Changeset 429 for trunk/server/docs/manpages/smb.conf.5
- Timestamp:
- Apr 9, 2010, 3:51:41 PM (15 years ago)
- Location:
- trunk/server
- Files:
-
- 2 edited
-
. (modified) (1 prop)
-
docs/manpages/smb.conf.5 (modified) (559 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/server
-
Property svn:mergeinfo
set to
/vendor/3.5.2 merged eligible /vendor/current merged eligible
-
Property svn:mergeinfo
set to
-
trunk/server/docs/manpages/smb.conf.5
r414 r429 1 '\" t2 1 .\" Title: smb.conf 3 2 .\" Author: [see the "AUTHOR" section] 4 .\" Generator: DocBook XSL Stylesheets v1.7 5.2<http://docbook.sf.net/>5 .\" Date: 0 2/19/20103 .\" Generator: DocBook XSL Stylesheets v1.74.0 <http://docbook.sf.net/> 4 .\" Date: 03/30/2010 6 5 .\" Manual: File Formats and Conventions 7 6 .\" Source: Samba 3.5 8 7 .\" Language: English 9 8 .\" 10 .TH "SMB\&.CONF" "5" "02/19/2010" "Samba 3\&.5" "File Formats and Conventions" 9 .TH "SMB\&.CONF" "5" "03/30/2010" "Samba 3\&.5" "File Formats and Conventions" 10 .\" ----------------------------------------------------------------- 11 .\" * (re)Define some macros 12 .\" ----------------------------------------------------------------- 13 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 14 .\" toupper - uppercase a string (locale-aware) 15 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 16 .de toupper 17 .tr aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ 18 \\$* 19 .tr aabbccddeeffgghhiijjkkllmmnnooppqqrrssttuuvvwwxxyyzz 20 .. 21 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 22 .\" SH-xref - format a cross-reference to an SH section 23 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 24 .de SH-xref 25 .ie n \{\ 26 .\} 27 .toupper \\$* 28 .el \{\ 29 \\$* 30 .\} 31 .. 32 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 33 .\" SH - level-one heading that works better for non-TTY output 34 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 35 .de1 SH 36 .\" put an extra blank line of space above the head in non-TTY output 37 .if t \{\ 38 .sp 1 39 .\} 40 .sp \\n[PD]u 41 .nr an-level 1 42 .set-an-margin 43 .nr an-prevailing-indent \\n[IN] 44 .fi 45 .in \\n[an-margin]u 46 .ti 0 47 .HTML-TAG ".NH \\n[an-level]" 48 .it 1 an-trap 49 .nr an-no-space-flag 1 50 .nr an-break-flag 1 51 \." make the size of the head bigger 52 .ps +3 53 .ft B 54 .ne (2v + 1u) 55 .ie n \{\ 56 .\" if n (TTY output), use uppercase 57 .toupper \\$* 58 .\} 59 .el \{\ 60 .nr an-break-flag 0 61 .\" if not n (not TTY), use normal case (not uppercase) 62 \\$1 63 .in \\n[an-margin]u 64 .ti 0 65 .\" if not n (not TTY), put a border/line under subheading 66 .sp -.6 67 \l'\n(.lu' 68 .\} 69 .. 70 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 71 .\" SS - level-two heading that works better for non-TTY output 72 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 73 .de1 SS 74 .sp \\n[PD]u 75 .nr an-level 1 76 .set-an-margin 77 .nr an-prevailing-indent \\n[IN] 78 .fi 79 .in \\n[IN]u 80 .ti \\n[SN]u 81 .it 1 an-trap 82 .nr an-no-space-flag 1 83 .nr an-break-flag 1 84 .ps \\n[PS-SS]u 85 \." make the size of the head bigger 86 .ps +2 87 .ft B 88 .ne (2v + 1u) 89 .if \\n[.$] \&\\$* 90 .. 91 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 92 .\" BB/BE - put background/screen (filled box) around block of text 93 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 94 .de BB 95 .if t \{\ 96 .sp -.5 97 .br 98 .in +2n 99 .ll -2n 100 .gcolor red 101 .di BX 102 .\} 103 .. 104 .de EB 105 .if t \{\ 106 .if "\\$2"adjust-for-leading-newline" \{\ 107 .sp -1 108 .\} 109 .br 110 .di 111 .in 112 .ll 113 .gcolor 114 .nr BW \\n(.lu-\\n(.i 115 .nr BH \\n(dn+.5v 116 .ne \\n(BHu+.5v 117 .ie "\\$2"adjust-for-leading-newline" \{\ 118 \M[\\$1]\h'1n'\v'+.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[] 119 .\} 120 .el \{\ 121 \M[\\$1]\h'1n'\v'-.5v'\D'P \\n(BWu 0 0 \\n(BHu -\\n(BWu 0 0 -\\n(BHu'\M[] 122 .\} 123 .in 0 124 .sp -.5v 125 .nf 126 .BX 127 .in 128 .sp .5v 129 .fi 130 .\} 131 .. 132 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 133 .\" BM/EM - put colored marker in margin next to block of text 134 .\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 135 .de BM 136 .if t \{\ 137 .br 138 .ll -2n 139 .gcolor red 140 .di BX 141 .\} 142 .. 143 .de EM 144 .if t \{\ 145 .br 146 .di 147 .ll 148 .gcolor 149 .nr BH \\n(dn 150 .ne \\n(BHu 151 \M[\\$1]\D'P -.75n 0 0 \\n(BHu -(\\n[.i]u - \\n(INu - .75n) 0 0 -\\n(BHu'\M[] 152 .in 0 153 .nf 154 .BX 155 .in 156 .fi 157 .\} 158 .. 11 159 .\" ----------------------------------------------------------------- 12 160 .\" * set default formatting … … 19 167 .\" * MAIN CONTENT STARTS HERE * 20 168 .\" ----------------------------------------------------------------- 21 .SH "N AME"169 .SH "Name" 22 170 smb.conf \- The configuration file for the Samba suite 23 171 .SH "SYNOPSIS" 24 172 .PP 25 173 The 26 smb\&.conf 174 \FCsmb\&.conf\F[] 27 175 file is a configuration file for the Samba suite\&. 28 smb\&.conf 176 \FCsmb\&.conf\F[] 29 177 contains runtime configuration information for the Samba programs\&. The 30 smb\&.conf 178 \FCsmb\&.conf\F[] 31 179 file is designed to be configured and administered by the 32 180 \fBswat\fR(8) … … 39 187 .RS 4 40 188 .\} 189 .fam C 190 .ps -1 41 191 .nf 192 .if t \{\ 193 .sp -1 194 .\} 195 .BB lightgray adjust-for-leading-newline 196 .sp -1 197 42 198 \fIname\fR = \fIvalue \fR 199 .EB lightgray adjust-for-leading-newline 200 .if t \{\ 201 .sp 1 202 .\} 43 203 .fi 204 .fam 205 .ps +1 44 206 .if n \{\ 45 207 .RE … … 55 217 .PP 56 218 Any line ending in a 57 \(lq\ e\(rq219 \(lq\FC\e\F[]\(rq 58 220 is continued on the next line in the customary UNIX fashion\&. 59 221 .PP … … 78 240 .PP 79 241 Sections other than guest services will require a password to access them\&. The client provides the username\&. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the 80 user = 242 \FCuser =\F[] 81 243 option in the share definition\&. For modern clients such as Windows 95/98/ME/NT/2000, this should not be necessary\&. 82 244 .PP … … 84 246 .PP 85 247 The following sample section defines a file space share\&. The user has write access to the path 86 /home/bar\&. The share is accessed via the share name87 foo:248 \FC/home/bar\F[]\&. The share is accessed via the share name 249 \FCfoo\F[]: 88 250 .sp 89 251 .if n \{\ 90 252 .RS 4 91 253 .\} 254 .fam C 255 .ps -1 92 256 .nf 257 .if t \{\ 258 .sp -1 259 .\} 260 .BB lightgray adjust-for-leading-newline 261 .sp -1 262 93 263 \fI[foo]\fR 94 264 \m[blue]\fBpath = /home/bar\fR\m[] 95 265 \m[blue]\fBread only = no\fR\m[] 266 .EB lightgray adjust-for-leading-newline 267 .if t \{\ 268 .sp 1 269 .\} 96 270 .fi 271 .fam 272 .ps +1 97 273 .if n \{\ 98 274 .RE … … 106 282 .RS 4 107 283 .\} 284 .fam C 285 .ps -1 108 286 .nf 287 .if t \{\ 288 .sp -1 289 .\} 290 .BB lightgray adjust-for-leading-newline 291 .sp -1 292 109 293 \fI[aprinter]\fR 110 294 \m[blue]\fBpath = /usr/spool/public\fR\m[] … … 112 296 \m[blue]\fBprintable = yes\fR\m[] 113 297 \m[blue]\fBguest ok = yes\fR\m[] 298 .EB lightgray adjust-for-leading-newline 299 .if t \{\ 300 .sp 1 301 .\} 114 302 .fi 303 .fam 304 .ps +1 115 305 .if n \{\ 116 306 .RE … … 159 349 .RS 4 160 350 .\} 351 .fam C 352 .ps -1 161 353 .nf 354 .if t \{\ 355 .sp -1 356 .\} 357 .BB lightgray adjust-for-leading-newline 358 .sp -1 359 162 360 \fBpath = /data/pchome/%S\fR 361 .EB lightgray adjust-for-leading-newline 362 .if t \{\ 363 .sp 1 364 .\} 163 365 .fi 366 .fam 367 .ps +1 164 368 .if n \{\ 165 369 .RE … … 178 382 .RS 4 179 383 .\} 384 .fam C 385 .ps -1 180 386 .nf 387 .if t \{\ 388 .sp -1 389 .\} 390 .BB lightgray adjust-for-leading-newline 391 .sp -1 392 181 393 \fI[homes]\fR 182 394 \m[blue]\fBread only = no\fR\m[] 395 .EB lightgray adjust-for-leading-newline 396 .if t \{\ 397 .sp 1 398 .\} 183 399 .fi 400 .fam 401 .ps +1 184 402 .if n \{\ 185 403 .RE … … 246 464 .RS 4 247 465 .\} 466 .fam C 467 .ps -1 248 468 .nf 469 .if t \{\ 470 .sp -1 471 .\} 472 .BB lightgray adjust-for-leading-newline 473 .sp -1 474 249 475 \fI[printers]\fR 250 476 \m[blue]\fBpath = /usr/spool/public\fR\m[] 251 477 \m[blue]\fBguest ok = yes\fR\m[] 252 478 \m[blue]\fBprintable = yes\fR\m[] 479 .EB lightgray adjust-for-leading-newline 480 .if t \{\ 481 .sp 1 482 .\} 253 483 .fi 484 .fam 485 .ps +1 254 486 .if n \{\ 255 487 .RE … … 261 493 .RS 4 262 494 .\} 495 .fam C 496 .ps -1 263 497 .nf 498 .if t \{\ 499 .sp -1 500 .\} 501 .BB lightgray adjust-for-leading-newline 502 .sp -1 503 264 504 alias|alias|alias|alias\&.\&.\&. 505 .EB lightgray adjust-for-leading-newline 506 .if t \{\ 507 .sp 1 508 .\} 265 509 .fi 510 .fam 511 .ps +1 266 512 .if n \{\ 267 513 .RE … … 270 516 Each alias should be an acceptable printer name for your printing subsystem\&. In the [global] section, specify the new file as your printcap\&. The server will only recognize names found in your pseudo\-printcap, which of course can contain whatever aliases you like\&. The same technique could be used simply to limit access to a subset of your local printers\&. 271 517 .PP 272 An alias, by the way, is defined as any component of the first entry of a printcap record\&. Records are separated by newlines, components (if there are more than one) are separated by vertical bar symbols ( |)\&.518 An alias, by the way, is defined as any component of the first entry of a printcap record\&. Records are separated by newlines, components (if there are more than one) are separated by vertical bar symbols (\FC|\F[])\&. 273 519 .if n \{\ 274 520 .sp 275 521 .\} 276 522 .RS 4 523 .BM yellow 277 524 .it 1 an-trap 278 525 .nr an-no-space-flag 1 … … 285 532 .PP 286 533 On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use 287 printcap name = lpstat 534 \FCprintcap name = lpstat\F[] 288 535 to automatically obtain a list of printers\&. See the 289 printcap name 536 \FCprintcap name\F[] 290 537 option for more details\&. 291 538 .sp .5v 539 .EM yellow 292 540 .RE 293 541 .SH "USERSHARES" … … 333 581 .PP 334 582 To allow members of the UNIX group 335 foo 583 \FCfoo\F[] 336 584 to create user defined shares, create the directory to contain the share definitions as follows: 337 585 .PP … … 341 589 .RS 4 342 590 .\} 591 .fam C 592 .ps -1 343 593 .nf 594 .if t \{\ 595 .sp -1 596 .\} 597 .BB lightgray adjust-for-leading-newline 598 .sp -1 599 344 600 mkdir /usr/local/samba/lib/usershares 345 601 chgrp foo /usr/local/samba/lib/usershares 346 602 chmod 1770 /usr/local/samba/lib/usershares 603 .EB lightgray adjust-for-leading-newline 604 .if t \{\ 605 .sp 1 606 .\} 347 607 .fi 608 .fam 609 .ps +1 348 610 .if n \{\ 349 611 .RE … … 355 617 .RS 4 356 618 .\} 619 .fam C 620 .ps -1 357 621 .nf 622 .if t \{\ 623 .sp -1 624 .\} 625 .BB lightgray adjust-for-leading-newline 626 .sp -1 627 358 628 \m[blue]\fBusershare path = /usr/local/samba/lib/usershares\fR\m[] 359 629 \m[blue]\fBusershare max shares = 10\fR\m[] # (or the desired number of shares) 630 .EB lightgray adjust-for-leading-newline 631 .if t \{\ 632 .sp 1 633 .\} 360 634 .fi 635 .fam 636 .ps +1 361 637 .if n \{\ 362 638 .RE … … 364 640 .sp 365 641 to the global section of your 366 smb\&.conf\&. Members of the group foo may then manipulate the user defined shares using the following commands\&.642 \FCsmb\&.conf\F[]\&. Members of the group foo may then manipulate the user defined shares using the following commands\&. 367 643 .PP 368 644 net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] … … 528 804 .RS 4 529 805 the path of the service\'s home directory, obtained from your NIS auto\&.map entry\&. The NIS auto\&.map entry is split up as 530 %N:%p\&.806 \FC%N:%p\F[]\&. 531 807 .RE 532 808 .PP 533 809 There are some quite creative things that can be done with these substitutions and other 534 smb\&.conf 810 \FCsmb\&.conf\F[] 535 811 options\&. 536 812 .SH "NAME MANGLING" 537 813 .PP 538 814 Samba supports 539 name mangling 815 \FCname mangling\F[] 540 816 so that DOS and Windows clients can use files that don\'t conform to the 8\&.3 format\&. It can also be set to adjust the case of 8\&.3 format filenames\&. 541 817 .PP … … 567 843 .RS 4 568 844 controls whether new files (ie\&. files that don\'t currently exist in the filesystem) are created with the case that the client passes, or if they are forced to be the 569 default 845 \FCdefault\F[] 570 846 case\&. Default 571 847 \fIyes\fR\&. … … 575 851 .RS 4 576 852 controls if new files (ie\&. files that don\'t currently exist in the filesystem) which conform to 8\&.3 syntax, that is all in upper case and of suitable length, are created upper case, or if they are forced to be the 577 default 853 \FCdefault\F[] 578 854 case\&. This option can be used with 579 preserve case = yes 855 \FCpreserve case = yes\F[] 580 856 to permit long filenames to retain their case, while short names are lowercased\&. Default 581 857 \fIyes\fR\&. … … 600 876 .\} 601 877 If the client has passed a username/password pair and that username/password pair is validated by the UNIX system\'s password programs, the connection is made as that username\&. This includes the 602 \ e\eserver\eservice%\fIusername\fR878 \FC\e\eserver\eservice\F[]%\fIusername\fR 603 879 method of passing a username\&. 604 880 .RE … … 646 922 .\} 647 923 If a 648 user = 924 \FCuser = \F[] 649 925 field is given in the 650 smb\&.conf 926 \FCsmb\&.conf\F[] 651 927 file for the service and the client has supplied a password, and that password matches (according to the UNIX system\'s password checking) with one of the usernames from the 652 user = 928 \FCuser =\F[] 653 929 field, the connection is made as the username in the 654 user = 930 \FCuser =\F[] 655 931 line\&. If one of the usernames in the 656 user = 932 \FCuser =\F[] 657 933 list begins with a 658 @, that name expands to a list of names in the group of the same name\&.934 \FC@\F[], that name expands to a list of names in the group of the same name\&. 659 935 .RE 660 936 .sp … … 668 944 .\} 669 945 If the service is a guest service, a connection is made as the username given in the 670 guest account = 946 \FCguest account =\F[] 671 947 for the service, irrespective of the supplied password\&. 672 948 .RE … … 674 950 .PP 675 951 Starting with Samba version 3\&.2\&.0, the capability to store Samba configuration in the registry is available\&. The configuration is stored in the registry key 676 \fI HKLM\eSoftware\eSamba\esmbconf\fR\&. There are two levels of registry configuration:952 \fI\FCHKLM\eSoftware\eSamba\esmbconf\F[]\fR\&. There are two levels of registry configuration: 677 953 .sp 678 954 .RS 4 … … 737 1013 \fInet (rpc) registry\fR 738 1014 in the key 739 \fI HKLM\eSoftware\eSamba\esmbconf\fR\&. More conveniently, the1015 \fI\FCHKLM\eSoftware\eSamba\esmbconf\F[]\fR\&. More conveniently, the 740 1016 \fIconf\fR 741 1017 subcommand of the … … 758 1034 .sp 759 1035 Default: 760 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI ""\fR\fI \fR761 .sp 762 Example: 763 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI /sbin/shutdown \-c\fR\fI \fR1036 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR 1037 .sp 1038 Example: 1039 \fI\fIabort shutdown script\fR\fR\fI = \fR\fI\FC/sbin/shutdown \-c\F[]\fR\fI \fR 764 1040 .RE 765 1041 … … 773 1049 .sp 774 1050 Default: 775 \fI\fIaccess based share enum\fR\fR\fI = \fR\fI no\fR\fI \fR1051 \fI\fIaccess based share enum\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 776 1052 .RE 777 1053 … … 786 1062 .sp 787 1063 Default: 788 \fI\fIacl check permissions\fR\fR\fI = \fR\fI True\fR\fI \fR1064 \fI\fIacl check permissions\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR 789 1065 .RE 790 1066 … … 802 1078 .sp 803 1079 Default: 804 \fI\fIacl compatibility\fR\fR\fI = \fR\fI Auto\fR\fI \fR805 .sp 806 Example: 807 \fI\fIacl compatibility\fR\fR\fI = \fR\fI win2k\fR\fI \fR1080 \fI\fIacl compatibility\fR\fR\fI = \fR\fI\FCAuto\F[]\fR\fI \fR 1081 .sp 1082 Example: 1083 \fI\fIacl compatibility\fR\fR\fI = \fR\fI\FCwin2k\F[]\fR\fI \fR 808 1084 .RE 809 1085 … … 831 1107 .sp 832 1108 Default: 833 \fI\fIacl group control\fR\fR\fI = \fR\fI no\fR\fI \fR1109 \fI\fIacl group control\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 834 1110 .RE 835 1111 … … 842 1118 .sp 843 1119 Default: 844 \fI\fIacl map full control\fR\fR\fI = \fR\fI True\fR\fI \fR1120 \fI\fIacl map full control\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR 845 1121 .RE 846 1122 … … 858 1134 .sp 859 1135 Default: 860 \fI\fIadd group script\fR\fR\fI = \fR\fI\ fR\fI \fR861 .sp 862 Example: 863 \fI\fIadd group script\fR\fR\fI = \fR\fI /usr/sbin/groupadd %g\fR\fI \fR1136 \fI\fIadd group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1137 .sp 1138 Example: 1139 \fI\fIadd group script\fR\fR\fI = \fR\fI\FC/usr/sbin/groupadd %g\F[]\fR\fI \fR 864 1140 .RE 865 1141 … … 876 1152 .sp 877 1153 Default: 878 \fI\fIadd machine script\fR\fR\fI = \fR\fI\ fR\fI \fR879 .sp 880 Example: 881 \fI\fIadd machine script\fR\fR\fI = \fR\fI /usr/sbin/adduser \-n \-g machines \-c Machine \-d /var/lib/nobody \-s /bin/false %u\fR\fI \fR1154 \fI\fIadd machine script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1155 .sp 1156 Example: 1157 \fI\fIadd machine script\fR\fR\fI = \fR\fI\FC/usr/sbin/adduser \-n \-g machines \-c Machine \-d /var/lib/nobody \-s /bin/false %u\F[]\fR\fI \fR 882 1158 .RE 883 1159 … … 913 1189 .sp 914 1190 Default: 915 \fI\fIadd port command\fR\fR\fI = \fR\fI\ fR\fI \fR916 .sp 917 Example: 918 \fI\fIadd port command\fR\fR\fI = \fR\fI /etc/samba/scripts/addport\&.sh\fR\fI \fR1191 \fI\fIadd port command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1192 .sp 1193 Example: 1194 \fI\fIadd port command\fR\fR\fI = \fR\fI\FC/etc/samba/scripts/addport\&.sh\F[]\fR\fI \fR 919 1195 .RE 920 1196 … … 928 1204 \fIaddprinter command\fR 929 1205 defines a script to be run which will perform the necessary operations for adding the printer to the print system and to add the appropriate service definition to the 930 smb\&.conf 1206 \FCsmb\&.conf\F[] 931 1207 file in order that it can be shared by 932 1208 \fBsmbd\fR(8)\&. … … 1007 1283 \fIaddprinter command\fR 1008 1284 has been executed, 1009 smbd 1285 \FCsmbd\F[] 1010 1286 will reparse the 1011 smb\&.conf 1287 \FC smb\&.conf\F[] 1012 1288 to determine if the share defined by the APW exists\&. If the sharename is still invalid, then 1013 smbd 1289 \FCsmbd \F[] 1014 1290 will return an ACCESS_DENIED error to the client\&. 1015 1291 .sp … … 1019 1295 .sp 1020 1296 Default: 1021 \fI\fIaddprinter command\fR\fR\fI = \fR\fI\ fR\fI \fR1022 .sp 1023 Example: 1024 \fI\fIaddprinter command\fR\fR\fI = \fR\fI /usr/bin/addprinter\fR\fI \fR1297 \fI\fIaddprinter command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1298 .sp 1299 Example: 1300 \fI\fIaddprinter command\fR\fR\fI = \fR\fI\FC/usr/bin/addprinter\F[]\fR\fI \fR 1025 1301 .RE 1026 1302 … … 1032 1308 \fIadd share command\fR 1033 1309 is used to define an external program or script which will add a new service definition to 1034 smb\&.conf\&.1310 \FCsmb\&.conf\F[]\&. 1035 1311 .sp 1036 1312 In order to successfully execute the 1037 1313 \fIadd share command\fR, 1038 smbd 1314 \FCsmbd\F[] 1039 1315 requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the 1040 SeDiskOperatorPrivilege\&. Scripts defined in the1316 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the 1041 1317 \fIadd share command\fR 1042 1318 parameter are executed as root\&. 1043 1319 .sp 1044 1320 When executed, 1045 smbd 1321 \FCsmbd\F[] 1046 1322 will automatically invoke the 1047 1323 \fIadd share command\fR … … 1058 1334 \fIconfigFile\fR 1059 1335 \- the location of the global 1060 smb\&.conf 1336 \FCsmb\&.conf\F[] 1061 1337 file\&. 1062 1338 .RE … … 1114 1390 .sp 1115 1391 Default: 1116 \fI\fIadd share command\fR\fR\fI = \fR\fI\ fR\fI \fR1117 .sp 1118 Example: 1119 \fI\fIadd share command\fR\fR\fI = \fR\fI /usr/local/bin/addshare\fR\fI \fR1392 \fI\fIadd share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1393 .sp 1394 Example: 1395 \fI\fIadd share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/addshare\F[]\fR\fI \fR 1120 1396 .RE 1121 1397 … … 1150 1426 \m[blue]\fBpassword server\fR\m[] 1151 1427 and attempts to authenticate the given user with the given password\&. If the authentication succeeds then 1152 smbd 1428 \FCsmbd\F[] 1153 1429 attempts to find a UNIX user in the UNIX password database to map the Windows user into\&. If this lookup fails, and 1154 1430 \m[blue]\fBadd user script\fR\m[] 1155 1431 is set then 1156 smbd 1432 \FCsmbd\F[] 1157 1433 will call the specified script 1158 1434 \fIAS ROOT\fR, expanding any … … 1161 1437 .sp 1162 1438 If this script successfully creates the user then 1163 smbd 1439 \FCsmbd\F[] 1164 1440 will continue on as though the UNIX user already existed\&. In this way, UNIX users are dynamically created to match existing Windows NT accounts\&. 1165 1441 .sp … … 1170 1446 .sp 1171 1447 Default: 1172 \fI\fIadd user script\fR\fR\fI = \fR\fI\ fR\fI \fR1173 .sp 1174 Example: 1175 \fI\fIadd user script\fR\fR\fI = \fR\fI /usr/local/samba/bin/add_user %u\fR\fI \fR1448 \fI\fIadd user script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1449 .sp 1450 Example: 1451 \fI\fIadd user script\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/add_user %u\F[]\fR\fI \fR 1176 1452 .RE 1177 1453 … … 1189 1465 .sp 1190 1466 Note that the 1191 adduser 1467 \FCadduser\F[] 1192 1468 command used in the example below does not support the used syntax on all systems\&. 1193 1469 .sp 1194 1470 Default: 1195 \fI\fIadd user to group script\fR\fR\fI = \fR\fI\ fR\fI \fR1196 .sp 1197 Example: 1198 \fI\fIadd user to group script\fR\fR\fI = \fR\fI /usr/sbin/adduser %u %g\fR\fI \fR1471 \fI\fIadd user to group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1472 .sp 1473 Example: 1474 \fI\fIadd user to group script\fR\fR\fI = \fR\fI\FC/usr/sbin/adduser %u %g\F[]\fR\fI \fR 1199 1475 .RE 1200 1476 … … 1212 1488 .sp 1213 1489 Default: 1214 \fI\fIadministrative share\fR\fR\fI = \fR\fI no\fR\fI \fR1490 \fI\fIadministrative share\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1215 1491 .RE 1216 1492 … … 1228 1504 .sp 1229 1505 Default: 1230 \fI\fIadmin users\fR\fR\fI = \fR\fI\ fR\fI \fR1231 .sp 1232 Example: 1233 \fI\fIadmin users\fR\fR\fI = \fR\fI jason\fR\fI \fR1506 \fI\fIadmin users\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1507 .sp 1508 Example: 1509 \fI\fIadmin users\fR\fR\fI = \fR\fI\FCjason\F[]\fR\fI \fR 1234 1510 .RE 1235 1511 … … 1243 1519 .sp 1244 1520 Default: 1245 \fI\fIafs share\fR\fR\fI = \fR\fI no\fR\fI \fR1521 \fI\fIafs share\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1246 1522 .RE 1247 1523 … … 1255 1531 .sp 1256 1532 Default: 1257 \fI\fIafs username map\fR\fR\fI = \fR\fI\ fR\fI \fR1258 .sp 1259 Example: 1260 \fI\fIafs username map\fR\fR\fI = \fR\fI %u@afs\&.samba\&.org\fR\fI \fR1533 \fI\fIafs username map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1534 .sp 1535 Example: 1536 \fI\fIafs username map\fR\fR\fI = \fR\fI\FC%u@afs\&.samba\&.org\F[]\fR\fI \fR 1261 1537 .RE 1262 1538 … … 1276 1552 .sp 1277 1553 Default: 1278 \fI\fIaio read size\fR\fR\fI = \fR\fI 0\fR\fI \fR1279 .sp 1280 Example: 1281 \fI\fIaio read size\fR\fR\fI = \fR\fI 16384 # Use asynchronous I/O for reads bigger than 16KB request size\fR\fI \fR1554 \fI\fIaio read size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 1555 .sp 1556 Example: 1557 \fI\fIaio read size\fR\fR\fI = \fR\fI\FC16384 # Use asynchronous I/O for reads bigger than 16KB request size\F[]\fR\fI \fR 1282 1558 .RE 1283 1559 … … 1293 1569 .sp 1294 1570 Default: 1295 \fI\fIaio write behind\fR\fR\fI = \fR\fI\ fR\fI \fR1296 .sp 1297 Example: 1298 \fI\fIaio write behind\fR\fR\fI = \fR\fI /*\&.tmp/\fR\fI \fR1571 \fI\fIaio write behind\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1572 .sp 1573 Example: 1574 \fI\fIaio write behind\fR\fR\fI = \fR\fI\FC/*\&.tmp/\F[]\fR\fI \fR 1299 1575 .RE 1300 1576 … … 1314 1590 .sp 1315 1591 Default: 1316 \fI\fIaio write size\fR\fR\fI = \fR\fI 0\fR\fI \fR1317 .sp 1318 Example: 1319 \fI\fIaio write size\fR\fR\fI = \fR\fI 16384 # Use asynchronous I/O for writes bigger than 16KB request size\fR\fI \fR1592 \fI\fIaio write size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 1593 .sp 1594 Example: 1595 \fI\fIaio write size\fR\fR\fI = \fR\fI\FC16384 # Use asynchronous I/O for writes bigger than 16KB request size\F[]\fR\fI \fR 1320 1596 .RE 1321 1597 … … 1331 1607 .sp 1332 1608 Default: 1333 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI 1000\fR\fI \fR1334 .sp 1335 Example: 1336 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI 100000\fR\fI \fR1609 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 1610 .sp 1611 Example: 1612 \fI\fIalgorithmic rid base\fR\fR\fI = \fR\fI\FC100000\F[]\fR\fI \fR 1337 1613 .RE 1338 1614 … … 1346 1622 .sp 1347 1623 Default: 1348 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI 1048576\fR\fI \fR1349 .sp 1350 Example: 1351 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI 0 # (to disable roundups)\fR\fI \fR1624 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI\FC1048576\F[]\fR\fI \fR 1625 .sp 1626 Example: 1627 \fI\fIallocation roundup size\fR\fR\fI = \fR\fI\FC0 # (to disable roundups)\F[]\fR\fI \fR 1352 1628 .RE 1353 1629 … … 1367 1643 .sp 1368 1644 Default: 1369 \fI\fIallow trusted domains\fR\fR\fI = \fR\fI yes\fR\fI \fR1645 \fI\fIallow trusted domains\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1370 1646 .RE 1371 1647 … … 1379 1655 .sp 1380 1656 Default: 1381 \fI\fIannounce as\fR\fR\fI = \fR\fI NT Server\fR\fI \fR1382 .sp 1383 Example: 1384 \fI\fIannounce as\fR\fR\fI = \fR\fI Win95\fR\fI \fR1657 \fI\fIannounce as\fR\fR\fI = \fR\fI\FCNT Server\F[]\fR\fI \fR 1658 .sp 1659 Example: 1660 \fI\fIannounce as\fR\fR\fI = \fR\fI\FCWin95\F[]\fR\fI \fR 1385 1661 .RE 1386 1662 … … 1392 1668 .sp 1393 1669 Default: 1394 \fI\fIannounce version\fR\fR\fI = \fR\fI 4\&.9\fR\fI \fR1395 .sp 1396 Example: 1397 \fI\fIannounce version\fR\fR\fI = \fR\fI 2\&.0\fR\fI \fR1670 \fI\fIannounce version\fR\fR\fI = \fR\fI\FC4\&.9\F[]\fR\fI \fR 1671 .sp 1672 Example: 1673 \fI\fIannounce version\fR\fR\fI = \fR\fI\FC2\&.0\F[]\fR\fI \fR 1398 1674 .RE 1399 1675 … … 1403 1679 .RS 4 1404 1680 This option allows the administrator to chose what authentication methods 1405 smbd 1681 \FCsmbd\F[] 1406 1682 will use when authenticating a user\&. This option defaults to sensible values based on 1407 1683 \m[blue]\fBsecurity\fR\m[]\&. This should be considered a developer option and used only in rare circumstances\&. In the majority (if not all) of production servers, the default setting should be adequate\&. … … 1422 1698 .sp 1423 1699 Default: 1424 \fI\fIauth methods\fR\fR\fI = \fR\fI\ fR\fI \fR1425 .sp 1426 Example: 1427 \fI\fIauth methods\fR\fR\fI = \fR\fI guest sam winbind\fR\fI \fR1700 \fI\fIauth methods\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 1701 .sp 1702 Example: 1703 \fI\fIauth methods\fR\fR\fI = \fR\fI\FCguest sam winbind\F[]\fR\fI \fR 1428 1704 .RE 1429 1705 … … 1438 1714 .sp 1439 1715 Default: 1440 \fI\fIavailable\fR\fR\fI = \fR\fI yes\fR\fI \fR1716 \fI\fIavailable\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1441 1717 .RE 1442 1718 … … 1452 1728 .sp 1453 1729 For name service it causes 1454 nmbd 1730 \FCnmbd\F[] 1455 1731 to bind to ports 137 and 138 on the interfaces listed in the 1456 1732 \m[blue]\fBinterfaces\fR\m[] 1457 1733 parameter\&. 1458 nmbd 1734 \FCnmbd\F[] 1459 1735 also binds to the "all addresses" interface (0\&.0\&.0\&.0) on ports 137 and 138 for the purposes of reading broadcast messages\&. If this option is not set then 1460 nmbd 1736 \FCnmbd\F[] 1461 1737 will service name requests on all of these sockets\&. If 1462 1738 \m[blue]\fBbind interfaces only\fR\m[] 1463 1739 is set then 1464 nmbd 1740 \FCnmbd\F[] 1465 1741 will check the source address of any packets coming in on the broadcast sockets and discard any that don\'t match the broadcast addresses of the interfaces in the 1466 1742 \m[blue]\fBinterfaces\fR\m[] 1467 1743 parameter list\&. As unicast packets are received on the other sockets it allows 1468 nmbd 1744 \FCnmbd\F[] 1469 1745 to refuse to serve names to machines that send packets that arrive through any interfaces not listed in the 1470 1746 \m[blue]\fBinterfaces\fR\m[] 1471 1747 list\&. IP Source address spoofing does defeat this simple check, however, so it must not be used seriously as a security feature for 1472 nmbd\&.1748 \FCnmbd\F[]\&. 1473 1749 .sp 1474 1750 For file service it causes … … 1477 1753 \m[blue]\fBinterfaces\fR\m[] 1478 1754 parameter\&. This restricts the networks that 1479 smbd 1755 \FCsmbd\F[] 1480 1756 will serve, to packets coming in on those interfaces\&. Note that you should not use this parameter for machines that are serving PPP or other intermittent or non\-broadcast network interfaces as it will not cope with non\-permanent interfaces\&. 1481 1757 .sp … … 1493 1769 .sp 1494 1770 To change a users SMB password, the 1495 smbpasswd 1771 \FCsmbpasswd\F[] 1496 1772 by default connects to the 1497 1773 \fIlocalhost \- 127\&.0\&.0\&.1\fR … … 1503 1779 \m[blue]\fBinterfaces\fR\m[] 1504 1780 parameter list then 1505 smbpasswd 1781 \FC smbpasswd\F[] 1506 1782 will fail to connect in it\'s default mode\&. 1507 smbpasswd 1783 \FCsmbpasswd\F[] 1508 1784 can be forced to use the primary IP interface of the local host by using its 1509 1785 \fBsmbpasswd\fR(8) … … 1514 1790 .sp 1515 1791 The 1516 swat 1792 \FCswat\F[] 1517 1793 status page tries to connect with 1518 smbd 1794 \FCsmbd\F[] 1519 1795 and 1520 nmbd 1796 \FCnmbd\F[] 1521 1797 at the address 1522 1798 \fI127\&.0\&.0\&.1\fR … … 1524 1800 \fI127\&.0\&.0\&.1\fR 1525 1801 will cause 1526 smbd 1802 \FC smbd\F[] 1527 1803 and 1528 nmbd 1804 \FCnmbd\F[] 1529 1805 to always show "not running" even if they really are\&. This can prevent 1530 swat 1806 \FC swat\F[] 1531 1807 from starting/stopping/restarting 1532 smbd 1808 \FCsmbd\F[] 1533 1809 and 1534 nmbd\&.1535 .sp 1536 Default: 1537 \fI\fIbind interfaces only\fR\fR\fI = \fR\fI no\fR\fI \fR1810 \FCnmbd\F[]\&. 1811 .sp 1812 Default: 1813 \fI\fIbind interfaces only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1538 1814 .RE 1539 1815 … … 1552 1828 .sp 1553 1829 Default: 1554 \fI\fIblocking locks\fR\fR\fI = \fR\fI yes\fR\fI \fR1830 \fI\fIblocking locks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1555 1831 .RE 1556 1832 … … 1568 1844 .sp 1569 1845 Default: 1570 \fI\fIblock size\fR\fR\fI = \fR\fI 1024\fR\fI \fR1571 .sp 1572 Example: 1573 \fI\fIblock size\fR\fR\fI = \fR\fI 4096\fR\fI \fR1846 \fI\fIblock size\fR\fR\fI = \fR\fI\FC1024\F[]\fR\fI \fR 1847 .sp 1848 Example: 1849 \fI\fIblock size\fR\fR\fI = \fR\fI\FC4096\F[]\fR\fI \fR 1574 1850 .RE 1575 1851 … … 1589 1865 .sp 1590 1866 Default: 1591 \fI\fIbrowseable\fR\fR\fI = \fR\fI yes\fR\fI \fR1867 \fI\fIbrowseable\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1592 1868 .RE 1593 1869 … … 1599 1875 \fBsmbd\fR(8) 1600 1876 will serve a browse list to a client doing a 1601 NetServerEnum 1877 \FCNetServerEnum\F[] 1602 1878 call\&. Normally set to 1603 1879 \fByes\fR\&. You should never need to change this\&. 1604 1880 .sp 1605 1881 Default: 1606 \fI\fIbrowse list\fR\fR\fI = \fR\fI yes\fR\fI \fR1882 \fI\fIbrowse list\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1607 1883 .RE 1608 1884 … … 1621 1897 .sp 1622 1898 Default: 1623 \fI\fIcache directory\fR\fR\fI = \fR\fI ${prefix}/var/locks\fR\fI \fR1624 .sp 1625 Example: 1626 \fI\fIcache directory\fR\fR\fI = \fR\fI /var/run/samba/locks/cache\fR\fI \fR1899 \fI\fIcache directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR 1900 .sp 1901 Example: 1902 \fI\fIcache directory\fR\fR\fI = \fR\fI\FC/var/run/samba/locks/cache\F[]\fR\fI \fR 1627 1903 .RE 1628 1904 … … 1643 1919 .sp 1644 1920 Default: 1645 \fI\fIcase sensitive\fR\fR\fI = \fR\fI no\fR\fI \fR1921 \fI\fIcase sensitive\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1646 1922 .RE 1647 1923 … … 1655 1931 .sp 1656 1932 Default: 1657 \fI\fIchange notify\fR\fR\fI = \fR\fI yes\fR\fI \fR1933 \fI\fIchange notify\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1658 1934 .RE 1659 1935 … … 1665 1941 \fIchange share command\fR 1666 1942 is used to define an external program or script which will modify an existing service definition in 1667 smb\&.conf\&.1943 \FCsmb\&.conf\F[]\&. 1668 1944 .sp 1669 1945 In order to successfully execute the 1670 1946 \fIchange share command\fR, 1671 smbd 1947 \FCsmbd\F[] 1672 1948 requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the 1673 SeDiskOperatorPrivilege\&. Scripts defined in the1949 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the 1674 1950 \fIchange share command\fR 1675 1951 parameter are executed as root\&. 1676 1952 .sp 1677 1953 When executed, 1678 smbd 1954 \FCsmbd\F[] 1679 1955 will automatically invoke the 1680 1956 \fIchange share command\fR … … 1691 1967 \fIconfigFile\fR 1692 1968 \- the location of the global 1693 smb\&.conf 1969 \FCsmb\&.conf\F[] 1694 1970 file\&. 1695 1971 .RE … … 1746 2022 .sp 1747 2023 Default: 1748 \fI\fIchange share command\fR\fR\fI = \fR\fI\ fR\fI \fR1749 .sp 1750 Example: 1751 \fI\fIchange share command\fR\fR\fI = \fR\fI /usr/local/bin/changeshare\fR\fI \fR2024 \fI\fIchange share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2025 .sp 2026 Example: 2027 \fI\fIchange share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/changeshare\F[]\fR\fI \fR 1752 2028 .RE 1753 2029 … … 1761 2037 .sp 1762 2038 Note: In the example directory is a sample program called 1763 crackcheck 2039 \FCcrackcheck\F[] 1764 2040 that uses cracklib to check the password quality\&. 1765 2041 .sp 1766 2042 Default: 1767 \fI\fIcheck password script\fR\fR\fI = \fR\fI Disabled\fR\fI \fR1768 .sp 1769 Example: 1770 \fI\fIcheck password script\fR\fR\fI = \fR\fI /usr/local/sbin/crackcheck\fR\fI \fR2043 \fI\fIcheck password script\fR\fR\fI = \fR\fI\FCDisabled\F[]\fR\fI \fR 2044 .sp 2045 Example: 2046 \fI\fIcheck password script\fR\fR\fI = \fR\fI\FC/usr/local/sbin/crackcheck\F[]\fR\fI \fR 1771 2047 .RE 1772 2048 … … 1782 2058 .sp 1783 2059 Disabling this option will also disable the 1784 client plaintext auth 2060 \FCclient plaintext auth\F[] 1785 2061 option\&. 1786 2062 .sp 1787 2063 Likewise, if the 1788 client ntlmv2 auth 2064 \FCclient ntlmv2 auth\F[] 1789 2065 parameter is enabled, then only NTLMv2 logins will be attempted\&. 1790 2066 .sp 1791 2067 Default: 1792 \fI\fIclient lanman auth\fR\fR\fI = \fR\fI no\fR\fI \fR2068 \fI\fIclient lanman auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1793 2069 .RE 1794 2070 … … 1811 2087 are only available if Samba has been compiled against a modern OpenLDAP version (2\&.3\&.x or higher)\&. 1812 2088 .sp 1813 This option is needed in the case of Domain Controllers enforcing the usage of signed LDAP connections (e\&.g\&. Windows 2000 SP3 or higher)\&. LDAP sign and seal can be controlled with the registry key " HKLM\eSystem\eCurrentControlSet\eServices\e1814 NTDS\eParameters\eLDAPServerIntegrity" on the Windows server side\&.2089 This option is needed in the case of Domain Controllers enforcing the usage of signed LDAP connections (e\&.g\&. Windows 2000 SP3 or higher)\&. LDAP sign and seal can be controlled with the registry key "\FCHKLM\eSystem\eCurrentControlSet\eServices\e\F[] 2090 \FCNTDS\eParameters\eLDAPServerIntegrity\F[]" on the Windows server side\&. 1815 2091 .sp 1816 2092 Depending on the used KRB5 library (MIT and older Heimdal versions) it is possible that the message "integrity only" is not supported\&. In this case, … … 1827 2103 .sp 1828 2104 Default: 1829 \fI\fIclient ldap sasl wrapping\fR\fR\fI = \fR\fI plain\fR\fI \fR2105 \fI\fIclient ldap sasl wrapping\fR\fR\fI = \fR\fI\FCplain\F[]\fR\fI \fR 1830 2106 .RE 1831 2107 … … 1841 2117 .sp 1842 2118 Similarly, if enabled, NTLMv1, 1843 client lanman auth 2119 \FCclient lanman auth\F[] 1844 2120 and 1845 client plaintext auth 2121 \FCclient plaintext auth\F[] 1846 2122 authentication will be disabled\&. This also disables share\-level authentication\&. 1847 2123 .sp 1848 2124 If disabled, an NTLM response (and possibly a LANMAN response) will be sent by the client, depending on the value of 1849 client lanman auth\&.2125 \FCclient lanman auth\F[]\&. 1850 2126 .sp 1851 2127 Note that some sites (particularly those following \'best practice\' security polices) only allow NTLMv2 responses, and not the weaker LM or NTLM\&. 1852 2128 .sp 1853 2129 Default: 1854 \fI\fIclient ntlmv2 auth\fR\fR\fI = \fR\fI no\fR\fI \fR2130 \fI\fIclient ntlmv2 auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1855 2131 .RE 1856 2132 … … 1862 2138 .sp 1863 2139 Default: 1864 \fI\fIclient plaintext auth\fR\fR\fI = \fR\fI no\fR\fI \fR2140 \fI\fIclient plaintext auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1865 2141 .RE 1866 2142 … … 1878 2154 .sp 1879 2155 Default: 1880 \fI\fIclient schannel\fR\fR\fI = \fR\fI auto\fR\fI \fR1881 .sp 1882 Example: 1883 \fI\fIclient schannel\fR\fR\fI = \fR\fI yes\fR\fI \fR2156 \fI\fIclient schannel\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 2157 .sp 2158 Example: 2159 \fI\fIclient schannel\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1884 2160 .RE 1885 2161 … … 1897 2173 .sp 1898 2174 Default: 1899 \fI\fIclient signing\fR\fR\fI = \fR\fI auto\fR\fI \fR2175 \fI\fIclient signing\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 1900 2176 .RE 1901 2177 … … 1907 2183 .sp 1908 2184 Default: 1909 \fI\fIclient use spnego\fR\fR\fI = \fR\fI yes\fR\fI \fR2185 \fI\fIclient use spnego\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 1910 2186 .RE 1911 2187 … … 1917 2193 .sp 1918 2194 Default: 1919 \fI\fIcluster addresses\fR\fR\fI = \fR\fI\ fR\fI \fR1920 .sp 1921 Example: 1922 \fI\fIcluster addresses\fR\fR\fI = \fR\fI 10\&.0\&.0\&.1 10\&.0\&.0\&.2 10\&.0\&.0\&.3\fR\fI \fR2195 \fI\fIcluster addresses\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2196 .sp 2197 Example: 2198 \fI\fIcluster addresses\fR\fR\fI = \fR\fI\FC10\&.0\&.0\&.1 10\&.0\&.0\&.2 10\&.0\&.0\&.3\F[]\fR\fI \fR 1923 2199 .RE 1924 2200 … … 1930 2206 .sp 1931 2207 Set this parameter to 1932 yes 2208 \FCyes\F[] 1933 2209 only if you have a cluster setup with ctdb running\&. 1934 2210 .sp 1935 2211 Default: 1936 \fI\fIclustering\fR\fR\fI = \fR\fI no\fR\fI \fR2212 \fI\fIclustering\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 1937 2213 .RE 1938 2214 … … 1942 2218 .RS 4 1943 2219 This is a text field that is seen next to a share when a client does a queries the server, either via the network neighborhood or via 1944 net view 2220 \FCnet view\F[] 1945 2221 to list what shares are available\&. 1946 2222 .sp … … 1950 2226 .sp 1951 2227 Default: 1952 \fI\fIcomment\fR\fR\fI = \fR\fI # No comment\fR\fI \fR1953 .sp 1954 Example: 1955 \fI\fIcomment\fR\fR\fI = \fR\fI Fred\'s Files\fR\fI \fR2228 \fI\fIcomment\fR\fR\fI = \fR\fI\FC # No comment\F[]\fR\fI \fR 2229 .sp 2230 Example: 2231 \fI\fIcomment\fR\fR\fI = \fR\fI\FCFred\'s Files\F[]\fR\fI \fR 1956 2232 .RE 1957 2233 … … 1974 2250 .sp 1975 2251 Default: 1976 \fI\fIconfig backend\fR\fR\fI = \fR\fI file\fR\fI \fR1977 .sp 1978 Example: 1979 \fI\fIconfig backend\fR\fR\fI = \fR\fI registry\fR\fI \fR2252 \fI\fIconfig backend\fR\fR\fI = \fR\fI\FCfile\F[]\fR\fI \fR 2253 .sp 2254 Example: 2255 \fI\fIconfig backend\fR\fR\fI = \fR\fI\FCregistry\F[]\fR\fI \fR 1980 2256 .RE 1981 2257 … … 1985 2261 .RS 4 1986 2262 This allows you to override the config file to use, instead of the default (usually 1987 smb\&.conf)\&. There is a chicken and egg problem here as this option is set in the config file!2263 \FCsmb\&.conf\F[])\&. There is a chicken and egg problem here as this option is set in the config file! 1988 2264 .sp 1989 2265 For this reason, if the name of the config file has changed when the parameters are loaded then it will reload them from the new config file\&. … … 1996 2272 .sp 1997 2273 Example: 1998 \fI\fIconfig file\fR\fR\fI = \fR\fI /usr/local/samba/lib/smb\&.conf\&.%m\fR\fI \fR2274 \fI\fIconfig file\fR\fR\fI = \fR\fI\FC/usr/local/samba/lib/smb\&.conf\&.%m\F[]\fR\fI \fR 1999 2275 .RE 2000 2276 … … 2008 2284 .sp 2009 2285 Default: 2010 \fI\fIcopy\fR\fR\fI = \fR\fI\ fR\fI \fR2011 .sp 2012 Example: 2013 \fI\fIcopy\fR\fR\fI = \fR\fI otherservice\fR\fI \fR2286 \fI\fIcopy\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2287 .sp 2288 Example: 2289 \fI\fIcopy\fR\fR\fI = \fR\fI\FCotherservice\F[]\fR\fI \fR 2014 2290 .RE 2015 2291 … … 2019 2295 .RS 4 2020 2296 Setting this paramter to 2021 no 2297 \FCno\F[] 2022 2298 prevents winbind from creating custom krb5\&.conf files\&. Winbind normally does this because the krb5 libraries are not AD\-site\-aware and thus would pick any domain controller out of potentially very many\&. Winbind is site\-aware and makes the krb5 libraries use a local DC by creating its own krb5\&.conf files\&. 2023 2299 .sp … … 2025 2301 .sp 2026 2302 Default: 2027 \fI\fIcreate krb5 conf\fR\fR\fI = \fR\fI yes\fR\fI \fR2303 \fI\fIcreate krb5 conf\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2028 2304 .RE 2029 2305 … … 2045 2321 .sp 2046 2322 The default value of this parameter removes the 2047 group 2323 \FCgroup\F[] 2048 2324 and 2049 other 2325 \FCother\F[] 2050 2326 write and execute bits from the UNIX modes\&. 2051 2327 .sp … … 2062 2338 .sp 2063 2339 Default: 2064 \fI\fIcreate mask\fR\fR\fI = \fR\fI 0744\fR\fI \fR2065 .sp 2066 Example: 2067 \fI\fIcreate mask\fR\fR\fI = \fR\fI 0775\fR\fI \fR2340 \fI\fIcreate mask\fR\fR\fI = \fR\fI\FC0744\F[]\fR\fI \fR 2341 .sp 2342 Example: 2343 \fI\fIcreate mask\fR\fR\fI = \fR\fI\FC0775\F[]\fR\fI \fR 2068 2344 .RE 2069 2345 … … 2081 2357 .sp 2082 2358 Default: 2083 \fI\fIcsc policy\fR\fR\fI = \fR\fI manual\fR\fI \fR2084 .sp 2085 Example: 2086 \fI\fIcsc policy\fR\fR\fI = \fR\fI programs\fR\fI \fR2359 \fI\fIcsc policy\fR\fR\fI = \fR\fI\FCmanual\F[]\fR\fI \fR 2360 .sp 2361 Example: 2362 \fI\fIcsc policy\fR\fR\fI = \fR\fI\FCprograms\F[]\fR\fI \fR 2087 2363 .RE 2088 2364 … … 2092 2368 .RS 4 2093 2369 If you set 2094 clustering=yes, you need to tell Samba where ctdbd listens on its unix domain socket\&. The default path as of ctdb 1\&.0 is /tmp/ctdb\&.socket which you have to explicitly set for Samba in smb\&.conf\&.2095 .sp 2096 Default: 2097 \fI\fIctdbd socket\fR\fR\fI = \fR\fI\ fR\fI \fR2098 .sp 2099 Example: 2100 \fI\fIctdbd socket\fR\fR\fI = \fR\fI /tmp/ctdb\&.socket\fR\fI \fR2370 \FCclustering=yes\F[], you need to tell Samba where ctdbd listens on its unix domain socket\&. The default path as of ctdb 1\&.0 is /tmp/ctdb\&.socket which you have to explicitly set for Samba in smb\&.conf\&. 2371 .sp 2372 Default: 2373 \fI\fIctdbd socket\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2374 .sp 2375 Example: 2376 \fI\fIctdbd socket\fR\fR\fI = \fR\fI\FC/tmp/ctdb\&.socket\F[]\fR\fI \fR 2101 2377 .RE 2102 2378 … … 2117 2393 .sp 2118 2394 Default: 2119 \fI\fIctdb timeout\fR\fR\fI = \fR\fI 0\fR\fI \fR2395 \fI\fIctdb timeout\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 2120 2396 .RE 2121 2397 … … 2132 2408 .sp 2133 2409 Default: 2134 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI 30\fR\fI \fR2135 .sp 2136 Example: 2137 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI 60\fR\fI \fR2410 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR 2411 .sp 2412 Example: 2413 \fI\fIcups connection timeout\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR 2138 2414 .RE 2139 2415 … … 2155 2431 .sp 2156 2432 Default: 2157 \fI\fIcups encrypt\fR\fR\fI = \fR\fI "no"\fR\fI \fR2433 \fI\fIcups encrypt\fR\fR\fI = \fR\fI\FC"no"\F[]\fR\fI \fR 2158 2434 .RE 2159 2435 … … 2172 2448 \fBraw\fR 2173 2449 if your CUPS server 2174 error_log 2450 \FCerror_log\F[] 2175 2451 file contains messages such as "Unsupported format \'application/octet\-stream\'" when printing from a Windows client through Samba\&. It is no longer necessary to enable system wide raw printing in 2176 /etc/cups/mime\&.{convs,types}\&.2177 .sp 2178 Default: 2179 \fI\fIcups options\fR\fR\fI = \fR\fI ""\fR\fI \fR2180 .sp 2181 Example: 2182 \fI\fIcups options\fR\fR\fI = \fR\fI "raw media=a4"\fR\fI \fR2452 \FC/etc/cups/mime\&.{convs,types}\F[]\&. 2453 .sp 2454 Default: 2455 \fI\fIcups options\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR 2456 .sp 2457 Example: 2458 \fI\fIcups options\fR\fR\fI = \fR\fI\FC"raw media=a4"\F[]\fR\fI \fR 2183 2459 .RE 2184 2460 … … 2193 2469 .sp 2194 2470 If set, this option overrides the ServerName option in the CUPS 2195 client\&.conf\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.2471 \FCclient\&.conf\F[]\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&. 2196 2472 .sp 2197 2473 Optionally, a port can be specified by separating the server name and port number with a colon\&. If no port was specified, the default port for IPP (631) will be used\&. 2198 2474 .sp 2199 2475 Default: 2200 \fI\fIcups server\fR\fR\fI = \fR\fI ""\fR\fI \fR2201 .sp 2202 Example: 2203 \fI\fIcups server\fR\fR\fI = \fR\fI mycupsserver\fR\fI \fR2204 .sp 2205 Example: 2206 \fI\fIcups server\fR\fR\fI = \fR\fI mycupsserver:1631\fR\fI \fR2476 \fI\fIcups server\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR 2477 .sp 2478 Example: 2479 \fI\fIcups server\fR\fR\fI = \fR\fI\FCmycupsserver\F[]\fR\fI \fR 2480 .sp 2481 Example: 2482 \fI\fIcups server\fR\fR\fI = \fR\fI\FCmycupsserver:1631\F[]\fR\fI \fR 2207 2483 .RE 2208 2484 … … 2222 2498 .sp 2223 2499 Default: 2224 \fI\fIdeadtime\fR\fR\fI = \fR\fI 0\fR\fI \fR2225 .sp 2226 Example: 2227 \fI\fIdeadtime\fR\fR\fI = \fR\fI 15\fR\fI \fR2500 \fI\fIdeadtime\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 2501 .sp 2502 Example: 2503 \fI\fIdeadtime\fR\fR\fI = \fR\fI\FC15\F[]\fR\fI \fR 2228 2504 .RE 2229 2505 … … 2238 2514 .sp 2239 2515 Default: 2240 \fI\fIdebug class\fR\fR\fI = \fR\fI no\fR\fI \fR2516 \fI\fIdebug class\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2241 2517 .RE 2242 2518 … … 2252 2528 .sp 2253 2529 Default: 2254 \fI\fIdebug hires timestamp\fR\fR\fI = \fR\fI yes\fR\fI \fR2530 \fI\fIdebug hires timestamp\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2255 2531 .RE 2256 2532 … … 2267 2543 .sp 2268 2544 Default: 2269 \fI\fIdebug pid\fR\fR\fI = \fR\fI no\fR\fI \fR2545 \fI\fIdebug pid\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2270 2546 .RE 2271 2547 … … 2283 2559 .sp 2284 2560 Default: 2285 \fI\fIdebug prefix timestamp\fR\fR\fI = \fR\fI no\fR\fI \fR2561 \fI\fIdebug prefix timestamp\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2286 2562 .RE 2287 2563 … … 2303 2579 .sp 2304 2580 Default: 2305 \fI\fIdebug timestamp\fR\fR\fI = \fR\fI yes\fR\fI \fR2581 \fI\fIdebug timestamp\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2306 2582 .RE 2307 2583 … … 2317 2593 .sp 2318 2594 Default: 2319 \fI\fIdebug uid\fR\fR\fI = \fR\fI no\fR\fI \fR2595 \fI\fIdebug uid\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2320 2596 .RE 2321 2597 … … 2329 2605 .sp 2330 2606 Default: 2331 \fI\fIdedicated keytab file\fR\fR\fI = \fR\fI\ fR\fI \fR2332 .sp 2333 Example: 2334 \fI\fIdedicated keytab file\fR\fR\fI = \fR\fI /usr/local/etc/krb5\&.keytab\fR\fI \fR2607 \fI\fIdedicated keytab file\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2608 .sp 2609 Example: 2610 \fI\fIdedicated keytab file\fR\fR\fI = \fR\fI\FC/usr/local/etc/krb5\&.keytab\F[]\fR\fI \fR 2335 2611 .RE 2336 2612 … … 2345 2621 .sp 2346 2622 Default: 2347 \fI\fIdefault case\fR\fR\fI = \fR\fI lower\fR\fI \fR2623 \fI\fIdefault case\fR\fR\fI = \fR\fI\FClower\F[]\fR\fI \fR 2348 2624 .RE 2349 2625 … … 2359 2635 .sp 2360 2636 This parameter should be used with care and tested with the printer driver in question\&. It is better to leave the device mode to NULL and let the Windows client set the correct values\&. Because drivers do not do this all the time, setting 2361 default devmode = yes 2637 \FCdefault devmode = yes\F[] 2362 2638 will instruct smbd to generate a default one\&. 2363 2639 .sp … … 2366 2642 .sp 2367 2643 Default: 2368 \fI\fIdefault devmode\fR\fR\fI = \fR\fI yes\fR\fI \fR2644 \fI\fIdefault devmode\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2369 2645 .RE 2370 2646 … … 2399 2675 .sp 2400 2676 Default: 2401 \fI\fIdefault service\fR\fR\fI = \fR\fI\ fR\fI \fR2402 .sp 2403 Example: 2404 \fI\fIdefault service\fR\fR\fI = \fR\fI pub\fR\fI \fR2677 \fI\fIdefault service\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2678 .sp 2679 Example: 2680 \fI\fIdefault service\fR\fR\fI = \fR\fI\FCpub\F[]\fR\fI \fR 2405 2681 .RE 2406 2682 … … 2416 2692 .sp 2417 2693 Default: 2418 \fI\fIdefer sharing violations\fR\fR\fI = \fR\fI True\fR\fI \fR2694 \fI\fIdefer sharing violations\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR 2419 2695 .RE 2420 2696 … … 2431 2707 .sp 2432 2708 Default: 2433 \fI\fIdelete group script\fR\fR\fI = \fR\fI\ fR\fI \fR2709 \fI\fIdelete group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2434 2710 .RE 2435 2711 … … 2443 2719 \m[blue]\fBdeleteprinter command\fR\m[] 2444 2720 defines a script to be run which will perform the necessary operations for removing the printer from the print system and from 2445 smb\&.conf\&.2721 \FCsmb\&.conf\F[]\&. 2446 2722 .sp 2447 2723 The … … 2453 2729 \m[blue]\fBdeleteprinter command\fR\m[] 2454 2730 has been executed, 2455 smbd 2731 \FCsmbd\F[] 2456 2732 will reparse the 2457 smb\&.conf 2733 \FC smb\&.conf\F[] 2458 2734 to check that the associated printer no longer exists\&. If the sharename is still valid, then 2459 smbd 2735 \FCsmbd \F[] 2460 2736 will return an ACCESS_DENIED error to the client\&. 2461 2737 .sp 2462 2738 Default: 2463 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\ fR\fI \fR2464 .sp 2465 Example: 2466 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI /usr/bin/removeprinter\fR\fI \fR2739 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2740 .sp 2741 Example: 2742 \fI\fIdeleteprinter command\fR\fR\fI = \fR\fI\FC/usr/bin/removeprinter\F[]\fR\fI \fR 2467 2743 .RE 2468 2744 … … 2476 2752 .sp 2477 2753 Default: 2478 \fI\fIdelete readonly\fR\fR\fI = \fR\fI no\fR\fI \fR2754 \fI\fIdelete readonly\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2479 2755 .RE 2480 2756 … … 2486 2762 \fIdelete share command\fR 2487 2763 is used to define an external program or script which will remove an existing service definition from 2488 smb\&.conf\&.2764 \FCsmb\&.conf\F[]\&. 2489 2765 .sp 2490 2766 In order to successfully execute the 2491 2767 \fIdelete share command\fR, 2492 smbd 2768 \FCsmbd\F[] 2493 2769 requires that the administrator connects using a root account (i\&.e\&. uid == 0) or has the 2494 SeDiskOperatorPrivilege\&. Scripts defined in the2770 \FCSeDiskOperatorPrivilege\F[]\&. Scripts defined in the 2495 2771 \fIdelete share command\fR 2496 2772 parameter are executed as root\&. 2497 2773 .sp 2498 2774 When executed, 2499 smbd 2775 \FCsmbd\F[] 2500 2776 will automatically invoke the 2501 2777 \fIdelete share command\fR … … 2512 2788 \fIconfigFile\fR 2513 2789 \- the location of the global 2514 smb\&.conf 2790 \FCsmb\&.conf\F[] 2515 2791 file\&. 2516 2792 .RE … … 2532 2808 .sp 2533 2809 Default: 2534 \fI\fIdelete share command\fR\fR\fI = \fR\fI\ fR\fI \fR2535 .sp 2536 Example: 2537 \fI\fIdelete share command\fR\fR\fI = \fR\fI /usr/local/bin/delshare\fR\fI \fR2810 \fI\fIdelete share command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2811 .sp 2812 Example: 2813 \fI\fIdelete share command\fR\fR\fI = \fR\fI\FC/usr/local/bin/delshare\F[]\fR\fI \fR 2538 2814 .RE 2539 2815 … … 2551 2827 .sp 2552 2828 Default: 2553 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI\ fR\fI \fR2554 .sp 2555 Example: 2556 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI /usr/sbin/deluser %u %g\fR\fI \fR2829 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2830 .sp 2831 Example: 2832 \fI\fIdelete user from group script\fR\fR\fI = \fR\fI\FC/usr/sbin/deluser %u %g\F[]\fR\fI \fR 2557 2833 .RE 2558 2834 … … 2566 2842 .sp 2567 2843 This script is called when a remote client removes a user from the server, normally using \'User Manager for Domains\' or 2568 rpcclient\&.2844 \FCrpcclient\F[]\&. 2569 2845 .sp 2570 2846 This script should delete the given UNIX username\&. 2571 2847 .sp 2572 2848 Default: 2573 \fI\fIdelete user script\fR\fR\fI = \fR\fI\ fR\fI \fR2574 .sp 2575 Example: 2576 \fI\fIdelete user script\fR\fR\fI = \fR\fI /usr/local/samba/bin/del_user %u\fR\fI \fR2849 \fI\fIdelete user script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 2850 .sp 2851 Example: 2852 \fI\fIdelete user script\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/del_user %u\F[]\fR\fI \fR 2577 2853 .RE 2578 2854 … … 2589 2865 If this option is set to 2590 2866 \fByes\fR, then Samba will attempt to recursively delete any files and directories within the vetoed directory\&. This can be useful for integration with file serving systems such as NetAtalk which create meta\-files within directories you might normally veto DOS/Windows users from seeing (e\&.g\&. 2591 \ &.AppleDouble)2867 \FC\&.AppleDouble\F[]) 2592 2868 .sp 2593 2869 Setting … … 2596 2872 .sp 2597 2873 Default: 2598 \fI\fIdelete veto files\fR\fR\fI = \fR\fI no\fR\fI \fR2874 \fI\fIdelete veto files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2599 2875 .RE 2600 2876 … … 2616 2892 .sp 2617 2893 Example: 2618 \fI\fIdfree cache time\fR\fR\fI = \fR\fI dfree cache time = 60\fR\fI \fR2894 \fI\fIdfree cache time\fR\fR\fI = \fR\fI\FCdfree cache time = 60\F[]\fR\fI \fR 2619 2895 .RE 2620 2896 … … 2634 2910 .sp 2635 2911 The external program will be passed a single parameter indicating a directory in the filesystem being queried\&. This will typically consist of the string 2636 \ &./\&. The script should return two integers in ASCII\&. The first should be the total disk space in blocks, and the second should be the number of available blocks\&. An optional third return value can give the block size in bytes\&. The default blocksize is 1024 bytes\&.2912 \FC\&./\F[]\&. The script should return two integers in ASCII\&. The first should be the total disk space in blocks, and the second should be the number of available blocks\&. An optional third return value can give the block size in bytes\&. The default blocksize is 1024 bytes\&. 2637 2913 .sp 2638 2914 Note: Your script should … … 2645 2921 .RS 4 2646 2922 .\} 2923 .fam C 2924 .ps -1 2647 2925 .nf 2926 .BB lightgray 2648 2927 2649 2928 #!/bin/sh 2650 2929 df $1 | tail \-1 | awk \'{print $(NF\-4),$(NF\-2)}\' 2930 .EB lightgray 2651 2931 .fi 2932 .fam 2933 .ps +1 2652 2934 .if n \{\ 2653 2935 .RE … … 2659 2941 .RS 4 2660 2942 .\} 2943 .fam C 2944 .ps -1 2661 2945 .nf 2946 .BB lightgray 2662 2947 2663 2948 #!/bin/sh 2664 2949 /usr/bin/df \-k $1 | tail \-1 | awk \'{print $3" "$5}\' 2950 .EB lightgray 2665 2951 .fi 2952 .fam 2953 .ps +1 2666 2954 .if n \{\ 2667 2955 .RE … … 2675 2963 .sp 2676 2964 Example: 2677 \fI\fIdfree command\fR\fR\fI = \fR\fI /usr/local/samba/bin/dfree\fR\fI \fR2965 \fI\fIdfree command\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/dfree\F[]\fR\fI \fR 2678 2966 .RE 2679 2967 … … 2706 2994 .sp 2707 2995 Default: 2708 \fI\fIdirectory mask\fR\fR\fI = \fR\fI 0755\fR\fI \fR2709 .sp 2710 Example: 2711 \fI\fIdirectory mask\fR\fR\fI = \fR\fI 0775\fR\fI \fR2996 \fI\fIdirectory mask\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR 2997 .sp 2998 Example: 2999 \fI\fIdirectory mask\fR\fR\fI = \fR\fI\FC0775\F[]\fR\fI \fR 2712 3000 .RE 2713 3001 … … 2719 3007 .sp 2720 3008 Default: 2721 \fI\fIdirectory name cache size\fR\fR\fI = \fR\fI 100\fR\fI \fR3009 \fI\fIdirectory name cache size\fR\fR\fI = \fR\fI\FC100\F[]\fR\fI \fR 2722 3010 .RE 2723 3011 … … 2740 3028 .sp 2741 3029 Default: 2742 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI 0777\fR\fI \fR2743 .sp 2744 Example: 2745 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI 0700\fR\fI \fR3030 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI\FC0777\F[]\fR\fI \fR 3031 .sp 3032 Example: 3033 \fI\fIdirectory security mask\fR\fR\fI = \fR\fI\FC0700\F[]\fR\fI \fR 2746 3034 .RE 2747 3035 … … 2755 3043 .\} 2756 3044 .RS 4 3045 .BM yellow 2757 3046 .it 1 an-trap 2758 3047 .nr an-no-space-flag 1 … … 2765 3054 Clients that only support netbios won\'t be able to see your samba server when netbios support is disabled\&. 2766 3055 .sp .5v 2767 .RE 2768 Default: 2769 \fI\fIdisable netbios\fR\fR\fI = \fR\fIno\fR\fI \fR 3056 .EM yellow 3057 .RE 3058 Default: 3059 \fI\fIdisable netbios\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2770 3060 .RE 2771 3061 … … 2778 3068 .sp 2779 3069 Default: 2780 \fI\fIdisable spoolss\fR\fR\fI = \fR\fI no\fR\fI \fR3070 \fI\fIdisable spoolss\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2781 3071 .RE 2782 3072 … … 2789 3079 .sp 2790 3080 Default: 2791 \fI\fIdisplay charset\fR\fR\fI = \fR\fI "LOCALE" or "ASCII" (depending on the system)\fR\fI \fR2792 .sp 2793 Example: 2794 \fI\fIdisplay charset\fR\fR\fI = \fR\fI UTF8\fR\fI \fR3081 \fI\fIdisplay charset\fR\fR\fI = \fR\fI\FC"LOCALE" or "ASCII" (depending on the system)\F[]\fR\fI \fR 3082 .sp 3083 Example: 3084 \fI\fIdisplay charset\fR\fR\fI = \fR\fI\FCUTF8\F[]\fR\fI \fR 2795 3085 .RE 2796 3086 … … 2806 3096 .sp 2807 3097 Default: 2808 \fI\fIdmapi support\fR\fR\fI = \fR\fI no\fR\fI \fR3098 \fI\fIdmapi support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2809 3099 .RE 2810 3100 … … 2819 3109 Note that the maximum length for a NetBIOS name is 15 characters, so the DNS name (or DNS alias) can likewise only be 15 characters, maximum\&. 2820 3110 .sp 2821 nmbd 3111 \FCnmbd\F[] 2822 3112 spawns a second copy of itself to do the DNS name lookup requests, as doing a name lookup is a blocking action\&. 2823 3113 .sp 2824 3114 Default: 2825 \fI\fIdns proxy\fR\fR\fI = \fR\fI yes\fR\fI \fR3115 \fI\fIdns proxy\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2826 3116 .RE 2827 3117 … … 2836 3126 .sp 2837 3127 Default: 2838 \fI\fIdomain logons\fR\fR\fI = \fR\fI no\fR\fI \fR3128 \fI\fIdomain logons\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2839 3129 .RE 2840 3130 … … 2846 3136 \fBsmbd\fR(8) 2847 3137 to enable WAN\-wide browse list collation\&. Setting this option causes 2848 nmbd 3138 \FCnmbd\F[] 2849 3139 to claim a special domain specific NetBIOS name that identifies it as a domain master browser for its given 2850 3140 \m[blue]\fBworkgroup\fR\m[]\&. Local master browsers in the same 2851 3141 \m[blue]\fBworkgroup\fR\m[] 2852 3142 on broadcast\-isolated subnets will give this 2853 nmbd 3143 \FCnmbd\F[] 2854 3144 their local browse lists, and then ask 2855 3145 \fBsmbd\fR(8) … … 2861 3151 \m[blue]\fBworkgroup\fR\m[] 2862 3152 by default (i\&.e\&. there is no way to prevent a Windows NT PDC from attempting to do this)\&. This means that if this parameter is set and 2863 nmbd 3153 \FCnmbd\F[] 2864 3154 claims the special name for a 2865 3155 \m[blue]\fBworkgroup\fR\m[] … … 2881 3171 .sp 2882 3172 Default: 2883 \fI\fIdomain master\fR\fR\fI = \fR\fI auto\fR\fI \fR3173 \fI\fIdomain master\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 2884 3174 .RE 2885 3175 … … 2889 3179 .RS 4 2890 3180 There are certain directories on some systems (e\&.g\&., the 2891 /proc 3181 \FC/proc\F[] 2892 3182 tree under Linux) that are either not of interest to clients or are infinitely deep (recursive)\&. This parameter allows you to specify a comma\-delimited list of directories that the server should always show as empty\&. 2893 3183 .sp 2894 3184 Note that Samba can be very fussy about the exact format of the "dont descend" entries\&. For example you may need 2895 \ &./proc3185 \FC \&./proc\F[] 2896 3186 instead of just 2897 /proc\&. Experimentation is the best policy :\-)2898 .sp 2899 Default: 2900 \fI\fIdont descend\fR\fR\fI = \fR\fI\ fR\fI \fR2901 .sp 2902 Example: 2903 \fI\fIdont descend\fR\fR\fI = \fR\fI /proc,/dev\fR\fI \fR3187 \FC/proc\F[]\&. Experimentation is the best policy :\-) 3188 .sp 3189 Default: 3190 \fI\fIdont descend\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3191 .sp 3192 Example: 3193 \fI\fIdont descend\fR\fR\fI = \fR\fI\FC/proc,/dev\F[]\fR\fI \fR 2904 3194 .RE 2905 3195 … … 2924 3214 .sp 2925 3215 Default: 2926 \fI\fIdos filemode\fR\fR\fI = \fR\fI no\fR\fI \fR3216 \fI\fIdos filemode\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2927 3217 .RE 2928 3218 … … 2937 3227 .sp 2938 3228 Default: 2939 \fI\fIdos filetime resolution\fR\fR\fI = \fR\fI no\fR\fI \fR3229 \fI\fIdos filetime resolution\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2940 3230 .RE 2941 3231 … … 2945 3235 .RS 4 2946 3236 Under DOS and Windows, if a user can write to a file they can change the timestamp on it\&. Under POSIX semantics, only the owner of the file or root may change the timestamp\&. By default, Samba emulates the DOS semantics and allows to change the timestamp on a file if the user 2947 smbd 3237 \FCsmbd\F[] 2948 3238 is acting on behalf has write permissions\&. Due to changes in Microsoft Office 2000 and beyond, the default for this parameter has been changed from "no" to "yes" in Samba 3\&.0\&.14 and above\&. Microsoft Excel will display dialog box warnings about the file being changed by another user if this parameter is not set to "yes" and files are being shared between users\&. 2949 3239 .sp 2950 3240 Default: 2951 \fI\fIdos filetimes\fR\fR\fI = \fR\fI yes\fR\fI \fR3241 \fI\fIdos filetimes\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 2952 3242 .RE 2953 3243 … … 2961 3251 .sp 2962 3252 Default: 2963 \fI\fIea support\fR\fR\fI = \fR\fI no\fR\fI \fR3253 \fI\fIea support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2964 3254 .RE 2965 3255 … … 2971 3261 .sp 2972 3262 Default: 2973 \fI\fIenable asu support\fR\fR\fI = \fR\fI no\fR\fI \fR3263 \fI\fIenable asu support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2974 3264 .RE 2975 3265 … … 2982 3272 .sp 2983 3273 Default: 2984 \fI\fIenable core files\fR\fR\fI = \fR\fI yes\fR\fI \fR2985 .sp 2986 Example: 2987 \fI\fIenable core files\fR\fR\fI = \fR\fI no\fR\fI \fR3274 \fI\fIenable core files\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3275 .sp 3276 Example: 3277 \fI\fIenable core files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 2988 3278 .RE 2989 3279 … … 2993 3283 .RS 4 2994 3284 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 2995 net rpc rights 3285 \FCnet rpc rights\F[] 2996 3286 or one of the Windows user and group manager tools\&. This parameter is enabled by default\&. It can be disabled to prevent members of the Domain Admins group from being able to assign privileges to users or groups which can then result in certain smbd operations running as root that would normally run under the context of the connected user\&. 2997 3287 .sp … … 3001 3291 .sp 3002 3292 Default: 3003 \fI\fIenable privileges\fR\fR\fI = \fR\fI yes\fR\fI \fR3293 \fI\fIenable privileges\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3004 3294 .RE 3005 3295 … … 3012 3302 .sp 3013 3303 Default: 3014 \fI\fIenable spoolss\fR\fR\fI = \fR\fI yes\fR\fI \fR3304 \fI\fIenable spoolss\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3015 3305 .RE 3016 3306 … … 3034 3324 \m[blue]\fBsecurity = [server|domain|ads]\fR\m[] 3035 3325 parameter which causes 3036 smbd 3326 \FCsmbd\F[] 3037 3327 to authenticate against another server\&. 3038 3328 .sp 3039 3329 Default: 3040 \fI\fIencrypt passwords\fR\fR\fI = \fR\fI yes\fR\fI \fR3330 \fI\fIencrypt passwords\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3041 3331 .RE 3042 3332 … … 3054 3344 .sp 3055 3345 Default: 3056 \fI\fIenhanced browsing\fR\fR\fI = \fR\fI yes\fR\fI \fR3346 \fI\fIenhanced browsing\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3057 3347 .RE 3058 3348 … … 3061 3351 .PP 3062 3352 .RS 4 3063 The concept of a "port" is fairly foreign to UNIX hosts\&. Under Windows NT/2000 print servers, a port is associated with a port monitor and generally takes the form of a local port (i\&.e\&. LPT1:, COM1:, FILE:) or a remote port (i\&.e\&. LPD Port Monitor, etc\&.\&.\&.)\&. By default, Samba has only one port defined\-\-\fB"Samba Printer Port"\fR\&. Under Windows NT/2000, all printers must have a valid port name\&. If you wish to have a list of ports displayed ( smbd3353 The concept of a "port" is fairly foreign to UNIX hosts\&. Under Windows NT/2000 print servers, a port is associated with a port monitor and generally takes the form of a local port (i\&.e\&. LPT1:, COM1:, FILE:) or a remote port (i\&.e\&. LPD Port Monitor, etc\&.\&.\&.)\&. By default, Samba has only one port defined\-\-\fB"Samba Printer Port"\fR\&. Under Windows NT/2000, all printers must have a valid port name\&. If you wish to have a list of ports displayed (\FCsmbd \F[] 3064 3354 does not use a port name for anything) other than the default 3065 3355 \fB"Samba Printer Port"\fR, you can define … … 3068 3358 .sp 3069 3359 Default: 3070 \fI\fIenumports command\fR\fR\fI = \fR\fI\ fR\fI \fR3071 .sp 3072 Example: 3073 \fI\fIenumports command\fR\fR\fI = \fR\fI /usr/bin/listports\fR\fI \fR3360 \fI\fIenumports command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3361 .sp 3362 Example: 3363 \fI\fIenumports command\fR\fR\fI = \fR\fI\FC/usr/bin/listports\F[]\fR\fI \fR 3074 3364 .RE 3075 3365 … … 3079 3369 .RS 4 3080 3370 This option defines a list of log names that Samba will report to the Microsoft EventViewer utility\&. The listed eventlogs will be associated with tdb file on disk in the 3081 $(lockdir)/eventlog\&.3371 \FC$(lockdir)/eventlog\F[]\&. 3082 3372 .sp 3083 3373 The administrator must use an external process to parse the normal Unix logs such as 3084 /var/log/messages 3374 \FC/var/log/messages\F[] 3085 3375 and write then entries to the eventlog tdb files\&. Refer to the eventlogadm(8) utility for how to write eventlog entries\&. 3086 3376 .sp 3087 3377 Default: 3088 \fI\fIeventlog list\fR\fR\fI = \fR\fI\ fR\fI \fR3089 .sp 3090 Example: 3091 \fI\fIeventlog list\fR\fR\fI = \fR\fI Security Application Syslog Apache\fR\fI \fR3378 \fI\fIeventlog list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3379 .sp 3380 Example: 3381 \fI\fIeventlog list\fR\fR\fI = \fR\fI\FCSecurity Application Syslog Apache\F[]\fR\fI \fR 3092 3382 .RE 3093 3383 … … 3103 3393 .sp 3104 3394 Default: 3105 \fI\fIfake directory create times\fR\fR\fI = \fR\fI no\fR\fI \fR3395 \fI\fIfake directory create times\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3106 3396 .RE 3107 3397 … … 3113 3403 .sp 3114 3404 When you set 3115 fake oplocks = yes,3405 \FCfake oplocks = yes\F[], 3116 3406 \fBsmbd\fR(8) 3117 3407 will always grant oplock requests no matter how many clients are using the file\&. … … 3124 3414 .sp 3125 3415 Default: 3126 \fI\fIfake oplocks\fR\fR\fI = \fR\fI no\fR\fI \fR3416 \fI\fIfake oplocks\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3127 3417 .RE 3128 3418 … … 3136 3426 \fBno\fR 3137 3427 prevents any file or directory that is a symbolic link from being followed (the user will get an error)\&. This option is very useful to stop users from adding a symbolic link to 3138 /etc/passwd 3428 \FC/etc/passwd\F[] 3139 3429 in their home directory for instance\&. However it will slow filename lookups down slightly\&. 3140 3430 .sp 3141 3431 This option is enabled (i\&.e\&. 3142 smbd 3432 \FCsmbd\F[] 3143 3433 will follow symbolic links) by default\&. 3144 3434 .sp 3145 3435 Default: 3146 \fI\fIfollow symlinks\fR\fR\fI = \fR\fI yes\fR\fI \fR3436 \fI\fIfollow symlinks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3147 3437 .RE 3148 3438 … … 3160 3450 .sp 3161 3451 Default: 3162 \fI\fIforce create mode\fR\fR\fI = \fR\fI 000\fR\fI \fR3163 .sp 3164 Example: 3165 \fI\fIforce create mode\fR\fR\fI = \fR\fI 0755\fR\fI \fR3452 \fI\fIforce create mode\fR\fR\fI = \fR\fI\FC000\F[]\fR\fI \fR 3453 .sp 3454 Example: 3455 \fI\fIforce create mode\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR 3166 3456 .RE 3167 3457 … … 3179 3469 .sp 3180 3470 Default: 3181 \fI\fIforce directory mode\fR\fR\fI = \fR\fI 000\fR\fI \fR3182 .sp 3183 Example: 3184 \fI\fIforce directory mode\fR\fR\fI = \fR\fI 0755\fR\fI \fR3471 \fI\fIforce directory mode\fR\fR\fI = \fR\fI\FC000\F[]\fR\fI \fR 3472 .sp 3473 Example: 3474 \fI\fIforce directory mode\fR\fR\fI = \fR\fI\FC0755\F[]\fR\fI \fR 3185 3475 .RE 3186 3476 … … 3201 3491 .\} 3202 3492 .RS 4 3493 .BM yellow 3203 3494 .it 1 an-trap 3204 3495 .nr an-no-space-flag 1 … … 3211 3502 Users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems\&. Administrators of most normal systems will probably want to leave it set as 0000\&. 3212 3503 .sp .5v 3213 .RE 3214 Default: 3215 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI0\fR\fI \fR 3216 .sp 3217 Example: 3218 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI700\fR\fI \fR 3504 .EM yellow 3505 .RE 3506 Default: 3507 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 3508 .sp 3509 Example: 3510 \fI\fIforce directory security mode\fR\fR\fI = \fR\fI\FC700\F[]\fR\fI \fR 3219 3511 .RE 3220 3512 … … 3234 3526 .sp 3235 3527 In Samba 2\&.0\&.5 and above this parameter has extended functionality in the following way\&. If the group name listed here has a \'+\' character prepended to it then the current user accessing the share only has the primary group default assigned to this group if they are already assigned as a member of that group\&. This allows an administrator to decide that only users who are already in a particular group will create files with group ownership set to that group\&. This gives a finer granularity of ownership assignment\&. For example, the setting 3236 force group = +sys 3528 \FCforce group = +sys\F[] 3237 3529 means that only users who are already in group sys will have their default primary group assigned to sys when accessing this Samba share\&. All other users will retain their ordinary primary group\&. 3238 3530 .sp … … 3245 3537 .sp 3246 3538 Default: 3247 \fI\fIforce group\fR\fR\fI = \fR\fI\ fR\fI \fR3248 .sp 3249 Example: 3250 \fI\fIforce group\fR\fR\fI = \fR\fI agroup\fR\fI \fR3539 \fI\fIforce group\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3540 .sp 3541 Example: 3542 \fI\fIforce group\fR\fR\fI = \fR\fI\FCagroup\F[]\fR\fI \fR 3251 3543 .RE 3252 3544 … … 3256 3548 .RS 4 3257 3549 When printing from Windows NT (or later), each printer in 3258 smb\&.conf 3550 \FCsmb\&.conf\F[] 3259 3551 has two associated names which can be used by the client\&. The first is the sharename (or shortname) defined in smb\&.conf\&. This is the only printername available for use by Windows 9x clients\&. The second name associated with a printer can be seen when browsing to the "Printers" (or "Printers and Faxes") folder on the Samba server\&. This is referred to simply as the printername (not to be confused with the 3260 3552 \fIprinter name\fR … … 3269 3561 .sp 3270 3562 Default: 3271 \fI\fIforce printername\fR\fR\fI = \fR\fI no\fR\fI \fR3563 \fI\fIforce printername\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3272 3564 .RE 3273 3565 … … 3289 3581 .sp 3290 3582 Default: 3291 \fI\fIforce security mode\fR\fR\fI = \fR\fI 0\fR\fI \fR3292 .sp 3293 Example: 3294 \fI\fIforce security mode\fR\fR\fI = \fR\fI 700\fR\fI \fR3583 \fI\fIforce security mode\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 3584 .sp 3585 Example: 3586 \fI\fIforce security mode\fR\fR\fI = \fR\fI\FC700\F[]\fR\fI \fR 3295 3587 .RE 3296 3588 … … 3306 3598 .sp 3307 3599 Default: 3308 \fI\fIforce unknown acl user\fR\fR\fI = \fR\fI no\fR\fI \fR3600 \fI\fIforce unknown acl user\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3309 3601 .RE 3310 3602 … … 3320 3612 .sp 3321 3613 Default: 3322 \fI\fIforce user\fR\fR\fI = \fR\fI\ fR\fI \fR3323 .sp 3324 Example: 3325 \fI\fIforce user\fR\fR\fI = \fR\fI auser\fR\fI \fR3614 \fI\fIforce user\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3615 .sp 3616 Example: 3617 \fI\fIforce user\fR\fR\fI = \fR\fI\FCauser\F[]\fR\fI \fR 3326 3618 .RE 3327 3619 … … 3341 3633 .sp 3342 3634 Default: 3343 \fI\fIfstype\fR\fR\fI = \fR\fI NTFS\fR\fI \fR3344 .sp 3345 Example: 3346 \fI\fIfstype\fR\fR\fI = \fR\fI Samba\fR\fI \fR3635 \fI\fIfstype\fR\fR\fI = \fR\fI\FCNTFS\F[]\fR\fI \fR 3636 .sp 3637 Example: 3638 \fI\fIfstype\fR\fR\fI = \fR\fI\FCSamba\F[]\fR\fI \fR 3347 3639 .RE 3348 3640 … … 3352 3644 .RS 4 3353 3645 The 3354 get quota command 3646 \FCget quota command\F[] 3355 3647 should only be used whenever there is no operating system API available from the OS that samba can use\&. 3356 3648 .sp 3357 3649 This option is only available you have compiled Samba with the 3358 \ -\-with\-sys\-quotas3650 \FC\-\-with\-sys\-quotas\F[] 3359 3651 option or on Linux with 3360 \ -\-with\-quotas3652 \FC\-\-with\-quotas\F[] 3361 3653 and a working quota api was found in the system\&. 3362 3654 .sp … … 3535 3827 .RE 3536 3828 Default: 3537 \fI\fIget quota command\fR\fR\fI = \fR\fI\ fR\fI \fR3538 .sp 3539 Example: 3540 \fI\fIget quota command\fR\fR\fI = \fR\fI /usr/local/sbin/query_quota\fR\fI \fR3829 \fI\fIget quota command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 3830 .sp 3831 Example: 3832 \fI\fIget quota command\fR\fR\fI = \fR\fI\FC/usr/local/sbin/query_quota\F[]\fR\fI \fR 3541 3833 .RE 3542 3834 … … 3551 3843 .sp 3552 3844 Default: 3553 \fI\fIgetwd cache\fR\fR\fI = \fR\fI yes\fR\fI \fR3845 \fI\fIgetwd cache\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3554 3846 .RE 3555 3847 … … 3563 3855 .sp 3564 3856 On some systems the default guest account "nobody" may not be able to print\&. Use another account in this case\&. You should test this by trying to log in as your guest user (perhaps by using the 3565 su \- 3857 \FCsu \-\F[] 3566 3858 command) and trying to print using the system print command such as 3567 lpr(1) 3859 \FClpr(1)\F[] 3568 3860 or 3569 lp(1)\&.3861 \FC lp(1)\F[]\&. 3570 3862 .sp 3571 3863 This parameter does not accept % macros, because many parts of the system require this value to be constant for correct operation\&. 3572 3864 .sp 3573 3865 Default: 3574 \fI\fIguest account\fR\fR\fI = \fR\fI nobody # default can be changed at compile\-time\fR\fI \fR3575 .sp 3576 Example: 3577 \fI\fIguest account\fR\fR\fI = \fR\fI ftp\fR\fI \fR3866 \fI\fIguest account\fR\fR\fI = \fR\fI\FCnobody # default can be changed at compile\-time\F[]\fR\fI \fR 3867 .sp 3868 Example: 3869 \fI\fIguest account\fR\fR\fI = \fR\fI\FCftp\F[]\fR\fI \fR 3578 3870 .RE 3579 3871 … … 3603 3895 .sp 3604 3896 Default: 3605 \fI\fIguest ok\fR\fR\fI = \fR\fI no\fR\fI \fR3897 \fI\fIguest ok\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3606 3898 .RE 3607 3899 … … 3629 3921 .sp 3630 3922 Default: 3631 \fI\fIguest only\fR\fR\fI = \fR\fI no\fR\fI \fR3923 \fI\fIguest only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3632 3924 .RE 3633 3925 … … 3639 3931 .sp 3640 3932 Default: 3641 \fI\fIhide dot files\fR\fR\fI = \fR\fI yes\fR\fI \fR3933 \fI\fIhide dot files\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3642 3934 .RE 3643 3935 … … 3665 3957 .RS 4 3666 3958 .\} 3959 .fam C 3960 .ps -1 3667 3961 .nf 3962 .if t \{\ 3963 .sp -1 3964 .\} 3965 .BB lightgray adjust-for-leading-newline 3966 .sp -1 3967 3668 3968 hide files = /\&.*/DesktopFolderDB/TrashFor%m/resource\&.frk/ 3969 .EB lightgray adjust-for-leading-newline 3970 .if t \{\ 3971 .sp 1 3972 .\} 3669 3973 .fi 3974 .fam 3975 .ps +1 3670 3976 .if n \{\ 3671 3977 .RE … … 3673 3979 .sp 3674 3980 Default: 3675 \fI\fIhide files\fR\fR\fI = \fR\fI # no file are hidden\fR\fI \fR3981 \fI\fIhide files\fR\fR\fI = \fR\fI\FC # no file are hidden\F[]\fR\fI \fR 3676 3982 .RE 3677 3983 … … 3683 3989 .sp 3684 3990 Default: 3685 \fI\fIhide special files\fR\fR\fI = \fR\fI no\fR\fI \fR3991 \fI\fIhide special files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3686 3992 .RE 3687 3993 … … 3693 3999 .sp 3694 4000 Default: 3695 \fI\fIhide unreadable\fR\fR\fI = \fR\fI no\fR\fI \fR4001 \fI\fIhide unreadable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3696 4002 .RE 3697 4003 … … 3703 4009 .sp 3704 4010 Default: 3705 \fI\fIhide unwriteable files\fR\fR\fI = \fR\fI no\fR\fI \fR4011 \fI\fIhide unwriteable files\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 3706 4012 .RE 3707 4013 … … 3722 4028 .RS 4 3723 4029 .\} 4030 .fam C 4031 .ps -1 3724 4032 .nf 3725 username server:/some/file/system 4033 .if t \{\ 4034 .sp -1 4035 .\} 4036 .BB lightgray adjust-for-leading-newline 4037 .sp -1 4038 4039 \FCusername server:/some/file/system\F[] 4040 .EB lightgray adjust-for-leading-newline 4041 .if t \{\ 4042 .sp 1 4043 .\} 3726 4044 .fi 4045 .fam 4046 .ps +1 3727 4047 .if n \{\ 3728 4048 .RE … … 3734 4054 .\} 3735 4055 .RS 4 4056 .BM yellow 3736 4057 .it 1 an-trap 3737 4058 .nr an-no-space-flag 1 … … 3744 4065 A working NIS client is required on the system for this option to work\&. 3745 4066 .sp .5v 3746 .RE 3747 Default: 3748 \fI\fIhomedir map\fR\fR\fI = \fR\fI\fR\fI \fR 3749 .sp 3750 Example: 3751 \fI\fIhomedir map\fR\fR\fI = \fR\fIamd\&.homedir\fR\fI \fR 4067 .EM yellow 4068 .RE 4069 Default: 4070 \fI\fIhomedir map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4071 .sp 4072 Example: 4073 \fI\fIhomedir map\fR\fR\fI = \fR\fI\FCamd\&.homedir\F[]\fR\fI \fR 3752 4074 .RE 3753 4075 … … 3764 4086 .sp 3765 4087 Default: 3766 \fI\fIhost msdfs\fR\fR\fI = \fR\fI yes\fR\fI \fR4088 \fI\fIhost msdfs\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3767 4089 .RE 3768 4090 … … 3772 4094 .RS 4 3773 4095 Specifies whether samba should use (expensive) hostname lookups or use the ip addresses instead\&. An example place where hostname lookups are currently used is when checking the 3774 hosts deny 4096 \FChosts deny\F[] 3775 4097 and 3776 hosts allow\&.3777 .sp 3778 Default: 3779 \fI\fIhostname lookups\fR\fR\fI = \fR\fI no\fR\fI \fR3780 .sp 3781 Example: 3782 \fI\fIhostname lookups\fR\fR\fI = \fR\fI yes\fR\fI \fR4098 \FChosts allow\F[]\&. 4099 .sp 4100 Default: 4101 \fI\fIhostname lookups\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4102 .sp 4103 Example: 4104 \fI\fIhostname lookups\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 3783 4105 .RE 3784 4106 … … 3803 4125 .sp 3804 4126 You can specify the hosts by name or IP number\&. For example, you could restrict access to only the hosts on a Class C subnet with something like 3805 allow hosts = 150\&.203\&.5\&.\&. The full syntax of the list is described in the man page3806 hosts_access(5)\&. Note that this man page may not be present on your system, so a brief description will be given here also\&.4127 \FCallow hosts = 150\&.203\&.5\&.\F[]\&. The full syntax of the list is described in the man page 4128 \FChosts_access(5)\F[]\&. Note that this man page may not be present on your system, so a brief description will be given here also\&. 3807 4129 .sp 3808 4130 Note that the localhost address 127\&.0\&.0\&.1 will always be allowed access unless specifically denied by a … … 3816 4138 Example 1: allow all IPs in 150\&.203\&.*\&.*; except one 3817 4139 .sp 3818 hosts allow = 150\&.203\&. EXCEPT 150\&.203\&.6\&.66 4140 \FChosts allow = 150\&.203\&. EXCEPT 150\&.203\&.6\&.66\F[] 3819 4141 .sp 3820 4142 Example 2: allow hosts that match the given network/netmask 3821 4143 .sp 3822 hosts allow = 150\&.203\&.15\&.0/255\&.255\&.255\&.0 4144 \FChosts allow = 150\&.203\&.15\&.0/255\&.255\&.255\&.0\F[] 3823 4145 .sp 3824 4146 Example 3: allow a couple of hosts 3825 4147 .sp 3826 hosts allow = lapland, arvidsjaur 4148 \FChosts allow = lapland, arvidsjaur\F[] 3827 4149 .sp 3828 4150 Example 4: allow only hosts in NIS netgroup "foonet", but deny access from one particular host 3829 4151 .sp 3830 hosts allow = @foonet 3831 .sp 3832 hosts deny = pirate 4152 \FChosts allow = @foonet\F[] 4153 .sp 4154 \FChosts deny = pirate\F[] 3833 4155 .if n \{\ 3834 4156 .sp 3835 4157 .\} 3836 4158 .RS 4 4159 .BM yellow 3837 4160 .it 1 an-trap 3838 4161 .nr an-no-space-flag 1 … … 3845 4168 Note that access still requires suitable user\-level passwords\&. 3846 4169 .sp .5v 4170 .EM yellow 3847 4171 .RE 3848 4172 See … … 3851 4175 .sp 3852 4176 Default: 3853 \fI\fIhosts allow\fR\fR\fI = \fR\fI # none (i\&.e\&., all hosts permitted access)\fR\fI \fR3854 .sp 3855 Example: 3856 \fI\fIhosts allow\fR\fR\fI = \fR\fI 150\&.203\&.5\&. myhost\&.mynet\&.edu\&.au\fR\fI \fR4177 \fI\fIhosts allow\fR\fR\fI = \fR\fI\FC # none (i\&.e\&., all hosts permitted access)\F[]\fR\fI \fR 4178 .sp 4179 Example: 4180 \fI\fIhosts allow\fR\fR\fI = \fR\fI\FC150\&.203\&.5\&. myhost\&.mynet\&.edu\&.au\F[]\fR\fI \fR 3857 4181 .RE 3858 4182 … … 3878 4202 .sp 3879 4203 In the event that it is necessary to deny all by default, use the keyword ALL (or the netmask 3880 0\&.0\&.0\&.0/0) and then explicitly specify to the4204 \FC0\&.0\&.0\&.0/0\F[]) and then explicitly specify to the 3881 4205 \m[blue]\fBhosts allow = hosts allow\fR\m[] 3882 4206 parameter those hosts that should be permitted access\&. 3883 4207 .sp 3884 4208 Default: 3885 \fI\fIhosts deny\fR\fR\fI = \fR\fI # none (i\&.e\&., no hosts specifically excluded)\fR\fI \fR3886 .sp 3887 Example: 3888 \fI\fIhosts deny\fR\fR\fI = \fR\fI 150\&.203\&.4\&. badhost\&.mynet\&.edu\&.au\fR\fI \fR4209 \fI\fIhosts deny\fR\fR\fI = \fR\fI\FC # none (i\&.e\&., no hosts specifically excluded)\F[]\fR\fI \fR 4210 .sp 4211 Example: 4212 \fI\fIhosts deny\fR\fR\fI = \fR\fI\FC150\&.203\&.4\&. badhost\&.mynet\&.edu\&.au\F[]\fR\fI \fR 3889 4213 .RE 3890 4214 … … 3906 4230 .sp 3907 4231 Example: 3908 \fI\fIidmap alloc backend\fR\fR\fI = \fR\fI tdb\fR\fI \fR4232 \fI\fIidmap alloc backend\fR\fR\fI = \fR\fI\FCtdb\F[]\fR\fI \fR 3909 4233 .RE 3910 4234 … … 3948 4272 .sp 3949 4273 Default: 3950 \fI\fIidmap backend\fR\fR\fI = \fR\fI tdb\fR\fI \fR4274 \fI\fIidmap backend\fR\fR\fI = \fR\fI\FCtdb\F[]\fR\fI \fR 3951 4275 .RE 3952 4276 … … 3958 4282 .sp 3959 4283 Default: 3960 \fI\fIidmap cache time\fR\fR\fI = \fR\fI 604800 (one week)\fR\fI \fR4284 \fI\fIidmap cache time\fR\fR\fI = \fR\fI\FC604800 (one week)\F[]\fR\fI \fR 3961 4285 .RE 3962 4286 … … 3991 4315 .RS 4 3992 4316 .\} 4317 .fam C 4318 .ps -1 3993 4319 .nf 4320 .if t \{\ 4321 .sp -1 4322 .\} 4323 .BB lightgray adjust-for-leading-newline 4324 .sp -1 4325 3994 4326 idmap backend = tdb 3995 4327 idmap uid = 1000000\-1999999 … … 3999 4331 idmap config CORP : range = 1000\-999999 4000 4332 4333 .EB lightgray adjust-for-leading-newline 4334 .if t \{\ 4335 .sp 1 4336 .\} 4001 4337 .fi 4338 .fam 4339 .ps +1 4002 4340 .if n \{\ 4003 4341 .RE … … 4027 4365 .sp 4028 4366 Default: 4029 \fI\fIidmap gid\fR\fR\fI = \fR\fI\ fR\fI \fR4030 .sp 4031 Example: 4032 \fI\fIidmap gid\fR\fR\fI = \fR\fI 10000\-20000\fR\fI \fR4367 \fI\fIidmap gid\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4368 .sp 4369 Example: 4370 \fI\fIidmap gid\fR\fR\fI = \fR\fI\FC10000\-20000\F[]\fR\fI \fR 4033 4371 .RE 4034 4372 … … 4040 4378 .sp 4041 4379 Default: 4042 \fI\fIidmap negative cache time\fR\fR\fI = \fR\fI 120\fR\fI \fR4380 \fI\fIidmap negative cache time\fR\fR\fI = \fR\fI\FC120\F[]\fR\fI \fR 4043 4381 .RE 4044 4382 … … 4064 4402 .sp 4065 4403 Default: 4066 \fI\fIidmap uid\fR\fR\fI = \fR\fI\ fR\fI \fR4067 .sp 4068 Example: 4069 \fI\fIidmap uid\fR\fR\fI = \fR\fI 10000\-20000\fR\fI \fR4404 \fI\fIidmap uid\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4405 .sp 4406 Example: 4407 \fI\fIidmap uid\fR\fR\fI = \fR\fI\FC10000\-20000\F[]\fR\fI \fR 4070 4408 .RE 4071 4409 … … 4091 4429 .sp 4092 4430 Default: 4093 \fI\fIinclude\fR\fR\fI = \fR\fI\ fR\fI \fR4094 .sp 4095 Example: 4096 \fI\fIinclude\fR\fR\fI = \fR\fI /usr/local/samba/lib/admin_smb\&.conf\fR\fI \fR4431 \fI\fIinclude\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4432 .sp 4433 Example: 4434 \fI\fIinclude\fR\fR\fI = \fR\fI\FC/usr/local/samba/lib/admin_smb\&.conf\F[]\fR\fI \fR 4097 4435 .RE 4098 4436 … … 4104 4442 .sp 4105 4443 Default: 4106 \fI\fIinherit acls\fR\fR\fI = \fR\fI no\fR\fI \fR4444 \fI\fIinherit acls\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4107 4445 .RE 4108 4446 … … 4116 4454 .sp 4117 4455 Default: 4118 \fI\fIinherit owner\fR\fR\fI = \fR\fI no\fR\fI \fR4456 \fI\fIinherit owner\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4119 4457 .RE 4120 4458 … … 4147 4485 .sp 4148 4486 Default: 4149 \fI\fIinherit permissions\fR\fR\fI = \fR\fI no\fR\fI \fR4487 \fI\fIinherit permissions\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4150 4488 .RE 4151 4489 … … 4161 4499 .sp 4162 4500 Default: 4163 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\ fR\fI \fR4164 .sp 4165 Example: 4166 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI 150\&.203\&.5\&. myhost\&.mynet\&.de\fR\fI \fR4501 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4502 .sp 4503 Example: 4504 \fI\fIinit logon delayed hosts\fR\fR\fI = \fR\fI\FC150\&.203\&.5\&. myhost\&.mynet\&.de\F[]\fR\fI \fR 4167 4505 .RE 4168 4506 … … 4175 4513 .sp 4176 4514 Default: 4177 \fI\fIinit logon delay\fR\fR\fI = \fR\fI 100\fR\fI \fR4515 \fI\fIinit logon delay\fR\fR\fI = \fR\fI\FC100\F[]\fR\fI \fR 4178 4516 .RE 4179 4517 … … 4239 4577 .sp 4240 4578 Default: 4241 \fI\fIinterfaces\fR\fR\fI = \fR\fI\ fR\fI \fR4242 .sp 4243 Example: 4244 \fI\fIinterfaces\fR\fR\fI = \fR\fI eth0 192\&.168\&.2\&.10/24 192\&.168\&.3\&.10/255\&.255\&.255\&.0\fR\fI \fR4579 \fI\fIinterfaces\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4580 .sp 4581 Example: 4582 \fI\fIinterfaces\fR\fR\fI = \fR\fI\FCeth0 192\&.168\&.2\&.10/24 192\&.168\&.3\&.10/255\&.255\&.255\&.0\F[]\fR\fI \fR 4245 4583 .RE 4246 4584 … … 4265 4603 .sp 4266 4604 Default: 4267 \fI\fIinvalid users\fR\fR\fI = \fR\fI # no invalid users\fR\fI \fR4268 .sp 4269 Example: 4270 \fI\fIinvalid users\fR\fR\fI = \fR\fI root fred admin @wheel\fR\fI \fR4605 \fI\fIinvalid users\fR\fR\fI = \fR\fI\FC # no invalid users\F[]\fR\fI \fR 4606 .sp 4607 Example: 4608 \fI\fIinvalid users\fR\fR\fI = \fR\fI\FCroot fred admin @wheel\F[]\fR\fI \fR 4271 4609 .RE 4272 4610 … … 4281 4619 .sp 4282 4620 If set, this option overrides the ServerName option in the CUPS 4283 client\&.conf\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&.4284 .sp 4285 Default: 4286 \fI\fIiprint server\fR\fR\fI = \fR\fI ""\fR\fI \fR4287 .sp 4288 Example: 4289 \fI\fIiprint server\fR\fR\fI = \fR\fI MYCUPSSERVER\fR\fI \fR4621 \FCclient\&.conf\F[]\&. This is necessary if you have virtual samba servers that connect to different CUPS daemons\&. 4622 .sp 4623 Default: 4624 \fI\fIiprint server\fR\fR\fI = \fR\fI\FC""\F[]\fR\fI \fR 4625 .sp 4626 Example: 4627 \fI\fIiprint server\fR\fR\fI = \fR\fI\FCMYCUPSSERVER\F[]\fR\fI \fR 4290 4628 .RE 4291 4629 … … 4302 4640 .sp 4303 4641 Default: 4304 \fI\fIkeepalive\fR\fR\fI = \fR\fI 300\fR\fI \fR4305 .sp 4306 Example: 4307 \fI\fIkeepalive\fR\fR\fI = \fR\fI 600\fR\fI \fR4642 \fI\fIkeepalive\fR\fR\fI = \fR\fI\FC300\F[]\fR\fI \fR 4643 .sp 4644 Example: 4645 \fI\fIkeepalive\fR\fR\fI = \fR\fI\FC600\F[]\fR\fI \fR 4308 4646 .RE 4309 4647 … … 4367 4705 .sp 4368 4706 Default: 4369 \fI\fIkerberos method\fR\fR\fI = \fR\fI secrets only\fR\fI \fR4707 \fI\fIkerberos method\fR\fR\fI = \fR\fI\FCsecrets only\F[]\fR\fI \fR 4370 4708 .RE 4371 4709 … … 4379 4717 .sp 4380 4718 Default: 4381 \fI\fIkernel change notify\fR\fR\fI = \fR\fI yes\fR\fI \fR4719 \fI\fIkernel change notify\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 4382 4720 .RE 4383 4721 … … 4402 4740 .sp 4403 4741 Default: 4404 \fI\fIkernel oplocks\fR\fR\fI = \fR\fI yes\fR\fI \fR4742 \fI\fIkernel oplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 4405 4743 .RE 4406 4744 … … 4416 4754 .sp 4417 4755 When this parameter is set to 4418 no 4756 \FCno\F[] 4419 4757 this will also result in sambaLMPassword in Samba\'s passdb being blanked after the next password change\&. As a result of that lanman clients won\'t be able to authenticate, even if lanman auth is reenabled later on\&. 4420 4758 .sp 4421 4759 Unlike the 4422 encrypt passwords 4760 \FCencrypt passwords\F[] 4423 4761 option, this parameter cannot alter client behaviour, and the LANMAN response will still be sent over the network\&. See the 4424 client lanman auth 4762 \FCclient lanman auth\F[] 4425 4763 to disable this for Samba\'s clients (such as smbclient) 4426 4764 .sp 4427 4765 If this option, and 4428 ntlm auth 4766 \FCntlm auth\F[] 4429 4767 are both disabled, then only NTLMv2 logins will be permited\&. Not all clients support NTLMv2, and most will require special configuration to use it\&. 4430 4768 .sp 4431 4769 Default: 4432 \fI\fIlanman auth\fR\fR\fI = \fR\fI no\fR\fI \fR4770 \fI\fIlanman auth\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4433 4771 .RE 4434 4772 … … 4442 4780 .sp 4443 4781 Default: 4444 \fI\fIlarge readwrite\fR\fR\fI = \fR\fI yes\fR\fI \fR4782 \fI\fIlarge readwrite\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 4445 4783 .RE 4446 4784 … … 4454 4792 \m[blue]\fBldap admin dn\fR\m[] 4455 4793 is used in conjunction with the admin dn password stored in the 4456 private/secrets\&.tdb 4794 \FCprivate/secrets\&.tdb\F[] 4457 4795 file\&. See the 4458 4796 \fBsmbpasswd\fR(8) … … 4480 4818 .sp 4481 4819 Default: 4482 \fI\fIldap connection timeout\fR\fR\fI = \fR\fI 2\fR\fI \fR4820 \fI\fIldap connection timeout\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR 4483 4821 .RE 4484 4822 … … 4497 4835 .sp 4498 4836 Default: 4499 \fI\fIldap debug level\fR\fR\fI = \fR\fI 0\fR\fI \fR4500 .sp 4501 Example: 4502 \fI\fIldap debug level\fR\fR\fI = \fR\fI 1\fR\fI \fR4837 \fI\fIldap debug level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 4838 .sp 4839 Example: 4840 \fI\fIldap debug level\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR 4503 4841 .RE 4504 4842 … … 4512 4850 .sp 4513 4851 Default: 4514 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI 10\fR\fI \fR4515 .sp 4516 Example: 4517 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI 5\fR\fI \fR4852 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR 4853 .sp 4854 Example: 4855 \fI\fIldap debug threshold\fR\fR\fI = \fR\fI\FC5\F[]\fR\fI \fR 4518 4856 .RE 4519 4857 … … 4525 4863 .sp 4526 4864 Default: 4527 \fI\fIldap delete dn\fR\fR\fI = \fR\fI no\fR\fI \fR4865 \fI\fIldap delete dn\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4528 4866 .RE 4529 4867 … … 4541 4879 .sp 4542 4880 Default: 4543 \fI\fIldap deref\fR\fR\fI = \fR\fI auto\fR\fI \fR4544 .sp 4545 Example: 4546 \fI\fIldap deref\fR\fR\fI = \fR\fI searching\fR\fI \fR4881 \fI\fIldap deref\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 4882 .sp 4883 Example: 4884 \fI\fIldap deref\fR\fR\fI = \fR\fI\FCsearching\F[]\fR\fI \fR 4547 4885 .RE 4548 4886 … … 4559 4897 .sp 4560 4898 Default: 4561 \fI\fIldap follow referral\fR\fR\fI = \fR\fI auto\fR\fI \fR4562 .sp 4563 Example: 4564 \fI\fIldap follow referral\fR\fR\fI = \fR\fI off\fR\fI \fR4899 \fI\fIldap follow referral\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 4900 .sp 4901 Example: 4902 \fI\fIldap follow referral\fR\fR\fI = \fR\fI\FCoff\F[]\fR\fI \fR 4565 4903 .RE 4566 4904 … … 4576 4914 .sp 4577 4915 Default: 4578 \fI\fIldap group suffix\fR\fR\fI = \fR\fI\ fR\fI \fR4579 .sp 4580 Example: 4581 \fI\fIldap group suffix\fR\fR\fI = \fR\fI ou=Groups\fR\fI \fR4916 \fI\fIldap group suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4917 .sp 4918 Example: 4919 \fI\fIldap group suffix\fR\fR\fI = \fR\fI\FCou=Groups\F[]\fR\fI \fR 4582 4920 .RE 4583 4921 … … 4593 4931 .sp 4594 4932 Default: 4595 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\ fR\fI \fR4596 .sp 4597 Example: 4598 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI ou=Idmap\fR\fI \fR4933 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4934 .sp 4935 Example: 4936 \fI\fIldap idmap suffix\fR\fR\fI = \fR\fI\FCou=Idmap\F[]\fR\fI \fR 4599 4937 .RE 4600 4938 … … 4610 4948 .sp 4611 4949 Default: 4612 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI\ fR\fI \fR4613 .sp 4614 Example: 4615 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI ou=Computers\fR\fI \fR4950 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 4951 .sp 4952 Example: 4953 \fI\fIldap machine suffix\fR\fR\fI = \fR\fI\FCou=Computers\F[]\fR\fI \fR 4616 4954 .RE 4617 4955 … … 4625 4963 .sp 4626 4964 Default: 4627 \fI\fIldap page size\fR\fR\fI = \fR\fI 1024\fR\fI \fR4628 .sp 4629 Example: 4630 \fI\fIldap page size\fR\fR\fI = \fR\fI 512\fR\fI \fR4965 \fI\fIldap page size\fR\fR\fI = \fR\fI\FC1024\F[]\fR\fI \fR 4966 .sp 4967 Example: 4968 \fI\fIldap page size\fR\fR\fI = \fR\fI\FC512\F[]\fR\fI \fR 4631 4969 .RE 4632 4970 … … 4678 5016 .RE 4679 5017 Default: 4680 \fI\fIldap passwd sync\fR\fR\fI = \fR\fI no\fR\fI \fR5018 \fI\fIldap passwd sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4681 5019 .RE 4682 5020 … … 4692 5030 .sp 4693 5031 Default: 4694 \fI\fIldap replication sleep\fR\fR\fI = \fR\fI 1000\fR\fI \fR5032 \fI\fIldap replication sleep\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 4695 5033 .RE 4696 5034 … … 4702 5040 .sp 4703 5041 To use this option, a basic ldap tree must be provided and the ldap suffix parameters must be properly configured\&. On virgin servers the default users and groups (Administrator, Guest, Domain Users, Domain Admins, Domain Guests) can be precreated with the command 4704 net sam provision\&. To run this command the ldap server must be running, Winindd must be running and the smb\&.conf ldap options must be properly configured\&. The typical ldap setup used with the5042 \FCnet sam provision\F[]\&. To run this command the ldap server must be running, Winindd must be running and the smb\&.conf ldap options must be properly configured\&. The typical ldap setup used with the 4705 5043 \m[blue]\fBldapsam:trusted = yes\fR\m[] 4706 5044 option is usually sufficient to use … … 4713 5051 .RS 4 4714 5052 .\} 5053 .fam C 5054 .ps -1 4715 5055 .nf 5056 .if t \{\ 5057 .sp -1 5058 .\} 5059 .BB lightgray adjust-for-leading-newline 5060 .sp -1 5061 4716 5062 encrypt passwords = true 4717 5063 passdb backend = ldapsam … … 4733 5079 idmap gid = 5000\-50000 4734 5080 5081 .EB lightgray adjust-for-leading-newline 5082 .if t \{\ 5083 .sp 1 5084 .\} 4735 5085 .fi 5086 .fam 5087 .ps +1 4736 5088 .if n \{\ 4737 5089 .RE … … 4743 5095 .RS 4 4744 5096 .\} 5097 .fam C 5098 .ps -1 4745 5099 .nf 5100 .if t \{\ 5101 .sp -1 5102 .\} 5103 .BB lightgray adjust-for-leading-newline 5104 .sp -1 5105 4746 5106 dn: dc=samba,dc=org 4747 5107 objectClass: top … … 4778 5138 ou: computers 4779 5139 5140 .EB lightgray adjust-for-leading-newline 5141 .if t \{\ 5142 .sp 1 5143 .\} 4780 5144 .fi 5145 .fam 5146 .ps +1 4781 5147 .if n \{\ 4782 5148 .RE … … 4784 5150 .sp 4785 5151 Default: 4786 \fI\fIldapsam:editposix\fR\fR\fI = \fR\fI no\fR\fI \fR5152 \fI\fIldapsam:editposix\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4787 5153 .RE 4788 5154 … … 4800 5166 .sp 4801 5167 Default: 4802 \fI\fIldapsam:trusted\fR\fR\fI = \fR\fI no\fR\fI \fR5168 \fI\fIldapsam:trusted\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4803 5169 .RE 4804 5170 … … 4820 5186 .sp 4821 5187 Default: 4822 \fI\fIldap ssl ads\fR\fR\fI = \fR\fI no\fR\fI \fR5188 \fI\fIldap ssl ads\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 4823 5189 .RE 4824 5190 … … 4830 5196 \fINOT\fR 4831 5197 related to Samba\'s previous SSL support which was enabled by specifying the 4832 \ -\-with\-ssl5198 \FC\-\-with\-ssl\F[] 4833 5199 option to the 4834 configure 5200 \FCconfigure\F[] 4835 5201 script\&. 4836 5202 .sp … … 4885 5251 .sp 4886 5252 Default: 4887 \fI\fIldap ssl\fR\fR\fI = \fR\fI start tls\fR\fI \fR5253 \fI\fIldap ssl\fR\fR\fI = \fR\fI\FCstart tls\F[]\fR\fI \fR 4888 5254 .RE 4889 5255 … … 4902 5268 .sp 4903 5269 Default: 4904 \fI\fIldap suffix\fR\fR\fI = \fR\fI\ fR\fI \fR4905 .sp 4906 Example: 4907 \fI\fIldap suffix\fR\fR\fI = \fR\fI dc=samba,dc=org\fR\fI \fR5270 \fI\fIldap suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 5271 .sp 5272 Example: 5273 \fI\fIldap suffix\fR\fR\fI = \fR\fI\FCdc=samba,dc=org\F[]\fR\fI \fR 4908 5274 .RE 4909 5275 … … 4915 5281 .sp 4916 5282 Default: 4917 \fI\fIldap timeout\fR\fR\fI = \fR\fI 15\fR\fI \fR5283 \fI\fIldap timeout\fR\fR\fI = \fR\fI\FC15\F[]\fR\fI \fR 4918 5284 .RE 4919 5285 … … 4929 5295 .sp 4930 5296 Default: 4931 \fI\fIldap user suffix\fR\fR\fI = \fR\fI\ fR\fI \fR4932 .sp 4933 Example: 4934 \fI\fIldap user suffix\fR\fR\fI = \fR\fI ou=people\fR\fI \fR5297 \fI\fIldap user suffix\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 5298 .sp 5299 Example: 5300 \fI\fIldap user suffix\fR\fR\fI = \fR\fI\FCou=people\F[]\fR\fI \fR 4935 5301 .RE 4936 5302 … … 4959 5325 .sp 4960 5326 Default: 4961 \fI\fIlevel2 oplocks\fR\fR\fI = \fR\fI yes\fR\fI \fR5327 \fI\fIlevel2 oplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 4962 5328 .RE 4963 5329 … … 4983 5349 .sp 4984 5350 Default: 4985 \fI\fIlm announce\fR\fR\fI = \fR\fI auto\fR\fI \fR4986 .sp 4987 Example: 4988 \fI\fIlm announce\fR\fR\fI = \fR\fI yes\fR\fI \fR5351 \fI\fIlm announce\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 5352 .sp 5353 Example: 5354 \fI\fIlm announce\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 4989 5355 .RE 4990 5356 … … 5000 5366 .sp 5001 5367 Default: 5002 \fI\fIlm interval\fR\fR\fI = \fR\fI 60\fR\fI \fR5003 .sp 5004 Example: 5005 \fI\fIlm interval\fR\fR\fI = \fR\fI 120\fR\fI \fR5368 \fI\fIlm interval\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR 5369 .sp 5370 Example: 5371 \fI\fIlm interval\fR\fR\fI = \fR\fI\FC120\F[]\fR\fI \fR 5006 5372 .RE 5007 5373 … … 5015 5381 .sp 5016 5382 Default: 5017 \fI\fIload printers\fR\fR\fI = \fR\fI yes\fR\fI \fR5383 \fI\fIload printers\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 5018 5384 .RE 5019 5385 … … 5027 5393 \fBno\fR 5028 5394 then 5029 nmbd 5395 \FC nmbd\F[] 5030 5396 will not attempt to become a local master browser on a subnet and will also lose in all browsing elections\&. By default this value is set to 5031 5397 \fByes\fR\&. Setting this value to … … 5034 5400 \fIbecome\fR 5035 5401 the local master browser on a subnet, just that 5036 nmbd 5402 \FCnmbd\F[] 5037 5403 will 5038 5404 \fIparticipate\fR … … 5042 5408 \fBno\fR 5043 5409 will cause 5044 nmbd 5410 \FCnmbd\F[] 5045 5411 \fInever\fR 5046 5412 to become a local master browser\&. 5047 5413 .sp 5048 5414 Default: 5049 \fI\fIlocal master\fR\fR\fI = \fR\fI yes\fR\fI \fR5415 \fI\fIlocal master\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 5050 5416 .RE 5051 5417 … … 5069 5435 .sp 5070 5436 Default: 5071 \fI\fIlock directory\fR\fR\fI = \fR\fI ${prefix}/var/locks\fR\fI \fR5072 .sp 5073 Example: 5074 \fI\fIlock directory\fR\fR\fI = \fR\fI /var/run/samba/locks\fR\fI \fR5437 \fI\fIlock directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR 5438 .sp 5439 Example: 5440 \fI\fIlock directory\fR\fR\fI = \fR\fI\FC/var/run/samba/locks\F[]\fR\fI \fR 5075 5441 .RE 5076 5442 … … 5082 5448 .sp 5083 5449 If 5084 locking = no, all lock and unlock requests will appear to succeed and all lock queries will report that the file in question is available for locking\&.5450 \FClocking = no\F[], all lock and unlock requests will appear to succeed and all lock queries will report that the file in question is available for locking\&. 5085 5451 .sp 5086 5452 If 5087 locking = yes, real locking will be performed by the server\&.5453 \FClocking = yes\F[], real locking will be performed by the server\&. 5088 5454 .sp 5089 5455 This option … … 5108 5474 .sp 5109 5475 Default: 5110 \fI\fIlock spin count\fR\fR\fI = \fR\fI 0\fR\fI \fR5476 \fI\fIlock spin count\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 5111 5477 .RE 5112 5478 … … 5120 5486 .sp 5121 5487 Default: 5122 \fI\fIlock spin time\fR\fR\fI = \fR\fI 200\fR\fI \fR5488 \fI\fIlock spin time\fR\fR\fI = \fR\fI\FC200\F[]\fR\fI \fR 5123 5489 .RE 5124 5490 … … 5134 5500 .sp 5135 5501 Example: 5136 \fI\fIlog file\fR\fR\fI = \fR\fI /usr/local/samba/var/log\&.%m\fR\fI \fR5502 \fI\fIlog file\fR\fR\fI = \fR\fI\FC/usr/local/samba/var/log\&.%m\F[]\fR\fI \fR 5137 5503 .RE 5138 5504 … … 5150 5516 .RS 4 5151 5517 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 5152 smb\&.conf 5518 \FCsmb\&.conf\F[] 5153 5519 file\&. 5154 5520 .sp … … 5376 5742 .RE 5377 5743 Default: 5378 \fI\fIlog level\fR\fR\fI = \fR\fI 0\fR\fI \fR5379 .sp 5380 Example: 5381 \fI\fIlog level\fR\fR\fI = \fR\fI 3 passdb:5 auth:10 winbind:2\fR\fI \fR5744 \fI\fIlog level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 5745 .sp 5746 Example: 5747 \fI\fIlog level\fR\fR\fI = \fR\fI\FC3 passdb:5 auth:10 winbind:2\F[]\fR\fI \fR 5382 5748 .RE 5383 5749 … … 5392 5758 .sp 5393 5759 Default: 5394 \fI\fIlogon drive\fR\fR\fI = \fR\fI\ fR\fI \fR5395 .sp 5396 Example: 5397 \fI\fIlogon drive\fR\fR\fI = \fR\fI h:\fR\fI \fR5760 \fI\fIlogon drive\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 5761 .sp 5762 Example: 5763 \fI\fIlogon drive\fR\fR\fI = \fR\fI\FCh:\F[]\fR\fI \fR 5398 5764 .RE 5399 5765 … … 5405 5771 .sp 5406 5772 5407 C:\e>\fBNET USE H: /HOME\fR5773 \FCC:\e>\F[]\fBNET USE H: /HOME\fR 5408 5774 .sp 5409 5775 from a command prompt, for example\&. … … 5414 5780 .sp 5415 5781 5416 logon home = \e\e%N\e%U\eprofile 5782 \FClogon home = \e\e%N\e%U\eprofile\F[] 5417 5783 .sp 5418 5784 This tells Samba to return the above string, with substitutions made when a client requests the info, generally in a NetUserGetInfo request\&. Win9X clients truncate the info to \e\eserver\eshare when a user does 5419 net use /home 5785 \FCnet use /home\F[] 5420 5786 but use the whole string when dealing with profiles\&. 5421 5787 .sp … … 5424 5790 was returned rather than 5425 5791 \fIlogon home\fR\&. This broke 5426 net use /home 5792 \FCnet use /home\F[] 5427 5793 but allowed profiles outside the home directory\&. The current implementation is correct, and can be used for profiles if you use the above trick\&. 5428 5794 .sp … … 5434 5800 .sp 5435 5801 Default: 5436 \fI\fIlogon home\fR\fR\fI = \fR\fI\ e\e%N\e%U\fR\fI \fR5437 .sp 5438 Example: 5439 \fI\fIlogon home\fR\fR\fI = \fR\fI\ e\eremote_smb_server\e%U\fR\fI \fR5802 \fI\fIlogon home\fR\fR\fI = \fR\fI\FC\e\e%N\e%U\F[]\fR\fI \fR 5803 .sp 5804 Example: 5805 \fI\fIlogon home\fR\fR\fI = \fR\fI\FC\e\eremote_smb_server\e%U\F[]\fR\fI \fR 5440 5806 .RE 5441 5807 … … 5449 5815 .sp 5450 5816 This option takes the standard substitutions, allowing you to have separate logon scripts for each user or machine\&. It also specifies the directory from which the "Application Data", 5451 desktop,5452 start menu,5453 network neighborhood,5454 programs 5817 \FCdesktop\F[], 5818 \FCstart menu\F[], 5819 \FCnetwork neighborhood\F[], 5820 \FCprograms\F[] 5455 5821 and other folders, and their contents, are loaded and displayed on your Windows NT client\&. 5456 5822 .sp … … 5465 5831 .\} 5466 5832 .RS 4 5833 .BM yellow 5467 5834 .it 1 an-trap 5468 5835 .nr an-no-space-flag 1 … … 5477 5844 will break profile handling\&. Where the tdbsam or ldapsam passdb backend is used, at the time the user account is created the value configured for this parameter is written to the passdb backend and that value will over\-ride the parameter value present in the smb\&.conf file\&. Any error present in the passdb backend account record must be editted using the appropriate tool (pdbedit on the command\-line, or any other locally provided system tool)\&. 5478 5845 .sp .5v 5846 .EM yellow 5479 5847 .RE 5480 5848 Note that this option is only useful if Samba is set up as a domain controller\&. … … 5488 5856 .RS 4 5489 5857 .\} 5858 .fam C 5859 .ps -1 5490 5860 .nf 5861 .if t \{\ 5862 .sp -1 5863 .\} 5864 .BB lightgray adjust-for-leading-newline 5865 .sp -1 5866 5491 5867 logon path = \e\ePROFILESERVER\ePROFILE\e%U 5868 .EB lightgray adjust-for-leading-newline 5869 .if t \{\ 5870 .sp 1 5871 .\} 5492 5872 .fi 5873 .fam 5874 .ps +1 5493 5875 .if n \{\ 5494 5876 .RE … … 5496 5878 .sp 5497 5879 Default: 5498 \fI\fIlogon path\fR\fR\fI = \fR\fI\ e\e%N\e%U\eprofile\fR\fI \fR5880 \fI\fIlogon path\fR\fR\fI = \fR\fI\FC\e\e%N\e%U\eprofile\F[]\fR\fI \fR 5499 5881 .RE 5500 5882 … … 5503 5885 .PP 5504 5886 .RS 4 5505 This parameter specifies the batch file (\ &.bat) or NT command file (\&.cmd) to be downloaded and run on a machine when a user successfully logs in\&. The file must contain the DOS style CR/LF line endings\&. Using a DOS\-style editor to create the file is recommended\&.5887 This parameter specifies the batch file (\FC\&.bat\F[]) or NT command file (\FC\&.cmd\F[]) to be downloaded and run on a machine when a user successfully logs in\&. The file must contain the DOS style CR/LF line endings\&. Using a DOS\-style editor to create the file is recommended\&. 5506 5888 .sp 5507 5889 The script must be a relative path to the … … 5510 5892 \m[blue]\fBpath\fR\m[] 5511 5893 of 5512 /usr/local/samba/netlogon, and5894 \FC/usr/local/samba/netlogon\F[], and 5513 5895 \m[blue]\fBlogon script = STARTUP\&.BAT\fR\m[], then the file that will be downloaded is: 5514 5896 .sp … … 5516 5898 .RS 4 5517 5899 .\} 5900 .fam C 5901 .ps -1 5518 5902 .nf 5903 .if t \{\ 5904 .sp -1 5905 .\} 5906 .BB lightgray adjust-for-leading-newline 5907 .sp -1 5908 5519 5909 /usr/local/samba/netlogon/STARTUP\&.BAT 5910 .EB lightgray adjust-for-leading-newline 5911 .if t \{\ 5912 .sp 1 5913 .\} 5520 5914 .fi 5915 .fam 5916 .ps +1 5521 5917 .if n \{\ 5522 5918 .RE … … 5524 5920 .sp 5525 5921 The contents of the batch file are entirely your choice\&. A suggested command would be to add 5526 NET TIME \e\eSERVER /SET /YES, to force every machine to synchronize clocks with the same time server\&. Another use would be to add5527 NET USE U: \e\eSERVER\eUTILS 5922 \FCNET TIME \e\eSERVER /SET /YES\F[], to force every machine to synchronize clocks with the same time server\&. Another use would be to add 5923 \FCNET USE U: \e\eSERVER\eUTILS\F[] 5528 5924 for commonly used utilities, or 5529 5925 .sp … … 5531 5927 .RS 4 5532 5928 .\} 5929 .fam C 5930 .ps -1 5533 5931 .nf 5932 .if t \{\ 5933 .sp -1 5934 .\} 5935 .BB lightgray adjust-for-leading-newline 5936 .sp -1 5937 5534 5938 \fBNET USE Q: \e\eSERVER\eISO9001_QA\fR 5939 .EB lightgray adjust-for-leading-newline 5940 .if t \{\ 5941 .sp 1 5942 .\} 5535 5943 .fi 5944 .fam 5945 .ps +1 5536 5946 .if n \{\ 5537 5947 .RE … … 5547 5957 .sp 5548 5958 Default: 5549 \fI\fIlogon script\fR\fR\fI = \fR\fI\ fR\fI \fR5550 .sp 5551 Example: 5552 \fI\fIlogon script\fR\fR\fI = \fR\fI scripts\e%U\&.bat\fR\fI \fR5959 \fI\fIlogon script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 5960 .sp 5961 Example: 5962 \fI\fIlogon script\fR\fR\fI = \fR\fI\FCscripts\e%U\&.bat\F[]\fR\fI \fR 5553 5963 .RE 5554 5964 … … 5573 5983 .sp 5574 5984 Default: 5575 \fI\fIlppause command\fR\fR\fI = \fR\fI # Currently no default value is given to this string, unless the value of the \m[blue]\fBprinting\fR\m[] parameter is \fBSYSV\fR, in which case the default is : lp \-i %p\-%j \-H hold or if the value of the \fIprinting\fR parameter is \fBSOFTQ\fR, then the default is: qstat \-s \-j%j \-h\&.\fR\fI \fR5576 .sp 5577 Example: 5578 \fI\fIlppause command\fR\fR\fI = \fR\fI /usr/bin/lpalt %p\-%j \-p0\fR\fI \fR5985 \fI\fIlppause command\fR\fR\fI = \fR\fI\FC # Currently no default value is given to this string, unless the value of the \m[blue]\fBprinting\fR\m[] parameter is \fBSYSV\fR, in which case the default is : \FClp \-i %p\-%j \-H hold\F[] or if the value of the \fIprinting\fR parameter is \fBSOFTQ\fR, then the default is: \FCqstat \-s \-j%j \-h\F[]\&. \F[]\fR\fI \fR 5986 .sp 5987 Example: 5988 \fI\fIlppause command\fR\fR\fI = \fR\fI\FC/usr/bin/lpalt %p\-%j \-p0\F[]\fR\fI \fR 5579 5989 .RE 5580 5990 … … 5584 5994 .RS 4 5585 5995 This controls how long lpq info will be cached for to prevent the 5586 lpq 5996 \FClpq\F[] 5587 5997 command being called too often\&. A separate cache is kept for each variation of the 5588 lpq 5998 \FC lpq\F[] 5589 5999 command used by the system, so if you use different 5590 lpq 6000 \FClpq\F[] 5591 6001 commands for different users then they won\'t share cache information\&. 5592 6002 .sp 5593 6003 The cache files are stored in 5594 /tmp/lpq\&.xxxx 6004 \FC/tmp/lpq\&.xxxx\F[] 5595 6005 where xxxx is a hash of the 5596 lpq 6006 \FClpq\F[] 5597 6007 command in use\&. 5598 6008 .sp 5599 6009 The default is 30 seconds, meaning that the cached results of a previous identical 5600 lpq 6010 \FClpq\F[] 5601 6011 command will be used if the cached data is less than 30 seconds old\&. A large value may be advisable if your 5602 lpq 6012 \FClpq\F[] 5603 6013 command is very slow\&. 5604 6014 .sp … … 5606 6016 .sp 5607 6017 Default: 5608 \fI\fIlpq cache time\fR\fR\fI = \fR\fI 30\fR\fI \fR5609 .sp 5610 Example: 5611 \fI\fIlpq cache time\fR\fR\fI = \fR\fI 10\fR\fI \fR6018 \fI\fIlpq cache time\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR 6019 .sp 6020 Example: 6021 \fI\fIlpq cache time\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR 5612 6022 .RE 5613 6023 … … 5617 6027 .RS 4 5618 6028 This parameter specifies the command to be executed on the server host in order to obtain 5619 lpq\-style printer status information\&.6029 \FClpq \F[]\-style printer status information\&. 5620 6030 .sp 5621 6031 This command should be a program or script which takes a printer name as its only parameter and outputs printer status information\&. … … 5640 6050 .sp 5641 6051 Default: 5642 \fI\fIlpq command\fR\fR\fI = \fR\fI\ fR\fI \fR5643 .sp 5644 Example: 5645 \fI\fIlpq command\fR\fR\fI = \fR\fI /usr/bin/lpq \-P%p\fR\fI \fR6052 \fI\fIlpq command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 6053 .sp 6054 Example: 6055 \fI\fIlpq command\fR\fR\fI = \fR\fI\FC/usr/bin/lpq \-P%p\F[]\fR\fI \fR 5646 6056 .RE 5647 6057 … … 5675 6085 \fBSYSV\fR, in which case the default is: 5676 6086 .sp 5677 lp \-i %p\-%j \-H resume 6087 \FClp \-i %p\-%j \-H resume\F[] 5678 6088 .sp 5679 6089 or if the value of the … … 5682 6092 \fBSOFTQ\fR, then the default is: 5683 6093 .sp 5684 qstat \-s \-j%j \-r 6094 \FCqstat \-s \-j%j \-r\F[] 5685 6095 .sp 5686 6096 \fINo default\fR 5687 6097 .sp 5688 6098 Example: 5689 \fI\fIlpresume command\fR\fR\fI = \fR\fI /usr/bin/lpalt %p\-%j \-p2\fR\fI \fR6099 \fI\fIlpresume command\fR\fR\fI = \fR\fI\FC/usr/bin/lpalt %p\-%j \-p2\F[]\fR\fI \fR 5690 6100 .RE 5691 6101 … … 5713 6123 .RS 4 5714 6124 .\} 6125 .fam C 6126 .ps -1 5715 6127 .nf 6128 .if t \{\ 6129 .sp -1 6130 .\} 6131 .BB lightgray adjust-for-leading-newline 6132 .sp -1 6133 5716 6134 lprm command = /usr/bin/lprm \-P%p %j 5717 6135 … … 5719 6137 5720 6138 lprm command = /usr/bin/cancel %p\-%j 6139 .EB lightgray adjust-for-leading-newline 6140 .if t \{\ 6141 .sp 1 6142 .\} 5721 6143 .fi 6144 .fam 6145 .ps +1 5722 6146 .if n \{\ 5723 6147 .RE … … 5725 6149 .sp 5726 6150 Default: 5727 \fI\fIlprm command\fR\fR\fI = \fR\fI determined by printing parameter\fR\fI \fR6151 \fI\fIlprm command\fR\fR\fI = \fR\fI\FC determined by printing parameter\F[]\fR\fI \fR 5728 6152 .RE 5729 6153 … … 5735 6159 \m[blue]\fBsecurity = domain\fR\m[] 5736 6160 parameter) then periodically a running smbd process will try and change the MACHINE ACCOUNT PASSWORD stored in the TDB called 5737 private/secrets\&.tdb\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&.6161 \FCprivate/secrets\&.tdb \F[]\&. This parameter specifies how often this password will be changed, in seconds\&. The default is one week (expressed in seconds), the same as a Windows NT Domain member server\&. 5738 6162 .sp 5739 6163 See also … … 5743 6167 .sp 5744 6168 Default: 5745 \fI\fImachine password timeout\fR\fR\fI = \fR\fI 604800\fR\fI \fR6169 \fI\fImachine password timeout\fR\fR\fI = \fR\fI\FC604800\F[]\fR\fI \fR 5746 6170 .RE 5747 6171 … … 5757 6181 .\} 5758 6182 .RS 4 6183 .BM yellow 5759 6184 .it 1 an-trap 5760 6185 .nr an-no-space-flag 1 … … 5769 6194 in the same directory the output file content is undefined\&. 5770 6195 .sp .5v 5771 .RE 5772 Default: 5773 \fI\fImagic output\fR\fR\fI = \fR\fI<magic script name>\&.out\fR\fI \fR 5774 .sp 5775 Example: 5776 \fI\fImagic output\fR\fR\fI = \fR\fImyfile\&.txt\fR\fI \fR 6196 .EM yellow 6197 .RE 6198 Default: 6199 \fI\fImagic output\fR\fR\fI = \fR\fI\FC<magic script name>\&.out\F[]\fR\fI \fR 6200 .sp 6201 Example: 6202 \fI\fImagic output\fR\fR\fI = \fR\fI\FCmyfile\&.txt\F[]\fR\fI \fR 5777 6203 .RE 5778 6204 … … 5800 6226 .sp 5801 6227 Default: 5802 \fI\fImagic script\fR\fR\fI = \fR\fI\ fR\fI \fR5803 .sp 5804 Example: 5805 \fI\fImagic script\fR\fR\fI = \fR\fI user\&.csh\fR\fI \fR6228 \fI\fImagic script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 6229 .sp 6230 Example: 6231 \fI\fImagic script\fR\fR\fI = \fR\fI\FCuser\&.csh\F[]\fR\fI \fR 5806 6232 .RE 5807 6233 … … 5862 6288 .sp 5863 6289 Default: 5864 \fI\fImangled names\fR\fR\fI = \fR\fI yes\fR\fI \fR6290 \fI\fImangled names\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 5865 6291 .RE 5866 6292 … … 5874 6300 .sp 5875 6301 Default: 5876 \fI\fImangle prefix\fR\fR\fI = \fR\fI 1\fR\fI \fR5877 .sp 5878 Example: 5879 \fI\fImangle prefix\fR\fR\fI = \fR\fI 4\fR\fI \fR6302 \fI\fImangle prefix\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR 6303 .sp 6304 Example: 6305 \fI\fImangle prefix\fR\fR\fI = \fR\fI\FC4\F[]\fR\fI \fR 5880 6306 .RE 5881 6307 … … 5890 6316 .sp 5891 6317 Default: 5892 \fI\fImangling char\fR\fR\fI = \fR\fI ~\fR\fI \fR5893 .sp 5894 Example: 5895 \fI\fImangling char\fR\fR\fI = \fR\fI ^\fR\fI \fR6318 \fI\fImangling char\fR\fR\fI = \fR\fI\FC~\F[]\fR\fI \fR 6319 .sp 6320 Example: 6321 \fI\fImangling char\fR\fR\fI = \fR\fI\FC^\F[]\fR\fI \fR 5896 6322 .RE 5897 6323 … … 5903 6329 .sp 5904 6330 Default: 5905 \fI\fImangling method\fR\fR\fI = \fR\fI hash2\fR\fI \fR5906 .sp 5907 Example: 5908 \fI\fImangling method\fR\fR\fI = \fR\fI hash\fR\fI \fR6331 \fI\fImangling method\fR\fR\fI = \fR\fI\FChash2\F[]\fR\fI \fR 6332 .sp 6333 Example: 6334 \fI\fImangling method\fR\fR\fI = \fR\fI\FChash\F[]\fR\fI \fR 5909 6335 .RE 5910 6336 … … 5918 6344 .sp 5919 6345 Default: 5920 \fI\fImap acl inherit\fR\fR\fI = \fR\fI no\fR\fI \fR6346 \fI\fImap acl inherit\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 5921 6347 .RE 5922 6348 … … 5934 6360 .sp 5935 6361 Default: 5936 \fI\fImap archive\fR\fR\fI = \fR\fI yes\fR\fI \fR6362 \fI\fImap archive\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 5937 6363 .RE 5938 6364 … … 6016 6442 .RE 6017 6443 Default: 6018 \fI\fImap readonly\fR\fR\fI = \fR\fI yes\fR\fI \fR6444 \fI\fImap readonly\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6019 6445 .RE 6020 6446 … … 6032 6458 .sp 6033 6459 Default: 6034 \fI\fImap system\fR\fR\fI = \fR\fI no\fR\fI \fR6460 \fI\fImap system\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6035 6461 .RE 6036 6462 … … 6122 6548 .sp 6123 6549 Default: 6124 \fI\fImap to guest\fR\fR\fI = \fR\fI Never\fR\fI \fR6125 .sp 6126 Example: 6127 \fI\fImap to guest\fR\fR\fI = \fR\fI Bad User\fR\fI \fR6550 \fI\fImap to guest\fR\fR\fI = \fR\fI\FCNever\F[]\fR\fI \fR 6551 .sp 6552 Example: 6553 \fI\fImap to guest\fR\fR\fI = \fR\fI\FCBad User\F[]\fR\fI \fR 6128 6554 .RE 6129 6555 … … 6141 6567 .sp 6142 6568 Default: 6143 \fI\fImap untrusted to domain\fR\fR\fI = \fR\fI no\fR\fI \fR6569 \fI\fImap untrusted to domain\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6144 6570 .RE 6145 6571 … … 6157 6583 .sp 6158 6584 Default: 6159 \fI\fImax connections\fR\fR\fI = \fR\fI 0\fR\fI \fR6160 .sp 6161 Example: 6162 \fI\fImax connections\fR\fR\fI = \fR\fI 10\fR\fI \fR6585 \fI\fImax connections\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6586 .sp 6587 Example: 6588 \fI\fImax connections\fR\fR\fI = \fR\fI\FC10\F[]\fR\fI \fR 6163 6589 .RE 6164 6590 … … 6179 6605 .sp 6180 6606 Default: 6181 \fI\fImax disk size\fR\fR\fI = \fR\fI 0\fR\fI \fR6182 .sp 6183 Example: 6184 \fI\fImax disk size\fR\fR\fI = \fR\fI 1000\fR\fI \fR6607 \fI\fImax disk size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6608 .sp 6609 Example: 6610 \fI\fImax disk size\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 6185 6611 .RE 6186 6612 … … 6190 6616 .RS 4 6191 6617 This option (an integer in kilobytes) specifies the max size the log file should grow to\&. Samba periodically checks the size and if it is exceeded it will rename the file, adding a 6192 \ &.old6618 \FC\&.old\F[] 6193 6619 extension\&. 6194 6620 .sp … … 6196 6622 .sp 6197 6623 Default: 6198 \fI\fImax log size\fR\fR\fI = \fR\fI 5000\fR\fI \fR6199 .sp 6200 Example: 6201 \fI\fImax log size\fR\fR\fI = \fR\fI 1000\fR\fI \fR6624 \fI\fImax log size\fR\fR\fI = \fR\fI\FC5000\F[]\fR\fI \fR 6625 .sp 6626 Example: 6627 \fI\fImax log size\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 6202 6628 .RE 6203 6629 … … 6209 6635 .sp 6210 6636 Default: 6211 \fI\fImax mux\fR\fR\fI = \fR\fI 50\fR\fI \fR6637 \fI\fImax mux\fR\fR\fI = \fR\fI\FC50\F[]\fR\fI \fR 6212 6638 .RE 6213 6639 … … 6223 6649 .sp 6224 6650 Default: 6225 \fI\fImax open files\fR\fR\fI = \fR\fI 16404\fR\fI \fR6651 \fI\fImax open files\fR\fR\fI = \fR\fI\FC16404\F[]\fR\fI \fR 6226 6652 .RE 6227 6653 … … 6235 6661 .sp 6236 6662 Default: 6237 \fI\fImax print jobs\fR\fR\fI = \fR\fI 1000\fR\fI \fR6238 .sp 6239 Example: 6240 \fI\fImax print jobs\fR\fR\fI = \fR\fI 5000\fR\fI \fR6663 \fI\fImax print jobs\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 6664 .sp 6665 Example: 6666 \fI\fImax print jobs\fR\fR\fI = \fR\fI\FC5000\F[]\fR\fI \fR 6241 6667 .RE 6242 6668 … … 6328 6754 .sp 6329 6755 Default: 6330 \fI\fImax protocol\fR\fR\fI = \fR\fI NT1\fR\fI \fR6331 .sp 6332 Example: 6333 \fI\fImax protocol\fR\fR\fI = \fR\fI LANMAN1\fR\fI \fR6756 \fI\fImax protocol\fR\fR\fI = \fR\fI\FCNT1\F[]\fR\fI \fR 6757 .sp 6758 Example: 6759 \fI\fImax protocol\fR\fR\fI = \fR\fI\FCLANMAN1\F[]\fR\fI \fR 6334 6760 .RE 6335 6761 … … 6341 6767 .sp 6342 6768 Default: 6343 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI 0\fR\fI \fR6344 .sp 6345 Example: 6346 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI 1000\fR\fI \fR6769 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6770 .sp 6771 Example: 6772 \fI\fImax reported print jobs\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 6347 6773 .RE 6348 6774 … … 6358 6784 .sp 6359 6785 Default: 6360 \fI\fImax smbd processes\fR\fR\fI = \fR\fI 0\fR\fI \fR6361 .sp 6362 Example: 6363 \fI\fImax smbd processes\fR\fR\fI = \fR\fI 1000\fR\fI \fR6786 \fI\fImax smbd processes\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6787 .sp 6788 Example: 6789 \fI\fImax smbd processes\fR\fR\fI = \fR\fI\FC1000\F[]\fR\fI \fR 6364 6790 .RE 6365 6791 … … 6373 6799 .sp 6374 6800 Default: 6375 \fI\fImax stat cache size\fR\fR\fI = \fR\fI 256\fR\fI \fR6376 .sp 6377 Example: 6378 \fI\fImax stat cache size\fR\fR\fI = \fR\fI 100\fR\fI \fR6801 \fI\fImax stat cache size\fR\fR\fI = \fR\fI\FC256\F[]\fR\fI \fR 6802 .sp 6803 Example: 6804 \fI\fImax stat cache size\fR\fR\fI = \fR\fI\FC100\F[]\fR\fI \fR 6379 6805 .RE 6380 6806 … … 6386 6812 \fBnmbd\fR(8) 6387 6813 what the default \'time to live\' of NetBIOS names should be (in seconds) when 6388 nmbd 6814 \FCnmbd\F[] 6389 6815 is requesting a name using either a broadcast packet or from a WINS server\&. You should never need to change this parameter\&. The default is 3 days\&. 6390 6816 .sp 6391 6817 Default: 6392 \fI\fImax ttl\fR\fR\fI = \fR\fI 259200\fR\fI \fR6818 \fI\fImax ttl\fR\fR\fI = \fR\fI\FC259200\F[]\fR\fI \fR 6393 6819 .RE 6394 6820 … … 6400 6826 \fBsmbd\fR(8) 6401 6827 when acting as a WINS server (\m[blue]\fBwins support = yes\fR\m[]) what the maximum \'time to live\' of NetBIOS names that 6402 nmbd 6828 \FCnmbd\F[] 6403 6829 will grant will be (in seconds)\&. You should never need to change this parameter\&. The default is 6 days (518400 seconds)\&. 6404 6830 .sp 6405 6831 Default: 6406 \fI\fImax wins ttl\fR\fR\fI = \fR\fI 518400\fR\fI \fR6832 \fI\fImax wins ttl\fR\fR\fI = \fR\fI\FC518400\F[]\fR\fI \fR 6407 6833 .RE 6408 6834 … … 6414 6840 .sp 6415 6841 Default: 6416 \fI\fImax xmit\fR\fR\fI = \fR\fI 16644\fR\fI \fR6417 .sp 6418 Example: 6419 \fI\fImax xmit\fR\fR\fI = \fR\fI 8192\fR\fI \fR6842 \fI\fImax xmit\fR\fR\fI = \fR\fI\FC16644\F[]\fR\fI \fR 6843 .sp 6844 Example: 6845 \fI\fImax xmit\fR\fR\fI = \fR\fI\FC8192\F[]\fR\fI \fR 6420 6846 .RE 6421 6847 … … 6433 6859 .RS 4 6434 6860 .\} 6861 .fam C 6862 .ps -1 6435 6863 .nf 6436 message command = csh \-c \'xedit %s;rm %s\' & 6864 .if t \{\ 6865 .sp -1 6866 .\} 6867 .BB lightgray adjust-for-leading-newline 6868 .sp -1 6869 6870 \FCmessage command = csh \-c \'xedit %s;rm %s\' &\F[] 6871 .EB lightgray adjust-for-leading-newline 6872 .if t \{\ 6873 .sp 1 6874 .\} 6437 6875 .fi 6876 .fam 6877 .ps +1 6438 6878 .if n \{\ 6439 6879 .RE … … 6441 6881 .sp 6442 6882 This delivers the message using 6443 xedit, then removes it afterwards\&.6883 \FCxedit\F[], then removes it afterwards\&. 6444 6884 \fINOTE THAT IT IS VERY IMPORTANT THAT THIS COMMAND RETURN IMMEDIATELY\fR\&. That\'s why I have the \'&\' on the end\&. If it doesn\'t return immediately then your PCs may freeze when sending messages (they should recover after 30 seconds, hopefully)\&. 6445 6885 .sp … … 6494 6934 .RS 4 6495 6935 .\} 6936 .fam C 6937 .ps -1 6496 6938 .nf 6497 message command = /bin/mail \-s \'message from %f on %m\' root < %s; rm %s 6939 .if t \{\ 6940 .sp -1 6941 .\} 6942 .BB lightgray adjust-for-leading-newline 6943 .sp -1 6944 6945 \FCmessage command = /bin/mail \-s \'message from %f on %m\' root < %s; rm %s\F[] 6946 .EB lightgray adjust-for-leading-newline 6947 .if t \{\ 6948 .sp 1 6949 .\} 6498 6950 .fi 6951 .fam 6952 .ps +1 6499 6953 .if n \{\ 6500 6954 .RE … … 6508 6962 .RS 4 6509 6963 .\} 6964 .fam C 6965 .ps -1 6510 6966 .nf 6511 message command = rm %s 6967 .if t \{\ 6968 .sp -1 6969 .\} 6970 .BB lightgray adjust-for-leading-newline 6971 .sp -1 6972 6973 \FCmessage command = rm %s\F[] 6974 .EB lightgray adjust-for-leading-newline 6975 .if t \{\ 6976 .sp 1 6977 .\} 6512 6978 .fi 6979 .fam 6980 .ps +1 6513 6981 .if n \{\ 6514 6982 .RE … … 6516 6984 .sp 6517 6985 Default: 6518 \fI\fImessage command\fR\fR\fI = \fR\fI\ fR\fI \fR6519 .sp 6520 Example: 6521 \fI\fImessage command\fR\fR\fI = \fR\fI csh \-c \'xedit %s; rm %s\' &\fR\fI \fR6986 \fI\fImessage command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 6987 .sp 6988 Example: 6989 \fI\fImessage command\fR\fR\fI = \fR\fI\FCcsh \-c \'xedit %s; rm %s\' &\F[]\fR\fI \fR 6522 6990 .RE 6523 6991 … … 6529 6997 .sp 6530 6998 Default: 6531 \fI\fImin print space\fR\fR\fI = \fR\fI 0\fR\fI \fR6532 .sp 6533 Example: 6534 \fI\fImin print space\fR\fR\fI = \fR\fI 2000\fR\fI \fR6999 \fI\fImin print space\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 7000 .sp 7001 Example: 7002 \fI\fImin print space\fR\fR\fI = \fR\fI\FC2000\F[]\fR\fI \fR 6535 7003 .RE 6536 7004 … … 6542 7010 \m[blue]\fBmax protocol\fR\m[] 6543 7011 parameter for a list of valid protocol names and a brief description of each\&. You may also wish to refer to the C source code in 6544 source/smbd/negprot\&.c 7012 \FCsource/smbd/negprot\&.c\F[] 6545 7013 for a listing of known protocol dialects supported by clients\&. 6546 7014 .sp … … 6550 7018 .sp 6551 7019 Default: 6552 \fI\fImin protocol\fR\fR\fI = \fR\fI CORE\fR\fI \fR6553 .sp 6554 Example: 6555 \fI\fImin protocol\fR\fR\fI = \fR\fI NT1\fR\fI \fR7020 \fI\fImin protocol\fR\fR\fI = \fR\fI\FCCORE\F[]\fR\fI \fR 7021 .sp 7022 Example: 7023 \fI\fImin protocol\fR\fR\fI = \fR\fI\FCNT1\F[]\fR\fI \fR 6556 7024 .RE 6557 7025 … … 6569 7037 .sp 6570 7038 Default: 6571 \fI\fImin receivefile size\fR\fR\fI = \fR\fI 0\fR\fI \fR7039 \fI\fImin receivefile size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6572 7040 .RE 6573 7041 … … 6579 7047 \fBnmbd\fR(8) 6580 7048 when acting as a WINS server (\m[blue]\fBwins support = yes\fR\m[]) what the minimum \'time to live\' of NetBIOS names that 6581 nmbd 7049 \FCnmbd\F[] 6582 7050 will grant will be (in seconds)\&. You should never need to change this parameter\&. The default is 6 hours (21600 seconds)\&. 6583 7051 .sp 6584 7052 Default: 6585 \fI\fImin wins ttl\fR\fR\fI = \fR\fI 21600\fR\fI \fR7053 \fI\fImin wins ttl\fR\fR\fI = \fR\fI\FC21600\F[]\fR\fI \fR 6586 7054 .RE 6587 7055 … … 6601 7069 .sp 6602 7070 Example: 6603 \fI\fImsdfs proxy\fR\fR\fI = \fR\fI\ eotherserver\esomeshare\fR\fI \fR7071 \fI\fImsdfs proxy\fR\fR\fI = \fR\fI\FC\eotherserver\esomeshare\F[]\fR\fI \fR 6604 7072 .RE 6605 7073 … … 6610 7078 If set to 6611 7079 \fByes\fR, Samba treats the share as a Dfs root and allows clients to browse the distributed file system tree rooted at the share directory\&. Dfs links are specified in the share directory by symbolic links of the form 6612 msdfs:serverA\e\eshareA,serverB\e\eshareB 7080 \FCmsdfs:serverA\e\eshareA,serverB\e\eshareB\F[] 6613 7081 and so on\&. For more information on setting up a Dfs tree on Samba, refer to the MSDFS chapter in the Samba3\-HOWTO book\&. 6614 7082 .sp 6615 7083 Default: 6616 \fI\fImsdfs root\fR\fR\fI = \fR\fI no\fR\fI \fR7084 \fI\fImsdfs root\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6617 7085 .RE 6618 7086 … … 6624 7092 .sp 6625 7093 Default: 6626 \fI\fIname cache timeout\fR\fR\fI = \fR\fI 660\fR\fI \fR6627 .sp 6628 Example: 6629 \fI\fIname cache timeout\fR\fR\fI = \fR\fI 0\fR\fI \fR7094 \fI\fIname cache timeout\fR\fR\fI = \fR\fI\FC660\F[]\fR\fI \fR 7095 .sp 7096 Example: 7097 \fI\fIname cache timeout\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6630 7098 .RE 6631 7099 … … 6662 7130 \fBhost\fR 6663 7131 : Do a standard host name to IP address resolution, using the system 6664 /etc/hosts, NIS, or DNS lookups\&. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the6665 /etc/nsswitch\&.conf 7132 \FC/etc/hosts \F[], NIS, or DNS lookups\&. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the 7133 \FC/etc/nsswitch\&.conf\F[] 6666 7134 file\&. Note that this method is used only if the NetBIOS name type being queried is the 0x20 (server) name type or 0x1c (domain controllers)\&. The latter case is only useful for active directory domains and results in a DNS query for the SRV RR entry matching _ldap\&._tcp\&.domain\&. 6667 7135 .RE … … 6697 7165 The example below will cause the local lmhosts file to be examined first, followed by a broadcast attempt, followed by a normal system hostname lookup\&. 6698 7166 .sp 6699 When Samba is functioning in ADS security mode ( security = ads) it is advised to use following settings for7167 When Samba is functioning in ADS security mode (\FCsecurity = ads\F[]) it is advised to use following settings for 6700 7168 \fIname resolve order\fR: 6701 7169 .sp 6702 name resolve order = wins bcast 7170 \FCname resolve order = wins bcast\F[] 6703 7171 .sp 6704 7172 DC lookups will still be done via DNS, but fallbacks to netbios names will not inundate your DNS servers with needless querys for DOMAIN<0x1c> lookups\&. 6705 7173 .sp 6706 7174 Default: 6707 \fI\fIname resolve order\fR\fR\fI = \fR\fI lmhosts host wins bcast\fR\fI \fR6708 .sp 6709 Example: 6710 \fI\fIname resolve order\fR\fR\fI = \fR\fI lmhosts bcast host\fR\fI \fR7175 \fI\fIname resolve order\fR\fR\fI = \fR\fI\FClmhosts host wins bcast\F[]\fR\fI \fR 7176 .sp 7177 Example: 7178 \fI\fIname resolve order\fR\fR\fI = \fR\fI\FClmhosts bcast host\F[]\fR\fI \fR 6711 7179 .RE 6712 7180 … … 6718 7186 .sp 6719 7187 Default: 6720 \fI\fInetbios aliases\fR\fR\fI = \fR\fI # empty string (no additional names)\fR\fI \fR6721 .sp 6722 Example: 6723 \fI\fInetbios aliases\fR\fR\fI = \fR\fI TEST TEST1 TEST2\fR\fI \fR7188 \fI\fInetbios aliases\fR\fR\fI = \fR\fI\FC # empty string (no additional names)\F[]\fR\fI \fR 7189 .sp 7190 Example: 7191 \fI\fInetbios aliases\fR\fR\fI = \fR\fI\FCTEST TEST1 TEST2\F[]\fR\fI \fR 6724 7192 .RE 6725 7193 … … 6731 7199 .sp 6732 7200 There is a bug in Samba\-3 that breaks operation of browsing and access to shares if the netbios name is set to the literal name 6733 PIPE\&. To avoid this problem, do not name your Samba\-3 server6734 PIPE\&.6735 .sp 6736 Default: 6737 \fI\fInetbios name\fR\fR\fI = \fR\fI # machine DNS name\fR\fI \fR6738 .sp 6739 Example: 6740 \fI\fInetbios name\fR\fR\fI = \fR\fI MYNAME\fR\fI \fR7201 \FCPIPE\F[]\&. To avoid this problem, do not name your Samba\-3 server 7202 \FCPIPE\F[]\&. 7203 .sp 7204 Default: 7205 \fI\fInetbios name\fR\fR\fI = \fR\fI\FC # machine DNS name\F[]\fR\fI \fR 7206 .sp 7207 Example: 7208 \fI\fInetbios name\fR\fR\fI = \fR\fI\FCMYNAME\F[]\fR\fI \fR 6741 7209 .RE 6742 7210 … … 6748 7216 .sp 6749 7217 Default: 6750 \fI\fInetbios scope\fR\fR\fI = \fR\fI\ fR\fI \fR7218 \fI\fInetbios scope\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 6751 7219 .RE 6752 7220 … … 6766 7234 .sp 6767 7235 Default: 6768 \fI\fInis homedir\fR\fR\fI = \fR\fI no\fR\fI \fR7236 \fI\fInis homedir\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6769 7237 .RE 6770 7238 … … 6780 7248 .sp 6781 7249 Default: 6782 \fI\fInmbd bind explicit broadcast\fR\fR\fI = \fR\fI yes\fR\fI \fR7250 \fI\fInmbd bind explicit broadcast\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6783 7251 .RE 6784 7252 … … 6792 7260 .sp 6793 7261 Default: 6794 \fI\fInt acl support\fR\fR\fI = \fR\fI yes\fR\fI \fR7262 \fI\fInt acl support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6795 7263 .RE 6796 7264 … … 6804 7272 .sp 6805 7273 If this option, and 6806 lanman auth 7274 \FClanman auth\F[] 6807 7275 are both disabled, then only NTLMv2 logins will be permited\&. Not all clients support NTLMv2, and most will require special configuration to use it\&. 6808 7276 .sp 6809 7277 Default: 6810 \fI\fIntlm auth\fR\fR\fI = \fR\fI yes\fR\fI \fR7278 \fI\fIntlm auth\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6811 7279 .RE 6812 7280 … … 6822 7290 .sp 6823 7291 Default: 6824 \fI\fInt pipe support\fR\fR\fI = \fR\fI yes\fR\fI \fR7292 \fI\fInt pipe support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6825 7293 .RE 6826 7294 … … 6838 7306 .sp 6839 7307 Default: 6840 \fI\fInt status support\fR\fR\fI = \fR\fI yes\fR\fI \fR7308 \fI\fInt status support\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6841 7309 .RE 6842 7310 … … 6851 7319 .sp 6852 7320 Default: 6853 \fI\fInull passwords\fR\fR\fI = \fR\fI no\fR\fI \fR7321 \fI\fInull passwords\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6854 7322 .RE 6855 7323 … … 6862 7330 .sp 6863 7331 Default: 6864 \fI\fIobey pam restrictions\fR\fR\fI = \fR\fI no\fR\fI \fR7332 \fI\fIobey pam restrictions\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6865 7333 .RE 6866 7334 … … 6878 7346 .sp 6879 7347 Note that this also means Samba won\'t try to deduce usernames from the service name\&. This can be annoying for the [homes] section\&. To get around this you could use 6880 user = %S 7348 \FCuser = %S\F[] 6881 7349 which means your 6882 7350 \fIuser\fR … … 6884 7352 .sp 6885 7353 Default: 6886 \fI\fIonly user\fR\fR\fI = \fR\fI no\fR\fI \fR7354 \fI\fIonly user\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 6887 7355 .RE 6888 7356 … … 6896 7364 .\} 6897 7365 .RS 4 7366 .BM yellow 6898 7367 .it 1 an-trap 6899 7368 .nr an-no-space-flag 1 … … 6906 7375 DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE\&. 6907 7376 .sp .5v 6908 .RE 6909 Default: 6910 \fI\fIoplock break wait time\fR\fR\fI = \fR\fI0\fR\fI \fR 7377 .EM yellow 7378 .RE 7379 Default: 7380 \fI\fIoplock break wait time\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 6911 7381 .RE 6912 7382 … … 6923 7393 In brief it specifies a number, which causes 6924 7394 \fBsmbd\fR(8)not to grant an oplock even when requested if the approximate number of clients contending for an oplock on the same file goes over this limit\&. This causes 6925 smbd 7395 \FCsmbd\F[] 6926 7396 to behave in a similar way to Windows NT\&. 6927 7397 .if n \{\ … … 6929 7399 .\} 6930 7400 .RS 4 7401 .BM yellow 6931 7402 .it 1 an-trap 6932 7403 .nr an-no-space-flag 1 … … 6939 7410 DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE\&. 6940 7411 .sp .5v 6941 .RE 6942 Default: 6943 \fI\fIoplock contention limit\fR\fR\fI = \fR\fI2\fR\fI \fR 7412 .EM yellow 7413 .RE 7414 Default: 7415 \fI\fIoplock contention limit\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR 6944 7416 .RE 6945 7417 … … 6949 7421 .RS 4 6950 7422 This boolean option tells 6951 smbd 7423 \FCsmbd\F[] 6952 7424 whether to issue oplocks (opportunistic locks) to file open requests on this share\&. The oplock code can dramatically (approx\&. 30% or more) improve the speed of access to files on Samba servers\&. It allows the clients to aggressively cache files locally and you may want to disable this option for unreliable network environments (it is turned on by default in Windows NT Servers)\&. 6953 7425 .sp … … 6959 7431 .sp 6960 7432 Default: 6961 \fI\fIoplocks\fR\fR\fI = \fR\fI yes\fR\fI \fR7433 \fI\fIoplocks\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 6962 7434 .RE 6963 7435 … … 6971 7443 .sp 6972 7444 For example, a valid entry using the HP LaserJet 5 printer driver would appear as 6973 HP LaserJet 5L = LASERJET\&.HP LaserJet 5L\&.7445 \FCHP LaserJet 5L = LASERJET\&.HP LaserJet 5L\F[]\&. 6974 7446 .sp 6975 7447 The need for the file is due to the printer driver namespace problem described in the chapter on Classical Printing in the Samba3\-HOWTO book\&. For more details on OS/2 clients, please refer to chapter on other clients in the Samba3\-HOWTO book\&. 6976 7448 .sp 6977 7449 Default: 6978 \fI\fIos2 driver map\fR\fR\fI = \fR\fI\ fR\fI \fR7450 \fI\fIos2 driver map\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 6979 7451 .RE 6980 7452 … … 6995 7467 .sp 6996 7468 Default: 6997 \fI\fIos level\fR\fR\fI = \fR\fI 20\fR\fI \fR6998 .sp 6999 Example: 7000 \fI\fIos level\fR\fR\fI = \fR\fI 65\fR\fI \fR7469 \fI\fIos level\fR\fR\fI = \fR\fI\FC20\F[]\fR\fI \fR 7470 .sp 7471 Example: 7472 \fI\fIos level\fR\fR\fI = \fR\fI\FC65\F[]\fR\fI \fR 7001 7473 .RE 7002 7474 … … 7011 7483 .sp 7012 7484 Default: 7013 \fI\fIpam password change\fR\fR\fI = \fR\fI no\fR\fI \fR7485 \fI\fIpam password change\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7014 7486 .RE 7015 7487 … … 7025 7497 .sp 7026 7498 Default: 7027 \fI\fIpanic action\fR\fR\fI = \fR\fI\ fR\fI \fR7028 .sp 7029 Example: 7030 \fI\fIpanic action\fR\fR\fI = \fR\fI "/bin/sleep 90000"\fR\fI \fR7499 \fI\fIpanic action\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 7500 .sp 7501 Example: 7502 \fI\fIpanic action\fR\fR\fI = \fR\fI\FC"/bin/sleep 90000"\F[]\fR\fI \fR 7031 7503 .RE 7032 7504 … … 7040 7512 .sp 7041 7513 Default: 7042 \fI\fIparanoid server security\fR\fR\fI = \fR\fI yes\fR\fI \fR7514 \fI\fIparanoid server security\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 7043 7515 .RE 7044 7516 … … 7061 7533 .IP \(bu 2.3 7062 7534 .\} 7063 smbpasswd 7535 \FCsmbpasswd\F[] 7064 7536 \- The old plaintext passdb backend\&. Some Samba features will not work if this passdb backend is used\&. Takes a path to the smbpasswd file as an optional argument\&. 7065 7537 .RE … … 7073 7545 .IP \(bu 2.3 7074 7546 .\} 7075 tdbsam 7547 \FCtdbsam\F[] 7076 7548 \- The TDB based password storage backend\&. Takes a path to the TDB as an optional argument (defaults to passdb\&.tdb in the 7077 7549 \m[blue]\fBprivate dir\fR\m[] … … 7087 7559 .IP \(bu 2.3 7088 7560 .\} 7089 ldapsam 7561 \FCldapsam\F[] 7090 7562 \- The LDAP based passdb backend\&. Takes an LDAP URL as an optional argument (defaults to 7091 ldap://localhost)7563 \FCldap://localhost\F[]) 7092 7564 .sp 7093 7565 LDAP connections should be secured where possible\&. This may be done using either Start\-TLS (see … … 7105 7577 .RS 4 7106 7578 .\} 7579 .fam C 7580 .ps -1 7107 7581 .nf 7582 .if t \{\ 7583 .sp -1 7584 .\} 7585 .BB lightgray adjust-for-leading-newline 7586 .sp -1 7587 7108 7588 passdb backend = tdbsam:/etc/samba/private/passdb\&.tdb 7109 7589 … … 7115 7595 7116 7596 passdb backend = ldapsam:"ldap://ldap\-1\&.example\&.com ldap\-2\&.example\&.com" 7597 .EB lightgray adjust-for-leading-newline 7598 .if t \{\ 7599 .sp 1 7600 .\} 7117 7601 .fi 7602 .fam 7603 .ps +1 7118 7604 .if n \{\ 7119 7605 .RE … … 7121 7607 .sp 7122 7608 Default: 7123 \fI\fIpassdb backend\fR\fR\fI = \fR\fI tdbsam\fR\fI \fR7609 \fI\fIpassdb backend\fR\fR\fI = \fR\fI\FCtdbsam\F[]\fR\fI \fR 7124 7610 .RE 7125 7611 … … 7131 7617 .sp 7132 7618 Default: 7133 \fI\fIpassdb expand explicit\fR\fR\fI = \fR\fI no\fR\fI \fR7619 \fI\fIpassdb expand explicit\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7134 7620 .RE 7135 7621 … … 7145 7631 \m[blue]\fBdebug level\fR\m[] 7146 7632 of 100\&. This is a dangerous option as it will allow plaintext passwords to be seen in the 7147 smbd 7633 \FCsmbd\F[] 7148 7634 log\&. It is available to help Samba admins debug their 7149 7635 \fIpasswd chat\fR … … 7155 7641 .sp 7156 7642 Default: 7157 \fI\fIpasswd chat debug\fR\fR\fI = \fR\fI no\fR\fI \fR7643 \fI\fIpasswd chat debug\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7158 7644 .RE 7159 7645 … … 7165 7651 .sp 7166 7652 Default: 7167 \fI\fIpasswd chat timeout\fR\fR\fI = \fR\fI 2\fR\fI \fR7653 \fI\fIpasswd chat timeout\fR\fR\fI = \fR\fI\FC2\F[]\fR\fI \fR 7168 7654 .RE 7169 7655 … … 7207 7693 .sp 7208 7694 Default: 7209 \fI\fIpasswd chat\fR\fR\fI = \fR\fI *new*password* %n\en*new*password* %n\en *changed*\fR\fI \fR7210 .sp 7211 Example: 7212 \fI\fIpasswd chat\fR\fR\fI = \fR\fI "*Enter NEW password*" %n\en "*Reenter NEW password*" %n\en "*Password changed*"\fR\fI \fR7695 \fI\fIpasswd chat\fR\fR\fI = \fR\fI\FC*new*password* %n\en*new*password* %n\en *changed*\F[]\fR\fI \fR 7696 .sp 7697 Example: 7698 \fI\fIpasswd chat\fR\fR\fI = \fR\fI\FC"*Enter NEW password*" %n\en "*Reenter NEW password*" %n\en "*Password changed*"\F[]\fR\fI \fR 7213 7699 .RE 7214 7700 … … 7233 7719 \fIAS ROOT\fR 7234 7720 before the SMB password in the smbpasswd file is changed\&. If this UNIX password change fails, then 7235 smbd 7721 \FCsmbd\F[] 7236 7722 will fail to change the SMB password also (this is by design)\&. 7237 7723 .sp … … 7248 7734 .sp 7249 7735 Default: 7250 \fI\fIpasswd program\fR\fR\fI = \fR\fI\ fR\fI \fR7251 .sp 7252 Example: 7253 \fI\fIpasswd program\fR\fR\fI = \fR\fI /bin/passwd %u\fR\fI \fR7736 \fI\fIpasswd program\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 7737 .sp 7738 Example: 7739 \fI\fIpasswd program\fR\fR\fI = \fR\fI\FC/bin/passwd %u\F[]\fR\fI \fR 7254 7740 .RE 7255 7741 … … 7284 7770 .sp 7285 7771 Default: 7286 \fI\fIpassword level\fR\fR\fI = \fR\fI 0\fR\fI \fR7287 .sp 7288 Example: 7289 \fI\fIpassword level\fR\fR\fI = \fR\fI 4\fR\fI \fR7772 \fI\fIpassword level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 7773 .sp 7774 Example: 7775 \fI\fIpassword level\fR\fR\fI = \fR\fI\FC4\F[]\fR\fI \fR 7290 7776 .RE 7291 7777 … … 7295 7781 .RS 4 7296 7782 By specifying the name of another SMB server or Active Directory domain controller with this option, and using 7297 security = [ads|domain|server]7783 \FCsecurity = [ads|domain|server]\F[] 7298 7784 it is possible to get Samba to do all its username/password validation using a specific remote server\&. 7299 7785 .sp … … 7309 7795 .\} 7310 7796 .RS 4 7797 .BM yellow 7311 7798 .it 1 an-trap 7312 7799 .nr an-no-space-flag 1 … … 7320 7807 \fIDO NOT CHOOSE A PASSWORD SERVER THAT YOU DON\'T COMPLETELY TRUST\fR\&. 7321 7808 .sp .5v 7809 .EM yellow 7322 7810 .RE 7323 7811 Never point a Samba server at itself for password serving\&. This will cause a loop and could lock up your Samba server! … … 7332 7820 or 7333 7821 \fBads\fR, then the list of machines in this option must be a list of Primary or Backup Domain controllers for the Domain or the character \'*\', as the Samba server is effectively in that domain, and will use cryptographically authenticated RPC calls to authenticate the user logging on\&. The advantage of using 7334 security = domain 7822 \FC security = domain\F[] 7335 7823 is that if you list several hosts in the 7336 7824 \fIpassword server\fR 7337 7825 option then 7338 smbd 7826 \FCsmbd \F[] 7339 7827 will try each in turn till it finds one that responds\&. This is useful in case your primary server goes down\&. 7340 7828 .sp … … 7351 7839 parameter is set to 7352 7840 \fBserver\fR, then there are different restrictions that 7353 security = domain 7841 \FCsecurity = domain\F[] 7354 7842 doesn\'t suffer from: 7355 7843 .sp … … 7365 7853 \fIpassword server\fR 7366 7854 parameter, however if an 7367 smbd 7855 \FCsmbd\F[] 7368 7856 makes a connection to a password server, and then the password server fails, no more users will be able to be authenticated from this 7369 smbd\&. This is a restriction of the SMB/CIFS protocol when in7370 security = server 7857 \FCsmbd\F[]\&. This is a restriction of the SMB/CIFS protocol when in 7858 \FCsecurity = server \F[] 7371 7859 mode and cannot be fixed in Samba\&. 7372 7860 .RE … … 7381 7869 .\} 7382 7870 If you are using a Windows NT server as your password server then you will have to ensure that your users are able to login from the Samba server, as when in 7383 security = server 7871 \FC security = server\F[] 7384 7872 mode the network logon will appear to come from there rather than from the users workstation\&. 7385 7873 .sp 7386 7874 .RE 7387 7875 Default: 7388 \fI\fIpassword server\fR\fR\fI = \fR\fI *\fR\fI \fR7389 .sp 7390 Example: 7391 \fI\fIpassword server\fR\fR\fI = \fR\fI NT\-PDC, NT\-BDC1, NT\-BDC2, *\fR\fI \fR7392 .sp 7393 Example: 7394 \fI\fIpassword server\fR\fR\fI = \fR\fI windc\&.mydomain\&.com:389 192\&.168\&.1\&.101 *\fR\fI \fR7876 \fI\fIpassword server\fR\fR\fI = \fR\fI\FC*\F[]\fR\fI \fR 7877 .sp 7878 Example: 7879 \fI\fIpassword server\fR\fR\fI = \fR\fI\FCNT\-PDC, NT\-BDC1, NT\-BDC2, *\F[]\fR\fI \fR 7880 .sp 7881 Example: 7882 \fI\fIpassword server\fR\fR\fI = \fR\fI\FCwindc\&.mydomain\&.com:389 192\&.168\&.1\&.101 *\F[]\fR\fI \fR 7395 7883 .RE 7396 7884 … … 7422 7910 .sp 7423 7911 Default: 7424 \fI\fIpath\fR\fR\fI = \fR\fI\ fR\fI \fR7425 .sp 7426 Example: 7427 \fI\fIpath\fR\fR\fI = \fR\fI /home/fred\fR\fI \fR7912 \fI\fIpath\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 7913 .sp 7914 Example: 7915 \fI\fIpath\fR\fR\fI = \fR\fI\FC/home/fred\F[]\fR\fI \fR 7428 7916 .RE 7429 7917 … … 7444 7932 .sp 7445 7933 Default: 7446 \fI\fIpid directory\fR\fR\fI = \fR\fI ${prefix}/var/locks\fR\fI \fR7447 .sp 7448 Example: 7449 \fI\fIpid directory\fR\fR\fI = \fR\fI pid directory = /var/run/\fR\fI \fR7934 \fI\fIpid directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR 7935 .sp 7936 Example: 7937 \fI\fIpid directory\fR\fR\fI = \fR\fI\FCpid directory = /var/run/\F[]\fR\fI \fR 7450 7938 .RE 7451 7939 … … 7459 7947 .sp 7460 7948 Default: 7461 \fI\fIposix locking\fR\fR\fI = \fR\fI yes\fR\fI \fR7949 \fI\fIposix locking\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 7462 7950 .RE 7463 7951 … … 7470 7958 An interesting example may be to unmount server resources: 7471 7959 .sp 7472 postexec = /etc/umount /cdrom 7473 .sp 7474 Default: 7475 \fI\fIpostexec\fR\fR\fI = \fR\fI\ fR\fI \fR7476 .sp 7477 Example: 7478 \fI\fIpostexec\fR\fR\fI = \fR\fI echo \e"%u disconnected from %S from %m (%I)\e" >> /tmp/log\fR\fI \fR7960 \FCpostexec = /etc/umount /cdrom\F[] 7961 .sp 7962 Default: 7963 \fI\fIpostexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 7964 .sp 7965 Example: 7966 \fI\fIpostexec\fR\fR\fI = \fR\fI\FCecho \e"%u disconnected from %S from %m (%I)\e" >> /tmp/log\F[]\fR\fI \fR 7479 7967 .RE 7480 7968 … … 7488 7976 .sp 7489 7977 Default: 7490 \fI\fIpreexec close\fR\fR\fI = \fR\fI no\fR\fI \fR7978 \fI\fIpreexec close\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7491 7979 .RE 7492 7980 … … 7508 7996 .sp 7509 7997 7510 preexec = csh \-c \'echo \e"Welcome to %S!\e" | /usr/local/samba/bin/smbclient \-M %m \-I %I\' & 7998 \FCpreexec = csh \-c \'echo \e"Welcome to %S!\e" | /usr/local/samba/bin/smbclient \-M %m \-I %I\' & \F[] 7511 7999 .sp 7512 8000 Of course, this could get annoying after a while :\-) … … 7518 8006 .sp 7519 8007 Default: 7520 \fI\fIpreexec\fR\fR\fI = \fR\fI\ fR\fI \fR7521 .sp 7522 Example: 7523 \fI\fIpreexec\fR\fR\fI = \fR\fI echo \e"%u connected to %S from %m (%I)\e" >> /tmp/log\fR\fI \fR8008 \fI\fIpreexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8009 .sp 8010 Example: 8011 \fI\fIpreexec\fR\fR\fI = \fR\fI\FCecho \e"%u connected to %S from %m (%I)\e" >> /tmp/log\F[]\fR\fI \fR 7524 8012 .RE 7525 8013 … … 7542 8030 If this is set to 7543 8031 \fByes\fR, on startup, 7544 nmbd 8032 \FCnmbd\F[] 7545 8033 will force an election, and it will have a slight advantage in winning the election\&. It is recommended that this parameter is used in conjunction with 7546 8034 \m[blue]\fBdomain master = yes\fR\m[], so that 7547 nmbd 8035 \FCnmbd\F[] 7548 8036 can guarantee becoming a domain master\&. 7549 8037 .sp … … 7551 8039 .sp 7552 8040 Default: 7553 \fI\fIpreferred master\fR\fR\fI = \fR\fI auto\fR\fI \fR8041 \fI\fIpreferred master\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 7554 8042 .RE 7555 8043 … … 7561 8049 .sp 7562 8050 Default: 7563 \fI\fIpreload modules\fR\fR\fI = \fR\fI\ fR\fI \fR7564 .sp 7565 Example: 7566 \fI\fIpreload modules\fR\fR\fI = \fR\fI /usr/lib/samba/passdb/mysql\&.so\fR\fI \fR8051 \fI\fIpreload modules\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8052 .sp 8053 Example: 8054 \fI\fIpreload modules\fR\fR\fI = \fR\fI\FC/usr/lib/samba/passdb/mysql\&.so\F[]\fR\fI \fR 7567 8055 .RE 7568 8056 … … 7586 8074 .sp 7587 8075 Default: 7588 \fI\fIpreload\fR\fR\fI = \fR\fI\ fR\fI \fR7589 .sp 7590 Example: 7591 \fI\fIpreload\fR\fR\fI = \fR\fI fred lp colorlp\fR\fI \fR8076 \fI\fIpreload\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8077 .sp 8078 Example: 8079 \fI\fIpreload\fR\fR\fI = \fR\fI\FCfred lp colorlp\F[]\fR\fI \fR 7592 8080 .RE 7593 8081 … … 7604 8092 .sp 7605 8093 Default: 7606 \fI\fIpreserve case\fR\fR\fI = \fR\fI yes\fR\fI \fR8094 \fI\fIpreserve case\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 7607 8095 .RE 7608 8096 … … 7627 8115 .sp 7628 8116 Default: 7629 \fI\fIprintable\fR\fR\fI = \fR\fI no\fR\fI \fR8117 \fI\fIprintable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7630 8118 .RE 7631 8119 … … 7639 8127 .sp 7640 8128 Default: 7641 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI 750\fR\fI \fR7642 .sp 7643 Example: 7644 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI 600\fR\fI \fR8129 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI\FC750\F[]\fR\fI \fR 8130 .sp 8131 Example: 8132 \fI\fIprintcap cache time\fR\fR\fI = \fR\fI\FC600\F[]\fR\fI \fR 7645 8133 .RE 7646 8134 … … 7658 8146 .RS 4 7659 8147 This parameter may be used to override the compiled\-in default printcap name used by the server (usually 7660 /etc/printcap)\&. See the discussion of the8148 \FC /etc/printcap\F[])\&. See the discussion of the 7661 8149 [printers] 7662 8150 section above for reasons why you might want to do this\&. 7663 8151 .sp 7664 8152 To use the CUPS printing interface set 7665 printcap name = cups\&. This should be supplemented by an addtional setting8153 \FCprintcap name = cups \F[]\&. This should be supplemented by an addtional setting 7666 8154 \m[blue]\fBprinting = cups\fR\m[] 7667 8155 in the [global] section\&. 7668 printcap name = cups 8156 \FCprintcap name = cups\F[] 7669 8157 will use the "dummy" printcap created by CUPS, as specified in your CUPS configuration file\&. 7670 8158 .sp 7671 8159 On System V systems that use 7672 lpstat 8160 \FClpstat\F[] 7673 8161 to list available printers you can use 7674 printcap name = lpstat 8162 \FCprintcap name = lpstat \F[] 7675 8163 to automatically obtain lists of available printers\&. This is the default for systems that define SYSV at configure time in Samba (this includes most System V based systems)\&. If 7676 8164 \fI printcap name\fR 7677 8165 is set to 7678 lpstat 8166 \FClpstat\F[] 7679 8167 on these systems then Samba will launch 7680 lpstat \-v 8168 \FClpstat \-v\F[] 7681 8169 and attempt to parse the output to obtain a printer list\&. 7682 8170 .sp … … 7686 8174 .RS 4 7687 8175 .\} 8176 .fam C 8177 .ps -1 7688 8178 .nf 8179 .if t \{\ 8180 .sp -1 8181 .\} 8182 .BB lightgray adjust-for-leading-newline 8183 .sp -1 8184 7689 8185 print1|My Printer 1 7690 8186 print2|My Printer 2 … … 7692 8188 print4|My Printer 4 7693 8189 print5|My Printer 5 8190 .EB lightgray adjust-for-leading-newline 8191 .if t \{\ 8192 .sp 1 8193 .\} 7694 8194 .fi 8195 .fam 8196 .ps +1 7695 8197 .if n \{\ 7696 8198 .RE … … 7702 8204 .\} 7703 8205 .RS 4 8206 .BM yellow 7704 8207 .it 1 an-trap 7705 8208 .nr an-no-space-flag 1 … … 7711 8214 .br 7712 8215 Under AIX the default printcap name is 7713 /etc/qconfig\&. Samba will assume the file is in AIX7714 qconfig 8216 \FC/etc/qconfig\F[]\&. Samba will assume the file is in AIX 8217 \FCqconfig\F[] 7715 8218 format if the string 7716 qconfig 8219 \FCqconfig\F[] 7717 8220 appears in the printcap filename\&. 7718 8221 .sp .5v 7719 .RE 7720 Default: 7721 \fI\fIprintcap name\fR\fR\fI = \fR\fI/etc/printcap\fR\fI \fR 7722 .sp 7723 Example: 7724 \fI\fIprintcap name\fR\fR\fI = \fR\fI/etc/myprintcap\fR\fI \fR 8222 .EM yellow 8223 .RE 8224 Default: 8225 \fI\fIprintcap name\fR\fR\fI = \fR\fI\FC/etc/printcap\F[]\fR\fI \fR 8226 .sp 8227 Example: 8228 \fI\fIprintcap name\fR\fR\fI = \fR\fI\FC/etc/myprintcap\F[]\fR\fI \fR 7725 8229 .RE 7726 8230 … … 7730 8234 .RS 4 7731 8235 After a print job has finished spooling to a service, this command will be used via a 7732 system() 8236 \FCsystem()\F[] 7733 8237 call to process the spool file\&. Typically the command specified will submit the spool file to the host\'s printing subsystem, but there is no requirement that this be the case\&. The server will not remove the spool file, so whatever command you specify should remove the spool file when it has been processed, otherwise you will need to manually remove old spool files\&. 7734 8238 .sp … … 7769 8273 You can form quite complex print commands by realizing that they are just passed to a shell\&. For example the following will log a print job, print the file, then remove it\&. Note that \';\' is the usual separator for command in shell scripts\&. 7770 8274 .sp 7771 print command = echo Printing %s >> /tmp/print\&.log; lpr \-P %p %s; rm %s 8275 \FCprint command = echo Printing %s >> /tmp/print\&.log; lpr \-P %p %s; rm %s\F[] 7772 8276 .sp 7773 8277 You may have to vary this command considerably depending on how you normally print files on your system\&. The default for the parameter varies depending on the setting of the … … 7776 8280 .sp 7777 8281 Default: For 7778 printing = BSD, AIX, QNX, LPRNG or PLP : 7779 .sp 7780 print command = lpr \-r \-P%p %s 8282 \FCprinting = BSD, AIX, QNX, LPRNG or PLP :\F[] 8283 .sp 8284 \FCprint command = lpr \-r \-P%p %s\F[] 7781 8285 .sp 7782 8286 For 7783 printing = SYSV or HPUX : 7784 .sp 7785 print command = lp \-c \-d%p %s; rm %s 8287 \FCprinting = SYSV or HPUX :\F[] 8288 .sp 8289 \FCprint command = lp \-c \-d%p %s; rm %s\F[] 7786 8290 .sp 7787 8291 For 7788 printing = SOFTQ : 7789 .sp 7790 print command = lp \-d%p \-s %s; rm %s 8292 \FCprinting = SOFTQ :\F[] 8293 .sp 8294 \FCprint command = lp \-d%p \-s %s; rm %s\F[] 7791 8295 .sp 7792 8296 For printing = CUPS : If SAMBA is compiled against libcups, then 7793 8297 \m[blue]\fBprintcap = cups\fR\m[] 7794 8298 uses the CUPS API to submit jobs, etc\&. Otherwise it maps to the System V commands with the \-oraw option for printing, i\&.e\&. it uses 7795 lp \-c \-d%p \-oraw; rm %s\&. With7796 printing = cups, and if SAMBA is compiled against libcups, any manually set print command will be ignored\&.8299 \FClp \-c \-d%p \-oraw; rm %s\F[]\&. With 8300 \FCprinting = cups\F[], and if SAMBA is compiled against libcups, any manually set print command will be ignored\&. 7797 8301 .sp 7798 8302 \fINo default\fR 7799 8303 .sp 7800 8304 Example: 7801 \fI\fIprint command\fR\fR\fI = \fR\fI /usr/local/samba/bin/myprintscript %p %s\fR\fI \fR8305 \fI\fIprint command\fR\fR\fI = \fR\fI\FC/usr/local/samba/bin/myprintscript %p %s\F[]\fR\fI \fR 7802 8306 .RE 7803 8307 … … 7811 8315 .sp 7812 8316 Default: 7813 \fI\fIprinter admin\fR\fR\fI = \fR\fI\ fR\fI \fR7814 .sp 7815 Example: 7816 \fI\fIprinter admin\fR\fR\fI = \fR\fI admin, @staff\fR\fI \fR8317 \fI\fIprinter admin\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8318 .sp 8319 Example: 8320 \fI\fIprinter admin\fR\fR\fI = \fR\fI\FCadmin, @staff\F[]\fR\fI \fR 7817 8321 .RE 7818 8322 … … 7836 8340 \m[blue]\fBprinter name\fR\m[] 7837 8341 may be 7838 lp 8342 \FClp\F[] 7839 8343 on many systems\&. 7840 8344 .sp 7841 8345 Default: 7842 \fI\fIprinter name\fR\fR\fI = \fR\fI none\fR\fI \fR7843 .sp 7844 Example: 7845 \fI\fIprinter name\fR\fR\fI = \fR\fI laserwriter\fR\fI \fR8346 \fI\fIprinter name\fR\fR\fI = \fR\fI\FCnone\F[]\fR\fI \fR 8347 .sp 8348 Example: 8349 \fI\fIprinter name\fR\fR\fI = \fR\fI\FClaserwriter\F[]\fR\fI \fR 7846 8350 .RE 7847 8351 … … 7882 8386 .sp 7883 8387 Default: 7884 \fI\fIprinting\fR\fR\fI = \fR\fI Depends on the operating system, see testparm \-v\&.\fR\fI \fR8388 \fI\fIprinting\fR\fR\fI = \fR\fI\FCDepends on the operating system, see \FCtestparm \-v\&.\F[]\F[]\fR\fI \fR 7885 8389 .RE 7886 8390 … … 7892 8396 .sp 7893 8397 Default: 7894 \fI\fIprintjob username\fR\fR\fI = \fR\fI %U\fR\fI \fR7895 .sp 7896 Example: 7897 \fI\fIprintjob username\fR\fR\fI = \fR\fI %D\e%U\fR\fI \fR8398 \fI\fIprintjob username\fR\fR\fI = \fR\fI\FC%U\F[]\fR\fI \fR 8399 .sp 8400 Example: 8401 \fI\fIprintjob username\fR\fR\fI = \fR\fI\FC%D\e%U\F[]\fR\fI \fR 7898 8402 .RE 7899 8403 … … 7903 8407 .RS 4 7904 8408 This parameters defines the directory smbd will use for storing such files as 7905 smbpasswd 8409 \FCsmbpasswd\F[] 7906 8410 and 7907 secrets\&.tdb\&.7908 .sp 7909 Default: 7910 \fI\fIprivate dir\fR\fR\fI = \fR\fI ${prefix}/private\fR\fI \fR8411 \FCsecrets\&.tdb\F[]\&. 8412 .sp 8413 Default: 8414 \fI\fIprivate dir\fR\fR\fI = \fR\fI\FC${prefix}/private\F[]\fR\fI \fR 7911 8415 .RE 7912 8416 … … 7922 8426 .sp 7923 8427 Default: 7924 \fI\fIprofile acls\fR\fR\fI = \fR\fI no\fR\fI \fR8428 \fI\fIprofile acls\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 7925 8429 .RE 7926 8430 … … 7944 8448 .sp 7945 8449 Example: 7946 \fI\fIqueuepause command\fR\fR\fI = \fR\fI disable %p\fR\fI \fR8450 \fI\fIqueuepause command\fR\fR\fI = \fR\fI\FCdisable %p\F[]\fR\fI \fR 7947 8451 .RE 7948 8452 … … 7964 8468 .sp 7965 8469 Default: 7966 \fI\fIqueueresume command\fR\fR\fI = \fR\fI\ fR\fI \fR7967 .sp 7968 Example: 7969 \fI\fIqueueresume command\fR\fR\fI = \fR\fI enable %p\fR\fI \fR8470 \fI\fIqueueresume command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8471 .sp 8472 Example: 8473 \fI\fIqueueresume command\fR\fR\fI = \fR\fI\FCenable %p\F[]\fR\fI \fR 7970 8474 .RE 7971 8475 … … 7985 8489 .sp 7986 8490 Default: 7987 \fI\fIread list\fR\fR\fI = \fR\fI\ fR\fI \fR7988 .sp 7989 Example: 7990 \fI\fIread list\fR\fR\fI = \fR\fI mary, @students\fR\fI \fR8491 \fI\fIread list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8492 .sp 8493 Example: 8494 \fI\fIread list\fR\fR\fI = \fR\fI\FCmary, @students\F[]\fR\fI \fR 7991 8495 .RE 7992 8496 … … 8001 8505 \fByes\fR, then users of a service may not create or modify files in the service\'s directory\&. 8002 8506 .sp 8003 Note that a printable service ( printable = yes) will8507 Note that a printable service (\FCprintable = yes\F[]) will 8004 8508 \fIALWAYS\fR 8005 8509 allow writing to the directory (user privileges permitting), but only via spooling operations\&. 8006 8510 .sp 8007 8511 Default: 8008 \fI\fIread only\fR\fR\fI = \fR\fI yes\fR\fI \fR8512 \fI\fIread only\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8009 8513 .RE 8010 8514 … … 8022 8526 .sp 8023 8527 Default: 8024 \fI\fIread raw\fR\fR\fI = \fR\fI yes\fR\fI \fR8528 \fI\fIread raw\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8025 8529 .RE 8026 8530 … … 8030 8534 .RS 4 8031 8535 This option specifies the kerberos realm to use\&. The realm is used as the ADS equivalent of the NT4 8032 domain\&. It is usually set to the DNS name of the kerberos server\&.8033 .sp 8034 Default: 8035 \fI\fIrealm\fR\fR\fI = \fR\fI\ fR\fI \fR8036 .sp 8037 Example: 8038 \fI\fIrealm\fR\fR\fI = \fR\fI mysambabox\&.mycompany\&.com\fR\fI \fR8536 \FCdomain\F[]\&. It is usually set to the DNS name of the kerberos server\&. 8537 .sp 8538 Default: 8539 \fI\fIrealm\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8540 .sp 8541 Example: 8542 \fI\fIrealm\fR\fR\fI = \fR\fI\FCmysambabox\&.mycompany\&.com\F[]\fR\fI \fR 8039 8543 .RE 8040 8544 … … 8056 8560 .sp 8057 8561 Default: 8058 \fI\fIregistry shares\fR\fR\fI = \fR\fI no\fR\fI \fR8059 .sp 8060 Example: 8061 \fI\fIregistry shares\fR\fR\fI = \fR\fI yes\fR\fI \fR8562 \fI\fIregistry shares\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 8563 .sp 8564 Example: 8565 \fI\fIregistry shares\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8062 8566 .RE 8063 8567 … … 8077 8581 .RS 4 8078 8582 .\} 8583 .fam C 8584 .ps -1 8079 8585 .nf 8080 remote announce = 192\&.168\&.2\&.255/SERVERS 192\&.168\&.4\&.255/STAFF 8586 .if t \{\ 8587 .sp -1 8588 .\} 8589 .BB lightgray adjust-for-leading-newline 8590 .sp -1 8591 8592 \FCremote announce = 192\&.168\&.2\&.255/SERVERS 192\&.168\&.4\&.255/STAFF\F[] 8593 .EB lightgray adjust-for-leading-newline 8594 .if t \{\ 8595 .sp 1 8596 .\} 8081 8597 .fi 8598 .fam 8599 .ps +1 8082 8600 .if n \{\ 8083 8601 .RE … … 8085 8603 .sp 8086 8604 the above line would cause 8087 nmbd 8605 \FCnmbd\F[] 8088 8606 to announce itself to the two given IP addresses using the given workgroup names\&. If you leave out the workgroup name, then the one given in the 8089 8607 \m[blue]\fBworkgroup\fR\m[] … … 8095 8613 .sp 8096 8614 Default: 8097 \fI\fIremote announce\fR\fR\fI = \fR\fI\ fR\fI \fR8615 \fI\fIremote announce\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8098 8616 .RE 8099 8617 … … 8113 8631 .RS 4 8114 8632 .\} 8633 .fam C 8634 .ps -1 8115 8635 .nf 8636 .if t \{\ 8637 .sp -1 8638 .\} 8639 .BB lightgray adjust-for-leading-newline 8640 .sp -1 8641 8116 8642 \fIremote browse sync = 192\&.168\&.2\&.255 192\&.168\&.4\&.255\fR 8643 .EB lightgray adjust-for-leading-newline 8644 .if t \{\ 8645 .sp 1 8646 .\} 8117 8647 .fi 8648 .fam 8649 .ps +1 8118 8650 .if n \{\ 8119 8651 .RE … … 8121 8653 .sp 8122 8654 the above line would cause 8123 nmbd 8655 \FCnmbd\F[] 8124 8656 to request the master browser on the specified subnets or addresses to synchronize their browse lists with the local server\&. 8125 8657 .sp … … 8131 8663 .sp 8132 8664 Default: 8133 \fI\fIremote browse sync\fR\fR\fI = \fR\fI\ fR\fI \fR8665 \fI\fIremote browse sync\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8134 8666 .RE 8135 8667 … … 8143 8675 .sp 8144 8676 When a user with admin authority or SeAddUserPrivilege rights renames a user (e\&.g\&.: from the NT4 User Manager for Domains), this script will be run to rename the POSIX user\&. Two variables, 8145 %uold 8677 \FC%uold\F[] 8146 8678 and 8147 %unew, will be substituted with the old and new usernames, respectively\&. The script should return 0 upon successful completion, and nonzero otherwise\&.8679 \FC%unew\F[], will be substituted with the old and new usernames, respectively\&. The script should return 0 upon successful completion, and nonzero otherwise\&. 8148 8680 .if n \{\ 8149 8681 .sp 8150 8682 .\} 8151 8683 .RS 4 8684 .BM yellow 8152 8685 .it 1 an-trap 8153 8686 .nr an-no-space-flag 1 … … 8160 8693 The script has all responsibility to rename all the necessary data that is accessible in this posix method\&. This can mean different requirements for different backends\&. The tdbsam and smbpasswd backends will take care of the contents of their respective files, so the script is responsible only for changing the POSIX username, and other data that may required for your circumstances, such as home directory\&. Please also consider whether or not you need to rename the actual home directories themselves\&. The ldapsam backend will not make any changes, because of the potential issues with renaming the LDAP naming attribute\&. In this case the script is responsible for changing the attribute that samba uses (uid) for locating users, as well as any data that needs to change for other applications using the same directory\&. 8161 8694 .sp .5v 8162 .RE 8163 Default: 8164 \fI\fIrename user script\fR\fR\fI = \fR\fIno\fR\fI \fR 8695 .EM yellow 8696 .RE 8697 Default: 8698 \fI\fIrename user script\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 8165 8699 .RE 8166 8700 … … 8172 8706 .sp 8173 8707 Default: 8174 \fI\fIreset on zero vc\fR\fR\fI = \fR\fI no\fR\fI \fR8708 \fI\fIreset on zero vc\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 8175 8709 .RE 8176 8710 … … 8184 8718 .RS 4 8185 8719 .\} 8720 .fam C 8721 .ps -1 8186 8722 .nf 8723 .if t \{\ 8724 .sp -1 8725 .\} 8726 .BB lightgray adjust-for-leading-newline 8727 .sp -1 8728 8187 8729 HKEY_LOCAL_MACHINE\eSYSTEM\eCurrentControlSet\e 8188 8730 Control\eLSA\eRestrictAnonymous 8731 .EB lightgray adjust-for-leading-newline 8732 .if t \{\ 8733 .sp 1 8734 .\} 8189 8735 .fi 8736 .fam 8737 .ps +1 8190 8738 .if n \{\ 8191 8739 .RE … … 8199 8747 .\} 8200 8748 .RS 4 8749 .BM yellow 8201 8750 .it 1 an-trap 8202 8751 .nr an-no-space-flag 1 … … 8211 8760 on any share\&. 8212 8761 .sp .5v 8213 .RE 8214 Default: 8215 \fI\fIrestrict anonymous\fR\fR\fI = \fR\fI0\fR\fI \fR 8762 .EM yellow 8763 .RE 8764 Default: 8765 \fI\fIrestrict anonymous\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 8216 8766 .RE 8217 8767 … … 8237 8787 .RS 4 8238 8788 The server will 8239 chroot() 8789 \FCchroot()\F[] 8240 8790 (i\&.e\&. Change its root directory) to this directory on startup\&. This is not strictly necessary for secure operation\&. Even without it the server will deny access to files not in one of the service entries\&. It may also check for, and deny access to, soft links to other parts of the filesystem, or attempts to use "\&.\&." in file names to access other directories (depending on the setting of the 8241 8791 \m[blue]\fBwide smbconfoptions\fR\m[] … … 8251 8801 \fIroot directory\fR 8252 8802 tree\&. In particular you will need to mirror 8253 /etc/passwd 8803 \FC/etc/passwd\F[] 8254 8804 (or a subset of it), and any binaries or configuration files needed for printing (if required)\&. The set of files that must be mirrored is operating system dependent\&. 8255 8805 .sp 8256 8806 Default: 8257 \fI\fIroot directory\fR\fR\fI = \fR\fI /\fR\fI \fR8258 .sp 8259 Example: 8260 \fI\fIroot directory\fR\fR\fI = \fR\fI /homes/smb\fR\fI \fR8807 \fI\fIroot directory\fR\fR\fI = \fR\fI\FC/\F[]\fR\fI \fR 8808 .sp 8809 Example: 8810 \fI\fIroot directory\fR\fR\fI = \fR\fI\FC/homes/smb\F[]\fR\fI \fR 8261 8811 .RE 8262 8812 … … 8270 8820 .sp 8271 8821 Default: 8272 \fI\fIroot postexec\fR\fR\fI = \fR\fI\ fR\fI \fR8822 \fI\fIroot postexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8273 8823 .RE 8274 8824 … … 8282 8832 .sp 8283 8833 Default: 8284 \fI\fIroot preexec close\fR\fR\fI = \fR\fI no\fR\fI \fR8834 \fI\fIroot preexec close\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 8285 8835 .RE 8286 8836 … … 8294 8844 .sp 8295 8845 Default: 8296 \fI\fIroot preexec\fR\fR\fI = \fR\fI\ fR\fI \fR8846 \fI\fIroot preexec\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 8297 8847 .RE 8298 8848 … … 8315 8865 .sp 8316 8866 Default: 8317 \fI\fIsecurity mask\fR\fR\fI = \fR\fI 0777\fR\fI \fR8318 .sp 8319 Example: 8320 \fI\fIsecurity mask\fR\fR\fI = \fR\fI 0770\fR\fI \fR8867 \fI\fIsecurity mask\fR\fR\fI = \fR\fI\FC0777\F[]\fR\fI \fR 8868 .sp 8869 Example: 8870 \fI\fIsecurity mask\fR\fR\fI = \fR\fI\FC0770\F[]\fR\fI \fR 8321 8871 .RE 8322 8872 … … 8326 8876 .RS 4 8327 8877 This option affects how clients respond to Samba and is one of the most important settings in the 8328 smb\&.conf 8878 \FC smb\&.conf\F[] 8329 8879 file\&. 8330 8880 .sp … … 8334 8884 .sp 8335 8885 The default is 8336 security = user, as this is the most common setting needed when talking to Windows 98 and Windows NT\&.8886 \FCsecurity = user\F[], as this is the most common setting needed when talking to Windows 98 and Windows NT\&. 8337 8887 .sp 8338 8888 The alternatives are 8339 security = share,8340 security = server 8889 \FCsecurity = share\F[], 8890 \FCsecurity = server\F[] 8341 8891 or 8342 security = domain\&.8892 \FCsecurity = domain \F[]\&. 8343 8893 .sp 8344 8894 In versions of Samba prior to 2\&.0\&.0, the default was 8345 security = share 8895 \FCsecurity = share\F[] 8346 8896 mainly because that was the only option at one stage\&. 8347 8897 .sp … … 8349 8899 .sp 8350 8900 If your PCs use usernames that are the same as their usernames on the UNIX machine then you will want to use 8351 security = user\&. If you mostly use usernames that don\'t exist on the UNIX box then use8352 security = share\&.8901 \FCsecurity = user\F[]\&. If you mostly use usernames that don\'t exist on the UNIX box then use 8902 \FCsecurity = share\F[]\&. 8353 8903 .sp 8354 8904 You should also use 8355 security = share 8905 \FCsecurity = share\F[] 8356 8906 if you want to mainly setup shares without a password (guest shares)\&. This is commonly used for a shared printer server\&. It is more difficult to setup guest shares with 8357 security = user, see the8907 \FCsecurity = user\F[], see the 8358 8908 \m[blue]\fBmap to guest\fR\m[] 8359 8909 parameter for details\&. 8360 8910 .sp 8361 8911 It is possible to use 8362 smbd 8912 \FCsmbd\F[] 8363 8913 in a 8364 8914 \fI hybrid mode\fR … … 8371 8921 .sp 8372 8922 When clients connect to a share level security server, they need not log onto the server with a valid username and password before attempting to connect to a shared resource (although modern clients such as Windows 95/98 and Windows NT will send a logon request with a username but no password when talking to a 8373 security = share 8923 \FCsecurity = share \F[] 8374 8924 server)\&. Instead, the clients send authentication information (passwords) on a per\-share basis, at the time they attempt to connect to that share\&. 8375 8925 .sp 8376 8926 Note that 8377 smbd 8927 \FCsmbd\F[] 8378 8928 \fIALWAYS\fR 8379 8929 uses a valid UNIX user to act on behalf of the client, even in 8380 security = share 8930 \FCsecurity = share\F[] 8381 8931 level security\&. 8382 8932 .sp 8383 8933 As clients are not required to send a username to the server in share level security, 8384 smbd 8934 \FCsmbd\F[] 8385 8935 uses several techniques to determine the correct UNIX user to use on behalf of the client\&. 8386 8936 .sp … … 8515 9065 \fINote\fR 8516 9066 that from the client\'s point of view 8517 security = domain 9067 \FCsecurity = domain\F[] 8518 9068 is the same as 8519 security = user\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.9069 \FCsecurity = user\F[]\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&. 8520 9070 .sp 8521 9071 \fINote\fR … … 8539 9089 .sp 8540 9090 In this mode Samba will try to validate the username/password by passing it to another SMB server, such as an NT box\&. If this fails it will revert to 8541 security = user\&. It expects the9091 \FCsecurity = user\F[]\&. It expects the 8542 9092 \m[blue]\fBencrypted passwords\fR\m[] 8543 9093 parameter to be set to 8544 9094 \fByes\fR, unless the remote server does not support them\&. However note that if encrypted passwords have been negotiated then Samba cannot revert back to checking the UNIX password file, it must have a valid 8545 smbpasswd 9095 \FCsmbpasswd\F[] 8546 9096 file to check users against\&. See the chapter about the User Database in the Samba HOWTO Collection for details on how to set this up\&. 8547 9097 .if n \{\ … … 8549 9099 .\} 8550 9100 .RS 4 9101 .BM yellow 8551 9102 .it 1 an-trap 8552 9103 .nr an-no-space-flag 1 … … 8559 9110 This mode of operation has significant pitfalls since it is more vulnerable to man\-in\-the\-middle attacks and server impersonation\&. In particular, this mode of operation can cause significant resource consuption on the PDC, as it must maintain an active connection for the duration of the user\'s session\&. Furthermore, if this connection is lost, there is no way to reestablish it, and futher authentications to the Samba server may fail (from a single client, till it disconnects)\&. 8560 9111 .sp .5v 9112 .EM yellow 8561 9113 .RE 8562 9114 .if n \{\ … … 8564 9116 .\} 8565 9117 .RS 4 9118 .BM yellow 8566 9119 .it 1 an-trap 8567 9120 .nr an-no-space-flag 1 … … 8573 9126 .br 8574 9127 From the client\'s point of view, 8575 security = server 9128 \FCsecurity = server\F[] 8576 9129 is the same as 8577 security = user\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&.9130 \FCsecurity = user\F[]\&. It only affects how the server deals with the authentication, it does not in any way affect what the client sees\&. 8578 9131 .sp .5v 9132 .EM yellow 8579 9133 .RE 8580 9134 \fINote\fR … … 8604 9158 .sp 8605 9159 Default: 8606 \fI\fIsecurity\fR\fR\fI = \fR\fI USER\fR\fI \fR8607 .sp 8608 Example: 8609 \fI\fIsecurity\fR\fR\fI = \fR\fI DOMAIN\fR\fI \fR9160 \fI\fIsecurity\fR\fR\fI = \fR\fI\FCUSER\F[]\fR\fI \fR 9161 .sp 9162 Example: 9163 \fI\fIsecurity\fR\fR\fI = \fR\fI\FCDOMAIN\F[]\fR\fI \fR 8610 9164 .RE 8611 9165 … … 8623 9177 .sp 8624 9178 Please note that with this set to 8625 no, you will have to apply the WindowsXP8626 WinXP_SignOrSeal\&.reg 9179 \FCno\F[], you will have to apply the WindowsXP 9180 \FCWinXP_SignOrSeal\&.reg\F[] 8627 9181 registry patch found in the docs/registry subdirectory of the Samba distribution tarball\&. 8628 9182 .sp 8629 9183 Default: 8630 \fI\fIserver schannel\fR\fR\fI = \fR\fI auto\fR\fI \fR8631 .sp 8632 Example: 8633 \fI\fIserver schannel\fR\fR\fI = \fR\fI yes\fR\fI \fR9184 \fI\fIserver schannel\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 9185 .sp 9186 Example: 9187 \fI\fIserver schannel\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8634 9188 .RE 8635 9189 … … 8647 9201 .sp 8648 9202 Default: 8649 \fI\fIserver signing\fR\fR\fI = \fR\fI Disabled\fR\fI \fR9203 \fI\fIserver signing\fR\fR\fI = \fR\fI\FCDisabled\F[]\fR\fI \fR 8650 9204 .RE 8651 9205 … … 8655 9209 .RS 4 8656 9210 This controls what string will show up in the printer comment box in print manager and next to the IPC connection in 8657 net view\&. It can be any string that you wish to show to your users\&.9211 \FCnet view\F[]\&. It can be any string that you wish to show to your users\&. 8658 9212 .sp 8659 9213 It also sets what will appear in browse lists next to the machine name\&. … … 8668 9222 .sp 8669 9223 Default: 8670 \fI\fIserver string\fR\fR\fI = \fR\fI Samba %v\fR\fI \fR8671 .sp 8672 Example: 8673 \fI\fIserver string\fR\fR\fI = \fR\fI University of GNUs Samba Server\fR\fI \fR9224 \fI\fIserver string\fR\fR\fI = \fR\fI\FCSamba %v\F[]\fR\fI \fR 9225 .sp 9226 Example: 9227 \fI\fIserver string\fR\fR\fI = \fR\fI\FCUniversity of GNUs Samba Server\F[]\fR\fI \fR 8674 9228 .RE 8675 9229 … … 8679 9233 .RS 4 8680 9234 If 8681 set directory = no, then users of the service may not use the setdir command to change directory\&.9235 \FCset directory = no\F[], then users of the service may not use the setdir command to change directory\&. 8682 9236 .sp 8683 9237 The 8684 setdir 9238 \FCsetdir\F[] 8685 9239 command is only implemented in the Digital Pathworks client\&. See the Pathworks documentation for details\&. 8686 9240 .sp 8687 9241 Default: 8688 \fI\fIset directory\fR\fR\fI = \fR\fI no\fR\fI \fR9242 \fI\fIset directory\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 8689 9243 .RE 8690 9244 … … 8694 9248 .RS 4 8695 9249 Thanks to the Posix subsystem in NT a Windows User has a primary group in addition to the auxiliary groups\&. This script sets the primary group in the unix userdatase when an administrator sets the primary group from the windows user manager or when fetching a SAM with 8696 net rpc vampire\&.9250 \FCnet rpc vampire\F[]\&. 8697 9251 \fI%u\fR 8698 9252 will be replaced with the user whose primary group is to be set\&. … … 8701 9255 .sp 8702 9256 Default: 8703 \fI\fIset primary group script\fR\fR\fI = \fR\fI\ fR\fI \fR8704 .sp 8705 Example: 8706 \fI\fIset primary group script\fR\fR\fI = \fR\fI /usr/sbin/usermod \-g \'%g\' \'%u\'\fR\fI \fR9257 \fI\fIset primary group script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 9258 .sp 9259 Example: 9260 \fI\fIset primary group script\fR\fR\fI = \fR\fI\FC/usr/sbin/usermod \-g \'%g\' \'%u\'\F[]\fR\fI \fR 8707 9261 .RE 8708 9262 … … 8712 9266 .RS 4 8713 9267 The 8714 set quota command 9268 \FCset quota command\F[] 8715 9269 should only be used whenever there is no operating system API available from the OS that samba can use\&. 8716 9270 .sp 8717 9271 This option is only available if Samba was configured with the argument 8718 \ -\-with\-sys\-quotas9272 \FC\-\-with\-sys\-quotas\F[] 8719 9273 or on linux when 8720 \ &./configure \-\-with\-quotas9274 \FC\&./configure \-\-with\-quotas\F[] 8721 9275 was used and a working quota api was found in the system\&. Most packages are configured with these options already\&. 8722 9276 .sp … … 8861 9415 .sp 8862 9416 Default: 8863 \fI\fIset quota command\fR\fR\fI = \fR\fI\ fR\fI \fR8864 .sp 8865 Example: 8866 \fI\fIset quota command\fR\fR\fI = \fR\fI /usr/local/sbin/set_quota\fR\fI \fR9417 \fI\fIset quota command\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 9418 .sp 9419 Example: 9420 \fI\fIset quota command\fR\fR\fI = \fR\fI\FC/usr/local/sbin/set_quota\F[]\fR\fI \fR 8867 9421 .RE 8868 9422 … … 8876 9430 .sp 8877 9431 Default: 8878 \fI\fIshare:fake_fscaps\fR\fR\fI = \fR\fI 0\fR\fI \fR9432 \fI\fIshare:fake_fscaps\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 8879 9433 .RE 8880 9434 … … 8900 9454 .sp 8901 9455 Default: 8902 \fI\fIshare modes\fR\fR\fI = \fR\fI yes\fR\fI \fR9456 \fI\fIshare modes\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8903 9457 .RE 8904 9458 … … 8916 9470 .sp 8917 9471 Default: 8918 \fI\fIshort preserve case\fR\fR\fI = \fR\fI yes\fR\fI \fR9472 \fI\fIshort preserve case\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8919 9473 .RE 8920 9474 … … 8936 9490 .\} 8937 9491 .RS 4 9492 .BM yellow 8938 9493 .it 1 an-trap 8939 9494 .nr an-no-space-flag 1 … … 8946 9501 This does not prevent the same user from having administrative privilege on an individual printer\&. 8947 9502 .sp .5v 8948 .RE 8949 Default: 8950 \fI\fIshow add printer wizard\fR\fR\fI = \fR\fIyes\fR\fI \fR 9503 .EM yellow 9504 .RE 9505 Default: 9506 \fI\fIshow add printer wizard\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 8951 9507 .RE 8952 9508 … … 9019 9575 .RS 4 9020 9576 .\} 9577 .fam C 9578 .ps -1 9021 9579 .nf 9580 .if t \{\ 9581 .sp -1 9582 .\} 9583 .BB lightgray adjust-for-leading-newline 9584 .sp -1 9585 9022 9586 #!/bin/bash 9023 9587 … … 9028 9592 /sbin/shutdown $3 $4 +$time $1 & 9029 9593 9594 .EB lightgray adjust-for-leading-newline 9595 .if t \{\ 9596 .sp 1 9597 .\} 9030 9598 .fi 9599 .fam 9600 .ps +1 9031 9601 .if n \{\ 9032 9602 .RE … … 9036 9606 .sp 9037 9607 Default: 9038 \fI\fIshutdown script\fR\fR\fI = \fR\fI\ fR\fI \fR9039 .sp 9040 Example: 9041 \fI\fIshutdown script\fR\fR\fI = \fR\fI /usr/local/samba/sbin/shutdown %m %t %r %f\fR\fI \fR9608 \fI\fIshutdown script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 9609 .sp 9610 Example: 9611 \fI\fIshutdown script\fR\fR\fI = \fR\fI\FC/usr/local/samba/sbin/shutdown %m %t %r %f\F[]\fR\fI \fR 9042 9612 .RE 9043 9613 … … 9063 9633 .sp 9064 9634 Default: 9065 \fI\fIsmb encrypt\fR\fR\fI = \fR\fI auto\fR\fI \fR9635 \fI\fIsmb encrypt\fR\fR\fI = \fR\fI\FCauto\F[]\fR\fI \fR 9066 9636 .RE 9067 9637 … … 9077 9647 .RS 4 9078 9648 .\} 9649 .fam C 9650 .ps -1 9079 9651 .nf 9652 .if t \{\ 9653 .sp -1 9654 .\} 9655 .BB lightgray adjust-for-leading-newline 9656 .sp -1 9657 9080 9658 smb passwd file = /etc/samba/smbpasswd 9659 .EB lightgray adjust-for-leading-newline 9660 .if t \{\ 9661 .sp 1 9662 .\} 9081 9663 .fi 9664 .fam 9665 .ps +1 9082 9666 .if n \{\ 9083 9667 .RE … … 9085 9669 .sp 9086 9670 Default: 9087 \fI\fIsmb passwd file\fR\fR\fI = \fR\fI ${prefix}/private/smbpasswd\fR\fI \fR9671 \fI\fIsmb passwd file\fR\fR\fI = \fR\fI\FC${prefix}/private/smbpasswd\F[]\fR\fI \fR 9088 9672 .RE 9089 9673 … … 9095 9679 .sp 9096 9680 Default: 9097 \fI\fIsmb ports\fR\fR\fI = \fR\fI 445 139\fR\fI \fR9681 \fI\fIsmb ports\fR\fR\fI = \fR\fI\FC445 139\F[]\fR\fI \fR 9098 9682 .RE 9099 9683 … … 9109 9693 .sp 9110 9694 Default: 9111 \fI\fIsocket address\fR\fR\fI = \fR\fI\ fR\fI \fR9112 .sp 9113 Example: 9114 \fI\fIsocket address\fR\fR\fI = \fR\fI 192\&.168\&.2\&.20\fR\fI \fR9695 \fI\fIsocket address\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 9696 .sp 9697 Example: 9698 \fI\fIsocket address\fR\fR\fI = \fR\fI\FC192\&.168\&.2\&.20\F[]\fR\fI \fR 9115 9699 .RE 9116 9700 … … 9124 9708 .sp 9125 9709 This option will typically be used to tune your Samba server for optimal performance for your local network\&. There is no way that Samba can know what the optimal parameters are for your net, so you must experiment and choose them yourself\&. We strongly suggest you read the appropriate documentation for your operating system first (perhaps 9126 man setsockopt 9710 \FCman setsockopt\F[] 9127 9711 will help)\&. 9128 9712 .sp … … 9249 9833 .sp 9250 9834 To specify an argument use the syntax SOME_OPTION = VALUE for example 9251 SO_SNDBUF = 8192\&. Note that you must not have any spaces before or after the = sign\&.9835 \FCSO_SNDBUF = 8192\F[]\&. Note that you must not have any spaces before or after the = sign\&. 9252 9836 .sp 9253 9837 If you are on a local network then a sensible option might be: 9254 9838 .sp 9255 socket options = IPTOS_LOWDELAY 9839 \FCsocket options = IPTOS_LOWDELAY\F[] 9256 9840 .sp 9257 9841 If you have a local network then you could try: 9258 9842 .sp 9259 socket options = IPTOS_LOWDELAY TCP_NODELAY 9843 \FCsocket options = IPTOS_LOWDELAY TCP_NODELAY\F[] 9260 9844 .sp 9261 9845 If you are on a wide area network then perhaps try setting IPTOS_THROUGHPUT\&. … … 9264 9848 .sp 9265 9849 Default: 9266 \fI\fIsocket options\fR\fR\fI = \fR\fI TCP_NODELAY\fR\fI \fR9267 .sp 9268 Example: 9269 \fI\fIsocket options\fR\fR\fI = \fR\fI IPTOS_LOWDELAY\fR\fI \fR9850 \fI\fIsocket options\fR\fR\fI = \fR\fI\FCTCP_NODELAY\F[]\fR\fI \fR 9851 .sp 9852 Example: 9853 \fI\fIsocket options\fR\fR\fI = \fR\fI\FCIPTOS_LOWDELAY\F[]\fR\fI \fR 9270 9854 .RE 9271 9855 … … 9279 9863 .sp 9280 9864 Default: 9281 \fI\fIstat cache\fR\fR\fI = \fR\fI yes\fR\fI \fR9865 \fI\fIstat cache\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 9282 9866 .RE 9283 9867 … … 9296 9880 .sp 9297 9881 Default: 9298 \fI\fIstate directory\fR\fR\fI = \fR\fI ${prefix}/var/locks\fR\fI \fR9299 .sp 9300 Example: 9301 \fI\fIstate directory\fR\fR\fI = \fR\fI /var/run/samba/locks/state\fR\fI \fR9882 \fI\fIstate directory\fR\fR\fI = \fR\fI\FC${prefix}/var/locks\F[]\fR\fI \fR 9883 .sp 9884 Example: 9885 \fI\fIstate directory\fR\fR\fI = \fR\fI\FC/var/run/samba/locks/state\F[]\fR\fI \fR 9302 9886 .RE 9303 9887 … … 9318 9902 .sp 9319 9903 Default: 9320 \fI\fIstore dos attributes\fR\fR\fI = \fR\fI no\fR\fI \fR9904 \fI\fIstore dos attributes\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9321 9905 .RE 9322 9906 … … 9334 9918 .sp 9335 9919 Default: 9336 \fI\fIstrict allocate\fR\fR\fI = \fR\fI no\fR\fI \fR9920 \fI\fIstrict allocate\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9337 9921 .RE 9338 9922 … … 9349 9933 .sp 9350 9934 Well\-behaved clients always ask for lock checks when it is important\&. So in the vast majority of cases, 9351 strict locking = Auto 9935 \FCstrict locking = Auto\F[] 9352 9936 or 9353 strict locking = no 9937 \FCstrict locking = no\F[] 9354 9938 is acceptable\&. 9355 9939 .sp 9356 9940 Default: 9357 \fI\fIstrict locking\fR\fR\fI = \fR\fI Auto\fR\fI \fR9941 \fI\fIstrict locking\fR\fR\fI = \fR\fI\FCAuto\F[]\fR\fI \fR 9358 9942 .RE 9359 9943 … … 9369 9953 .sp 9370 9954 Default: 9371 \fI\fIstrict sync\fR\fR\fI = \fR\fI no\fR\fI \fR9955 \fI\fIstrict sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9372 9956 .RE 9373 9957 … … 9379 9963 .sp 9380 9964 The administrator must create a directory name 9381 svcctl 9965 \FCsvcctl\F[] 9382 9966 in Samba\'s $(libdir) and create symbolic links to the init scripts in 9383 /etc/init\&.d/\&. The name of the links must match the names given as part of the9967 \FC/etc/init\&.d/\F[]\&. The name of the links must match the names given as part of the 9384 9968 \fIsvcctl list\fR\&. 9385 9969 .sp 9386 9970 Default: 9387 \fI\fIsvcctl list\fR\fR\fI = \fR\fI\ fR\fI \fR9388 .sp 9389 Example: 9390 \fI\fIsvcctl list\fR\fR\fI = \fR\fI cups postfix portmap httpd\fR\fI \fR9971 \fI\fIsvcctl list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 9972 .sp 9973 Example: 9974 \fI\fIsvcctl list\fR\fR\fI = \fR\fI\FCcups postfix portmap httpd\F[]\fR\fI \fR 9391 9975 .RE 9392 9976 … … 9400 9984 \fByes\fR 9401 9985 then every write will be followed by a 9402 fsync() 9986 \FCfsync() \F[] 9403 9987 call to ensure the data is written to disk\&. Note that the 9404 9988 \fIstrict sync\fR … … 9408 9992 .sp 9409 9993 Default: 9410 \fI\fIsync always\fR\fR\fI = \fR\fI no\fR\fI \fR9994 \fI\fIsync always\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9411 9995 .RE 9412 9996 … … 9420 10004 .sp 9421 10005 Default: 9422 \fI\fIsyslog only\fR\fR\fI = \fR\fI no\fR\fI \fR10006 \fI\fIsyslog only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9423 10007 .RE 9424 10008 … … 9438 10022 .sp 9439 10023 Default: 9440 \fI\fIsyslog\fR\fR\fI = \fR\fI 1\fR\fI \fR10024 \fI\fIsyslog\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR 9441 10025 .RE 9442 10026 … … 9454 10038 .sp 9455 10039 Default: 9456 \fI\fItemplate homedir\fR\fR\fI = \fR\fI /home/%D/%U\fR\fI \fR10040 \fI\fItemplate homedir\fR\fR\fI = \fR\fI\FC/home/%D/%U\F[]\fR\fI \fR 9457 10041 .RE 9458 10042 … … 9475 10059 .sp 9476 10060 Default: 9477 \fI\fItime offset\fR\fR\fI = \fR\fI 0\fR\fI \fR9478 .sp 9479 Example: 9480 \fI\fItime offset\fR\fR\fI = \fR\fI 60\fR\fI \fR10061 \fI\fItime offset\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 10062 .sp 10063 Example: 10064 \fI\fItime offset\fR\fR\fI = \fR\fI\FC60\F[]\fR\fI \fR 9481 10065 .RE 9482 10066 … … 9490 10074 .sp 9491 10075 Default: 9492 \fI\fItime server\fR\fR\fI = \fR\fI no\fR\fI \fR10076 \fI\fItime server\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9493 10077 .RE 9494 10078 … … 9502 10086 .sp 9503 10087 Default: 9504 \fI\fIunix charset\fR\fR\fI = \fR\fI UTF8\fR\fI \fR9505 .sp 9506 Example: 9507 \fI\fIunix charset\fR\fR\fI = \fR\fI ASCII\fR\fI \fR10088 \fI\fIunix charset\fR\fR\fI = \fR\fI\FCUTF8\F[]\fR\fI \fR 10089 .sp 10090 Example: 10091 \fI\fIunix charset\fR\fR\fI = \fR\fI\FCASCII\F[]\fR\fI \fR 9508 10092 .RE 9509 10093 … … 9519 10103 .sp 9520 10104 Default: 9521 \fI\fIunix extensions\fR\fR\fI = \fR\fI yes\fR\fI \fR10105 \fI\fIunix extensions\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 9522 10106 .RE 9523 10107 … … 9535 10119 .sp 9536 10120 Default: 9537 \fI\fIunix password sync\fR\fR\fI = \fR\fI no\fR\fI \fR10121 \fI\fIunix password sync\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9538 10122 .RE 9539 10123 … … 9556 10140 .sp 9557 10141 Note that even when this parameter is set, a user authenticating to 9558 smbd 10142 \FCsmbd\F[] 9559 10143 must still enter a valid password in order to connect correctly, and to update their hashed (smbpasswd) passwords\&. 9560 10144 .sp 9561 10145 Default: 9562 \fI\fIupdate encrypted\fR\fR\fI = \fR\fI no\fR\fI \fR10146 \fI\fIupdate encrypted\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9563 10147 .RE 9564 10148 … … 9568 10152 .RS 4 9569 10153 This parameter applies only to Windows NT/2000 clients\&. It has no effect on Windows 95/98/ME clients\&. When serving a printer to Windows NT/2000 clients without first installing a valid printer driver on the Samba host, the client will be required to install a local printer driver\&. From this point on, the client will treat the print as a local printer and not a network printer connection\&. This is much the same behavior that will occur when 9570 disable spoolss = yes\&.10154 \FCdisable spoolss = yes\F[]\&. 9571 10155 .sp 9572 10156 The differentiating factor is that under normal circumstances, the NT/2000 client will attempt to open the network printer using MS\-RPC\&. The problem is that because the client considers the printer to be local, it will attempt to issue the OpenPrinterEx() call requesting access rights associated with the logged on user\&. If the user possesses local administator rights but not root privilege on the Samba host (often the case), the OpenPrinterEx() call will fail\&. The result is that the client will now display an "Access Denied; Unable to connect" message in the printer queue window (even though jobs may successfully be printed)\&. … … 9576 10160 .sp 9577 10161 Default: 9578 \fI\fIuse client driver\fR\fR\fI = \fR\fI no\fR\fI \fR10162 \fI\fIuse client driver\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9579 10163 .RE 9580 10164 … … 9588 10172 .sp 9589 10173 Default: 9590 \fI\fIuse mmap\fR\fR\fI = \fR\fI yes\fR\fI \fR10174 \fI\fIuse mmap\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 9591 10175 .RE 9592 10176 … … 9603 10187 .sp 9604 10188 Default: 9605 \fI\fIusername level\fR\fR\fI = \fR\fI 0\fR\fI \fR9606 .sp 9607 Example: 9608 \fI\fIusername level\fR\fR\fI = \fR\fI 5\fR\fI \fR10189 \fI\fIusername level\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 10190 .sp 10191 Example: 10192 \fI\fIusername level\fR\fR\fI = \fR\fI\FC5\F[]\fR\fI \fR 9609 10193 .RE 9610 10194 … … 9618 10202 .sp 9619 10203 Default: 9620 \fI\fIusername map script\fR\fR\fI = \fR\fI\ fR\fI \fR9621 .sp 9622 Example: 9623 \fI\fIusername map script\fR\fR\fI = \fR\fI /etc/samba/scripts/mapusers\&.sh\fR\fI \fR10204 \fI\fIusername map script\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 10205 .sp 10206 Example: 10207 \fI\fIusername map script\fR\fR\fI = \fR\fI\FC/etc/samba/scripts/mapusers\&.sh\F[]\fR\fI \fR 9624 10208 .RE 9625 10209 … … 9631 10215 .sp 9632 10216 Please note that for user or share mode security, the username map is applied prior to validating the user credentials\&. Domain member servers (domain or ads) apply the username map after the user has been successfully authenticated by the domain controller and require fully qualified enties in the map table (e\&.g\&. biddle = 9633 DOMAIN\efoo)\&.10217 \FCDOMAIN\efoo\F[])\&. 9634 10218 .sp 9635 10219 The map file is parsed line by line\&. Each line should contain a single UNIX username on the left then a \'=\' followed by a list of usernames on the right\&. The list of usernames on the right may contain names of the form @group in which case they will match any UNIX username in that group\&. The special client name \'*\' is a wildcard and matches any name\&. Each line of the map file may be up to 1023 characters long\&. … … 9652 10236 .RS 4 9653 10237 .\} 10238 .fam C 10239 .ps -1 9654 10240 .nf 9655 root = admin administrator 10241 .if t \{\ 10242 .sp -1 10243 .\} 10244 .BB lightgray adjust-for-leading-newline 10245 .sp -1 10246 10247 \FCroot = admin administrator\F[] 10248 .EB lightgray adjust-for-leading-newline 10249 .if t \{\ 10250 .sp 1 10251 .\} 9656 10252 .fi 10253 .fam 10254 .ps +1 9657 10255 .if n \{\ 9658 10256 .RE … … 9668 10266 .RS 4 9669 10267 .\} 10268 .fam C 10269 .ps -1 9670 10270 .nf 9671 sys = @system 10271 .if t \{\ 10272 .sp -1 10273 .\} 10274 .BB lightgray adjust-for-leading-newline 10275 .sp -1 10276 10277 \FCsys = @system\F[] 10278 .EB lightgray adjust-for-leading-newline 10279 .if t \{\ 10280 .sp 1 10281 .\} 9672 10282 .fi 10283 .fam 10284 .ps +1 9673 10285 .if n \{\ 9674 10286 .RE … … 9678 10290 .sp 9679 10291 If your system supports the NIS NETGROUP option then the netgroup database is checked before the 9680 /etc/group 10292 \FC/etc/group \F[] 9681 10293 database for matching groups\&. 9682 10294 .sp … … 9686 10298 .RS 4 9687 10299 .\} 10300 .fam C 10301 .ps -1 9688 10302 .nf 9689 tridge = "Andrew Tridgell" 10303 .if t \{\ 10304 .sp -1 10305 .\} 10306 .BB lightgray adjust-for-leading-newline 10307 .sp -1 10308 10309 \FCtridge = "Andrew Tridgell"\F[] 10310 .EB lightgray adjust-for-leading-newline 10311 .if t \{\ 10312 .sp 1 10313 .\} 9690 10314 .fi 10315 .fam 10316 .ps +1 9691 10317 .if n \{\ 9692 10318 .RE … … 9700 10326 .RS 4 9701 10327 .\} 10328 .fam C 10329 .ps -1 9702 10330 .nf 10331 .if t \{\ 10332 .sp -1 10333 .\} 10334 .BB lightgray adjust-for-leading-newline 10335 .sp -1 10336 9703 10337 !sys = mary fred 9704 10338 guest = * 10339 .EB lightgray adjust-for-leading-newline 10340 .if t \{\ 10341 .sp 1 10342 .\} 9705 10343 .fi 10344 .fam 10345 .ps +1 9706 10346 .if n \{\ 9707 10347 .RE … … 9722 10362 .sp 9723 10363 Samba versions prior to 3\&.0\&.8 would only support reading the fully qualified username (e\&.g\&.: 9724 DOMAIN\euser) from the username map when performing a kerberos login from a client\&. However, when looking up a map entry for a user authenticated by NTLM[SSP], only the login name would be used for matches\&. This resulted in inconsistent behavior sometimes even on the same server\&.10364 \FCDOMAIN\euser\F[]) from the username map when performing a kerberos login from a client\&. However, when looking up a map entry for a user authenticated by NTLM[SSP], only the login name would be used for matches\&. This resulted in inconsistent behavior sometimes even on the same server\&. 9725 10365 .sp 9726 10366 The following functionality is obeyed in version 3\&.0\&.8 and later: … … 9729 10369 .sp 9730 10370 When relying upon a external domain controller for validating authentication requests, smbd will apply the username map to the fully qualified username (i\&.e\&. 9731 DOMAIN\euser) only after the user has been successfully authenticated\&.10371 \FCDOMAIN\euser\F[]) only after the user has been successfully authenticated\&. 9732 10372 .sp 9733 10373 An example of use is: … … 9736 10376 .RS 4 9737 10377 .\} 10378 .fam C 10379 .ps -1 9738 10380 .nf 10381 .if t \{\ 10382 .sp -1 10383 .\} 10384 .BB lightgray adjust-for-leading-newline 10385 .sp -1 10386 9739 10387 username map = /usr/local/samba/lib/users\&.map 10388 .EB lightgray adjust-for-leading-newline 10389 .if t \{\ 10390 .sp 1 10391 .\} 9740 10392 .fi 10393 .fam 10394 .ps +1 9741 10395 .if n \{\ 9742 10396 .RE … … 9744 10398 .sp 9745 10399 Default: 9746 \fI\fIusername map\fR\fR\fI = \fR\fI # no username map\fR\fI \fR10400 \fI\fIusername map\fR\fR\fI = \fR\fI\FC # no username map\F[]\fR\fI \fR 9747 10401 .RE 9748 10402 … … 9798 10452 .sp 9799 10453 Default: 9800 \fI\fIusername\fR\fR\fI = \fR\fI # The guest account if a guest service, else <empty string>\&.\fR\fI \fR9801 .sp 9802 Example: 9803 \fI\fIusername\fR\fR\fI = \fR\fI fred, mary, jack, jane, @users, @pcgroup\fR\fI \fR10454 \fI\fIusername\fR\fR\fI = \fR\fI\FC # The guest account if a guest service, else <empty string>\&.\F[]\fR\fI \fR 10455 .sp 10456 Example: 10457 \fI\fIusername\fR\fR\fI = \fR\fI\FCfred, mary, jack, jane, @users, @pcgroup\F[]\fR\fI \fR 9804 10458 .RE 9805 10459 … … 9813 10467 .sp 9814 10468 Default: 9815 \fI\fIusershare allow guests\fR\fR\fI = \fR\fI no\fR\fI \fR10469 \fI\fIusershare allow guests\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9816 10470 .RE 9817 10471 … … 9823 10477 .sp 9824 10478 Default: 9825 \fI\fIusershare max shares\fR\fR\fI = \fR\fI 0\fR\fI \fR10479 \fI\fIusershare max shares\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 9826 10480 .RE 9827 10481 … … 9833 10487 .sp 9834 10488 Default: 9835 \fI\fIusershare owner only\fR\fR\fI = \fR\fI True\fR\fI \fR10489 \fI\fIusershare owner only\fR\fR\fI = \fR\fI\FCTrue\F[]\fR\fI \fR 9836 10490 .RE 9837 10491 … … 9849 10503 .RS 4 9850 10504 .\} 10505 .fam C 10506 .ps -1 9851 10507 .nf 10508 .if t \{\ 10509 .sp -1 10510 .\} 10511 .BB lightgray adjust-for-leading-newline 10512 .sp -1 10513 9852 10514 ls \-ld /usr/local/samba/lib/usershares/ 9853 10515 drwxrwx\-\-T 2 root power_users 4096 2006\-05\-05 12:27 /usr/local/samba/lib/usershares/ 9854 10516 10517 .EB lightgray adjust-for-leading-newline 10518 .if t \{\ 10519 .sp 1 10520 .\} 9855 10521 .fi 10522 .fam 10523 .ps +1 9856 10524 .if n \{\ 9857 10525 .RE … … 9861 10529 .sp 9862 10530 Default: 9863 \fI\fIusershare path\fR\fR\fI = \fR\fI NULL\fR\fI \fR10531 \fI\fIusershare path\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR 9864 10532 .RE 9865 10533 … … 9873 10541 .sp 9874 10542 Default: 9875 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI NULL\fR\fI \fR9876 .sp 9877 Example: 9878 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI /home /data /space\fR\fI \fR10543 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR 10544 .sp 10545 Example: 10546 \fI\fIusershare prefix allow list\fR\fR\fI = \fR\fI\FC/home /data /space\F[]\fR\fI \fR 9879 10547 .RE 9880 10548 … … 9888 10556 .sp 9889 10557 Default: 9890 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI NULL\fR\fI \fR9891 .sp 9892 Example: 9893 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI /etc /dev /private\fR\fI \fR10558 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR 10559 .sp 10560 Example: 10561 \fI\fIusershare prefix deny list\fR\fR\fI = \fR\fI\FC/etc /dev /private\F[]\fR\fI \fR 9894 10562 .RE 9895 10563 … … 9903 10571 .sp 9904 10572 Default: 9905 \fI\fIusershare template share\fR\fR\fI = \fR\fI NULL\fR\fI \fR9906 .sp 9907 Example: 9908 \fI\fIusershare template share\fR\fR\fI = \fR\fI template_share\fR\fI \fR10573 \fI\fIusershare template share\fR\fR\fI = \fR\fI\FCNULL\F[]\fR\fI \fR 10574 .sp 10575 Example: 10576 \fI\fIusershare template share\fR\fR\fI = \fR\fI\FCtemplate_share\F[]\fR\fI \fR 9909 10577 .RE 9910 10578 … … 9919 10587 .sp 9920 10588 Default: 9921 \fI\fIuse sendfile\fR\fR\fI = \fR\fI false\fR\fI \fR10589 \fI\fIuse sendfile\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR 9922 10590 .RE 9923 10591 … … 9931 10599 .sp 9932 10600 Default: 9933 \fI\fIuse spnego\fR\fR\fI = \fR\fI yes\fR\fI \fR10601 \fI\fIuse spnego\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 9934 10602 .RE 9935 10603 … … 9939 10607 .RS 4 9940 10608 This parameter is only available if Samba has been configured and compiled with the option 9941 \ -\-with\-utmp\&. It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server\&. By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually9942 /var/run/utmp 10609 \FC \-\-with\-utmp\F[]\&. It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server\&. By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually 10610 \FC/var/run/utmp\F[] 9943 10611 on Linux)\&. 9944 10612 .sp 9945 10613 Default: 9946 \fI\fIutmp directory\fR\fR\fI = \fR\fI # Determined automatically\fR\fI \fR9947 .sp 9948 Example: 9949 \fI\fIutmp directory\fR\fR\fI = \fR\fI /var/run/utmp\fR\fI \fR10614 \fI\fIutmp directory\fR\fR\fI = \fR\fI\FC # Determined automatically\F[]\fR\fI \fR 10615 .sp 10616 Example: 10617 \fI\fIutmp directory\fR\fR\fI = \fR\fI\FC/var/run/utmp\F[]\fR\fI \fR 9950 10618 .RE 9951 10619 … … 9955 10623 .RS 4 9956 10624 This boolean parameter is only available if Samba has been configured and compiled with the option 9957 \ -\-with\-utmp\&. If set to10625 \FC\-\-with\-utmp\F[]\&. If set to 9958 10626 \fByes\fR 9959 10627 then Samba will attempt to add utmp or utmpx records (depending on the UNIX system) whenever a connection is made to a Samba server\&. Sites may use this to record the user connecting to a Samba share\&. … … 9962 10630 .sp 9963 10631 Default: 9964 \fI\fIutmp\fR\fR\fI = \fR\fI no\fR\fI \fR10632 \fI\fIutmp\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 9965 10633 .RE 9966 10634 … … 9981 10649 .sp 9982 10650 Default: 9983 \fI\fIvalid users\fR\fR\fI = \fR\fI # No valid users list (anyone can login)\fR\fI \fR9984 .sp 9985 Example: 9986 \fI\fIvalid users\fR\fR\fI = \fR\fI greg, @pcusers\fR\fI \fR10651 \fI\fIvalid users\fR\fR\fI = \fR\fI\FC # No valid users list (anyone can login) \F[]\fR\fI \fR 10652 .sp 10653 Example: 10654 \fI\fIvalid users\fR\fR\fI = \fR\fI\FCgreg, @pcusers\F[]\fR\fI \fR 9987 10655 .RE 9988 10656 … … 9996 10664 .sp 9997 10665 Default: 9998 \fI\fI\-valid\fR\fR\fI = \fR\fI yes\fR\fI \fR10666 \fI\fI\-valid\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 9999 10667 .RE 10000 10668 … … 10027 10695 .RS 4 10028 10696 .\} 10697 .fam C 10698 .ps -1 10029 10699 .nf 10700 .if t \{\ 10701 .sp -1 10702 .\} 10703 .BB lightgray adjust-for-leading-newline 10704 .sp -1 10705 10030 10706 ; Veto any files containing the word Security, 10031 10707 ; any ending in \&.tmp, and any directory containing the … … 10036 10712 ; creates\&. 10037 10713 veto files = /\&.AppleDouble/\&.bin/\&.AppleDesktop/Network Trash Folder/ 10714 .EB lightgray adjust-for-leading-newline 10715 .if t \{\ 10716 .sp 1 10717 .\} 10038 10718 .fi 10719 .fam 10720 .ps +1 10039 10721 .if n \{\ 10040 10722 .RE … … 10042 10724 .sp 10043 10725 Default: 10044 \fI\fIveto files\fR\fR\fI = \fR\fI No files or directories are vetoed\&.\fR\fI \fR10726 \fI\fIveto files\fR\fR\fI = \fR\fI\FCNo files or directories are vetoed\&.\F[]\fR\fI \fR 10045 10727 .RE 10046 10728 … … 10056 10738 .sp 10057 10739 You might want to do this on files that you know will be heavily contended for by clients\&. A good example of this is in the NetBench SMB benchmark program, which causes heavy client contention for files ending in 10058 \ &.SEM\&. To cause Samba not to grant oplocks on these files you would use the line (either in the [global] section or in the section for the particular NetBench share\&.10740 \FC\&.SEM\F[]\&. To cause Samba not to grant oplocks on these files you would use the line (either in the [global] section or in the section for the particular NetBench share\&. 10059 10741 .sp 10060 10742 An example of use is: … … 10063 10745 .RS 4 10064 10746 .\} 10747 .fam C 10748 .ps -1 10065 10749 .nf 10750 .if t \{\ 10751 .sp -1 10752 .\} 10753 .BB lightgray adjust-for-leading-newline 10754 .sp -1 10755 10066 10756 veto oplock files = /\&.*SEM/ 10757 .EB lightgray adjust-for-leading-newline 10758 .if t \{\ 10759 .sp 1 10760 .\} 10067 10761 .fi 10762 .fam 10763 .ps +1 10068 10764 .if n \{\ 10069 10765 .RE … … 10071 10767 .sp 10072 10768 Default: 10073 \fI\fIveto oplock files\fR\fR\fI = \fR\fI # No files are vetoed for oplock grants\fR\fI \fR10769 \fI\fIveto oplock files\fR\fR\fI = \fR\fI\FC # No files are vetoed for oplock grants\F[]\fR\fI \fR 10074 10770 .RE 10075 10771 … … 10089 10785 .sp 10090 10786 Default: 10091 \fI\fIvfs objects\fR\fR\fI = \fR\fI\ fR\fI \fR10092 .sp 10093 Example: 10094 \fI\fIvfs objects\fR\fR\fI = \fR\fI extd_audit recycle\fR\fI \fR10787 \fI\fIvfs objects\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 10788 .sp 10789 Example: 10790 \fI\fIvfs objects\fR\fR\fI = \fR\fI\FCextd_audit recycle\F[]\fR\fI \fR 10095 10791 .RE 10096 10792 … … 10102 10798 .sp 10103 10799 Default: 10104 \fI\fIvolume\fR\fR\fI = \fR\fI # the name of the share\fR\fI \fR10800 \fI\fIvolume\fR\fR\fI = \fR\fI\FC # the name of the share\F[]\fR\fI \fR 10105 10801 .RE 10106 10802 … … 10116 10812 .sp 10117 10813 Default: 10118 \fI\fIwide links\fR\fR\fI = \fR\fI no\fR\fI \fR10814 \fI\fIwide links\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10119 10815 .RE 10120 10816 … … 10132 10828 .sp 10133 10829 Default: 10134 \fI\fIwinbind cache time\fR\fR\fI = \fR\fI 300\fR\fI \fR10830 \fI\fIwinbind cache time\fR\fR\fI = \fR\fI\FC300\F[]\fR\fI \fR 10135 10831 .RE 10136 10832 … … 10142 10838 \fBwinbindd\fR(8) 10143 10839 it may be necessary to suppress the enumeration of groups through the 10144 setgrent(),10145 getgrent() 10840 \FCsetgrent()\F[], 10841 \FCgetgrent()\F[] 10146 10842 and 10147 endgrent() 10843 \FCendgrent()\F[] 10148 10844 group of system calls\&. If the 10149 10845 \fIwinbind enum groups\fR 10150 10846 parameter is 10151 10847 \fBno\fR, calls to the 10152 getgrent() 10848 \FCgetgrent()\F[] 10153 10849 system call will not return any data\&. 10154 10850 .if n \{\ … … 10156 10852 .\} 10157 10853 .RS 4 10854 .BM yellow 10158 10855 .it 1 an-trap 10159 10856 .nr an-no-space-flag 1 … … 10166 10863 Turning off group enumeration may cause some programs to behave oddly\&. 10167 10864 .sp .5v 10168 .RE 10169 Default: 10170 \fI\fIwinbind enum groups\fR\fR\fI = \fR\fIno\fR\fI \fR 10865 .EM yellow 10866 .RE 10867 Default: 10868 \fI\fIwinbind enum groups\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10171 10869 .RE 10172 10870 … … 10178 10876 \fBwinbindd\fR(8) 10179 10877 it may be necessary to suppress the enumeration of users through the 10180 setpwent(),10181 getpwent() 10878 \FCsetpwent()\F[], 10879 \FCgetpwent()\F[] 10182 10880 and 10183 endpwent() 10881 \FCendpwent()\F[] 10184 10882 group of system calls\&. If the 10185 10883 \fIwinbind enum users\fR 10186 10884 parameter is 10187 10885 \fBno\fR, calls to the 10188 getpwent 10886 \FCgetpwent\F[] 10189 10887 system call will not return any data\&. 10190 10888 .if n \{\ … … 10192 10890 .\} 10193 10891 .RS 4 10892 .BM yellow 10194 10893 .it 1 an-trap 10195 10894 .nr an-no-space-flag 1 … … 10202 10901 Turning off user enumeration may cause some programs to behave oddly\&. For example, the finger program relies on having access to the full user list when searching for matching usernames\&. 10203 10902 .sp .5v 10204 .RE 10205 Default: 10206 \fI\fIwinbind enum users\fR\fR\fI = \fR\fIno\fR\fI \fR 10903 .EM yellow 10904 .RE 10905 Default: 10906 \fI\fIwinbind enum users\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10207 10907 .RE 10208 10908 … … 10218 10918 .sp 10219 10919 Default: 10220 \fI\fIwinbind expand groups\fR\fR\fI = \fR\fI 1\fR\fI \fR10920 \fI\fIwinbind expand groups\fR\fR\fI = \fR\fI\FC1\F[]\fR\fI \fR 10221 10921 .RE 10222 10922 … … 10228 10928 .sp 10229 10929 Default: 10230 \fI\fIwinbind nested groups\fR\fR\fI = \fR\fI yes\fR\fI \fR10930 \fI\fIwinbind nested groups\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 10231 10931 .RE 10232 10932 … … 10240 10940 .sp 10241 10941 Default: 10242 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI no\fR\fI \fR10243 .sp 10244 Example: 10245 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI yes\fR\fI \fR10942 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10943 .sp 10944 Example: 10945 \fI\fIwinbind normalize names\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 10246 10946 .RE 10247 10947 … … 10285 10985 .sp 10286 10986 Default: 10287 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI template\fR\fI \fR10288 .sp 10289 Example: 10290 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI template sfu\fR\fI \fR10987 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI\FCtemplate\F[]\fR\fI \fR 10988 .sp 10989 Example: 10990 \fI\fIwinbind nss info\fR\fR\fI = \fR\fI\FCtemplate sfu\F[]\fR\fI \fR 10291 10991 .RE 10292 10992 … … 10300 11000 .sp 10301 11001 Default: 10302 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI false\fR\fI \fR10303 .sp 10304 Example: 10305 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI true\fR\fI \fR11002 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR 11003 .sp 11004 Example: 11005 \fI\fIwinbind offline logon\fR\fR\fI = \fR\fI\FCtrue\F[]\fR\fI \fR 10306 11006 .RE 10307 11007 … … 10315 11015 .sp 10316 11016 Default: 10317 \fI\fIwinbind reconnect delay\fR\fR\fI = \fR\fI 30\fR\fI \fR11017 \fI\fIwinbind reconnect delay\fR\fR\fI = \fR\fI\FC30\F[]\fR\fI \fR 10318 11018 .RE 10319 11019 … … 10327 11027 .sp 10328 11028 Default: 10329 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI false\fR\fI \fR10330 .sp 10331 Example: 10332 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI true\fR\fI \fR11029 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI\FCfalse\F[]\fR\fI \fR 11030 .sp 11031 Example: 11032 \fI\fIwinbind refresh tickets\fR\fR\fI = \fR\fI\FCtrue\F[]\fR\fI \fR 10333 11033 .RE 10334 11034 … … 10338 11038 .RS 4 10339 11039 Setting this parameter to 10340 yes 11040 \FCyes\F[] 10341 11041 forces winbindd to use RPC instead of LDAP to retrieve information from Domain Controllers\&. 10342 11042 .sp 10343 11043 Default: 10344 \fI\fIwinbind rpc only\fR\fR\fI = \fR\fI no\fR\fI \fR11044 \fI\fIwinbind rpc only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10345 11045 .RE 10346 11046 … … 10351 11051 This parameter allows an admin to define the character used when listing a username of the form of 10352 11052 \fIDOMAIN \fR\e\fIuser\fR\&. This parameter is only applicable when using the 10353 pam_winbind\&.so 11053 \FCpam_winbind\&.so\F[] 10354 11054 and 10355 nss_winbind\&.so 11055 \FCnss_winbind\&.so\F[] 10356 11056 modules for UNIX services\&. 10357 11057 .sp … … 10359 11059 .sp 10360 11060 Default: 10361 \fI\fIwinbind separator\fR\fR\fI = \fR\fI\ '\e\'\fR\fI \fR10362 .sp 10363 Example: 10364 \fI\fIwinbind separator\fR\fR\fI = \fR\fI +\fR\fI \fR11061 \fI\fIwinbind separator\fR\fR\fI = \fR\fI\FC\'\e\'\F[]\fR\fI \fR 11062 .sp 11063 Example: 11064 \fI\fIwinbind separator\fR\fR\fI = \fR\fI\FC+\F[]\fR\fI \fR 10365 11065 .RE 10366 11066 … … 10370 11070 .RS 4 10371 11071 This parameter is designed to allow Samba servers that are members of a Samba controlled domain to use UNIX accounts distributed via NIS, rsync, or LDAP as the uid\'s for winbindd users in the hosts primary domain\&. Therefore, the user 10372 DOMAIN\euser1 11072 \FCDOMAIN\euser1\F[] 10373 11073 would be mapped to the account user1 in /etc/passwd instead of allocating a new uid for him or her\&. 10374 11074 .sp … … 10378 11078 .sp 10379 11079 Default: 10380 \fI\fIwinbind trusted domains only\fR\fR\fI = \fR\fI no\fR\fI \fR11080 \fI\fIwinbind trusted domains only\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10381 11081 .RE 10382 11082 … … 10390 11090 .sp 10391 11091 Default: 10392 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI no\fR\fI \fR10393 .sp 10394 Example: 10395 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI yes\fR\fI \fR11092 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 11093 .sp 11094 Example: 11095 \fI\fIwinbind use default domain\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 10396 11096 .RE 10397 11097 … … 10404 11104 The wins hook parameter specifies the name of a script or executable that will be called as follows: 10405 11105 .sp 10406 wins_hook operation name nametype ttl IP_list 11106 \FCwins_hook operation name nametype ttl IP_list\F[] 10407 11107 .sp 10408 11108 .RS 4 … … 10462 11162 .RE 10463 11163 An example script that calls the BIND dynamic DNS update program 10464 nsupdate 11164 \FCnsupdate\F[] 10465 11165 is provided in the examples directory of the Samba source code\&. 10466 11166 .sp … … 10479 11179 .sp 10480 11180 Default: 10481 \fI\fIwins proxy\fR\fR\fI = \fR\fI no\fR\fI \fR11181 \fI\fIwins proxy\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10482 11182 .RE 10483 11183 … … 10497 11197 .\} 10498 11198 .RS 4 11199 .BM yellow 10499 11200 .it 1 an-trap 10500 11201 .nr an-no-space-flag 1 … … 10507 11208 You need to set up Samba to point to a WINS server if you have multiple subnets and wish cross\-subnet browsing to work correctly\&. 10508 11209 .sp .5v 11210 .EM yellow 10509 11211 .RE 10510 11212 See the chapter in the Samba3\-HOWTO on Network Browsing\&. 10511 11213 .sp 10512 11214 Default: 10513 \fI\fIwins server\fR\fR\fI = \fR\fI\ fR\fI \fR10514 .sp 10515 Example: 10516 \fI\fIwins server\fR\fR\fI = \fR\fI mary:192\&.9\&.200\&.1 fred:192\&.168\&.3\&.199 mary:192\&.168\&.2\&.61 # For this example when querying a certain name, 192\&.19\&.200\&.1 will be asked first and if that doesn\'t respond 192\&.168\&.2\&.61\&. If either of those doesn\'t know the name 192\&.168\&.3\&.199 will be queried\&.\fR\fI \fR10517 .sp 10518 Example: 10519 \fI\fIwins server\fR\fR\fI = \fR\fI 192\&.9\&.200\&.1 192\&.168\&.2\&.61\fR\fI \fR11215 \fI\fIwins server\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 11216 .sp 11217 Example: 11218 \fI\fIwins server\fR\fR\fI = \fR\fI\FCmary:192\&.9\&.200\&.1 fred:192\&.168\&.3\&.199 mary:192\&.168\&.2\&.61 # For this example when querying a certain name, 192\&.19\&.200\&.1 will be asked first and if that doesn\'t respond 192\&.168\&.2\&.61\&. If either of those doesn\'t know the name 192\&.168\&.3\&.199 will be queried\&.\F[]\fR\fI \fR 11219 .sp 11220 Example: 11221 \fI\fIwins server\fR\fR\fI = \fR\fI\FC192\&.9\&.200\&.1 192\&.168\&.2\&.61\F[]\fR\fI \fR 10520 11222 .RE 10521 11223 … … 10529 11231 \fByes\fR 10530 11232 unless you have a multi\-subnetted network and you wish a particular 10531 nmbd 11233 \FCnmbd\F[] 10532 11234 to be your WINS server\&. Note that you should 10533 11235 \fINEVER\fR … … 10537 11239 .sp 10538 11240 Default: 10539 \fI\fIwins support\fR\fR\fI = \fR\fI no\fR\fI \fR11241 \fI\fIwins support\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10540 11242 .RE 10541 11243 … … 10549 11251 .sp 10550 11252 Default: 10551 \fI\fIworkgroup\fR\fR\fI = \fR\fI WORKGROUP\fR\fI \fR10552 .sp 10553 Example: 10554 \fI\fIworkgroup\fR\fR\fI = \fR\fI MYGROUP\fR\fI \fR11253 \fI\fIworkgroup\fR\fR\fI = \fR\fI\FCWORKGROUP\F[]\fR\fI \fR 11254 .sp 11255 Example: 11256 \fI\fIworkgroup\fR\fR\fI = \fR\fI\FCMYGROUP\F[]\fR\fI \fR 10555 11257 .RE 10556 11258 … … 10571 11273 .sp 10572 11274 Default: 10573 \fI\fIwriteable\fR\fR\fI = \fR\fI no\fR\fI \fR11275 \fI\fIwriteable\fR\fR\fI = \fR\fI\FCno\F[]\fR\fI \fR 10574 11276 .RE 10575 11277 … … 10587 11289 .sp 10588 11290 Default: 10589 \fI\fIwrite cache size\fR\fR\fI = \fR\fI 0\fR\fI \fR10590 .sp 10591 Example: 10592 \fI\fIwrite cache size\fR\fR\fI = \fR\fI 262144 # for a 256k cache size per file\fR\fI \fR11291 \fI\fIwrite cache size\fR\fR\fI = \fR\fI\FC0\F[]\fR\fI \fR 11292 .sp 11293 Example: 11294 \fI\fIwrite cache size\fR\fR\fI = \fR\fI\FC262144 # for a 256k cache size per file\F[]\fR\fI \fR 10593 11295 .RE 10594 11296 … … 10608 11310 .sp 10609 11311 Default: 10610 \fI\fIwrite list\fR\fR\fI = \fR\fI\ fR\fI \fR10611 .sp 10612 Example: 10613 \fI\fIwrite list\fR\fR\fI = \fR\fI admin, root, @staff\fR\fI \fR11312 \fI\fIwrite list\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 11313 .sp 11314 Example: 11315 \fI\fIwrite list\fR\fR\fI = \fR\fI\FCadmin, root, @staff\F[]\fR\fI \fR 10614 11316 .RE 10615 11317 … … 10621 11323 .sp 10622 11324 Default: 10623 \fI\fIwrite raw\fR\fR\fI = \fR\fI yes\fR\fI \fR11325 \fI\fIwrite raw\fR\fR\fI = \fR\fI\FCyes\F[]\fR\fI \fR 10624 11326 .RE 10625 11327 … … 10629 11331 .RS 4 10630 11332 This parameter is only available if Samba has been configured and compiled with the option 10631 \ -\-with\-utmp\&. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on the UNIX system) that record user connections to a Samba server\&. The difference with the utmp directory is the fact that user info is kept after a user has logged out\&.11333 \FC \-\-with\-utmp\F[]\&. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on the UNIX system) that record user connections to a Samba server\&. The difference with the utmp directory is the fact that user info is kept after a user has logged out\&. 10632 11334 .sp 10633 11335 By default this is not set, meaning the system will use whatever utmp file the native system is set to use (usually 10634 /var/run/wtmp 11336 \FC/var/run/wtmp\F[] 10635 11337 on Linux)\&. 10636 11338 .sp 10637 11339 Default: 10638 \fI\fIwtmp directory\fR\fR\fI = \fR\fI\ fR\fI \fR10639 .sp 10640 Example: 10641 \fI\fIwtmp directory\fR\fR\fI = \fR\fI /var/log/wtmp\fR\fI \fR11340 \fI\fIwtmp directory\fR\fR\fI = \fR\fI\FC\F[]\fR\fI \fR 11341 .sp 11342 Example: 11343 \fI\fIwtmp directory\fR\fR\fI = \fR\fI\FC/var/log/wtmp\F[]\fR\fI \fR 10642 11344 .RE 10643 11345 .SH "WARNINGS" … … 10650 11352 .PP 10651 11353 Use of the 10652 [homes]11354 \FC[homes]\F[] 10653 11355 and 10654 [printers]11356 \FC[printers]\F[] 10655 11357 special sections make life for an administrator easy, but the various combinations of default attributes can be tricky\&. Take extreme care when designing these sections\&. In particular, ensure that the permissions on spool directories are correct\&. 10656 11358 .SH "VERSION"
Note:
See TracChangeset
for help on using the changeset viewer.
