it.</p><p>This is the list of socket options currently settable 5409 using this option:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>SO_KEEPALIVE</p></li><li class="listitem"><p>SO_REUSEADDR</p></li><li class="listitem"><p>SO_BROADCAST</p></li><li class="listitem"><p>TCP_NODELAY</p></li><li class="listitem"><p>IPTOS_LOWDELAY</p></li><li class="listitem"><p>IPTOS_THROUGHPUT</p></li><li class="listitem"><p>SO_SNDBUF *</p></li><li class="listitem"><p>SO_RCVBUF *</p></li><li class="listitem"><p>SO_SNDLOWAT *</p></li><li class="listitem"><p>SO_RCVLOWAT *</p></li></ul></div><p>Those marked with a <span class="emphasis"><em>'*'</em></span> take an integer5409 using this option:</p><div class="itemizedlist"><ul type="disc"><li><p>SO_KEEPALIVE</p></li><li><p>SO_REUSEADDR</p></li><li><p>SO_BROADCAST</p></li><li><p>TCP_NODELAY</p></li><li><p>IPTOS_LOWDELAY</p></li><li><p>IPTOS_THROUGHPUT</p></li><li><p>SO_SNDBUF *</p></li><li><p>SO_RCVBUF *</p></li><li><p>SO_SNDLOWAT *</p></li><li><p>SO_RCVLOWAT *</p></li></ul></div><p>Those marked with a <span class="emphasis"><em>'*'</em></span> take an integer 5410 5410 argument. The others can optionally take a 1 or 0 argument to enable 5411 5411 or disable the option, by default they will be enabled if you … … 5419 5419 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5420 5420 </em></span> 5421 </p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567234"></a>5421 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561252"></a> 5422 5422 5423 5423 stat cache (G) 5424 </h3></div></div></div><a class="indexterm" name="id256 7235"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5424 </h3></div></div></div><a class="indexterm" name="id2561253"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5425 5425 speed up case insensitive name mappings. You should never need 5426 5426 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5427 5427 </em></span> 5428 </p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567285"></a>5428 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561303"></a> 5429 5429 5430 5430 store dos attributes (S) 5431 </h3></div></div></div><a class="indexterm" name="id256 7286"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5431 </h3></div></div></div><a class="indexterm" name="id2561304"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5432 5432 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5433 5433 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5441 5441 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5442 5442 </em></span> 5443 </p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567407"></a>5443 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561425"></a> 5444 5444 5445 5445 strict allocate (S) 5446 </h3></div></div></div><a class="indexterm" name="id256 7408"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5446 </h3></div></div></div><a class="indexterm" name="id2561426"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5447 5447 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5448 5448 the server will change from UNIX behaviour of not committing real … … 5456 5456 of users.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code> 5457 5457 </em></span> 5458 </p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567477"></a>5458 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561495"></a> 5459 5459 5460 5460 strict locking (S) 5461 </h3></div></div></div><a class="indexterm" name="id256 7478"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5461 </h3></div></div></div><a class="indexterm" name="id2561496"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5462 5462 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5463 5463 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5475 5475 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5476 5476 </em></span> 5477 </p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567556"></a>5477 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561574"></a> 5478 5478 5479 5479 strict sync (S) 5480 </h3></div></div></div><a class="indexterm" name="id256 7557"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5480 </h3></div></div></div><a class="indexterm" name="id2561576"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5481 5481 shell) seem to confuse flushing buffer contents to disk with doing 5482 5482 a sync to disk. Under UNIX, a sync call forces the process to be … … 5492 5492 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5493 5493 </em></span> 5494 </p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567621"></a>5494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561639"></a> 5495 5495 5496 5496 svcctl list (G) 5497 </h3></div></div></div><a class="indexterm" name="id256 7622"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5497 </h3></div></div></div><a class="indexterm" name="id2561640"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5498 5498 will use for starting and stopping Unix services via the Win32 5499 5499 ServiceControl API. This allows Windows administrators to … … 5508 5508 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5509 5509 </em></span> 5510 </p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567707"></a>5510 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561725"></a> 5511 5511 5512 5512 sync always (S) 5513 </h3></div></div></div><a class="indexterm" name="id256 7708"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5513 </h3></div></div></div><a class="indexterm" name="id2561726"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5514 5514 whether writes will always be written to stable storage before 5515 5515 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5522 5522 any affect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5523 5523 </em></span> 5524 </p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567777"></a>5524 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561796"></a> 5525 5525 5526 5526 syslog only (G) 5527 </h3></div></div></div><a class="indexterm" name="id256 7778"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5527 </h3></div></div></div><a class="indexterm" name="id2561797"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5528 5528 If this parameter is set then Samba debug messages are logged into the system 5529 5529 syslog only, and not to the debug log files. There still will be some … … 5531 5531 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5532 5532 </em></span> 5533 </p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567825"></a>5533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561843"></a> 5534 5534 5535 5535 syslog (G) 5536 </h3></div></div></div><a class="indexterm" name="id256 7826"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5536 </h3></div></div></div><a class="indexterm" name="id2561844"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5537 5537 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5538 5538 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5545 5545 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5546 5546 </em></span> 5547 </p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567895"></a>5547 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561914"></a> 5548 5548 5549 5549 template homedir (G) 5550 </h3></div></div></div><a class="indexterm" name="id256 7896"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5550 </h3></div></div></div><a class="indexterm" name="id2561915"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5551 5551 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5552 5552 parameter to fill in the home directory for that user. If the … … 5556 5556 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5557 5557 </em></span> 5558 </p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2567961"></a>5558 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561979"></a> 5559 5559 5560 5560 template shell (G) 5561 </h3></div></div></div><a class="indexterm" name="id256 7962"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5561 </h3></div></div></div><a class="indexterm" name="id2561980"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5562 5562 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5563 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568000"></a>5563 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562018"></a> 5564 5564 5565 5565 time offset (G) 5566 </h3></div></div></div><a class="indexterm" name="id256 8001"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5566 </h3></div></div></div><a class="indexterm" name="id2562019"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5567 5567 to the normal GMT to local time conversion. This is useful if 5568 5568 you are serving a lot of PCs that have incorrect daylight … … 5571 5571 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5572 5572 </em></span> 5573 </p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568060"></a>5573 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562078"></a> 5574 5574 5575 5575 time server (G) 5576 </h3></div></div></div><a class="indexterm" name="id256 8061"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5576 </h3></div></div></div><a class="indexterm" name="id2562079"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5577 5577 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5578 5578 </em></span> 5579 </p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568110"></a>5579 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562129"></a> 5580 5580 5581 5581 unix charset (G) 5582 </h3></div></div></div><a class="indexterm" name="id256 8112"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5582 </h3></div></div></div><a class="indexterm" name="id2562130"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5583 5583 Samba runs on uses. Samba needs to know this in order to be able to 5584 5584 convert text to the charsets other SMB clients use. … … 5589 5589 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5590 5590 </em></span> 5591 </p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568176"></a>5591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562195"></a> 5592 5592 5593 5593 unix extensions (G) 5594 </h3></div></div></div><a class="indexterm" name="id256 8178"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5594 </h3></div></div></div><a class="indexterm" name="id2562196"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5595 5595 implements the CIFS UNIX extensions, as defined by HP. 5596 5596 These extensions enable Samba to better serve UNIX CIFS clients 5597 5597 by supporting features such as symbolic links, hard links, etc... 5598 5598 These extensions require a similarly enabled client, and are of 5599 no current use to Windows clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5600 </em></span> 5601 </p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568224"></a> 5599 no current use to Windows clients.</p><p> 5600 Note if this parameter is turned on, the <a class="link" href="smb.conf.5.html#WIDELINKS" target="_top">wide links</a> 5601 parameter will automatically be disabled. 5602 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5603 </em></span> 5604 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562260"></a> 5602 5605 5603 5606 unix password sync (G) 5604 </h3></div></div></div><a class="indexterm" name="id256 8225"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5607 </h3></div></div></div><a class="indexterm" name="id2562261"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5605 5608 attempts to synchronize the UNIX password with the SMB password 5606 5609 when the encrypted SMB password in the smbpasswd file is changed. … … 5611 5614 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5612 5615 </em></span> 5613 </p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568285"></a>5616 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562321"></a> 5614 5617 5615 5618 update encrypted (G) 5616 </h3></div></div></div><a class="indexterm" name="id256 8286"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>5619 </h3></div></div></div><a class="indexterm" name="id2562322"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5617 5620 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5618 5621 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to … … 5632 5635 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5633 5636 </em></span> 5634 </p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568404"></a>5637 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562452"></a> 5635 5638 5636 5639 use client driver (S) 5637 </h3></div></div></div><a class="indexterm" name="id256 8405"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20005640 </h3></div></div></div><a class="indexterm" name="id2562453"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5638 5641 clients. It has no effect on Windows 95/98/ME clients. When 5639 5642 serving a printer to Windows NT/2000 clients without first installing … … 5660 5663 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5661 5664 </em></span> 5662 </p></dd></dl></div></div><div class="section" title="use kerberos keytab (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568484"></a>5665 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562533"></a> 5663 5666 5664 5667 use kerberos keytab (G) 5665 </h3></div></div></div><a class="indexterm" name="id256 8486"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p>5668 </h3></div></div></div><a class="indexterm" name="id2562534"></a><a name="USEKERBEROSKEYTAB"></a><div class="variablelist"><dl><dt></dt><dd><p> 5666 5669 Specifies whether Samba should attempt to maintain service principals in the systems 5667 5670 keytab file for <code class="constant">host/FQDN</code> and <code class="constant">cifs/FQDN</code>. … … 5675 5678 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use kerberos keytab</code></em> = <code class="literal">False</code> 5676 5679 </em></span> 5677 </p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568553"></a>5680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562601"></a> 5678 5681 5679 5682 use mmap (G) 5680 </h3></div></div></div><a class="indexterm" name="id256 8554"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can5683 </h3></div></div></div><a class="indexterm" name="id2562602"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5681 5684 depend on mmap working correctly on the running system. Samba requires a coherent 5682 5685 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5687 5690 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5688 5691 </em></span> 5689 </p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568605"></a>5692 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562653"></a> 5690 5693 5691 5694 username level (G) 5692 </h3></div></div></div><a class="indexterm" name="id256 8606"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at5695 </h3></div></div></div><a class="indexterm" name="id2562654"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5693 5696 the real UNIX username, as many DOS clients send an all-uppercase 5694 5697 username. By default Samba tries all lowercase, followed by the … … 5705 5708 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5706 5709 </em></span> 5707 </p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568687"></a>5710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562735"></a> 5708 5711 5709 5712 username map script (G) 5710 </h3></div></div></div><a class="indexterm" name="id256 8688"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the5713 </h3></div></div></div><a class="indexterm" name="id2562736"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5711 5714 <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter. This parameter 5712 5715 specifies and external program or script that must accept a single … … 5719 5722 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5720 5723 </em></span> 5721 </p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2568764"></a>5724 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562812"></a> 5722 5725 5723 5726 username map (G) 5724 </h3></div></div></div><a class="indexterm" name="id256 8765"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>5727 </h3></div></div></div><a class="indexterm" name="id2562813"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5725 5728 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5726 5729 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 5806 5809 # no username map</code> 5807 5810 </em></span> 5808 </p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id2569043"></a>5811 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563092"></a> 5809 5812 5810 5813 <a name="USER"></a>user 5811 </h3></div></div></div><a class="indexterm" name="id256 9044"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id2569075"></a>5814 </h3></div></div></div><a class="indexterm" name="id2563093"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563124"></a> 5812 5815 5813 5816 <a name="USERS"></a>users 5814 </h3></div></div></div><a class="indexterm" name="id256 9076"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569107"></a>5817 </h3></div></div></div><a class="indexterm" name="id2563125"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563155"></a> 5815 5818 5816 5819 username (S) 5817 </h3></div></div></div><a class="indexterm" name="id256 9108"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited5820 </h3></div></div></div><a class="indexterm" name="id2563156"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 5818 5821 list, in which case the supplied password will be tested against 5819 5822 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 5853 5856 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 5854 5857 </em></span> 5855 </p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569277"></a>5858 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563326"></a> 5856 5859 5857 5860 usershare allow guests (G) 5858 </h3></div></div></div><a class="indexterm" name="id256 9278"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed5861 </h3></div></div></div><a class="indexterm" name="id2563327"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 5859 5862 to be accessed by non-authenticated users or not. It is the equivalent 5860 5863 of allowing people who can create a share the option of setting … … 5863 5866 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 5864 5867 </em></span> 5865 </p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569330"></a>5868 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563378"></a> 5866 5869 5867 5870 usershare max shares (G) 5868 </h3></div></div></div><a class="indexterm" name="id256 9331"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares5871 </h3></div></div></div><a class="indexterm" name="id2563379"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 5869 5872 that are allowed to be created by users belonging to the group owning the 5870 5873 usershare directory. If set to zero (the default) user defined shares are ignored. 5871 5874 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 5872 5875 </em></span> 5873 </p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569375"></a>5876 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563423"></a> 5874 5877 5875 5878 usershare owner only (G) 5876 </h3></div></div></div><a class="indexterm" name="id256 9376"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by5879 </h3></div></div></div><a class="indexterm" name="id2563424"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 5877 5880 a user defined shares must be owned by the user creating the 5878 5881 user defined share or not. If set to True (the default) then … … 5884 5887 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 5885 5888 </em></span> 5886 </p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569425"></a>5889 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563473"></a> 5887 5890 5888 5891 usershare path (G) 5889 </h3></div></div></div><a class="indexterm" name="id256 9426"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the5892 </h3></div></div></div><a class="indexterm" name="id2563474"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 5890 5893 filesystem used to store the user defined share definition files. 5891 5894 This directory must be owned by root, and have no access for … … 5908 5911 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 5909 5912 </em></span> 5910 </p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569496"></a>5913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563544"></a> 5911 5914 5912 5915 usershare prefix allow list (G) 5913 </h3></div></div></div><a class="indexterm" name="id256 9497"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5916 </h3></div></div></div><a class="indexterm" name="id2563545"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5914 5917 the root of which are allowed to be exported by user defined share definitions. 5915 5918 If the pathname to be exported doesn't start with one of the strings in this … … 5926 5929 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 5927 5930 </em></span> 5928 </p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569569"></a>5931 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563617"></a> 5929 5932 5930 5933 usershare prefix deny list (G) 5931 </h3></div></div></div><a class="indexterm" name="id256 9570"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames5934 </h3></div></div></div><a class="indexterm" name="id2563618"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 5932 5935 the root of which are NOT allowed to be exported by user defined share definitions. 5933 5936 If the pathname exported starts with one of the strings in this … … 5945 5948 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 5946 5949 </em></span> 5947 </p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569643"></a>5950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563691"></a> 5948 5951 5949 5952 usershare template share (G) 5950 </h3></div></div></div><a class="indexterm" name="id256 9644"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters5953 </h3></div></div></div><a class="indexterm" name="id2563692"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 5951 5954 such as path, guest ok, etc. This parameter allows usershares to 5952 5955 "cloned" from an existing share. If "usershare template share" … … 5963 5966 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 5964 5967 </em></span> 5965 </p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569716"></a>5968 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563764"></a> 5966 5969 5967 5970 use sendfile (S) 5968 </h3></div></div></div><a class="indexterm" name="id256 9717"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>5971 </h3></div></div></div><a class="indexterm" name="id2563765"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 5969 5972 system call is supported by the underlying operating system, then some SMB read calls 5970 5973 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 5975 5978 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 5976 5979 </em></span> 5977 </p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569774"></a>5980 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563822"></a> 5978 5981 5979 5982 use spnego (G) 5980 </h3></div></div></div><a class="indexterm" name="id256 9775"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try5983 </h3></div></div></div><a class="indexterm" name="id2563823"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 5981 5984 to use Simple and Protected NEGOciation (as specified by rfc2478) with 5982 5985 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 5986 5989 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 5987 5990 </em></span> 5988 </p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569823"></a>5991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563871"></a> 5989 5992 5990 5993 utmp directory (G) 5991 </h3></div></div></div><a class="indexterm" name="id256 9824"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has5994 </h3></div></div></div><a class="indexterm" name="id2563872"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 5992 5995 been configured and compiled with the option <code class="literal"> 5993 5996 --with-utmp</code>. It specifies a directory pathname that is … … 6001 6004 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 6002 6005 </em></span> 6003 </p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569901"></a>6006 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563949"></a> 6004 6007 6005 6008 utmp (G) 6006 </h3></div></div></div><a class="indexterm" name="id256 9902"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>6009 </h3></div></div></div><a class="indexterm" name="id2563950"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 6007 6010 This boolean parameter is only available if Samba has been configured and compiled 6008 6011 with the option <code class="literal">--with-utmp</code>. If set to … … 6016 6019 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 6017 6020 </em></span> 6018 </p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2569964"></a>6021 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564012"></a> 6019 6022 6020 6023 valid users (S) 6021 </h3></div></div></div><a class="indexterm" name="id256 9965"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>6024 </h3></div></div></div><a class="indexterm" name="id2564013"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 6022 6025 This is a list of users that should be allowed to login to this service. Names starting with 6023 6026 '@', '+' and '&' are interpreted using the same rules as described in the … … 6035 6038 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 6036 6039 </em></span> 6037 </p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570055"></a>6040 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564103"></a> 6038 6041 6039 6042 -valid (S) 6040 </h3></div></div></div><a class="indexterm" name="id25 70056"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is6043 </h3></div></div></div><a class="indexterm" name="id2564104"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 6041 6044 valid and thus can be used. When this parameter is set to false, 6042 6045 the share will be in no way visible nor accessible. … … 6047 6050 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 6048 6051 </em></span> 6049 </p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570105"></a>6052 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564153"></a> 6050 6053 6051 6054 veto files (S) 6052 </h3></div></div></div><a class="indexterm" name="id25 70106"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>6055 </h3></div></div></div><a class="indexterm" name="id2564154"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 6053 6056 This is a list of files and directories that are neither visible nor accessible. Each entry in 6054 6057 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 6081 6084 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 6082 6085 </em></span> 6083 </p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570224"></a>6086 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564272"></a> 6084 6087 6085 6088 veto oplock files (S) 6086 </h3></div></div></div><a class="indexterm" name="id25 70225"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>6089 </h3></div></div></div><a class="indexterm" name="id2564273"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 6087 6090 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 6088 6091 parameter is turned on for a share. It allows the Samba administrator … … 6105 6108 # No files are vetoed for oplock grants</code> 6106 6109 </em></span> 6107 </p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id2570317"></a>6110 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564365"></a> 6108 6111 6109 6112 <a name="VFSOBJECT"></a>vfs object 6110 </h3></div></div></div><a class="indexterm" name="id25 70318"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570349"></a>6113 </h3></div></div></div><a class="indexterm" name="id2564366"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564397"></a> 6111 6114 6112 6115 vfs objects (S) 6113 </h3></div></div></div><a class="indexterm" name="id25 70350"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which6116 </h3></div></div></div><a class="indexterm" name="id2564398"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 6114 6117 are used for Samba VFS I/O operations. By default, normal 6115 6118 disk I/O operations are used but these can be overloaded … … 6118 6121 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6119 6122 </em></span> 6120 </p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570409"></a>6123 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564457"></a> 6121 6124 6122 6125 volume (S) 6123 </h3></div></div></div><a class="indexterm" name="id25 70410"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label6126 </h3></div></div></div><a class="indexterm" name="id2564458"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 6124 6127 returned for a share. Useful for CDROMs with installation programs 6125 6128 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 6126 6129 # the name of the share</code> 6127 6130 </em></span> 6128 </p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570452"></a>6131 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564501"></a> 6129 6132 6130 6133 wide links (S) 6131 </h3></div></div></div><a class="indexterm" name="id25 70454"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6134 </h3></div></div></div><a class="indexterm" name="id2564502"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6132 6135 in the UNIX file system may be followed by the server. Links 6133 6136 that point to areas within the directory tree exported by the 6134 6137 server are always allowed; this parameter controls access only 6135 to areas that are outside the directory tree being exported.</p><p>Note that setting this parameter can have a negative 6136 effect on your server performance due to the extra system calls 6137 that Samba has to do in order to perform the link checks.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">yes</code> 6138 </em></span> 6139 </p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570505"></a> 6138 to areas that are outside the directory tree being exported.</p><p>Note: Turning this parameter on when UNIX extensions are enabled 6139 will allow UNIX clients to create symbolic links on the share that 6140 can point to files or directories outside restricted path exported 6141 by the share definition. This can cause access to areas outside of 6142 the share. Due to this problem, this parameter will be automatically 6143 disabled (with a message in the log file) if the 6144 <a class="link" href="smb.conf.5.html#UNIXEXTENSIONS" target="_top">unix extensions</a> option is on. 6145 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">no</code> 6146 </em></span> 6147 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564569"></a> 6140 6148 6141 6149 winbind cache time (G) 6142 </h3></div></div></div><a class="indexterm" name="id25 70506"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6150 </h3></div></div></div><a class="indexterm" name="id2564570"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6143 6151 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6144 6152 user and group information before querying a Windows NT server … … 6148 6156 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6149 6157 </em></span> 6150 </p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570576"></a>6158 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564640"></a> 6151 6159 6152 6160 winbind enum groups (G) 6153 </h3></div></div></div><a class="indexterm" name="id25 70577"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6161 </h3></div></div></div><a class="indexterm" name="id2564641"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6154 6162 the enumeration of groups through the <code class="literal">setgrent()</code>, 6155 6163 <code class="literal">getgrent()</code> and … … 6157 6165 the <em class="parameter"><code>winbind enum groups</code></em> parameter is 6158 6166 <code class="constant">no</code>, calls to the <code class="literal">getgrent()</code> system 6159 call will not return any data. </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>6160 </em></span> 6161 </p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570667"></a>6167 call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6168 </em></span> 6169 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564730"></a> 6162 6170 6163 6171 winbind enum users (G) 6164 </h3></div></div></div><a class="indexterm" name="id25 70668"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be6172 </h3></div></div></div><a class="indexterm" name="id2564731"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 6165 6173 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 6166 6174 <code class="literal">getpwent()</code> and … … 6168 6176 the <em class="parameter"><code>winbind enum users</code></em> parameter is 6169 6177 <code class="constant">no</code>, calls to the <code class="literal">getpwent</code> system call 6170 will not return any data. </p><div class="warning" title="Warning"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off user6178 will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off user 6171 6179 enumeration may cause some programs to behave oddly. For 6172 6180 example, the finger program relies on having access to the … … 6174 6182 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6175 6183 </em></span> 6176 </p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570760"></a>6184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564824"></a> 6177 6185 6178 6186 winbind expand groups (G) 6179 </h3></div></div></div><a class="indexterm" name="id25 70761"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6187 </h3></div></div></div><a class="indexterm" name="id2564825"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6180 6188 will traverse when flattening nested group memberships 6181 6189 of Windows domain groups. This is different from the … … 6189 6197 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 6190 6198 </em></span> 6191 </p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570829"></a>6199 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564892"></a> 6192 6200 6193 6201 winbind nested groups (G) 6194 </h3></div></div></div><a class="indexterm" name="id25 70830"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested6202 </h3></div></div></div><a class="indexterm" name="id2564894"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 6195 6203 groups. Nested groups are also called local groups or 6196 6204 aliases. They work like their counterparts in Windows: Nested … … 6200 6208 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6201 6209 </em></span> 6202 </p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570888"></a>6210 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564943"></a> 6203 6211 6204 6212 winbind normalize names (G) 6205 </h3></div></div></div><a class="indexterm" name="id25 70889"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6213 </h3></div></div></div><a class="indexterm" name="id2564944"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6206 6214 whitespace in user and group names with an underscore (_) character. 6207 6215 For example, whether the name "Space Kadet" should be … … 6217 6225 idmap and nss_info plugin for the specifics on how to configure 6218 6226 name aliasing for a specific configuration. Name aliasing takes 6219 prece ndence (and is mutually exclusive) over the whitespace6227 precedence (and is mutually exclusive) over the whitespace 6220 6228 replacement mechanism discussed previsouly. 6221 6229 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">no</code> … … 6223 6231 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 6224 6232 </em></span> 6225 </p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2570965"></a>6233 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565021"></a> 6226 6234 6227 6235 winbind nss info (G) 6228 </h3></div></div></div><a class="indexterm" name="id25 70966"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name6236 </h3></div></div></div><a class="indexterm" name="id2565022"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 6229 6237 Service Information to construct a user's home directory and login shell. 6230 6238 Currently the following settings are available: 6231 6239 6232 </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>template</code></em>6240 </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>template</code></em> 6233 6241 - The default, using the parameters of <em class="parameter"><code>template 6234 6242 shell</code></em> and <em class="parameter"><code>template homedir</code></em>) 6235 </p></li><li class="listitem"><p><em class="parameter"><code><sfu | rfc2307 ></code></em>6243 </p></li><li><p><em class="parameter"><code><sfu | rfc2307 ></code></em> 6236 6244 - When Samba is running in security = ads and your Active Directory 6237 6245 Domain Controller does support the Microsoft "Services for Unix" (SFU) … … 6248 6256 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">template sfu</code> 6249 6257 </em></span> 6250 </p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571085"></a>6258 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565140"></a> 6251 6259 6252 6260 winbind offline logon (G) 6253 </h3></div></div></div><a class="indexterm" name="id25 71086"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6261 </h3></div></div></div><a class="indexterm" name="id2565141"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6254 6262 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6255 6263 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6259 6267 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 6260 6268 </em></span> 6261 </p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571154"></a>6269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565209"></a> 6262 6270 6263 6271 winbind reconnect delay (G) 6264 </h3></div></div></div><a class="indexterm" name="id25 71155"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6272 </h3></div></div></div><a class="indexterm" name="id2565210"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6265 6273 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will wait between 6266 6274 attempts to contact a Domain controller for a domain that is 6267 6275 determined to be down or not contactable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind reconnect delay</code></em> = <code class="literal">30</code> 6268 6276 </em></span> 6269 </p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571207"></a>6277 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565262"></a> 6270 6278 6271 6279 winbind refresh tickets (G) 6272 </h3></div></div></div><a class="indexterm" name="id25 71208"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets6280 </h3></div></div></div><a class="indexterm" name="id2565263"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 6273 6281 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 6274 6282 … … 6277 6285 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6278 6286 </em></span> 6279 </p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571274"></a>6287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565329"></a> 6280 6288 6281 6289 winbind rpc only (G) 6282 </h3></div></div></div><a class="indexterm" name="id25 71275"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6290 </h3></div></div></div><a class="indexterm" name="id2565330"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6283 6291 Setting this parameter to <code class="literal">yes</code> forces 6284 6292 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6286 6294 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 6287 6295 </em></span> 6288 </p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571323"></a>6296 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565378"></a> 6289 6297 6290 6298 winbind separator (G) 6291 </h3></div></div></div><a class="indexterm" name="id25 71324"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character6299 </h3></div></div></div><a class="indexterm" name="id2565379"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 6292 6300 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 6293 6301 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 6300 6308 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6301 6309 </em></span> 6302 </p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571410"></a>6310 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565465"></a> 6303 6311 6304 6312 winbind trusted domains only (G) 6305 </h3></div></div></div><a class="indexterm" name="id25 71411"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6313 </h3></div></div></div><a class="indexterm" name="id2565466"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6306 6314 This parameter is designed to allow Samba servers that are members 6307 6315 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6314 6322 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6315 6323 </em></span> 6316 </p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571477"></a>6324 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565532"></a> 6317 6325 6318 6326 winbind use default domain (G) 6319 </h3></div></div></div><a class="indexterm" name="id25 71478"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6327 </h3></div></div></div><a class="indexterm" name="id2565533"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6320 6328 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6321 6329 without domain component in their username. Users without a domain … … 6327 6335 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 6328 6336 </em></span> 6329 </p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571550"></a>6337 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565605"></a> 6330 6338 6331 6339 wins hook (G) 6332 </h3></div></div></div><a class="indexterm" name="id25 71551"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this6340 </h3></div></div></div><a class="indexterm" name="id2565606"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 6333 6341 allows you to call an external program for all changes to the 6334 6342 WINS database. The primary use for this option is to allow the 6335 6343 dynamic update of external name resolution databases such as 6336 6344 dynamic DNS.</p><p>The wins hook parameter specifies the name of a script 6337 or executable that will be called as follows:</p><p><code class="literal">wins_hook operation name nametype ttl IP_list</code></p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The first argument is the operation and is6345 or executable that will be called as follows:</p><p><code class="literal">wins_hook operation name nametype ttl IP_list</code></p><div class="itemizedlist"><ul type="disc"><li><p>The first argument is the operation and is 6338 6346 one of "add", "delete", or 6339 6347 "refresh". In most cases the operation … … 6342 6350 "refresh" may sometimes be called when 6343 6351 the name has not previously been added, in that 6344 case it should be treated as an add.</p></li><li class="listitem"><p>The second argument is the NetBIOS name. If the6352 case it should be treated as an add.</p></li><li><p>The second argument is the NetBIOS name. If the 6345 6353 name is not a legal name then the wins hook is not called. 6346 6354 Legal names contain only letters, digits, hyphens, underscores 6347 and periods.</p></li><li class="listitem"><p>The third argument is the NetBIOS name6348 type as a 2 digit hexadecimal number. </p></li><li class="listitem"><p>The fourth argument is the TTL (time to live)6349 for the name in seconds.</p></li><li class="listitem"><p>The fifth and subsequent arguments are the IP6355 and periods.</p></li><li><p>The third argument is the NetBIOS name 6356 type as a 2 digit hexadecimal number. </p></li><li><p>The fourth argument is the TTL (time to live) 6357 for the name in seconds.</p></li><li><p>The fifth and subsequent arguments are the IP 6350 6358 addresses currently registered for that name. If this list is 6351 6359 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6352 6360 program <code class="literal">nsupdate</code> is provided in the examples 6353 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571656"></a>6361 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565712"></a> 6354 6362 6355 6363 wins proxy (G) 6356 </h3></div></div></div><a class="indexterm" name="id25 71657"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6364 </h3></div></div></div><a class="indexterm" name="id2565713"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6357 6365 queries on behalf of other hosts. You may need to set this 6358 6366 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6359 6367 </em></span> 6360 </p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571711"></a>6368 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565766"></a> 6361 6369 6362 6370 wins server (G) 6363 </h3></div></div></div><a class="indexterm" name="id25 71712"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6371 </h3></div></div></div><a class="indexterm" name="id2565767"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6364 6372 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6365 6373 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6368 6376 (working) server will be queried for a name. The tag should be 6369 6377 separated from the ip address by a colon. 6370 </p><div class="note" title="Note"style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You need to set up Samba to point6378 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You need to set up Samba to point 6371 6379 to a WINS server if you have multiple subnets and wish cross-subnet 6372 6380 browsing to work correctly.</p></div><p>See the chapter in the Samba3-HOWTO on Network Browsing.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal"></code> … … 6380 6388 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6381 6389 </em></span> 6382 </p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571821"></a>6390 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565877"></a> 6383 6391 6384 6392 wins support (G) 6385 </h3></div></div></div><a class="indexterm" name="id25 71822"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6393 </h3></div></div></div><a class="indexterm" name="id2565878"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6386 6394 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6387 6395 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6389 6397 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6390 6398 </em></span> 6391 </p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571891"></a>6399 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565946"></a> 6392 6400 6393 6401 workgroup (G) 6394 </h3></div></div></div><a class="indexterm" name="id25 71892"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6402 </h3></div></div></div><a class="indexterm" name="id2565947"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6395 6403 appear to be in when queried by clients. Note that this parameter 6396 6404 also controls the Domain name used with … … 6400 6408 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6401 6409 </em></span> 6402 </p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id2571963"></a>6410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566018"></a> 6403 6411 6404 6412 <a name="WRITABLE"></a>writable 6405 </h3></div></div></div><a class="indexterm" name="id25 71964"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2571995"></a>6413 </h3></div></div></div><a class="indexterm" name="id2566020"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566050"></a> 6406 6414 6407 6415 writeable (S) 6408 </h3></div></div></div><a class="indexterm" name="id25 71996"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>6409 </em></span> 6410 </p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2572046"></a>6416 </h3></div></div></div><a class="indexterm" name="id2566051"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code> 6417 </em></span> 6418 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566101"></a> 6411 6419 6412 6420 write cache size (S) 6413 </h3></div></div></div><a class="indexterm" name="id25 72047"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6421 </h3></div></div></div><a class="indexterm" name="id2566102"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6414 6422 Samba will create an in-memory cache for each oplocked file 6415 6423 (it does <span class="emphasis"><em>not</em></span> do this for … … 6429 6437 # for a 256k cache size per file</code> 6430 6438 </em></span> 6431 </p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id2572129"></a>6439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566184"></a> 6432 6440 6433 6441 write list (S) 6434 </h3></div></div></div><a class="indexterm" name="id25 72130"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6442 </h3></div></div></div><a class="indexterm" name="id2566185"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6435 6443 This is a list of users that are given read-write access to a service. If the 6436 6444 connecting user is in this list then they will be given write access, no matter … … 6447 6455 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6448 6456 </em></span> 6449 </p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2572223"></a>6457 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566278"></a> 6450 6458 6451 6459 write raw (G) 6452 </h3></div></div></div><a class="indexterm" name="id25 72224"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6460 </h3></div></div></div><a class="indexterm" name="id2566279"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6453 6461 will support raw write SMB's when transferring data from clients. 6454 6462 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6455 6463 </em></span> 6456 </p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id2572266"></a>6464 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566322"></a> 6457 6465 6458 6466 wtmp directory (G) 6459 </h3></div></div></div><a class="indexterm" name="id25 72268"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6467 </h3></div></div></div><a class="indexterm" name="id2566323"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6460 6468 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6461 6469 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6469 6477 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6470 6478 </em></span> 6471 </p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id2572350"></a><h2>WARNINGS</h2><p>6479 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2566405"></a><h2>WARNINGS</h2><p> 6472 6480 Although the configuration file permits service names to contain spaces, your client software may not. 6473 6481 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6482 6490 care when designing these sections. In particular, ensure that the permissions on spool directories are 6483 6491 correct. 6484 </p></div><div class="refsect1" title="VERSION"><a name="id2572400"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id2572411"></a><h2>SEE ALSO</h2><p>6485 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id2572490"></a><h2>AUTHOR</h2><p>6492 </p></div><div class="refsect1" lang="en"><a name="id2566455"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2566466"></a><h2>SEE ALSO</h2><p> 6493 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2566546"></a><h2>AUTHOR</h2><p> 6486 6494 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6487 6495 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
