Ignore:
Timestamp:
Jul 6, 2011, 8:21:13 PM (14 years ago)
Author:
Herwig Bauernfeind
Message:

Samba 3.5: Update trunk to 3.5.9

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/server/docs/htmldocs/manpages/smb.conf.5.html

    r480 r599  
    1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" lang="en"><a name="id2522900"></a><h2>SYNOPSIS</h2><p>
     1<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id266327"></a><h2>SYNOPSIS</h2><p>
    22        The <code class="filename">smb.conf</code> file is a configuration  file for the Samba suite. <code class="filename">smb.conf</code> contains  runtime configuration information for the Samba programs. The
    33         <code class="filename">smb.conf</code> file is designed to be configured and administered by the
    44         <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a> program. The
    55        complete description of the file format and possible parameters held within are here for reference purposes.
    6         </p></div><div class="refsect1" lang="en"><a name="FILEFORMATSECT"></a><h2>FILE FORMAT</h2><p>
     6        </p></div><div class="refsect1" title="FILE FORMAT"><a name="FILEFORMATSECT"></a><h2>FILE FORMAT</h2><p>
    77        The file consists of sections and parameters. A section begins with the name of the section in square brackets
    88        and continues until the next section begins. Sections contain parameters of the form:
    … …  
    1919        retained verbatim.
    2020        </p><p>
    21         Any line beginning with a semicolon (&#8220;<span class="quote">;</span>&#8221;) or a hash (&#8220;<span class="quote">#</span>&#8221;)
     21        Any line beginning with a semicolon (<span class="quote">&#8220;<span class="quote">;</span>&#8221;</span>) or a hash (<span class="quote">&#8220;<span class="quote">#</span>&#8221;</span>)
    2222        character is ignored, as are lines containing only whitespace.
    2323        </p><p>
    24         Any line ending in a &#8220;<span class="quote"><code class="literal">\</code></span>&#8221; is continued on the next line in the customary UNIX fashion.
     24        Any line ending in a <span class="quote">&#8220;<span class="quote"><code class="literal">\</code></span>&#8221;</span> is continued on the next line in the customary UNIX fashion.
    2525        </p><p>
    2626        The values following the equals sign in parameters are all either a string (no quotes needed) or a boolean,
    2727        which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved
    2828        in string values. Some items such as create masks are numeric.
    29         </p></div><div class="refsect1" lang="en"><a name="id2483384"></a><h2>SECTION DESCRIPTIONS</h2><p>
     29        </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id266888"></a><h2>SECTION DESCRIPTIONS</h2><p>
    3030        Each section in the configuration file (except for the [global] section) describes a shared resource (known as
    31         a &#8220;<span class="quote">share</span>&#8221;). The section name is the name of the shared resource and the parameters within the
     31        a <span class="quote">&#8220;<span class="quote">share</span>&#8221;</span>). The section name is the name of the shared resource and the parameters within the
    3232        section define the shares attributes.
    3333        </p><p>
    … …  
    7070        <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a>
    7171</pre><p>
    72         </p></div><div class="refsect1" lang="en"><a name="id2481464"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" lang="en"><a name="id2481470"></a><h3>The [global] section</h3><p>
     72        </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id265957"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id265962"></a><h3>The [global] section</h3><p>
    7373                Parameters in this section apply to the server as a whole, or are defaults for sections that do not
    7474                specifically define certain items. See the notes under PARAMETERS for more information.
    75                 </p></div><div class="refsect2" lang="en"><a name="HOMESECT"></a><h3>The [homes] section</h3><p>
     75                </p></div><div class="refsect2" title="The [homes] section"><a name="HOMESECT"></a><h3>The [homes] section</h3><p>
    7676                If a section called [homes] is included in the configuration file, services connecting clients
    7777                to their home directories can be created on the fly by the server.
    … …  
    8383                </p><p>
    8484                Some modifications are then made to the newly created share:
    85                 </p><div class="itemizedlist"><ul type="disc"><li><p>
     85                </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>
    8686                        The share name is changed from homes to the located username.
    87                         </p></li><li><p>
     87                        </p></li><li class="listitem"><p>
    8888                        If no path was given, the path is set to the user's home directory.
    8989                        </p></li></ul></div><p>
    … …  
    9898                of fuss.
    9999                </p><p>
    100                 A similar process occurs if the requested section name is &#8220;<span class="quote">homes</span>&#8221;, except that the share
     100                A similar process occurs if the requested section name is <span class="quote">&#8220;<span class="quote">homes</span>&#8221;</span>, except that the share
    101101                name is not changed to that of the requesting user. This method of using the [homes] section works well if
    102102                different users share a client PC.
    … …  
    116116                flag, not the [homes] browseable flag. This is useful as it means setting <span class="emphasis"><em>browseable = no</em></span> in
    117117                the [homes] section will hide the [homes] share but make any auto home directories visible.
    118                 </p></div><div class="refsect2" lang="en"><a name="PRINTERSSECT"></a><h3>The [printers] section</h3><p>
     118                </p></div><div class="refsect2" title="The [printers] section"><a name="PRINTERSSECT"></a><h3>The [printers] section</h3><p>
    119119                This section works like [homes], but for printers.
    120120                </p><p>
    … …  
    129129                </p><p>
    130130                A few modifications are then made to the newly created share:
    131                 </p><div class="itemizedlist"><ul type="disc"><li><p>The share name is set to the located printer name</p></li><li><p>If no printer name was given, the printer name is set to the located printer name</p></li><li><p>If the share does not permit guest access and no username was given, the username is set
     131                </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The share name is set to the located printer name</p></li><li class="listitem"><p>If no printer name was given, the printer name is set to the located printer name</p></li><li class="listitem"><p>If the share does not permit guest access and no username was given, the username is set
    132132                                to the located printer name.</p></li></ul></div><p>
    133133                The [printers] service MUST be printable - if you specify otherwise, the server will refuse
    … …  
    157157                An alias, by the way, is defined as any component of the first entry of a printcap record. Records are separated by newlines,
    158158                components (if there are more than one) are separated by vertical bar symbols (<code class="literal">|</code>).
    159                 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     159                </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    160160                On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use
    161161                <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the
    162162                <code class="literal">printcap name</code> option for more details.
    163                 </p></div></div></div><div class="refsect1" lang="en"><a name="id2481784"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
     163                </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id307273"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
    164164        their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and
    165165        is controlled by a set of parameters in the [global] section of the smb.conf.
    … …  
    185185        to the global
    186186        section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares
    187         using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" lang="en"><a name="id2482011"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
     187        using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id307466"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
    188188        Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>).  Some parameters
    189189        are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal
    … …  
    197197        find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred
    198198        synonym.
    199         </p></div><div class="refsect1" lang="en"><a name="id2532525"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
     199        </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id307505"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
    200200        Many of the strings that are settable in the config file can take substitutions. For example the option
    201         &#8220;<span class="quote">path = /tmp/%u</span>&#8221; is interpreted as &#8220;<span class="quote">path = /tmp/john</span>&#8221; if the user connected with the
     201        <span class="quote">&#8220;<span class="quote">path = /tmp/%u</span>&#8221;</span> is interpreted as <span class="quote">&#8220;<span class="quote">path = /tmp/john</span>&#8221;</span> if the user connected with the
    202202        username john.
    203203        </p><p>
    … …  
    211211                        functionality to function as it did with Samba 2.x.
    212212                        </p></dd><dt><span class="term">%L</span></dt><dd><p>the NetBIOS name of the server. This allows you to change your config based on what
    213                         the client calls you. Your server can have a &#8220;<span class="quote">dual personality</span>&#8221;.
     213                        the client calls you. Your server can have a <span class="quote">&#8220;<span class="quote">dual personality</span>&#8221;</span>.
    214214                </p></dd><dt><span class="term">%M</span></dt><dd><p>the Internet name of the client machine.
    215215                </p></dd><dt><span class="term">%R</span></dt><dd><p>the selected protocol level after protocol negotiation. It can be one of CORE, COREPLUS,
    … …  
    239239        There are some quite creative things that can be done with these substitutions and other
    240240        <code class="filename">smb.conf</code> options.
    241         </p></div><div class="refsect1" lang="en"><a name="NAMEMANGLINGSECT"></a><h2>NAME MANGLING</h2><p>
     241        </p></div><div class="refsect1" title="NAME MANGLING"><a name="NAMEMANGLINGSECT"></a><h2>NAME MANGLING</h2><p>
    242242        Samba supports <code class="literal">name mangling</code> so that DOS and Windows clients can use files that don't
    243243        conform to the 8.3 format. It can also be set to adjust the case of 8.3 format filenames.
    … …  
    277277        then the "default case" option will be applied and will modify all filenames sent from the client
    278278        when accessing this share.
    279         </p></div><div class="refsect1" lang="en"><a name="VALIDATIONSECT"></a><h2>NOTE ABOUT USERNAME/PASSWORD VALIDATION</h2><p>
     279        </p></div><div class="refsect1" title="NOTE ABOUT USERNAME/PASSWORD VALIDATION"><a name="VALIDATIONSECT"></a><h2>NOTE ABOUT USERNAME/PASSWORD VALIDATION</h2><p>
    280280        There are a number of ways in which a user can connect to a service. The server uses the following steps
    281281        in determining if it will allow a connection to a specified service. If all the steps fail, the connection
    282282        request is rejected.  However, if one of the steps succeeds, the following steps are not checked.
    283283        </p><p>
    284         If the service is marked &#8220;<span class="quote">guest only = yes</span>&#8221; and the server is running with share-level
    285         security (&#8220;<span class="quote">security = share</span>&#8221;, steps 1 to 5 are skipped.
    286         </p><div class="orderedlist"><ol type="1"><li><p>
     284        If the service is marked <span class="quote">&#8220;<span class="quote">guest only = yes</span>&#8221;</span> and the server is running with share-level
     285        security (<span class="quote">&#8220;<span class="quote">security = share</span>&#8221;</span>, steps 1 to 5 are skipped.
     286        </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>
    287287                If the client has passed a username/password pair and that username/password pair is validated by the UNIX
    288288                system's password programs, the connection is made as that username. This includes the
    289289                <code class="literal">\\server\service</code>%<em class="replaceable"><code>username</code></em> method of passing a username.
    290                 </p></li><li><p>
     290                </p></li><li class="listitem"><p>
    291291                If the client has previously registered a username with the system and now supplies a correct password for that
    292292                username, the connection is allowed.
    293                 </p></li><li><p>
     293                </p></li><li class="listitem"><p>
    294294                The client's NetBIOS name and any previously used usernames are checked against the supplied password. If
    295295                they match, the connection is allowed as the corresponding user.
    296                 </p></li><li><p>
     296                </p></li><li class="listitem"><p>
    297297                If the client has previously validated a username/password pair with the server and the client has passed
    298298                the validation token, that username is used.
    299                 </p></li><li><p>
     299                </p></li><li class="listitem"><p>
    300300                If a <code class="literal">user = </code> field is given in the <code class="filename">smb.conf</code> file for the
    301301                service and the client has supplied a password, and that password matches (according to the UNIX system's
    … …  
    303303                the username in the <code class="literal">user =</code> line. If one of the usernames in the <code class="literal">user =</code> list
    304304                begins with a <code class="literal">@</code>, that name expands to a list of names in the group of the same name.
    305                 </p></li><li><p>
     305                </p></li><li class="listitem"><p>
    306306                If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account
    307307                =</code> for the service, irrespective of the supplied password.
    308                 </p></li></ol></div></div><div class="refsect1" lang="en"><a name="id2533226"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
     308                </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id308130"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
    309309                Starting with Samba version 3.2.0, the capability to
    310310                store Samba configuration in the registry is available.
    … …  
    312312                 <span class="emphasis"><em><code class="literal">HKLM\Software\Samba\smbconf</code></em></span>.
    313313                There are two levels of registry configuration:
    314         </p><div class="orderedlist"><ol type="1"><li><p>Share definitions stored in registry are used.
     314        </p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><p>Share definitions stored in registry are used.
    315315                This is triggered by setting the global
    316316                parameter <em class="parameter"><code>registry shares</code></em>
    317                 to &#8220;<span class="quote">yes</span>&#8221; in <span class="emphasis"><em>smb.conf</em></span>.
     317                to <span class="quote">&#8220;<span class="quote">yes</span>&#8221;</span> in <span class="emphasis"><em>smb.conf</em></span>.
    318318                </p><p>The registry shares are loaded not at startup but
    319319                on demand at runtime by <span class="emphasis"><em>smbd</em></span>.
    320320                Shares defined in <span class="emphasis"><em>smb.conf</em></span> take
    321321                priority over shares of the same name defined in
    322                 registry.</p></li><li><p>Global <span class="emphasis"><em>smb.conf</em></span>
     322                registry.</p></li><li class="listitem"><p>Global <span class="emphasis"><em>smb.conf</em></span>
    323323                options stored in registry are used. This can be activated
    324324                in two different ways:</p><p>Firstly, a registry only configuration is triggered
    … …  
    361361                accessing the database file, circumventing the
    362362                server.
    363         </p></div><div class="refsect1" lang="en"><a name="id2533401"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section" lang="en"><div class="titlepage"></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533412"></a>
     363        </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id308284"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308293"></a>
    364364
    365365abort shutdown script (G)
    366 </h3></div></div></div><a class="indexterm" name="id2533413"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
     366</h3></div></div></div><a class="indexterm" name="id308294"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
    367367        should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    368368        right, this command will be run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code>
    … …  
    370370</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code>
    371371</em></span>
    372 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533492"></a>
     372</p></dd></dl></div></div><div class="section" title="access based share enum (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308368"></a>
    373373
    374374access based share enum (S)
    375 </h3></div></div></div><a class="indexterm" name="id2533493"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a
     375</h3></div></div></div><a class="indexterm" name="id308369"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a
    376376    service, then the share hosted by the service will only be visible
    377377    to users who have read or write access to the share during share
    … …  
    382382    computing enumeration access rights.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>access based share enum</code></em> = <code class="literal">no</code>
    383383</em></span>
    384 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533540"></a>
     384</p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308412"></a>
    385385
    386386acl check permissions (S)
    387 </h3></div></div></div><a class="indexterm" name="id2533541"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
     387</h3></div></div></div><a class="indexterm" name="id308413"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
    388388    from a Windows client. If a Windows client doesn't have permissions to delete a file then they
    389389    expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by
    … …  
    405405    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code>
    406406</em></span>
    407 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533636"></a>
     407</p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308483"></a>
    408408
    409409acl compatibility (G)
    410 </h3></div></div></div><a class="indexterm" name="id2533637"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
     410</h3></div></div></div><a class="indexterm" name="id308484"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
    411411        be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4,
    412412        <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>.
    … …  
    417417</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code>
    418418</em></span>
    419 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533707"></a>
     419</p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308550"></a>
    420420
    421421acl group control (S)
    422 </h3></div></div></div><a class="indexterm" name="id2533708"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     422</h3></div></div></div><a class="indexterm" name="id308552"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    423423        In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions
    424424        and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the
    … …  
    447447        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code>
    448448</em></span>
    449 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533803"></a>
     449</p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308632"></a>
    450450
    451451acl map full control (S)
    452 </h3></div></div></div><a class="indexterm" name="id2533804"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    453         This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum
     452</h3></div></div></div><a class="indexterm" name="id308633"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     453        This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum
    454454        allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX
    455455        ACE entry of "rwx" will be returned in a Windows ACL as "FULL CONTROL", is this parameter is set to false any
    … …  
    458458        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code>
    459459</em></span>
    460 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533854"></a>
     460</p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308680"></a>
    461461
    462462add group script (G)
    463 </h3></div></div></div><a class="indexterm" name="id2533855"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     463</h3></div></div></div><a class="indexterm" name="id308681"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    464464        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It
    465465        will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful
    … …  
    471471</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code>
    472472</em></span>
    473 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2533929"></a>
     473</p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308750"></a>
    474474
    475475add machine script (G)
    476 </h3></div></div></div><a class="indexterm" name="id2533930"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     476</h3></div></div></div><a class="indexterm" name="id308751"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    477477        This is the full pathname to a script that will  be run by
    478478         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is
    … …  
    485485</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code>
    486486</em></span>
    487 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534008"></a>
     487</p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308823"></a>
    488488
    489489add port command (G)
    490 </h3></div></div></div><a class="indexterm" name="id2534009"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
     490</h3></div></div></div><a class="indexterm" name="id308824"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
    491491        remotely using the Windows "Add Standard TCP/IP Port Wizard".
    492492        This option defines an external program to be executed when
    493493        smbd receives a request to add a new Port to the system.
    494         The script is passed two parameters:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://&lt;hostname&gt;[:&lt;portnumber&gt;]
     494        The script is passed two parameters:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://&lt;hostname&gt;[:&lt;portnumber&gt;]
    495495        or lpd://&lt;hostname&gt;/&lt;queuename&gt;.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal"></code>
    496496</em></span>
    497497</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code>
    498498</em></span>
    499 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534091"></a>
     499</p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308901"></a>
    500500
    501501addprinter command (G)
    502 </h3></div></div></div><a class="indexterm" name="id2534092"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
     502</h3></div></div></div><a class="indexterm" name="id308902"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
    503503    support for Windows NT/2000 clients in Samba 2.2, The MS Add
    504504    Printer Wizard (APW) icon is now also available in the
    … …  
    514514    shared by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>.</p><p>The <em class="parameter"><code>addprinter command</code></em> is
    515515    automatically invoked with the following parameter (in
    516     order):</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>printer name</code></em></p></li><li><p><em class="parameter"><code>share name</code></em></p></li><li><p><em class="parameter"><code>port name</code></em></p></li><li><p><em class="parameter"><code>driver name</code></em></p></li><li><p><em class="parameter"><code>location</code></em></p></li><li><p><em class="parameter"><code>Windows 9x driver location</code></em></p></li></ul></div><p>All parameters are filled in from the PRINTER_INFO_2 structure sent
     516    order):</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>printer name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>share name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>driver name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>location</code></em></p></li><li class="listitem"><p><em class="parameter"><code>Windows 9x driver location</code></em></p></li></ul></div><p>All parameters are filled in from the PRINTER_INFO_2 structure sent
    517517    by the Windows NT/2000 client with one exception.  The "Windows 9x
    518518    driver location" parameter is included for backwards compatibility
    … …  
    531531</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code>
    532532</em></span>
    533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534279"></a>
     533</p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309076"></a>
    534534
    535535add share command (G)
    536 </h3></div></div></div><a class="indexterm" name="id2534280"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     536</h3></div></div></div><a class="indexterm" name="id309077"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    537537        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    538538        Manager.  The <em class="parameter"><code>add share command</code></em> is used to define an external program
    … …  
    550550        When executed, <code class="literal">smbd</code> will automatically invoke the
    551551        <em class="parameter"><code>add share command</code></em> with five parameters.
    552         </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location of the global <code class="filename">smb.conf</code> file.
    553                         </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new share.
    554                         </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing**
     552        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location of the global <code class="filename">smb.conf</code> file.
     553                        </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of the new share.
     554                        </p></li><li class="listitem"><p><em class="parameter"><code>pathName</code></em> - path to an **existing**
    555555                        directory on disk.
    556                         </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate with the new
     556                        </p></li><li class="listitem"><p><em class="parameter"><code>comment</code></em> - comment string to associate with the new
    557557                        share.
    558                         </p></li><li><p><em class="parameter"><code>max
     558                        </p></li><li class="listitem"><p><em class="parameter"><code>max
    559559                        connections</code></em>
    560560                        Number of maximum simultaneous connections to this
    … …  
    566566</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code>
    567567</em></span>
    568 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534465"></a>
     568</p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309253"></a>
    569569
    570570add user script (G)
    571 </h3></div></div></div><a class="indexterm" name="id2534466"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     571</h3></div></div></div><a class="indexterm" name="id309254"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    572572        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by
    573573        <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    604604</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code>
    605605</em></span>
    606 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534676"></a>
     606</p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309441"></a>
    607607
    608608add user to group script (G)
    609 </h3></div></div></div><a class="indexterm" name="id2534677"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     609</h3></div></div></div><a class="indexterm" name="id309442"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    610610        Full path to the script that will be called when a user is added to a group using the Windows NT domain administration
    611611        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    619619</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code>
    620620</em></span>
    621 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534763"></a>
     621</p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309524"></a>
    622622
    623623administrative share (S)
    624 </h3></div></div></div><a class="indexterm" name="id2534764"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
     624</h3></div></div></div><a class="indexterm" name="id309526"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
    625625      a share, then the share will be an administrative share. The Administrative
    626626      Shares are the default network shares created by all Windows NT-based
    … …  
    629629      information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code>
    630630</em></span>
    631 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534821"></a>
     631</p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309577"></a>
    632632
    633633admin users (S)
    634 </h3></div></div></div><a class="indexterm" name="id2534822"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
     634</h3></div></div></div><a class="indexterm" name="id309578"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
    635635    administrative privileges on the share. This means that they
    636636    will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in
    … …  
    641641</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code>
    642642</em></span>
    643 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534894"></a>
     643</p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309646"></a>
    644644
    645645afs share (S)
    646 </h3></div></div></div><a class="indexterm" name="id2534895"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
     646</h3></div></div></div><a class="indexterm" name="id309647"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
    647647        for this share. If enabled, it assumes that the directory exported via
    648648        the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The
    … …  
    651651        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code>
    652652</em></span>
    653 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2534941"></a>
     653</p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309690"></a>
    654654
    655655afs username map (G)
    656 </h3></div></div></div><a class="indexterm" name="id2534942"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
     656</h3></div></div></div><a class="indexterm" name="id309691"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
    657657        want to hand-craft the usernames you are creating tokens for.
    658658        For example this is necessary if you have users from several domain
    … …  
    664664</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code>
    665665</em></span>
    666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535003"></a>
     666</p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309749"></a>
    667667
    668668aio read size (S)
    669 </h3></div></div></div><a class="indexterm" name="id2535004"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     669</h3></div></div></div><a class="indexterm" name="id309750"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    670670    integer parameter is set to non-zero value,
    671671    Samba will read from file asynchronously when size of request is bigger
    … …  
    678678    request size</code>
    679679</em></span>
    680 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535090"></a>
     680</p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309827"></a>
    681681
    682682aio write behind (S)
    683 </h3></div></div></div><a class="indexterm" name="id2535092"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,
     683</h3></div></div></div><a class="indexterm" name="id309828"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,
    684684        Samba will not wait until write requests are finished before returning
    685685        the result to the client for files listed in this parameter.
    … …  
    696696</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write behind</code></em> = <code class="literal">/*.tmp/</code>
    697697</em></span>
    698 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535169"></a>
     698</p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309898"></a>
    699699
    700700aio write size (S)
    701 </h3></div></div></div><a class="indexterm" name="id2535170"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     701</h3></div></div></div><a class="indexterm" name="id309899"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    702702    integer parameter is set to non-zero value,
    703703    Samba will write to file asynchronously when size of request is bigger
    … …  
    710710    request size</code>
    711711</em></span>
    712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535255"></a>
     712</p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309976"></a>
    713713
    714714algorithmic rid base (G)
    715 </h3></div></div></div><a class="indexterm" name="id2535256"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
     715</h3></div></div></div><a class="indexterm" name="id309977"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
    716716    algorithmic mapping from uids/gid to the RIDs needed to construct
    717717    NT Security Identifiers.
    … …  
    728728</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code>
    729729</em></span>
    730 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535325"></a>
     730</p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310041"></a>
    731731
    732732allocation roundup size (S)
    733 </h3></div></div></div><a class="indexterm" name="id2535326"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
     733</h3></div></div></div><a class="indexterm" name="id310042"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
    734734    allocation size reported to Windows clients.  The default
    735735    size of 1Mb generally results in improved Windows client
    … …  
    743743# (to disable roundups)</code>
    744744</em></span>
    745 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535389"></a>
     745</p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310101"></a>
    746746
    747747allow trusted domains (G)
    748 </h3></div></div></div><a class="indexterm" name="id2535390"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     748</h3></div></div></div><a class="indexterm" name="id310102"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    749749    This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> option is set to
    750750    <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. 
    … …  
    761761    can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code>
    762762</em></span>
    763 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535462"></a>
     763</p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310166"></a>
    764764
    765765announce as (G)
    766 </h3></div></div></div><a class="indexterm" name="id2535463"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
     766</h3></div></div></div><a class="indexterm" name="id310167"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
    767767    list. By default this is set to Windows NT. The valid options
    768768    are : "NT Server" (which can also be written as "NT"),
    … …  
    776776</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code>
    777777</em></span>
    778 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535531"></a>
     778</p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310230"></a>
    779779
    780780announce version (G)
    781 </h3></div></div></div><a class="indexterm" name="id2535532"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
     781</h3></div></div></div><a class="indexterm" name="id310231"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
    782782    that nmbd will use when announcing itself as a server. The default
    783783    is 4.9.  Do not change this parameter unless you have a specific
    … …  
    786786</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code>
    787787</em></span>
    788 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535588"></a>
     788</p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310285"></a>
    789789
    790790auth methods (G)
    791 </h3></div></div></div><a class="indexterm" name="id2535589"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     791</h3></div></div></div><a class="indexterm" name="id310286"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    792792    This option allows the administrator to chose what authentication methods <code class="literal">smbd</code>
    793793    will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>. 
    … …  
    810810</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code>
    811811</em></span>
    812 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535694"></a>
     812</p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310379"></a>
    813813
    814814available (S)
    815 </h3></div></div></div><a class="indexterm" name="id2535695"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
     815</h3></div></div></div><a class="indexterm" name="id310380"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
    816816        <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span>
    817817        attempts to connect to the service will fail. Such failures are
    818818        logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code>
    819819</em></span>
    820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2535741"></a>
     820</p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310425"></a>
    821821
    822822bind interfaces only (G)
    823 </h3></div></div></div><a class="indexterm" name="id2535742"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
     823</h3></div></div></div><a class="indexterm" name="id310426"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
    824824        to limit what interfaces on a machine will serve SMB requests. It
    825825        affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p>
    … …  
    862862        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code>
    863863</em></span>
    864 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536069"></a>
     864</p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310722"></a>
    865865
    866866blocking locks (S)
    867 </h3></div></div></div><a class="indexterm" name="id2536070"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
     867</h3></div></div></div><a class="indexterm" name="id310724"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
    868868        of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client
    869869        to obtain a byte range lock on a region of an open file, and the
    … …  
    876876        cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code>
    877877</em></span>
    878 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536133"></a>
     878</p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310781"></a>
    879879
    880880block size (S)
    881 </h3></div></div></div><a class="indexterm" name="id2536134"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
     881</h3></div></div></div><a class="indexterm" name="id310782"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
    882882    sizes. By default, this reports a disk block size of 1024 bytes.
    883883    </p><p>Changing this parameter may have some effect on the
    … …  
    893893</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code>
    894894</em></span>
    895 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536211"></a>
     895</p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id310853"></a>
    896896
    897897<a name="BROWSABLE"></a>browsable
    898 </h3></div></div></div><a class="indexterm" name="id2536212"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536238"></a>
     898</h3></div></div></div><a class="indexterm" name="id310854"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310879"></a>
    899899
    900900browseable (S)
    901 </h3></div></div></div><a class="indexterm" name="id2536239"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
     901</h3></div></div></div><a class="indexterm" name="id310880"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
    902902        the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code>
    903903</em></span>
    904 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536276"></a>
     904</p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310917"></a>
    905905
    906906browse list (G)
    907 </h3></div></div></div><a class="indexterm" name="id2536278"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
     907</h3></div></div></div><a class="indexterm" name="id310918"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
    908908        a client doing a <code class="literal">NetServerEnum</code> call. Normally
    909909        set to <code class="constant">yes</code>. You should never need to change
    910910        this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code>
    911911</em></span>
    912 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536331"></a>
     912</p></dd></dl></div></div><div class="section" title="cache directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310970"></a>
    913913
    914914cache directory (G)
    915 </h3></div></div></div><a class="indexterm" name="id2536332"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is
     915</h3></div></div></div><a class="indexterm" name="id310971"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is
    916916        possible to differentiate between TDB files with persistent data and
    917917        TDB files with non-persistent data using the
    … …  
    924924</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cache directory</code></em> = <code class="literal">/var/run/samba/locks/cache</code>
    925925</em></span>
    926 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536408"></a>
     926</p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id311043"></a>
    927927
    928928<a name="CASESIGNAMES"></a>casesignames
    929 </h3></div></div></div><a class="indexterm" name="id2536409"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536434"></a>
     929</h3></div></div></div><a class="indexterm" name="id311044"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311070"></a>
    930930
    931931case sensitive (S)
    932 </h3></div></div></div><a class="indexterm" name="id2536436"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>
    933 </em></span>
    934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536481"></a>
     932</h3></div></div></div><a class="indexterm" name="id311071"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>
     933</em></span>
     934</p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311114"></a>
    935935
    936936change notify (S)
    937 </h3></div></div></div><a class="indexterm" name="id2536482"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
     937</h3></div></div></div><a class="indexterm" name="id311115"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
    938938        to a client's file change notify requests.
    939939        </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code>
    940940</em></span>
    941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536524"></a>
     941</p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311155"></a>
    942942
    943943change share command (G)
    944 </h3></div></div></div><a class="indexterm" name="id2536525"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     944</h3></div></div></div><a class="indexterm" name="id311156"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    945945        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    946946Manager.  The <em class="parameter"><code>change share command</code></em> is used to define an external
    … …  
    957957        When executed, <code class="literal">smbd</code> will automatically invoke the
    958958        <em class="parameter"><code>change share command</code></em> with five parameters.
    959         </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location
     959        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location
    960960                        of the global <code class="filename">smb.conf</code> file.
    961                         </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of the new
     961                        </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of the new
    962962                        share.
    963                         </p></li><li><p><em class="parameter"><code>pathName</code></em> - path to an **existing**
     963                        </p></li><li class="listitem"><p><em class="parameter"><code>pathName</code></em> - path to an **existing**
    964964                        directory on disk.
    965                         </p></li><li><p><em class="parameter"><code>comment</code></em> - comment string to associate
     965                        </p></li><li class="listitem"><p><em class="parameter"><code>comment</code></em> - comment string to associate
    966966                        with the new share.
    967                         </p></li><li><p><em class="parameter"><code>max
     967                        </p></li><li class="listitem"><p><em class="parameter"><code>max
    968968                        connections</code></em>
    969969                        Number of maximum simultaneous connections to this
    … …  
    977977</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/changeshare</code>
    978978</em></span>
    979 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536703"></a>
     979</p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311325"></a>
    980980
    981981check password script (G)
    982 </h3></div></div></div><a class="indexterm" name="id2536704"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
     982</h3></div></div></div><a class="indexterm" name="id311326"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
    983983    complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value
    984984    if the password is bad.
    … …  
    989989</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">/usr/local/sbin/crackcheck</code>
    990990</em></span>
    991 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536776"></a>
     991</p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311393"></a>
    992992
    993993client lanman auth (G)
    994 </h3></div></div></div><a class="indexterm" name="id2536777"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
     994</h3></div></div></div><a class="indexterm" name="id311394"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
    995995    tools will attempt to authenticate itself to servers using the
    996996    weaker LANMAN password hash. If disabled, only server which support NT
    … …  
    10031003    attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code>
    10041004</em></span>
    1005 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536852"></a>
     1005</p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311462"></a>
    10061006
    10071007client ldap sasl wrapping (G)
    1008 </h3></div></div></div><a class="indexterm" name="id2536853"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1008</h3></div></div></div><a class="indexterm" name="id311464"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10091009        The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING" target="_top">client ldap sasl wrapping</a> defines whether
    10101010        ldap traffic will be signed or signed and encrypted (sealed).
    … …  
    10341034        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code>
    10351035</em></span>
    1036 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2536968"></a>
     1036</p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311568"></a>
    10371037
    10381038client ntlmv2 auth (G)
    1039 </h3></div></div></div><a class="indexterm" name="id2536969"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
     1039</h3></div></div></div><a class="indexterm" name="id311569"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
    10401040    authenticate itself to servers using the NTLMv2 encrypted password
    10411041    response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more
    … …  
    10491049        responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code>
    10501050</em></span>
    1051 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537055"></a>
     1051</p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311648"></a>
    10521052
    10531053client plaintext auth (G)
    1054 </h3></div></div></div><a class="indexterm" name="id2537056"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
     1054</h3></div></div></div><a class="indexterm" name="id311649"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
    10551055                password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code>
    10561056</em></span>
    1057 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537094"></a>
     1057</p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311686"></a>
    10581058
    10591059client schannel (G)
    1060 </h3></div></div></div><a class="indexterm" name="id2537095"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1060</h3></div></div></div><a class="indexterm" name="id311687"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10611061    This controls whether the client offers or even demands the use of the netlogon schannel.
    10621062    <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = no</a> does not offer the schannel,
    … …  
    10681068</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code>
    10691069</em></span>
    1070 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537178"></a>
     1070</p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311761"></a>
    10711071
    10721072client signing (G)
    1073 </h3></div></div></div><a class="indexterm" name="id2537179"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
     1073</h3></div></div></div><a class="indexterm" name="id311762"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
    10741074    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    10751075    and <span class="emphasis"><em>disabled</em></span>.
    … …  
    10791079</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code>
    10801080</em></span>
    1081 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537233"></a>
     1081</p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311813"></a>
    10821082
    10831083client use spnego (G)
    1084 </h3></div></div></div><a class="indexterm" name="id2537234"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
     1084</h3></div></div></div><a class="indexterm" name="id311814"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
    10851085    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    10861086    supporting servers (including WindowsXP, Windows2000 and Samba
    … …  
    10881088    mechanism.  This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code>
    10891089</em></span>
    1090 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537275"></a>
     1090</p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311852"></a>
    10911091
    10921092cluster addresses (G)
    1093 </h3></div></div></div><a class="indexterm" name="id2537276"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
     1093</h3></div></div></div><a class="indexterm" name="id311853"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
    10941094        nmbd will register with a WINS server. These addresses are not
    10951095        necessarily present on all nodes simultaneously, but they will
    … …  
    11001100</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code>
    11011101</em></span>
    1102 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537331"></a>
     1102</p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311906"></a>
    11031103
    11041104clustering (G)
    1105 </h3></div></div></div><a class="indexterm" name="id2537332"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
     1105</h3></div></div></div><a class="indexterm" name="id311907"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
    11061106        ctdb for accessing its tdb files and use ctdb as a backend
    11071107        for its messaging backend.
    … …  
    11101110        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code>
    11111111</em></span>
    1112 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537380"></a>
     1112</p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311953"></a>
    11131113
    11141114comment (S)
    1115 </h3></div></div></div><a class="indexterm" name="id2537381"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
     1115</h3></div></div></div><a class="indexterm" name="id311954"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
    11161116        when a client does a queries the server, either via the network
    11171117        neighborhood or via <code class="literal">net view</code> to list what shares
    … …  
    11221122</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code>
    11231123</em></span>
    1124 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537454"></a>
     1124</p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312024"></a>
    11251125
    11261126config backend (G)
    1127 </h3></div></div></div><a class="indexterm" name="id2537455"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1127</h3></div></div></div><a class="indexterm" name="id312025"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11281128                This controls the backend for storing the configuration.
    11291129                Possible values are <span class="emphasis"><em>file</em></span> (the default)
    … …  
    11431143</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code>
    11441144</em></span>
    1145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537543"></a>
     1145</p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312108"></a>
    11461146
    11471147config file (G)
    1148 </h3></div></div></div><a class="indexterm" name="id2537544"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
     1148</h3></div></div></div><a class="indexterm" name="id312109"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
    11491149        to use, instead of the default (usually <code class="filename">smb.conf</code>).
    11501150        There is a chicken and egg problem here as this option is set
    … …  
    11561156        clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code>
    11571157</em></span>
    1158 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537608"></a>
     1158</p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312168"></a>
    11591159
    11601160copy (S)
    1161 </h3></div></div></div><a class="indexterm" name="id2537610"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
     1161</h3></div></div></div><a class="indexterm" name="id312169"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
    11621162        entries. The specified service is simply duplicated under the
    11631163        current service's name. Any parameters specified in the current
    … …  
    11691169</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code>
    11701170</em></span>
    1171 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537671"></a>
     1171</p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312227"></a>
    11721172
    11731173create krb5 conf (G)
    1174 </h3></div></div></div><a class="indexterm" name="id2537672"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1174</h3></div></div></div><a class="indexterm" name="id312228"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11751175        Setting this paramter to <code class="literal">no</code> prevents
    11761176        winbind from creating custom krb5.conf files. Winbind normally does
    … …  
    11851185        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create krb5 conf</code></em> = <code class="literal">yes</code>
    11861186</em></span>
    1187 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537724"></a>
     1187</p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312276"></a>
    11881188
    11891189<a name="CREATEMODE"></a>create mode
    1190 </h3></div></div></div><a class="indexterm" name="id2537725"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2537751"></a>
     1190</h3></div></div></div><a class="indexterm" name="id312278"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312303"></a>
    11911191
    11921192create mask (S)
    1193 </h3></div></div></div><a class="indexterm" name="id2537752"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1193</h3></div></div></div><a class="indexterm" name="id312304"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11941194        When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
    11951195        UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
    … …  
    12121212</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code>
    12131213</em></span>
    1214 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2481437"></a>
     1214</p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312411"></a>
    12151215
    12161216csc policy (S)
    1217 </h3></div></div></div><a class="indexterm" name="id2481438"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1217</h3></div></div></div><a class="indexterm" name="id312412"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12181218        This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline
    12191219        caching will cache the files in the share. The valid values are: manual, documents, programs, disable.
    … …  
    12271227</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code>
    12281228</em></span>
    1229 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538100"></a>
     1229</p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312483"></a>
    12301230
    12311231ctdbd socket (G)
    1232 </h3></div></div></div><a class="indexterm" name="id2538102"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
     1232</h3></div></div></div><a class="indexterm" name="id312484"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
    12331233        you need to tell Samba where ctdbd listens on its unix domain
    12341234        socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which
    … …  
    12381238</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code>
    12391239</em></span>
    1240 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538160"></a>
     1240</p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312542"></a>
    12411241
    12421242ctdb timeout (G)
    1243 </h3></div></div></div><a class="indexterm" name="id2538161"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
     1243</h3></div></div></div><a class="indexterm" name="id312543"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
    12441244          connection between Samba and ctdb. It is only valid if you
    12451245          have compiled Samba with clustering and if you have
    … …  
    12671267        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ctdb timeout</code></em> = <code class="literal">0</code>
    12681268</em></span>
    1269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538238"></a>
     1269</p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312614"></a>
    12701270
    12711271cups connection timeout (G)
    1272 </h3></div></div></div><a class="indexterm" name="id2538240"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1272</h3></div></div></div><a class="indexterm" name="id312616"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12731273    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    12741274    </p><p>
    … …  
    12801280</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups connection timeout</code></em> = <code class="literal">60</code>
    12811281</em></span>
    1282 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538310"></a>
     1282</p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312682"></a>
    12831283
    12841284cups encrypt (G)
    1285 </h3></div></div></div><a class="indexterm" name="id2538311"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1285</h3></div></div></div><a class="indexterm" name="id312684"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12861286        This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a>
    12871287        is set to <code class="constant">cups</code> and if you use CUPS newer than
    … …  
    12961296        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>cups encrypt</code></em> = <code class="literal">"no"</code>
    12971297</em></span>
    1298 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538377"></a>
     1298</p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312745"></a>
    12991299
    13001300cups options (S)
    1301 </h3></div></div></div><a class="indexterm" name="id2538378"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1301</h3></div></div></div><a class="indexterm" name="id312746"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13021302    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is
    13031303    set to <code class="constant">cups</code>.  Its value is a free form string of options
    … …  
    13211321</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code>
    13221322</em></span>
    1323 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538475"></a>
     1323</p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312835"></a>
    13241324
    13251325cups server (G)
    1326 </h3></div></div></div><a class="indexterm" name="id2538476"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1326</h3></div></div></div><a class="indexterm" name="id312836"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13271327    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    13281328    </p><p>
    … …  
    13381338</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code>
    13391339</em></span>
    1340 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538573"></a>
     1340</p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312927"></a>
    13411341
    13421342deadtime (G)
    1343 </h3></div></div></div><a class="indexterm" name="id2538574"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
     1343</h3></div></div></div><a class="indexterm" name="id312928"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
    13441344    represents the number of minutes of inactivity before a connection
    13451345    is considered dead, and it is disconnected. The deadtime only takes
    … …  
    13531353</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code>
    13541354</em></span>
    1355 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538650"></a>
     1355</p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312998"></a>
    13561356
    13571357debug class (G)
    1358 </h3></div></div></div><a class="indexterm" name="id2538651"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1358</h3></div></div></div><a class="indexterm" name="id312999"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13591359    With this boolean parameter enabled, the debug class (DBGC_CLASS)
    13601360    will be displayed in the debug header.
    … …  
    13641364    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code>
    13651365</em></span>
    1366 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538702"></a>
     1366</p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313048"></a>
    13671367
    13681368debug hires timestamp (G)
    1369 </h3></div></div></div><a class="indexterm" name="id2538703"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1369</h3></div></div></div><a class="indexterm" name="id313049"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13701370    Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this
    13711371    boolean parameter adds microsecond resolution to the timestamp  message header when turned on.
    … …  
    13741374    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">yes</code>
    13751375</em></span>
    1376 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538756"></a>
     1376</p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313097"></a>
    13771377
    13781378debug pid (G)
    1379 </h3></div></div></div><a class="indexterm" name="id2538757"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1379</h3></div></div></div><a class="indexterm" name="id313098"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13801380    When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which
    13811381    message. This boolean parameter is adds the process-id to the timestamp message headers in the
    … …  
    13851385    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code>
    13861386</em></span>
    1387 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538818"></a>
     1387</p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313154"></a>
    13881388
    13891389debug prefix timestamp (G)
    1390 </h3></div></div></div><a class="indexterm" name="id2538819"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1390</h3></div></div></div><a class="indexterm" name="id313155"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13911391    With this option enabled, the timestamp message header is prefixed to the debug message without the
    13921392    filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a>
    … …  
    13961396    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code>
    13971397</em></span>
    1398 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538882"></a>
     1398</p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313211"></a>
    13991399
    14001400<a name="TIMESTAMPLOGS"></a>timestamp logs
    1401 </h3></div></div></div><a class="indexterm" name="id2538883"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538909"></a>
     1401</h3></div></div></div><a class="indexterm" name="id313212"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313237"></a>
    14021402
    14031403debug timestamp (G)
    1404 </h3></div></div></div><a class="indexterm" name="id2538910"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1404</h3></div></div></div><a class="indexterm" name="id313238"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14051405    Samba debug log messages are timestamped by default. If you are running at a high
    14061406    <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This
    … …  
    14081408        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code>
    14091409</em></span>
    1410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2538957"></a>
     1410</p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313283"></a>
    14111411
    14121412debug uid (G)
    1413 </h3></div></div></div><a class="indexterm" name="id2538958"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1413</h3></div></div></div><a class="indexterm" name="id313284"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14141414    Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the
    14151415    current euid, egid, uid and gid to the timestamp message headers in the log file if turned on.
    … …  
    14181418    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code>
    14191419</em></span>
    1420 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539011"></a>
     1420</p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313332"></a>
    14211421
    14221422dedicated keytab file (G)
    1423 </h3></div></div></div><a class="indexterm" name="id2539012"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1423</h3></div></div></div><a class="indexterm" name="id313334"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14241424          Specifies the path to the kerberos keytab file when
    14251425          <a class="link" href="smb.conf.5.html#KERBEROSMETHOD" target="_top">kerberos method</a> is set to "dedicated
    … …  
    14291429</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dedicated keytab file</code></em> = <code class="literal">/usr/local/etc/krb5.keytab</code>
    14301430</em></span>
    1431 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539073"></a>
     1431</p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313392"></a>
    14321432
    14331433default case (S)
    1434 </h3></div></div></div><a class="indexterm" name="id2539074"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
     1434</h3></div></div></div><a class="indexterm" name="id313393"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
    14351435        Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code>
    14361436</em></span>
    1437 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539127"></a>
     1437</p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313443"></a>
    14381438
    14391439default devmode (S)
    1440 </h3></div></div></div><a class="indexterm" name="id2539128"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
     1440</h3></div></div></div><a class="indexterm" name="id313444"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
    14411441    When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
    14421442    server has a Device Mode which defines things such as paper size and
    … …  
    14611461</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code>
    14621462</em></span>
    1463 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539215"></a>
     1463</p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313517"></a>
    14641464
    14651465<a name="DEFAULT"></a>default
    1466 </h3></div></div></div><a class="indexterm" name="id2539216"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539242"></a>
     1466</h3></div></div></div><a class="indexterm" name="id313518"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313544"></a>
    14671467
    14681468default service (G)
    1469 </h3></div></div></div><a class="indexterm" name="id2539243"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
     1469</h3></div></div></div><a class="indexterm" name="id313545"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
    14701470        which will be connected to if the service actually requested cannot
    14711471        be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span>
    … …  
    14811481</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code>
    14821482</em></span>
    1483 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539344"></a>
     1483</p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313637"></a>
    14841484
    14851485defer sharing violations (G)
    1486 </h3></div></div></div><a class="indexterm" name="id2539345"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1486</h3></div></div></div><a class="indexterm" name="id313638"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14871487        Windows allows specifying how a file will be shared with
    14881488        other processes when it is opened. Sharing violations occur when
    … …  
    14971497        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code>
    14981498</em></span>
    1499 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539399"></a>
     1499</p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313686"></a>
    15001500
    15011501delete group script (G)
    1502 </h3></div></div></div><a class="indexterm" name="id2539400"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1502</h3></div></div></div><a class="indexterm" name="id313687"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15031503        be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted.
    15041504        It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. 
    … …  
    15061506        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code>
    15071507</em></span>
    1508 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539455"></a>
     1508</p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313740"></a>
    15091509
    15101510deleteprinter command (G)
    1511 </h3></div></div></div><a class="indexterm" name="id2539456"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
     1511</h3></div></div></div><a class="indexterm" name="id313741"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
    15121512    support for Windows NT/2000 clients in Samba 2.2, it is now
    15131513    possible to delete a printer at run time by issuing the
    … …  
    15271527</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code>
    15281528</em></span>
    1529 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539582"></a>
     1529</p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313856"></a>
    15301530
    15311531delete readonly (S)
    1532 </h3></div></div></div><a class="indexterm" name="id2539583"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
     1532</h3></div></div></div><a class="indexterm" name="id313857"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
    15331533        This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such
    15341534        as rcs, where UNIX file ownership prevents changing file
    15351535        permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code>
    15361536</em></span>
    1537 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539627"></a>
     1537</p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313898"></a>
    15381538
    15391539delete share command (G)
    1540 </h3></div></div></div><a class="indexterm" name="id2539628"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1540</h3></div></div></div><a class="indexterm" name="id313900"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    15411541        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    15421542        Manager.  The <em class="parameter"><code>delete share command</code></em> is used to define an external
    … …  
    15531553        When executed, <code class="literal">smbd</code> will automatically invoke the
    15541554        <em class="parameter"><code>delete share command</code></em> with two parameters.
    1555         </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>configFile</code></em> - the location
     1555        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>configFile</code></em> - the location
    15561556                        of the global <code class="filename">smb.conf</code> file.
    1557                         </p></li><li><p><em class="parameter"><code>shareName</code></em> - the name of
     1557                        </p></li><li class="listitem"><p><em class="parameter"><code>shareName</code></em> - the name of
    15581558                        the existing service.
    15591559                        </p></li></ul></div><p>
    … …  
    15641564</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code>
    15651565</em></span>
    1566 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539779"></a>
     1566</p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314042"></a>
    15671567
    15681568delete user from group script (G)
    1569 </h3></div></div></div><a class="indexterm" name="id2539780"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
     1569</h3></div></div></div><a class="indexterm" name="id314043"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
    15701570        a user is removed from a group using the Windows NT domain administration
    15711571        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>.
    … …  
    15761576</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code>
    15771577</em></span>
    1578 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539859"></a>
     1578</p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314116"></a>
    15791579
    15801580delete user script (G)
    1581 </h3></div></div></div><a class="indexterm" name="id2539860"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1581</h3></div></div></div><a class="indexterm" name="id314117"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15821582        be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users
    15831583        with remote RPC (NT) tools.
    … …  
    15881588</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code>
    15891589</em></span>
    1590 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2539935"></a>
     1590</p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314188"></a>
    15911591
    15921592delete veto files (S)
    1593 </h3></div></div></div><a class="indexterm" name="id2539936"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
     1593</h3></div></div></div><a class="indexterm" name="id314189"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
    15941594        delete a directory that contains one or more vetoed directories
    15951595        (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a>
    … …  
    16051605        is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code>
    16061606</em></span>
    1607 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540021"></a>
     1607</p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314264"></a>
    16081608
    16091609dfree cache time (S)
    1610 </h3></div></div></div><a class="indexterm" name="id2540022"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1610</h3></div></div></div><a class="indexterm" name="id314265"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16111611        The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem
    16121612        occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur
    … …  
    16211621        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code>
    16221622</em></span>
    1623 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540093"></a>
     1623</p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314329"></a>
    16241624
    16251625dfree command (S)
    1626 </h3></div></div></div><a class="indexterm" name="id2540094"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1626</h3></div></div></div><a class="indexterm" name="id314330"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16271627        The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a
    16281628        problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may
    … …  
    16621662        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code>
    16631663</em></span>
    1664 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540215"></a>
     1664</p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314435"></a>
    16651665
    16661666<a name="DIRECTORYMODE"></a>directory mode
    1667 </h3></div></div></div><a class="indexterm" name="id2540216"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540242"></a>
     1667</h3></div></div></div><a class="indexterm" name="id314436"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314462"></a>
    16681668
    16691669directory mask (S)
    1670 </h3></div></div></div><a class="indexterm" name="id2540243"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
     1670</h3></div></div></div><a class="indexterm" name="id314463"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
    16711671    used when converting DOS modes to UNIX modes when creating UNIX
    16721672    directories.</p><p>When a directory is created, the necessary permissions are
    … …  
    16861686</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code>
    16871687</em></span>
    1688 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540347"></a>
     1688</p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314556"></a>
    16891689
    16901690directory name cache size (S)
    1691 </h3></div></div></div><a class="indexterm" name="id2540348"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1691</h3></div></div></div><a class="indexterm" name="id314557"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16921692        This parameter specifies the the size of the directory name cache.
    16931693        It will be needed to turn this off for *BSD systems.
    16941694        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory name cache size</code></em> = <code class="literal">100</code>
    16951695</em></span>
    1696 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540387"></a>
     1696</p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314594"></a>
    16971697
    16981698directory security mask (S)
    1699 </h3></div></div></div><a class="indexterm" name="id2540388"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
     1699</h3></div></div></div><a class="indexterm" name="id314595"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
    17001700    will be set when a Windows NT client is manipulating the UNIX
    17011701    permission on a directory using the native NT security dialog
    … …  
    17171717</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code>
    17181718</em></span>
    1719 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540487"></a>
     1719</p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314682"></a>
    17201720
    17211721disable netbios (G)
    1722 </h3></div></div></div><a class="indexterm" name="id2540488"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
     1722</h3></div></div></div><a class="indexterm" name="id314683"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
    17231723    in Samba. Netbios is the only available form of browsing in
    1724     all windows versions except for 2000 and XP. </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to
     1724    all windows versions except for 2000 and XP. </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to
    17251725    see your samba server when netbios support is disabled.
    17261726        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code>
    17271727</em></span>
    1728 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540533"></a>
     1728</p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314725"></a>
    17291729
    17301730disable spoolss (G)
    1731 </h3></div></div></div><a class="indexterm" name="id2540534"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
     1731</h3></div></div></div><a class="indexterm" name="id314726"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
    17321732    for the SPOOLSS set of MS-RPC's and will yield identical behavior
    17331733    as Samba 2.0.x.  Windows NT/2000 clients will downgrade to using
    … …  
    17411741</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code>
    17421742</em></span>
    1743 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540584"></a>
     1743</p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314770"></a>
    17441744
    17451745display charset (G)
    1746 </h3></div></div></div><a class="indexterm" name="id2540585"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1746</h3></div></div></div><a class="indexterm" name="id314772"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17471747        Specifies the charset that samba will use to print messages to stdout and stderr.
    17481748        The default value is "LOCALE", which means automatically set, depending on the
    … …  
    17531753</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code>
    17541754</em></span>
    1755 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540651"></a>
     1755</p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314832"></a>
    17561756
    17571757dmapi support (S)
    1758 </h3></div></div></div><a class="indexterm" name="id2540652"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
     1758</h3></div></div></div><a class="indexterm" name="id314834"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
    17591759        determine whether a file is offline or not. This would typically
    17601760        be used in conjunction with a hierarchical storage system that
    … …  
    17711771        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code>
    17721772</em></span>
    1773 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540710"></a>
     1773</p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314885"></a>
    17741774
    17751775dns proxy (G)
    1776 </h3></div></div></div><a class="indexterm" name="id2540711"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
     1776</h3></div></div></div><a class="indexterm" name="id314886"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
    17771777        finding that a NetBIOS name has not been registered, should treat the
    17781778        NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server
    … …  
    17831783        action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code>
    17841784</em></span>
    1785 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540773"></a>
     1785</p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314945"></a>
    17861786
    17871787domain logons (G)
    1788 </h3></div></div></div><a class="indexterm" name="id2540774"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1788</h3></div></div></div><a class="indexterm" name="id314946"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17891789        If set to <code class="constant">yes</code>, the Samba server will
    17901790        provide the netlogon service for Windows 9X network logons for the
    … …  
    17961796        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code>
    17971797</em></span>
    1798 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2540827"></a>
     1798</p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314995"></a>
    17991799
    18001800domain master (G)
    1801 </h3></div></div></div><a class="indexterm" name="id2540828"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1801</h3></div></div></div><a class="indexterm" name="id314996"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    18021802        Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable
    18031803        WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a
    … …  
    18251825        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code>
    18261826</em></span>
    1827 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541018"></a>
     1827</p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315162"></a>
    18281828
    18291829dont descend (S)
    1830 </h3></div></div></div><a class="indexterm" name="id2541019"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
     1830</h3></div></div></div><a class="indexterm" name="id315163"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
    18311831        (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not
    18321832        of interest to clients or are infinitely deep (recursive). This
    … …  
    18391839</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code>
    18401840</em></span>
    1841 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541096"></a>
     1841</p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315236"></a>
    18421842
    18431843dos charset (G)
    1844 </h3></div></div></div><a class="indexterm" name="id2541097"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
     1844</h3></div></div></div><a class="indexterm" name="id315237"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
    18451845        the same charset as they do. This option specifies which
    18461846        charset Samba should talk to DOS clients.
    18471847        </p><p>The default depends on which charsets you have installed.
    18481848        Samba tries to use charset 850 but falls back to ASCII in
    1849         case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541137"></a>
     1849        case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315274"></a>
    18501850
    18511851dos filemode (S)
    1852 </h3></div></div></div><a class="indexterm" name="id2541138"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
     1852</h3></div></div></div><a class="indexterm" name="id315275"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
    18531853        UNIX-like behavior where only the owner of a file/directory is
    18541854        able to change the permissions on it.  However, this behavior
    … …  
    18671867        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code>
    18681868</em></span>
    1869 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541202"></a>
     1869</p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315325"></a>
    18701870
    18711871dos filetime resolution (S)
    1872 </h3></div></div></div><a class="indexterm" name="id2541203"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
     1872</h3></div></div></div><a class="indexterm" name="id315326"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
    18731873        granularity on time resolution is two seconds. Setting this parameter
    18741874        for a share causes Samba to round the reported time down to the
    … …  
    18851885        happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code>
    18861886</em></span>
    1887 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541265"></a>
     1887</p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315380"></a>
    18881888
    18891889dos filetimes (S)
    1890 </h3></div></div></div><a class="indexterm" name="id2541266"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
     1890</h3></div></div></div><a class="indexterm" name="id315381"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
    18911891        file they can change the timestamp on it. Under POSIX semantics,
    18921892        only the owner of the file or root may change the timestamp. By
    … …  
    19011901        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code>
    19021902</em></span>
    1903 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541319"></a>
     1903</p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315428"></a>
    19041904
    19051905ea support (S)
    1906 </h3></div></div></div><a class="indexterm" name="id2541320"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
     1906</h3></div></div></div><a class="indexterm" name="id315429"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
    19071907    attributes on a share. In order to enable this parameter the underlying filesystem exported by
    19081908    the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the
    … …  
    19111911                extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code>
    19121912</em></span>
    1913 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541372"></a>
     1913</p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315476"></a>
    19141914
    19151915enable asu support (G)
    1916 </h3></div></div></div><a class="indexterm" name="id2541373"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
     1916</h3></div></div></div><a class="indexterm" name="id315477"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
    19171917    require some special accomodations such as creating a builtin [ADMIN$]
    19181918    share that only supports IPC connections.  The has been the default
    … …  
    19221922    an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code>
    19231923</em></span>
    1924 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541417"></a>
     1924</p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315517"></a>
    19251925
    19261926enable core files (G)
    1927 </h3></div></div></div><a class="indexterm" name="id2541418"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
     1927</h3></div></div></div><a class="indexterm" name="id315518"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
    19281928        on internal exits. Normally set to <code class="constant">yes</code>.
    19291929        You should never need to change this.
    … …  
    19321932</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enable core files</code></em> = <code class="literal">no</code>
    19331933</em></span>
    1934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541475"></a>
     1934</p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315574"></a>
    19351935
    19361936enable privileges (G)
    1937 </h3></div></div></div><a class="indexterm" name="id2541476"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1937</h3></div></div></div><a class="indexterm" name="id315575"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    19381938        This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
    19391939         <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools.  This parameter is
    … …  
    19481948        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code>
    19491949</em></span>
    1950 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541536"></a>
     1950</p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315628"></a>
    19511951
    19521952enable spoolss (G)
    1953 </h3></div></div></div><a class="indexterm" name="id2541537"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
    1954 </em></span>
    1955 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541582"></a>
     1953</h3></div></div></div><a class="indexterm" name="id315629"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
     1954</em></span>
     1955</p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315673"></a>
    19561956
    19571957encrypt passwords (G)
    1958 </h3></div></div></div><a class="indexterm" name="id2541583"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
     1958</h3></div></div></div><a class="indexterm" name="id315674"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
    19591959    will be negotiated with the client. Note that Windows NT 4.0 SP3 and
    19601960    above and also Windows 98 will by default expect encrypted passwords
    … …  
    19791979        server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code>
    19801980</em></span>
    1981 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541685"></a>
     1981</p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315837"></a>
    19821982
    19831983enhanced browsing (G)
    1984 </h3></div></div></div><a class="indexterm" name="id2541686"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
     1984</h3></div></div></div><a class="indexterm" name="id315838"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
    19851985        cross-subnet browse propagation that have been added in Samba
    19861986        but which are not standard in Microsoft implementations. 
    … …  
    19951995        cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code>
    19961996</em></span>
    1997 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541747"></a>
     1997</p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315891"></a>
    19981998
    19991999enumports command (G)
    2000 </h3></div></div></div><a class="indexterm" name="id2541748"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
     2000</h3></div></div></div><a class="indexterm" name="id315892"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
    20012001    to UNIX hosts.  Under Windows NT/2000 print servers, a port
    20022002    is associated with a port monitor and generally takes the form of
    … …  
    20152015</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code>
    20162016</em></span>
    2017 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541827"></a>
     2017</p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315971"></a>
    20182018
    20192019eventlog list (G)
    2020 </h3></div></div></div><a class="indexterm" name="id2541828"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
     2020</h3></div></div></div><a class="indexterm" name="id315972"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
    20212021    report to the Microsoft EventViewer utility.  The listed
    20222022    eventlogs will be associated with tdb file on disk in the
    … …  
    20312031</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code>
    20322032</em></span>
    2033 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541907"></a>
     2033</p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316046"></a>
    20342034
    20352035fake directory create times (S)
    2036 </h3></div></div></div><a class="indexterm" name="id2541908"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
     2036</h3></div></div></div><a class="indexterm" name="id316047"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
    20372037        time for all files and directories. This is not the same as the
    20382038        ctime - status change time - that Unix keeps, so Samba by default
    … …  
    20562056        will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code>
    20572057</em></span>
    2058 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2541979"></a>
     2058</p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316106"></a>
    20592059
    20602060fake oplocks (S)
    2061 </h3></div></div></div><a class="indexterm" name="id2541980"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
     2061</h3></div></div></div><a class="indexterm" name="id316107"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
    20622062        from a server to locally cache file operations. If a server grants
    20632063        an oplock (opportunistic lock) then the client is free to assume
    … …  
    20752075        this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code>
    20762076</em></span>
    2077 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542071"></a>
     2077</p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316188"></a>
    20782078
    20792079follow symlinks (S)
    2080 </h3></div></div></div><a class="indexterm" name="id2542072"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2080</h3></div></div></div><a class="indexterm" name="id316189"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20812081        This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>       from following symbolic links in a particular share. Setting this
    20822082        parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being
    … …  
    20882088        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code>
    20892089</em></span>
    2090 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542146"></a>
     2090</p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316258"></a>
    20912091
    20922092force create mode (S)
    2093 </h3></div></div></div><a class="indexterm" name="id2542147"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2093</h3></div></div></div><a class="indexterm" name="id316259"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    20942094    permissions that will <span class="emphasis"><em>always</em></span> be set on a
    20952095    file created by Samba. This is done by bitwise 'OR'ing these bits onto
    … …  
    21032103</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code>
    21042104</em></span>
    2105 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542227"></a>
     2105</p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316334"></a>
    21062106
    21072107force directory mode (S)
    2108 </h3></div></div></div><a class="indexterm" name="id2542228"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2108</h3></div></div></div><a class="indexterm" name="id316335"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    21092109    permissions that will <span class="emphasis"><em>always</em></span> be set on a directory
    21102110    created by Samba. This is done by bitwise 'OR'ing these bits onto the
    … …  
    21192119</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code>
    21202120</em></span>
    2121 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542308"></a>
     2121</p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316409"></a>
    21222122
    21232123force directory security mode (S)
    2124 </h3></div></div></div><a class="indexterm" name="id2542309"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2124</h3></div></div></div><a class="indexterm" name="id316410"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    21252125        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    21262126        the UNIX permission on a directory using the native NT security dialog box.
    … …  
    21352135        If not set explicitly this parameter is 0000, which allows a user to modify all the user/group/world
    21362136        permissions on a directory without restrictions.
    2137         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     2137        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    21382138        Users who can access the Samba server through other means can easily bypass this restriction, so it is
    21392139        primarily useful for standalone "appliance" systems.  Administrators of most normal systems will
    … …  
    21432143</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code>
    21442144</em></span>
    2145 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542412"></a>
     2145</p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316502"></a>
    21462146
    21472147<a name="GROUP"></a>group
    2148 </h3></div></div></div><a class="indexterm" name="id2542413"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542445"></a>
     2148</h3></div></div></div><a class="indexterm" name="id316503"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316534"></a>
    21492149
    21502150force group (S)
    2151 </h3></div></div></div><a class="indexterm" name="id2542446"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
     2151</h3></div></div></div><a class="indexterm" name="id316535"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
    21522152    assigned as the default primary group for all users connecting
    21532153    to this service. This is useful for sharing files by ensuring
    … …  
    21732173</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code>
    21742174</em></span>
    2175 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542560"></a>
     2175</p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316636"></a>
    21762176
    21772177force printername (S)
    2178 </h3></div></div></div><a class="indexterm" name="id2542561"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
     2178</h3></div></div></div><a class="indexterm" name="id316637"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
    21792179    each printer in <code class="filename">smb.conf</code> has two
    21802180    associated names which can be used by the client.  The first
    … …  
    21992199    folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code>
    22002200</em></span>
    2201 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542652"></a>
     2201</p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316716"></a>
    22022202
    22032203force security mode (S)
    2204 </h3></div></div></div><a class="indexterm" name="id2542653"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2204</h3></div></div></div><a class="indexterm" name="id316717"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22052205        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    22062206    the UNIX permission on a file using the native NT security dialog box.
    … …  
    22222222</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code>
    22232223</em></span>
    2224 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542753"></a>
     2224</p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316807"></a>
    22252225
    22262226force unknown acl user (S)
    2227 </h3></div></div></div><a class="indexterm" name="id2542754"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2227</h3></div></div></div><a class="indexterm" name="id316808"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22282228    If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or
    22292229    representation of a user or group id) as the owner or group owner of the file will be silently
    … …  
    22392239    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code>
    22402240</em></span>
    2241 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542816"></a>
     2241</p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316861"></a>
    22422242
    22432243force user (S)
    2244 </h3></div></div></div><a class="indexterm" name="id2542817"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
     2244</h3></div></div></div><a class="indexterm" name="id316862"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
    22452245    assigned as the default user for all users connecting to this service.
    22462246    This is useful for sharing files. You should also use it carefully
    … …  
    22562256</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code>
    22572257</em></span>
    2258 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542892"></a>
     2258</p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316931"></a>
    22592259
    22602260fstype (S)
    2261 </h3></div></div></div><a class="indexterm" name="id2542893"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2261</h3></div></div></div><a class="indexterm" name="id316932"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22622262        This parameter allows the administrator to configure the string that specifies the type of filesystem a share
    22632263        is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    22692269</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code>
    22702270</em></span>
    2271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2542974"></a>
     2271</p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317010"></a>
    22722272
    22732273get quota command (G)
    2274 </h3></div></div></div><a class="indexterm" name="id2542975"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
     2274</h3></div></div></div><a class="indexterm" name="id317011"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
    22752275        whenever there is no operating system API available from the OS that
    22762276        samba can use.</p><p>This option is only available you have compiled Samba with the
    … …  
    22802280        queries the quota information for the specified
    22812281        user/group for the partition that
    2282         the specified directory is on.</p><p>Such a script should take 3 arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>directory</p></li><li><p>type of query</p></li><li><p>uid of user or gid of group</p></li></ul></div><p>The type of query can be one of :</p><div class="itemizedlist"><ul type="disc"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>This script should print one line as output with spaces between the arguments. The arguments are:
    2283               </p><div class="itemizedlist"><ul type="disc"><li><p>Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</p></li><li><p>Arg 2 - number of currently used blocks</p></li><li><p>Arg 3 - the softlimit number of blocks</p></li><li><p>Arg 4 - the hardlimit number of blocks</p></li><li><p>Arg 5 - currently used number of inodes</p></li><li><p>Arg 6 - the softlimit number of inodes</p></li><li><p>Arg 7 - the hardlimit number of inodes</p></li><li><p>Arg 8(optional) - the number of bytes in a block(default is 1024)</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal"></code>
     2282        the specified directory is on.</p><p>Such a script should take 3 arguments:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>directory</p></li><li class="listitem"><p>type of query</p></li><li class="listitem"><p>uid of user or gid of group</p></li></ul></div><p>The type of query can be one of :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>1 - user quotas</p></li><li class="listitem"><p>2 - user default quotas (uid = -1)</p></li><li class="listitem"><p>3 - group quotas</p></li><li class="listitem"><p>4 - group default quotas (gid = -1)</p></li></ul></div><p>This script should print one line as output with spaces between the arguments. The arguments are:
     2283              </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</p></li><li class="listitem"><p>Arg 2 - number of currently used blocks</p></li><li class="listitem"><p>Arg 3 - the softlimit number of blocks</p></li><li class="listitem"><p>Arg 4 - the hardlimit number of blocks</p></li><li class="listitem"><p>Arg 5 - currently used number of inodes</p></li><li class="listitem"><p>Arg 6 - the softlimit number of inodes</p></li><li class="listitem"><p>Arg 7 - the hardlimit number of inodes</p></li><li class="listitem"><p>Arg 8(optional) - the number of bytes in a block(default is 1024)</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal"></code>
    22842284</em></span>
    22852285</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code>
    22862286</em></span>
    2287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543160"></a>
     2287</p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317186"></a>
    22882288
    22892289getwd cache (G)
    2290 </h3></div></div></div><a class="indexterm" name="id2543162"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
     2290</h3></div></div></div><a class="indexterm" name="id317187"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
    22912291    caching algorithm will be used to reduce the time taken for getwd()
    22922292    calls. This can have a significant impact on performance, especially
    22932293    when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code>
    22942294</em></span>
    2295 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543221"></a>
     2295</p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317244"></a>
    22962296
    22972297guest account (G)
    2298 </h3></div></div></div><a class="indexterm" name="id2543222"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
     2298</h3></div></div></div><a class="indexterm" name="id317245"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
    22992299    to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this
    23002300    user has will be available to any client connecting to the guest service.
    … …  
    23142314</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code>
    23152315</em></span>
    2316 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543329"></a>
     2316</p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317343"></a>
    23172317
    23182318<a name="PUBLIC"></a>public
    2319 </h3></div></div></div><a class="indexterm" name="id2543330"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543360"></a>
     2319</h3></div></div></div><a class="indexterm" name="id317344"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317374"></a>
    23202320
    23212321guest ok (S)
    2322 </h3></div></div></div><a class="indexterm" name="id2543361"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2322</h3></div></div></div><a class="indexterm" name="id317375"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23232323    a service, then no password is required to connect to the service.
    23242324    Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This paramater nullifies the benifits of setting
    … …  
    23272327        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code>
    23282328</em></span>
    2329 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543448"></a>
     2329</p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317459"></a>
    23302330
    23312331<a name="ONLYGUEST"></a>only guest
    2332 </h3></div></div></div><a class="indexterm" name="id2543449"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543481"></a>
     2332</h3></div></div></div><a class="indexterm" name="id317460"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317492"></a>
    23332333
    23342334guest only (S)
    2335 </h3></div></div></div><a class="indexterm" name="id2543482"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2335</h3></div></div></div><a class="indexterm" name="id317493"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23362336    a service, then only guest connections to the service are permitted.
    23372337    This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option.
    23382338        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code>
    23392339</em></span>
    2340 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543553"></a>
     2340</p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317561"></a>
    23412341
    23422342hide dot files (S)
    2343 </h3></div></div></div><a class="indexterm" name="id2543554"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
     2343</h3></div></div></div><a class="indexterm" name="id317562"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
    23442344        files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code>
    23452345</em></span>
    2346 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543596"></a>
     2346</p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317602"></a>
    23472347
    23482348hide files (S)
    2349 </h3></div></div></div><a class="indexterm" name="id2543597"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
     2349</h3></div></div></div><a class="indexterm" name="id317603"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
    23502350        visible but are accessible.  The DOS 'hidden' attribute is applied
    23512351        to any files or directories that match.</p><p>Each entry in the list must be separated by a '/',
    … …  
    23692369# no file are hidden</code>
    23702370</em></span>
    2371 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543685"></a>
     2371</p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317681"></a>
    23722372
    23732373hide special files (S)
    2374 </h3></div></div></div><a class="indexterm" name="id2543686"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2374</h3></div></div></div><a class="indexterm" name="id317682"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23752375        This parameter prevents clients from seeing special files such as sockets, devices and
    23762376        fifo's in directory listings.
    23772377        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code>
    23782378</em></span>
    2379 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543728"></a>
     2379</p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317722"></a>
    23802380
    23812381hide unreadable (S)
    2382 </h3></div></div></div><a class="indexterm" name="id2543729"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
     2382</h3></div></div></div><a class="indexterm" name="id317723"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
    23832383                existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code>
    23842384</em></span>
    2385 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543770"></a>
     2385</p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317764"></a>
    23862386
    23872387hide unwriteable files (S)
    2388 </h3></div></div></div><a class="indexterm" name="id2543771"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2388</h3></div></div></div><a class="indexterm" name="id317765"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23892389    This parameter prevents clients from seeing the existance of files that cannot be written to.
    23902390    Defaults to off. Note that unwriteable directories are shown as usual.
    23912391    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code>
    23922392</em></span>
    2393 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543815"></a>
     2393</p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317805"></a>
    23942394
    23952395homedir map (G)
    2396 </h3></div></div></div><a class="indexterm" name="id2543816"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2396</h3></div></div></div><a class="indexterm" name="id317806"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23972397        If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting         as a Win95/98 <em class="parameter"><code>logon server</code></em>
    23982398        then this parameter specifies the NIS (or YP) map from which the server for the user's  home directory should be extracted. 
    … …  
    24032403        and the program will extract the servername from before the first ':'.  There should probably be a better parsing system
    24042404        that copes with different map formats and also Amd (another automounter) maps.
    2405         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     2405        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    24062406        A working NIS client is required on the system for this option to work.
    24072407        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal"></code>
    … …  
    24092409</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code>
    24102410</em></span>
    2411 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543928"></a>
     2411</p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317912"></a>
    24122412
    24132413host msdfs (G)
    2414 </h3></div></div></div><a class="indexterm" name="id2543929"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2414</h3></div></div></div><a class="indexterm" name="id317913"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24152415        If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse
    24162416        Dfs trees hosted on the server.
    … …  
    24202420        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code>
    24212421</em></span>
    2422 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2543992"></a>
     2422</p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317974"></a>
    24232423
    24242424hostname lookups (G)
    2425 </h3></div></div></div><a class="indexterm" name="id2543993"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
     2425</h3></div></div></div><a class="indexterm" name="id317975"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
    24262426    hostname lookups or use the ip addresses instead. An example place
    24272427    where hostname lookups are currently used is when checking
    … …  
    24312431</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code>
    24322432</em></span>
    2433 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544066"></a>
     2433</p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318045"></a>
    24342434
    24352435<a name="ALLOWHOSTS"></a>allow hosts
    2436 </h3></div></div></div><a class="indexterm" name="id2544067"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544098"></a>
     2436</h3></div></div></div><a class="indexterm" name="id318046"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318077"></a>
    24372437
    24382438hosts allow (S)
    2439 </h3></div></div></div><a class="indexterm" name="id2544099"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
     2439</h3></div></div></div><a class="indexterm" name="id318078"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
    24402440    set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will
    24412441    apply to all services, regardless of whether the individual
    … …  
    24512451    <span class="emphasis"><em>EXCEPT</em></span> keyword can also be used to limit a
    24522452    wildcard list. The following examples may provide some help:</p><p>Example 1: allow all IPs in 150.203.*.*; except one</p><p><code class="literal">hosts allow = 150.203. EXCEPT 150.203.6.66</code></p><p>Example 2: allow hosts that match the given network/netmask</p><p><code class="literal">hosts allow = 150.203.15.0/255.255.255.0</code></p><p>Example 3: allow a couple of hosts</p><p><code class="literal">hosts allow = lapland, arvidsjaur</code></p><p>Example 4: allow only hosts in NIS netgroup "foonet", but
    2453     deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access
     2453    deny access from one particular host</p><p><code class="literal">hosts allow = @foonet</code></p><p><code class="literal">hosts deny = pirate</code></p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Note that access still requires suitable user-level passwords.</p></div><p>See <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> for a way of testing your host access
    24542454    to see if it does what you expect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">
    24552455# none (i.e., all hosts permitted access)</code>
    … …  
    24572457</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code>
    24582458</em></span>
    2459 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544300"></a>
     2459</p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318265"></a>
    24602460
    24612461<a name="DENYHOSTS"></a>deny hosts
    2462 </h3></div></div></div><a class="indexterm" name="id2544301"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544331"></a>
     2462</h3></div></div></div><a class="indexterm" name="id318266"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318296"></a>
    24632463
    24642464hosts deny (S)
    2465 </h3></div></div></div><a class="indexterm" name="id2544332"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
     2465</h3></div></div></div><a class="indexterm" name="id318297"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
    24662466    - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to
    24672467    services unless the specific services have their own lists to override
    … …  
    24772477</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code>
    24782478</em></span>
    2479 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544433"></a>
     2479</p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318393"></a>
    24802480
    24812481idmap alloc backend (G)
    2482 </h3></div></div></div><a class="indexterm" name="id2544434"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2482</h3></div></div></div><a class="indexterm" name="id318394"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24832483        The idmap alloc backend provides a plugin interface for Winbind to use
    24842484        when allocating Unix uids/gids for Windows SIDs. This option refers
    … …  
    24972497        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code>
    24982498</em></span>
    2499 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544539"></a>
     2499</p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318490"></a>
    25002500
    25012501idmap alloc config (G)
    2502 </h3></div></div></div><a class="indexterm" name="id2544540"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2502</h3></div></div></div><a class="indexterm" name="id318491"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25032503        The idmap alloc config prefix provides a means of managing settings
    25042504        for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a>
    25052505        parameter.  Refer to the man page for each idmap plugin regarding
    25062506        specific configuration details.
    2507         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544583"></a>
     2507        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318530"></a>
    25082508
    25092509idmap backend (G)
    2510 </h3></div></div></div><a class="indexterm" name="id2544584"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2510</h3></div></div></div><a class="indexterm" name="id318532"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25112511        The idmap backend provides a plugin interface for Winbind to use
    25122512        varying backends to store SID/uid/gid mapping tables.
    … …  
    25292529        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code>
    25302530</em></span>
    2531 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544755"></a>
     2531</p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318694"></a>
    25322532
    25332533idmap cache time (G)
    2534 </h3></div></div></div><a class="indexterm" name="id2544756"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2534</h3></div></div></div><a class="indexterm" name="id318695"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    25352535        idmap interface will cache positive SID/uid/gid query results.
    25362536        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">604800 (one week)</code>
    25372537</em></span>
    2538 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544799"></a>
     2538</p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318736"></a>
    25392539
    25402540idmap config (G)
    2541 </h3></div></div></div><a class="indexterm" name="id2544800"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2541</h3></div></div></div><a class="indexterm" name="id318737"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25422542        The idmap config prefix provides a means of managing each trusted
    25432543        domain separately. The idmap config prefix should be followed by the
    … …  
    25712571        idmap config CORP : backend  = ad
    25722572        idmap config CORP : range = 1000-999999
    2573         </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544932"></a>
     2573        </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id318858"></a>
    25742574
    25752575<a name="WINBINDGID"></a>winbind gid
    2576 </h3></div></div></div><a class="indexterm" name="id2544933"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2544964"></a>
     2576</h3></div></div></div><a class="indexterm" name="id318859"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318889"></a>
    25772577
    25782578idmap gid (G)
    2579 </h3></div></div></div><a class="indexterm" name="id2544965"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
     2579</h3></div></div></div><a class="indexterm" name="id318890"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
    25802580        that are allocated for the purpose of mapping UNX groups to NT group
    25812581        SIDs. This range of group ids should have no
    … …  
    25872587</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code>
    25882588</em></span>
    2589 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545050"></a>
     2589</p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318972"></a>
    25902590
    25912591idmap negative cache time (G)
    2592 </h3></div></div></div><a class="indexterm" name="id2545051"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2592</h3></div></div></div><a class="indexterm" name="id318973"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    25932593        idmap interface will cache negative SID/uid/gid query results.
    25942594        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code>
    25952595</em></span>
    2596 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545094"></a>
     2596</p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id319015"></a>
    25972597
    25982598<a name="WINBINDUID"></a>winbind uid
    2599 </h3></div></div></div><a class="indexterm" name="id2545095"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545125"></a>
     2599</h3></div></div></div><a class="indexterm" name="id319016"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319046"></a>
    26002600
    26012601idmap uid (G)
    2602 </h3></div></div></div><a class="indexterm" name="id2545126"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2602</h3></div></div></div><a class="indexterm" name="id319047"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26032603        The idmap uid parameter specifies the range of user ids that are
    26042604        allocated for use in mapping UNIX users to NT user SIDs. This
    … …  
    26102610</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code>
    26112611</em></span>
    2612 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545212"></a>
     2612</p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319129"></a>
    26132613
    26142614include (G)
    2615 </h3></div></div></div><a class="indexterm" name="id2545213"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2615</h3></div></div></div><a class="indexterm" name="id319130"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26162616        This allows you to include one config file inside another.  The file is included literally, as though typed
    26172617        in place.
    … …  
    26312631</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code>
    26322632</em></span>
    2633 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545312"></a>
     2633</p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319225"></a>
    26342634
    26352635inherit acls (S)
    2636 </h3></div></div></div><a class="indexterm" name="id2545314"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
     2636</h3></div></div></div><a class="indexterm" name="id319226"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
    26372637    exist on parent directories, they are always honored when creating a
    26382638    new file or subdirectory in these parent directories. The default
    … …  
    26472647</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code>
    26482648</em></span>
    2649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545363"></a>
     2649</p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319271"></a>
    26502650
    26512651inherit owner (S)
    2652 </h3></div></div></div><a class="indexterm" name="id2545364"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
     2652</h3></div></div></div><a class="indexterm" name="id319272"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
    26532653        is normally governed by effective uid of the connected user.
    26542654        This option allows the Samba administrator to specify that
    … …  
    26592659        roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code>
    26602660</em></span>
    2661 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545416"></a>
     2661</p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319319"></a>
    26622662
    26632663inherit permissions (S)
    2664 </h3></div></div></div><a class="indexterm" name="id2545417"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2664</h3></div></div></div><a class="indexterm" name="id319320"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26652665        The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>,
    26662666        <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this.
    … …  
    26742674    share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code>
    26752675</em></span>
    2676 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545566"></a>
     2676</p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319457"></a>
    26772677
    26782678init logon delayed hosts (G)
    2679 </h3></div></div></div><a class="indexterm" name="id2545567"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2679</h3></div></div></div><a class="indexterm" name="id319458"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26802680        This parameter takes a list of host names, addresses or networks for
    26812681        which the initial samlogon reply should be delayed (so other DCs get
    … …  
    26882688</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>init logon delayed hosts</code></em> = <code class="literal">150.203.5. myhost.mynet.de</code>
    26892689</em></span>
    2690 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545644"></a>
     2690</p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319531"></a>
    26912691
    26922692init logon delay (G)
    2693 </h3></div></div></div><a class="indexterm" name="id2545645"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2693</h3></div></div></div><a class="indexterm" name="id319532"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26942694        This parameter specifies a delay in milliseconds for the hosts configured
    26952695        for delayed initial samlogon with
    … …  
    26972697        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>init logon delay</code></em> = <code class="literal">100</code>
    26982698</em></span>
    2699 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545698"></a>
     2699</p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319582"></a>
    27002700
    27012701interfaces (G)
    2702 </h3></div></div></div><a class="indexterm" name="id2545699"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
     2702</h3></div></div></div><a class="indexterm" name="id319583"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
    27032703        network interfaces list that Samba will use for browsing, name
    27042704        registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query
    27052705        the kernel for the list of all active interfaces and use any
    27062706        interfaces except 127.0.0.1 that are broadcast capable.</p><p>The option takes a list of interface strings. Each string
    2707         can be in any of the following forms:</p><div class="itemizedlist"><ul type="disc"><li><p>a network interface name (such as eth0).
     2707        can be in any of the following forms:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>a network interface name (such as eth0).
    27082708                This may include shell-like wildcards so eth* will match
    2709                 any interface starting with the substring "eth"</p></li><li><p>an IP address. In this case the netmask is
     2709                any interface starting with the substring "eth"</p></li><li class="listitem"><p>an IP address. In this case the netmask is
    27102710                determined from the list of interfaces obtained from the
    2711                 kernel</p></li><li><p>an IP/mask pair. </p></li><li><p>a broadcast/mask pair.</p></li></ul></div><p>The "mask" parameters can either be a bit length (such
     2711                kernel</p></li><li class="listitem"><p>an IP/mask pair. </p></li><li class="listitem"><p>a broadcast/mask pair.</p></li></ul></div><p>The "mask" parameters can either be a bit length (such
    27122712        as 24 for a C class network) or a full netmask in dotted
    27132713        decimal form.</p><p>The "IP" parameters above can either be a full dotted
    … …  
    27242724</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code>
    27252725</em></span>
    2726 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545815"></a>
     2726</p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319688"></a>
    27272727
    27282728invalid users (S)
    2729 </h3></div></div></div><a class="indexterm" name="id2545816"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
     2729</h3></div></div></div><a class="indexterm" name="id319689"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
    27302730    to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span>
    27312731    check to absolutely ensure an improper setting does not breach
    … …  
    27472747</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code>
    27482748</em></span>
    2749 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2545930"></a>
     2749</p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319789"></a>
    27502750
    27512751iprint server (G)
    2752 </h3></div></div></div><a class="indexterm" name="id2545931"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2752</h3></div></div></div><a class="indexterm" name="id319790"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27532753    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>.
    27542754    </p><p>
    … …  
    27592759</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code>
    27602760</em></span>
    2761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546016"></a>
     2761</p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319872"></a>
    27622762
    27632763keepalive (G)
    2764 </h3></div></div></div><a class="indexterm" name="id2546017"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
     2764</h3></div></div></div><a class="indexterm" name="id319873"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
    27652765    the number of seconds between <em class="parameter"><code>keepalive</code></em>
    27662766    packets. If this parameter is zero, no keepalive packets will be
    … …  
    27722772</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code>
    27732773</em></span>
    2774 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546104"></a>
     2774</p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319953"></a>
    27752775
    27762776kerberos method (G)
    2777 </h3></div></div></div><a class="indexterm" name="id2546105"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2777</h3></div></div></div><a class="indexterm" name="id319954"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27782778        Controls how kerberos tickets are verified.
    2779         </p><p>Valid options are:</p><div class="itemizedlist"><ul type="disc"><li><p>secrets only - use only the secrets.tdb for
    2780           ticket verification (default)</p></li><li><p>system keytab - use only the system keytab
    2781           for ticket verification</p></li><li><p>dedicated keytab - use a dedicated keytab
    2782           for ticket verification</p></li><li><p>secrets and keytab - use the secrets.tdb
     2779        </p><p>Valid options are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>secrets only - use only the secrets.tdb for
     2780          ticket verification (default)</p></li><li class="listitem"><p>system keytab - use only the system keytab
     2781          for ticket verification</p></li><li class="listitem"><p>dedicated keytab - use a dedicated keytab
     2782          for ticket verification</p></li><li class="listitem"><p>secrets and keytab - use the secrets.tdb
    27832783          first, then the system keytab</p></li></ul></div><p>
    27842784          The major difference between "system keytab" and "dedicated
    … …  
    27922792        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kerberos method</code></em> = <code class="literal">secrets only</code>
    27932793</em></span>
    2794 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546200"></a>
     2794</p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320042"></a>
    27952795
    27962796kernel change notify (S)
    2797 </h3></div></div></div><a class="indexterm" name="id2546201"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
     2797</h3></div></div></div><a class="indexterm" name="id320044"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
    27982798        kernel for change notifications in directories so that
    27992799        SMB clients can refresh whenever the data on the server changes.
    … …  
    28022802        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code>
    28032803</em></span>
    2804 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546250"></a>
     2804</p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320089"></a>
    28052805
    28062806kernel oplocks (G)
    2807 </h3></div></div></div><a class="indexterm" name="id2546251"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
     2807</h3></div></div></div><a class="indexterm" name="id320090"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    28082808        (currently only IRIX and the Linux 2.4 kernel), this parameter
    28092809        allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks
    … …  
    28152815        You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code>
    28162816</em></span>
    2817 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546338"></a>
     2817</p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320171"></a>
    28182818
    28192819lanman auth (G)
    2820 </h3></div></div></div><a class="indexterm" name="id2546339"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     2820</h3></div></div></div><a class="indexterm" name="id320172"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    28212821    authenticate users or permit password changes
    28222822    using the LANMAN password hash. If disabled, only clients which support NT
    … …  
    28402840    special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code>
    28412841</em></span>
    2842 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546444"></a>
     2842</p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320265"></a>
    28432843
    28442844large readwrite (G)
    2845 </h3></div></div></div><a class="indexterm" name="id2546445"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     2845</h3></div></div></div><a class="indexterm" name="id320266"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
    28462846    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k
    28472847    streaming read and write variant SMB requests introduced with
    … …  
    28522852        tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code>
    28532853</em></span>
    2854 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546507"></a>
     2854</p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320321"></a>
    28552855
    28562856ldap admin dn (G)
    2857 </h3></div></div></div><a class="indexterm" name="id2546508"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2857</h3></div></div></div><a class="indexterm" name="id320322"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28582858        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished  Name (DN) name used by Samba to contact
    28592859        the ldap server when retreiving  user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used
    … …  
    28632863        </p><p>
    28642864        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap  suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>.
    2865         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546617"></a>
     2865        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320424"></a>
    28662866
    28672867ldap connection timeout (G)
    2868 </h3></div></div></div><a class="indexterm" name="id2546618"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2868</h3></div></div></div><a class="indexterm" name="id320425"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28692869        This parameter tells the LDAP library calls which timeout in seconds
    28702870        they should honor during initial connection establishments to LDAP servers.
    … …  
    28782878        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code>
    28792879</em></span>
    2880 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546682"></a>
     2880</p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320482"></a>
    28812881
    28822882ldap debug level (G)
    2883 </h3></div></div></div><a class="indexterm" name="id2546683"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2883</h3></div></div></div><a class="indexterm" name="id320483"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28842884                This parameter controls the debug level of the LDAP library
    28852885                calls. In the case of OpenLDAP, it is the same
    … …  
    28982898</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code>
    28992899</em></span>
    2900 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546770"></a>
     2900</p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320566"></a>
    29012901
    29022902ldap debug threshold (G)
    2903 </h3></div></div></div><a class="indexterm" name="id2546771"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2903</h3></div></div></div><a class="indexterm" name="id320567"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29042904                This parameter controls the Samba debug level at which
    29052905                the ldap library debug output is
    … …  
    29102910</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code>
    29112911</em></span>
    2912 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546837"></a>
     2912</p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320630"></a>
    29132913
    29142914ldap delete dn (G)
    2915 </h3></div></div></div><a class="indexterm" name="id2546838"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
     2915</h3></div></div></div><a class="indexterm" name="id320632"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
    29162916        operation in the ldapsam deletes the complete entry or only the attributes
    29172917        specific to Samba.
    29182918        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code>
    29192919</em></span>
    2920 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546881"></a>
     2920</p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320672"></a>
    29212921
    29222922ldap deref (G)
    2923 </h3></div></div></div><a class="indexterm" name="id2546882"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
     2923</h3></div></div></div><a class="indexterm" name="id320674"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
    29242924        to use a certain alias dereferencing method. The default is
    29252925        <span class="emphasis"><em>auto</em></span>, which means that the default setting of the
    … …  
    29322932</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap deref</code></em> = <code class="literal">searching</code>
    29332933</em></span>
    2934 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2546962"></a>
     2934</p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320750"></a>
    29352935
    29362936ldap follow referral (G)
    2937 </h3></div></div></div><a class="indexterm" name="id2546963"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
     2937</h3></div></div></div><a class="indexterm" name="id320751"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
    29382938        searching for entries in the LDAP database. Possible values are
    29392939        <span class="emphasis"><em>on</em></span> to enable following referrals,
    … …  
    29462946</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap follow referral</code></em> = <code class="literal">off</code>
    29472947</em></span>
    2948 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547037"></a>
     2948</p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320821"></a>
    29492949
    29502950ldap group suffix (G)
    2951 </h3></div></div></div><a class="indexterm" name="id2547038"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
     2951</h3></div></div></div><a class="indexterm" name="id320822"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
    29522952        used for groups when these are added to the LDAP directory.
    29532953        If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    … …  
    29562956</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code>
    29572957</em></span>
    2958 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547121"></a>
     2958</p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320901"></a>
    29592959
    29602960ldap idmap suffix (G)
    2961 </h3></div></div></div><a class="indexterm" name="id2547122"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2961</h3></div></div></div><a class="indexterm" name="id320902"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29622962        This parameters specifies the suffix that is used when storing idmap mappings. If this parameter
    29632963        is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
    … …  
    29672967</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code>
    29682968</em></span>
    2969 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547203"></a>
     2969</p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320980"></a>
    29702970
    29712971ldap machine suffix (G)
    2972 </h3></div></div></div><a class="indexterm" name="id2547204"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2972</h3></div></div></div><a class="indexterm" name="id320981"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29732973        It specifies where machines should be added to the ldap tree.  If this parameter is unset, the value of
    29742974        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    … …  
    29782978</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code>
    29792979</em></span>
    2980 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547286"></a>
     2980</p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321059"></a>
    29812981
    29822982ldap page size (G)
    2983 </h3></div></div></div><a class="indexterm" name="id2547287"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2983</h3></div></div></div><a class="indexterm" name="id321060"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29842984        This parameter specifies the number of entries per page.
    29852985        </p><p>If the LDAP server supports paged results, clients can
    … …  
    29902990</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap page size</code></em> = <code class="literal">512</code>
    29912991</em></span>
    2992 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547352"></a>
     2992</p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321122"></a>
    29932993
    29942994ldap passwd sync (G)
    2995 </h3></div></div></div><a class="indexterm" name="id2547353"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2995</h3></div></div></div><a class="indexterm" name="id321123"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29962996        This option is used to define whether or not Samba should sync the LDAP password with the NT
    29972997        and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
    … …  
    29992999        </p><p>
    30003000        The <a class="link" href="smb.conf.5.html#LDAPPASSWDSYNC" target="_top">ldap passwd sync</a> can be set to one of three values:
    3001         </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Yes</code></em>  =  Try
    3002                         to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>No</code></em> = Update NT and
    3003                         LM passwords and update the pwdLastSet time.</p></li><li><p><em class="parameter"><code>Only</code></em> = Only update
     3001        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>Yes</code></em>  =  Try
     3002                        to update the LDAP, NT and LM passwords and update the pwdLastSet time.</p></li><li class="listitem"><p><em class="parameter"><code>No</code></em> = Update NT and
     3003                        LM passwords and update the pwdLastSet time.</p></li><li class="listitem"><p><em class="parameter"><code>Only</code></em> = Only update
    30043004                        the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code>
    30053005</em></span>
    3006 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547453"></a>
     3006</p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321217"></a>
    30073007
    30083008ldap replication sleep (G)
    3009 </h3></div></div></div><a class="indexterm" name="id2547454"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3009</h3></div></div></div><a class="indexterm" name="id321218"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30103010        When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server.
    30113011        This server then replicates our changes back to the 'local' server, however the replication might take some seconds,
    … …  
    30203020        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code>
    30213021</em></span>
    3022 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547517"></a>
     3022</p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321273"></a>
    30233023
    30243024ldapsam:editposix (G)
    3025 </h3></div></div></div><a class="indexterm" name="id2547518"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3025</h3></div></div></div><a class="indexterm" name="id321274"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30263026        Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller
    30273027        eliminating the need to set up custom scripts to add and manage the posix users and groups. This option
    … …  
    31013101        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code>
    31023102</em></span>
    3103 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547654"></a>
     3103</p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321384"></a>
    31043104
    31053105ldapsam:trusted (G)
    3106 </h3></div></div></div><a class="indexterm" name="id2547655"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3106</h3></div></div></div><a class="indexterm" name="id321385"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31073107        By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
    31083108        access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
    … …  
    31223122        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code>
    31233123</em></span>
    3124 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547743"></a>
     3124</p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321459"></a>
    31253125
    31263126ldap ssl ads (G)
    3127 </h3></div></div></div><a class="indexterm" name="id2547744"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3127</h3></div></div></div><a class="indexterm" name="id321460"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31283128        use SSL when connecting to the ldap server using
    31293129        <span class="emphasis"><em>ads</em></span> methods.
    … …  
    31353135        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl ads</code></em> = <code class="literal">no</code>
    31363136</em></span>
    3137 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2547828"></a>
     3137</p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321541"></a>
    31383138
    31393139ldap ssl (G)
    3140 </h3></div></div></div><a class="indexterm" name="id2547829"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3140</h3></div></div></div><a class="indexterm" name="id321542"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31413141        use SSL when connecting to the ldap server
    31423142        This is <span class="emphasis"><em>NOT</em></span> related to
    … …  
    31493149        <span class="emphasis"><em>or</em></span> by specifying <em class="parameter"><code>ldaps://</code></em> in
    31503150        the URL argument of <a class="link" href="smb.conf.5.html#PASSDBBACKEND" target="_top">passdb backend</a>.</p><p>The <a class="link" href="smb.conf.5.html#LDAPSSL" target="_top">ldap ssl</a> can be set to one of
    3151         two values:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>Off</code></em> = Never
    3152                         use SSL when querying the directory.</p></li><li><p><em class="parameter"><code>start tls</code></em> = Use
     3151        two values:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>Off</code></em> = Never
     3152                        use SSL when querying the directory.</p></li><li class="listitem"><p><em class="parameter"><code>start tls</code></em> = Use
    31533153                        the LDAPv3 StartTLS extended operation (RFC2830) for
    31543154                        communicating with the directory server.</p></li></ul></div><p>
    … …  
    31633163        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start tls</code>
    31643164</em></span>
    3165 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548021"></a>
     3165</p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321725"></a>
    31663166
    31673167ldap suffix (G)
    3168 </h3></div></div></div><a class="indexterm" name="id2548022"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
     3168</h3></div></div></div><a class="indexterm" name="id321726"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
    31693169        The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>,
    31703170         <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the
    … …  
    31753175</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code>
    31763176</em></span>
    3177 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548144"></a>
     3177</p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321841"></a>
    31783178
    31793179ldap timeout (G)
    3180 </h3></div></div></div><a class="indexterm" name="id2548145"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3180</h3></div></div></div><a class="indexterm" name="id321842"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31813181        This parameter defines the number of seconds that Samba should use as timeout for LDAP operations.
    31823182        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code>
    31833183</em></span>
    3184 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548186"></a>
     3184</p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321881"></a>
    31853185
    31863186ldap user suffix (G)
    3187 </h3></div></div></div><a class="indexterm" name="id2548187"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3187</h3></div></div></div><a class="indexterm" name="id321882"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31883188        This parameter specifies where users are added to the tree. If this parameter is unset,
    31893189        the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
    … …  
    31933193</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code>
    31943194</em></span>
    3195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548268"></a>
     3195</p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id321960"></a>
    31963196
    31973197level2 oplocks (S)
    3198 </h3></div></div></div><a class="indexterm" name="id2548269"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
     3198</h3></div></div></div><a class="indexterm" name="id321962"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
    31993199        level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients
    32003200        that have an oplock on a file to downgrade from a read-write oplock
    … …  
    32163216        this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code>
    32173217</em></span>
    3218 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548375"></a>
     3218</p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322056"></a>
    32193219
    32203220lm announce (G)
    3221 </h3></div></div></div><a class="indexterm" name="id2548376"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
     3221</h3></div></div></div><a class="indexterm" name="id322057"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
    32223222        broadcasts that are needed by OS/2 clients in order for them to see
    32233223        the Samba server in their browse list. This parameter can have three
    … …  
    32353235</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code>
    32363236</em></span>
    3237 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548497"></a>
     3237</p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322171"></a>
    32383238
    32393239lm interval (G)
    3240 </h3></div></div></div><a class="indexterm" name="id2548498"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
     3240</h3></div></div></div><a class="indexterm" name="id322172"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
    32413241        broadcasts needed by OS/2 clients (see the
    32423242                <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this
    … …  
    32483248</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code>
    32493249</em></span>
    3250 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548581"></a>
     3250</p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322252"></a>
    32513251
    32523252load printers (G)
    3253 </h3></div></div></div><a class="indexterm" name="id2548582"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
     3253</h3></div></div></div><a class="indexterm" name="id322253"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
    32543254    printers in the printcap will be loaded for browsing by default.
    32553255    See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for
    32563256    more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code>
    32573257</em></span>
    3258 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548638"></a>
     3258</p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322306"></a>
    32593259
    32603260local master (G)
    3261 </h3></div></div></div><a class="indexterm" name="id2548639"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
     3261</h3></div></div></div><a class="indexterm" name="id322307"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
    32623262        on a subnet. If set to <code class="constant">no</code> then <code class="literal">
    32633263        nmbd</code> will not attempt to become a local master browser
    … …  
    32693269master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code>
    32703270</em></span>
    3271 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548737"></a>
     3271</p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id322402"></a>
    32723272
    32733273<a name="LOCKDIR"></a>lock dir
    3274 </h3></div></div></div><a class="indexterm" name="id2548738"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548769"></a>
     3274</h3></div></div></div><a class="indexterm" name="id322403"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322434"></a>
    32753275
    32763276lock directory (G)
    3277 </h3></div></div></div><a class="indexterm" name="id2548770"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
     3277</h3></div></div></div><a class="indexterm" name="id322435"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
    32783278        files will be placed.  The lock files are used to implement the
    32793279        <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option.
    … …  
    32853285</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code>
    32863286</em></span>
    3287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548847"></a>
     3287</p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322508"></a>
    32883288
    32893289locking (S)
    3290 </h3></div></div></div><a class="indexterm" name="id2548848"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
     3290</h3></div></div></div><a class="indexterm" name="id322509"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
    32913291        performed by the server in response to lock requests from the
    32923292        client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock
    … …  
    32983298        is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a
    32993299        specific service, as lack of locking may result in data corruption.
    3300         You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548923"></a>
     3300        You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322577"></a>
    33013301
    33023302lock spin count (G)
    3303 </h3></div></div></div><a class="indexterm" name="id2548924"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
     3303</h3></div></div></div><a class="indexterm" name="id322578"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
    33043304        The functionality it contolled is now controlled by the parameter
    33053305        <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>.
    33063306        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code>
    33073307</em></span>
    3308 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2548979"></a>
     3308</p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322630"></a>
    33093309
    33103310lock spin time (G)
    3311 </h3></div></div></div><a class="indexterm" name="id2548980"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
     3311</h3></div></div></div><a class="indexterm" name="id322631"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
    33123312        keep waiting to see if a failed lock request can
    33133313        be granted. This parameter has changed in default
    … …  
    33173317        to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code>
    33183318</em></span>
    3319 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549037"></a>
     3319</p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322684"></a>
    33203320
    33213321log file (G)
    3322 </h3></div></div></div><a class="indexterm" name="id2549038"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3322</h3></div></div></div><a class="indexterm" name="id322685"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33233323    This option allows you to override the name of the Samba log file (also known as the debug file).
    33243324    </p><p>
    … …  
    33263326    </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code>
    33273327</em></span>
    3328 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549090"></a>
     3328</p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id322734"></a>
    33293329
    33303330<a name="DEBUGLEVEL"></a>debuglevel
    3331 </h3></div></div></div><a class="indexterm" name="id2549091"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549121"></a>
     3331</h3></div></div></div><a class="indexterm" name="id322735"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322764"></a>
    33323332
    33333333log level (G)
    3334 </h3></div></div></div><a class="indexterm" name="id2549122"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3334</h3></div></div></div><a class="indexterm" name="id322766"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33353335    The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
    33363336    <code class="filename">smb.conf</code> file.
    … …  
    33393339    debug classes. This is to give greater flexibility in the configuration
    33403340    of the system. The following debug classes are currently implemented:
    3341     </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>all</code></em></p></li><li><p><em class="parameter"><code>tdb</code></em></p></li><li><p><em class="parameter"><code>printdrivers</code></em></p></li><li><p><em class="parameter"><code>lanman</code></em></p></li><li><p><em class="parameter"><code>smb</code></em></p></li><li><p><em class="parameter"><code>rpc_parse</code></em></p></li><li><p><em class="parameter"><code>rpc_srv</code></em></p></li><li><p><em class="parameter"><code>rpc_cli</code></em></p></li><li><p><em class="parameter"><code>passdb</code></em></p></li><li><p><em class="parameter"><code>sam</code></em></p></li><li><p><em class="parameter"><code>auth</code></em></p></li><li><p><em class="parameter"><code>winbind</code></em></p></li><li><p><em class="parameter"><code>vfs</code></em></p></li><li><p><em class="parameter"><code>idmap</code></em></p></li><li><p><em class="parameter"><code>quota</code></em></p></li><li><p><em class="parameter"><code>acls</code></em></p></li><li><p><em class="parameter"><code>locking</code></em></p></li><li><p><em class="parameter"><code>msdfs</code></em></p></li><li><p><em class="parameter"><code>dmapi</code></em></p></li><li><p><em class="parameter"><code>registry</code></em></p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">0</code>
     3341    </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>all</code></em></p></li><li class="listitem"><p><em class="parameter"><code>tdb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>printdrivers</code></em></p></li><li class="listitem"><p><em class="parameter"><code>lanman</code></em></p></li><li class="listitem"><p><em class="parameter"><code>smb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_parse</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_srv</code></em></p></li><li class="listitem"><p><em class="parameter"><code>rpc_cli</code></em></p></li><li class="listitem"><p><em class="parameter"><code>passdb</code></em></p></li><li class="listitem"><p><em class="parameter"><code>sam</code></em></p></li><li class="listitem"><p><em class="parameter"><code>auth</code></em></p></li><li class="listitem"><p><em class="parameter"><code>winbind</code></em></p></li><li class="listitem"><p><em class="parameter"><code>vfs</code></em></p></li><li class="listitem"><p><em class="parameter"><code>idmap</code></em></p></li><li class="listitem"><p><em class="parameter"><code>quota</code></em></p></li><li class="listitem"><p><em class="parameter"><code>acls</code></em></p></li><li class="listitem"><p><em class="parameter"><code>locking</code></em></p></li><li class="listitem"><p><em class="parameter"><code>msdfs</code></em></p></li><li class="listitem"><p><em class="parameter"><code>dmapi</code></em></p></li><li class="listitem"><p><em class="parameter"><code>registry</code></em></p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">0</code>
    33423342</em></span>
    33433343</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code>
    33443344</em></span>
    3345 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549354"></a>
     3345</p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322993"></a>
    33463346
    33473347logon drive (G)
    3348 </h3></div></div></div><a class="indexterm" name="id2549356"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3348</h3></div></div></div><a class="indexterm" name="id322994"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33493349        This parameter specifies the local path to which the home directory will be
    33503350        connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT
    … …  
    33563356</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code>
    33573357</em></span>
    3358 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549430"></a>
     3358</p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323066"></a>
    33593359
    33603360logon home (G)
    3361 </h3></div></div></div><a class="indexterm" name="id2549431"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3361</h3></div></div></div><a class="indexterm" name="id323067"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33623362        This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 
    33633363        It allows you to do
    … …  
    33903390</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code>
    33913391</em></span>
    3392 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549594"></a>
     3392</p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323220"></a>
    33933393
    33943394logon path (G)
    3395 </h3></div></div></div><a class="indexterm" name="id2549595"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3395</h3></div></div></div><a class="indexterm" name="id323221"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33963396        This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are
    33973397        stored.  Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming
    … …  
    34153415        </p><p>
    34163416        This option takes the standard substitutions, allowing you to have separate logon scripts for each user or machine.
    3417         </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
    3418         Do not quote the value. Setting this as &#8220;<span class="quote">\\%N\profile\%U</span>&#8221;
     3417        </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
     3418        Do not quote the value. Setting this as <span class="quote">&#8220;<span class="quote">\\%N\profile\%U</span>&#8221;</span>
    34193419        will break profile handling. Where the tdbsam or ldapsam passdb backend
    34203420        is used, at the time the user account is created the value configured
    … …  
    34373437        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code>
    34383438</em></span>
    3439 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549763"></a>
     3439</p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323366"></a>
    34403440
    34413441logon script (G)
    3442 </h3></div></div></div><a class="indexterm" name="id2549764"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3442</h3></div></div></div><a class="indexterm" name="id323367"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34433443        This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file
    34443444        (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in.  The file
    … …  
    34713471</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code>
    34723472</em></span>
    3473 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2549932"></a>
     3473</p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323524"></a>
    34743474
    34753475lppause command (S)
    3476 </h3></div></div></div><a class="indexterm" name="id2549934"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3476</h3></div></div></div><a class="indexterm" name="id323525"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    34773477    executed on the server host in order to stop printing or spooling
    34783478    a specific print job.</p><p>This command should be a program or script which takes
    … …  
    34983498</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code>
    34993499</em></span>
    3500 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550080"></a>
     3500</p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323660"></a>
    35013501
    35023502lpq cache time (G)
    3503 </h3></div></div></div><a class="indexterm" name="id2550082"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
     3503</h3></div></div></div><a class="indexterm" name="id323661"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
    35043504        for to prevent the <code class="literal">lpq</code> command being called too
    35053505        often. A separate cache is kept for each variation of the <code class="literal">
    … …  
    35143514</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code>
    35153515</em></span>
    3516 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550199"></a>
     3516</p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323771"></a>
    35173517
    35183518lpq command (S)
    3519 </h3></div></div></div><a class="indexterm" name="id2550200"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3519</h3></div></div></div><a class="indexterm" name="id323772"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35203520    executed on the server host in order to obtain <code class="literal">lpq
    35213521    </code>-style printer status information.</p><p>This command should be a program or script which
    … …  
    35393539</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code>
    35403540</em></span>
    3541 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550326"></a>
     3541</p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323888"></a>
    35423542
    35433543lpresume command (S)
    3544 </h3></div></div></div><a class="indexterm" name="id2550327"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3544</h3></div></div></div><a class="indexterm" name="id323889"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35453545    executed on the server host in order to restart or continue
    35463546    printing or spooling a specific print job.</p><p>This command should be a program or script which takes
    … …  
    35553555    is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code>
    35563556</em></span>
    3557 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550479"></a>
     3557</p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324032"></a>
    35583558
    35593559lprm command (S)
    3560 </h3></div></div></div><a class="indexterm" name="id2550480"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3560</h3></div></div></div><a class="indexterm" name="id324033"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35613561    executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes
    35623562    a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
    … …  
    35753575        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code>
    35763576</em></span>
    3577 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550566"></a>
     3577</p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324113"></a>
    35783578
    35793579machine password timeout (G)
    3580 </h3></div></div></div><a class="indexterm" name="id2550567"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3580</h3></div></div></div><a class="indexterm" name="id324114"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35813581        If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change
    35823582        the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb
    … …  
    35883588        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code>
    35893589</em></span>
    3590 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550654"></a>
     3590</p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324197"></a>
    35913591
    35923592magic output (S)
    3593 </h3></div></div></div><a class="indexterm" name="id2550655"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3593</h3></div></div></div><a class="indexterm" name="id324198"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35943594        This parameter specifies the name of a file which will contain output created by a magic script (see the
    35953595        <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below).
    3596         </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script
     3596        </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>If two clients use the same <em class="parameter"><code>magic script
    35973597        </code></em> in the same directory the output file content is undefined.
    35983598        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">&lt;magic script name&gt;.out</code>
    … …  
    36003600</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code>
    36013601</em></span>
    3602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550738"></a>
     3602</p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324277"></a>
    36033603
    36043604magic script (S)
    3605 </h3></div></div></div><a class="indexterm" name="id2550739"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
     3605</h3></div></div></div><a class="indexterm" name="id324278"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
    36063606        if opened, will be executed by the server when the file is closed.
    36073607        This allows a UNIX script to be sent to the Samba host and
    … …  
    36193619</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code>
    36203620</em></span>
    3621 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550844"></a>
     3621</p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324375"></a>
    36223622
    36233623mangled names (S)
    3624 </h3></div></div></div><a class="indexterm" name="id2550845"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
     3624</h3></div></div></div><a class="indexterm" name="id324376"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
    36253625        should be mapped to DOS-compatible names ("mangled") and made visible,
    36263626        or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for
    3627         details on how to control the mangling process.</p><p>If mangling is used then the mangling method is as follows:</p><div class="itemizedlist"><ul type="disc"><li><p>The first (up to) five alphanumeric characters
     3627        details on how to control the mangling process.</p><p>If mangling is used then the mangling method is as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The first (up to) five alphanumeric characters
    36283628                        before the rightmost dot of the filename are preserved, forced
    36293629                        to upper case, and appear as the first (up to) five characters
    3630                         of the mangled name.</p></li><li><p>A tilde "~" is appended to the first part of the mangled
     3630                        of the mangled name.</p></li><li class="listitem"><p>A tilde "~" is appended to the first part of the mangled
    36313631                        name, followed by a two-character unique sequence, based on the
    36323632                        original root name (i.e., the original filename minus its final
    … …  
    36353635                        characters.</p><p>Note that the character to use may be specified using
    36363636                                the <a class="link" href="smb.conf.5.html#MANGLINGCHAR" target="_top">mangling char</a>
    3637                         option, if you don't like '~'.</p></li><li><p>Files whose UNIX name begins with a dot will be
     3637                        option, if you don't like '~'.</p></li><li class="listitem"><p>Files whose UNIX name begins with a dot will be
    36383638                        presented as DOS hidden files. The mangled name will be created as
    36393639                        for other filenames, but with the leading dot removed and "___" as
    … …  
    36473647        do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code>
    36483648</em></span>
    3649 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2550981"></a>
     3649</p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324494"></a>
    36503650
    36513651mangle prefix (G)
    3652 </h3></div></div></div><a class="indexterm" name="id2550982"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
     3652</h3></div></div></div><a class="indexterm" name="id324495"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
    36533653        characters from the original name used when generating
    36543654        the mangled names. A larger value will give a weaker
    … …  
    36603660</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code>
    36613661</em></span>
    3662 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551047"></a>
     3662</p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324558"></a>
    36633663
    36643664mangling char (S)
    3665 </h3></div></div></div><a class="indexterm" name="id2551048"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
     3665</h3></div></div></div><a class="indexterm" name="id324559"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
    36663666        the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The
    36673667        default is a '~' but this may interfere with some software. Use this option to set
    … …  
    36703670</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code>
    36713671</em></span>
    3672 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551125"></a>
     3672</p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324632"></a>
    36733673
    36743674mangling method (G)
    3675 </h3></div></div></div><a class="indexterm" name="id2551126"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
     3675</h3></div></div></div><a class="indexterm" name="id324633"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
    36763676        the mangled names. Can take two different values, "hash" and
    36773677        "hash2". "hash" is the algorithm that was used
    … …  
    36843684</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code>
    36853685</em></span>
    3686 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551192"></a>
     3686</p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324694"></a>
    36873687
    36883688map acl inherit (S)
    3689 </h3></div></div></div><a class="indexterm" name="id2551193"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
     3689</h3></div></div></div><a class="indexterm" name="id324695"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
    36903690    access control entry flags stored in Windows ACLs into an extended attribute
    36913691    called user.SAMBA_PAI. This parameter only takes effect if Samba is being run
    … …  
    36953695    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code>
    36963696</em></span>
    3697 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551249"></a>
     3697</p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324746"></a>
    36983698
    36993699map archive (S)
    3700 </h3></div></div></div><a class="indexterm" name="id2551250"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3700</h3></div></div></div><a class="indexterm" name="id324747"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37013701        This controls whether the DOS archive attribute
    37023702        should be mapped to the UNIX owner execute bit.  The DOS archive bit
    … …  
    37113711        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code>
    37123712</em></span>
    3713 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551324"></a>
     3713</p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324815"></a>
    37143714
    37153715map hidden (S)
    3716 </h3></div></div></div><a class="indexterm" name="id2551326"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3716</h3></div></div></div><a class="indexterm" name="id324816"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37173717        This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
    37183718        </p><p>
    … …  
    37203720        bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>
    37213721        for details.
    3722         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551382"></a>
     3722        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324870"></a>
    37233723
    37243724map readonly (S)
    3725 </h3></div></div></div><a class="indexterm" name="id2551383"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3725</h3></div></div></div><a class="indexterm" name="id324871"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37263726        This controls how the DOS read only attribute should be mapped from a UNIX filesystem.
    37273727        </p><p>
    … …  
    37303730        present. If <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> is set to <code class="constant">yes</code> then this
    37313731        parameter is <span class="emphasis"><em>ignored</em></span>. This is a new parameter introduced in Samba version 3.0.21.
    3732         </p><p>The three settings are :</p><div class="itemizedlist"><ul type="disc"><li><p>
     3732        </p><p>The three settings are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>
    37333733                <code class="constant">Yes</code> - The read only DOS attribute is mapped to the inverse of the user
    37343734                or owner write bit in the unix permission mode set. If the owner write bit is not set, the
    … …  
    37383738                If the read only DOS attribute is unset, Samba simply sets the write bit of the
    37393739                owner to one.
    3740                 </p></li><li><p>
     3740                </p></li><li class="listitem"><p>
    37413741                <code class="constant">Permissions</code> - The read only DOS attribute is mapped to the effective permissions of
    37423742                the connecting user, as evaluated by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> by reading the unix permissions and POSIX ACL (if present).
    37433743                If the connecting user does not have permission to modify the file, the read only attribute
    37443744                is reported as being set on the file.
    3745                 </p></li><li><p>
     3745                </p></li><li class="listitem"><p>
    37463746                <code class="constant">No</code> - The read only DOS attribute is unaffected by permissions, and can only be set by
    37473747                the <a class="link" href="smb.conf.5.html#STOREDOSATTRIBUTES" target="_top">store dos attributes</a> method. This may be useful for exporting mounted CDs.
    37483748                </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map readonly</code></em> = <code class="literal">yes</code>
    37493749</em></span>
    3750 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551538"></a>
     3750</p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325012"></a>
    37513751
    37523752map system (S)
    3753 </h3></div></div></div><a class="indexterm" name="id2551540"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3753</h3></div></div></div><a class="indexterm" name="id325013"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37543754        This controls whether DOS style system files should be mapped to the UNIX group execute bit.
    37553755        </p><p>
    … …  
    37593759        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code>
    37603760</em></span>
    3761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551608"></a>
     3761</p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325078"></a>
    37623762
    37633763map to guest (G)
    3764 </h3></div></div></div><a class="indexterm" name="id2551609"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
     3764</h3></div></div></div><a class="indexterm" name="id325079"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
    37653765    security</a> modes other than <em class="parameter"><code>security = share</code></em>
    37663766    and <em class="parameter"><code>security = server</code></em>
    37673767    - i.e. <code class="constant">user</code>, and <code class="constant">domain</code>.</p><p>This parameter can take four different values, which tell
    37683768    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> what to do with user
    3769     login requests that don't match a valid UNIX user in some way.</p><p>The four settings are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">Never</code> - Means user login
     3769    login requests that don't match a valid UNIX user in some way.</p><p>The four settings are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">Never</code> - Means user login
    37703770            requests with an invalid password are rejected. This is the
    3771             default.</p></li><li><p><code class="constant">Bad User</code> - Means user
     3771            default.</p></li><li class="listitem"><p><code class="constant">Bad User</code> - Means user
    37723772            logins with an invalid password are rejected, unless the username
    37733773            does not exist, in which case it is treated as a guest login and
    3774             mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p></li><li><p><code class="constant">Bad Password</code> - Means user logins
     3774            mapped into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p></li><li class="listitem"><p><code class="constant">Bad Password</code> - Means user logins
    37753775            with an invalid password are treated as a guest login and mapped
    37763776            into the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>. Note that
    … …  
    37813781            that they got their password wrong. Helpdesk services will
    37823782            <span class="emphasis"><em>hate</em></span> you if you set the <em class="parameter"><code>map to
    3783             guest</code></em> parameter this way :-).</p></li><li><p><code class="constant">Bad Uid</code> - Is only applicable when Samba is configured
     3783            guest</code></em> parameter this way :-).</p></li><li class="listitem"><p><code class="constant">Bad Uid</code> - Is only applicable when Samba is configured
    37843784            in some type of domain mode security (security = {domain|ads}) and means that
    37853785            user logins which are successfully authenticated but which have no valid Unix
    … …  
    38043804</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code>
    38053805</em></span>
    3806 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551848"></a>
     3806</p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325294"></a>
    38073807
    38083808map untrusted to domain (G)
    3809 </h3></div></div></div><a class="indexterm" name="id2551849"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3809</h3></div></div></div><a class="indexterm" name="id325295"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38103810    If a client connects to smbd using an untrusted domain name, such as
    38113811    BOGUS\user, smbd replaces the BOGUS domain with it's SAM name before
    … …  
    38253825    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map untrusted to domain</code></em> = <code class="literal">no</code>
    38263826</em></span>
    3827 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2551915"></a>
     3827</p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325352"></a>
    38283828
    38293829max connections (S)
    3830 </h3></div></div></div><a class="indexterm" name="id2551916"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
     3830</h3></div></div></div><a class="indexterm" name="id325353"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
    38313831    If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections
    38323832    will be refused if this number of connections to the service are already open. A value
    … …  
    38363836</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code>
    38373837</em></span>
    3838 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552001"></a>
     3838</p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325434"></a>
    38393839
    38403840max disk size (G)
    3841 </h3></div></div></div><a class="indexterm" name="id2552002"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
     3841</h3></div></div></div><a class="indexterm" name="id325435"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
    38423842    on the apparent size of disks. If you set this option to 100
    38433843    then all shares will appear to be not larger than 100 MB in
    … …  
    38533853</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code>
    38543854</em></span>
    3855 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552093"></a>
     3855</p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325519"></a>
    38563856
    38573857max log size (G)
    3858 </h3></div></div></div><a class="indexterm" name="id2552094"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3858</h3></div></div></div><a class="indexterm" name="id325520"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38593859    This option (an integer in kilobytes) specifies the max size the log file should grow to.
    38603860    Samba periodically checks the size and if it is exceeded it will rename the file, adding
    … …  
    38653865</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code>
    38663866</em></span>
    3867 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552164"></a>
     3867</p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325587"></a>
    38683868
    38693869max mux (G)
    3870 </h3></div></div></div><a class="indexterm" name="id2552165"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
     3870</h3></div></div></div><a class="indexterm" name="id325588"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
    38713871    outstanding simultaneous SMB operations that Samba tells the client
    38723872        it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code>
    38733873</em></span>
    3874 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552207"></a>
     3874</p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325629"></a>
    38753875
    38763876max open files (G)
    3877 </h3></div></div></div><a class="indexterm" name="id2552208"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3877</h3></div></div></div><a class="indexterm" name="id325630"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    38783878    open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file
    38793879    serving process may have open for a client at any one time. The
    … …  
    38863886    this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">16404</code>
    38873887</em></span>
    3888 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552270"></a>
     3888</p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325686"></a>
    38893889
    38903890max print jobs (S)
    3891 </h3></div></div></div><a class="indexterm" name="id2552271"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3891</h3></div></div></div><a class="indexterm" name="id325687"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    38923892    jobs allowable in a Samba printer queue at any given moment.
    38933893    If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client.
    … …  
    38963896</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code>
    38973897</em></span>
    3898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552340"></a>
     3898</p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325754"></a>
    38993899
    39003900<a name="PROTOCOL"></a>protocol
    3901 </h3></div></div></div><a class="indexterm" name="id2552341"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552373"></a>
     3901</h3></div></div></div><a class="indexterm" name="id325755"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325786"></a>
    39023902
    39033903max protocol (G)
    3904 </h3></div></div></div><a class="indexterm" name="id2552374"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
    3905     protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul type="disc"><li><p><code class="constant">CORE</code>: Earliest version. No
    3906             concept of user names.</p></li><li><p><code class="constant">COREPLUS</code>: Slight improvements on
    3907             CORE for efficiency.</p></li><li><p><code class="constant">LANMAN1</code>: First <span class="emphasis"><em>
     3904</h3></div></div></div><a class="indexterm" name="id325787"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
     3905    protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">CORE</code>: Earliest version. No
     3906            concept of user names.</p></li><li class="listitem"><p><code class="constant">COREPLUS</code>: Slight improvements on
     3907            CORE for efficiency.</p></li><li class="listitem"><p><code class="constant">LANMAN1</code>: First <span class="emphasis"><em>
    39083908            modern</em></span> version of the protocol. Long filename
    3909             support.</p></li><li><p><code class="constant">LANMAN2</code>: Updates to Lanman1 protocol.</p></li><li><p><code class="constant">NT1</code>: Current up to date version of the protocol.
    3910             Used by Windows NT. Known as CIFS.</p></li><li><p><code class="constant">SMB2</code>: Re-implementation of the SMB protocol.
     3909            support.</p></li><li class="listitem"><p><code class="constant">LANMAN2</code>: Updates to Lanman1 protocol.</p></li><li class="listitem"><p><code class="constant">NT1</code>: Current up to date version of the protocol.
     3910            Used by Windows NT. Known as CIFS.</p></li><li class="listitem"><p><code class="constant">SMB2</code>: Re-implementation of the SMB protocol.
    39113911            Used by Windows Vista and newer. The Samba implementation of SMB2 is
    39123912            currently marked experimental!</p></li></ul></div><p>Normally this option should not be set as the automatic
    … …  
    39163916</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code>
    39173917</em></span>
    3918 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552510"></a>
     3918</p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325915"></a>
    39193919
    39203920max reported print jobs (S)
    3921 </h3></div></div></div><a class="indexterm" name="id2552511"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3921</h3></div></div></div><a class="indexterm" name="id325916"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39223922    This parameter limits the maximum number of jobs displayed in a port monitor for
    39233923    Samba printer queue at any given moment. If this number is exceeded, the excess
    … …  
    39283928</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code>
    39293929</em></span>
    3930 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552574"></a>
     3930</p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325974"></a>
    39313931
    39323932max smbd processes (G)
    3933 </h3></div></div></div><a class="indexterm" name="id2552575"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
     3933</h3></div></div></div><a class="indexterm" name="id325975"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
    39343934    as a stopgap to prevent degrading service to clients in the event that the server has insufficient
    39353935    resources to handle more than this number of connections.  Remember that under normal operating
    … …  
    39393939</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code>
    39403940</em></span>
    3941 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552655"></a>
     3941</p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326051"></a>
    39423942
    39433943max stat cache size (G)
    3944 </h3></div></div></div><a class="indexterm" name="id2552656"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
     3944</h3></div></div></div><a class="indexterm" name="id326052"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
    39453945          <em class="parameter"><code>stat cache</code></em> being used
    39463946          to speed up case insensitive name mappings. It represents
    … …  
    39533953</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code>
    39543954</em></span>
    3955 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552725"></a>
     3955</p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326117"></a>
    39563956
    39573957max ttl (G)
    3958 </h3></div></div></div><a class="indexterm" name="id2552726"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
     3958</h3></div></div></div><a class="indexterm" name="id326118"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
    39593959    of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is
    39603960    requesting a name using either a broadcast packet or from a WINS server. You should
    39613961        never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code>
    39623962</em></span>
    3963 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552784"></a>
     3963</p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326174"></a>
    39643964
    39653965max wins ttl (G)
    3966 </h3></div></div></div><a class="indexterm" name="id2552785"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
     3966</h3></div></div></div><a class="indexterm" name="id326175"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
    39673967        (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum
    39683968    'time to live' of NetBIOS names that <code class="literal">nmbd</code>
    … …  
    39703970        parameter.  The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code>
    39713971</em></span>
    3972 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552855"></a>
     3972</p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326243"></a>
    39733973
    39743974max xmit (G)
    3975 </h3></div></div></div><a class="indexterm" name="id2552856"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
     3975</h3></div></div></div><a class="indexterm" name="id326244"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
    39763976    that will be negotiated by Samba. The default is 16644, which
    39773977    matches the behavior of Windows 2000.  A value below 2048 is likely to cause problems.
    … …  
    39813981</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code>
    39823982</em></span>
    3983 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2552917"></a>
     3983</p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326303"></a>
    39843984
    39853985message command (G)
    3986 </h3></div></div></div><a class="indexterm" name="id2552918"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
     3986</h3></div></div></div><a class="indexterm" name="id326304"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
    39873987        server receives a WinPopup style message.</p><p>This would normally be a command that would
    39883988        deliver the message somehow. How this is to be done is
    … …  
    40004000        %u</code></em> won't work (<em class="parameter"><code>%U</code></em> may be better
    40014001        in this case).</p><p>Apart from the standard substitutions, some additional
    4002         ones apply. In particular:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%s</code></em> = the filename containing
    4003                                 the message.</p></li><li><p><em class="parameter"><code>%t</code></em> = the destination that
    4004                                 the message was sent to (probably the server name).</p></li><li><p><em class="parameter"><code>%f</code></em> = who the message
     4002        ones apply. In particular:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>%s</code></em> = the filename containing
     4003                                the message.</p></li><li class="listitem"><p><em class="parameter"><code>%t</code></em> = the destination that
     4004                                the message was sent to (probably the server name).</p></li><li class="listitem"><p><em class="parameter"><code>%f</code></em> = who the message
    40054005                                is from.</p></li></ul></div><p>You could make this command send mail, or whatever else
    40064006        takes your fancy. Please let us know of any really interesting
    … …  
    40234023</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &amp;</code>
    40244024</em></span>
    4025 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553128"></a>
     4025</p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326495"></a>
    40264026
    40274027min print space (S)
    4028 </h3></div></div></div><a class="indexterm" name="id2553129"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
     4028</h3></div></div></div><a class="indexterm" name="id326496"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
    40294029    space that must be available before a user will be able to spool
    40304030    a print job. It is specified in kilobytes. The default is 0, which
    … …  
    40334033</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code>
    40344034</em></span>
    4035 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553190"></a>
     4035</p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326554"></a>
    40364036
    40374037min protocol (G)
    4038 </h3></div></div></div><a class="indexterm" name="id2553191"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
     4038</h3></div></div></div><a class="indexterm" name="id326556"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
    40394039    lowest SMB protocol dialect than Samba will support.  Please refer
    40404040    to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a>
    … …  
    40484048</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code>
    40494049</em></span>
    4050 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553289"></a>
     4050</p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326647"></a>
    40514051
    40524052min receivefile size (G)
    4053 </h3></div></div></div><a class="indexterm" name="id2553290"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
     4053</h3></div></div></div><a class="indexterm" name="id326648"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
    40544054SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will
    40554055be passed to any underlying kernel recvfile or splice system call (if there is no such
    … …  
    40604060nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code>
    40614061</em></span>
    4062 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553358"></a>
     4062</p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326709"></a>
    40634063
    40644064min wins ttl (G)
    4065 </h3></div></div></div><a class="indexterm" name="id2553359"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
     4065</h3></div></div></div><a class="indexterm" name="id326710"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
    40664066    when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live'
    40674067    of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in
    … …  
    40694069    is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code>
    40704070</em></span>
    4071 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553429"></a>
     4071</p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326776"></a>
    40724072
    40734073msdfs proxy (S)
    4074 </h3></div></div></div><a class="indexterm" name="id2553430"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
     4074</h3></div></div></div><a class="indexterm" name="id326777"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
    40754075        stand-in for another CIFS share whose location is specified by
    40764076        the value of the parameter. When clients attempt to connect to
    … …  
    40804080        options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code>
    40814081</em></span>
    4082 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553507"></a>
     4082</p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326849"></a>
    40834083
    40844084msdfs root (S)
    4085 </h3></div></div></div><a class="indexterm" name="id2553508"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
     4085</h3></div></div></div><a class="indexterm" name="id326850"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
    40864086        share as a Dfs root and allows clients to browse the
    40874087        distributed file system tree rooted at the share directory.
    … …  
    40914091        Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code>
    40924092</em></span>
    4093 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553562"></a>
     4093</p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326902"></a>
    40944094
    40954095name cache timeout (G)
    4096 </h3></div></div></div><a class="indexterm" name="id2553563"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
     4096</h3></div></div></div><a class="indexterm" name="id326903"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
    40974097    entries in samba's hostname resolve cache time out. If
    40984098    the timeout is set to 0. the caching is disabled.
    … …  
    41014101</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code>
    41024102</em></span>
    4103 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553623"></a>
     4103</p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326961"></a>
    41044104
    41054105name resolve order (G)
    4106 </h3></div></div></div><a class="indexterm" name="id2553624"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
     4106</h3></div></div></div><a class="indexterm" name="id326962"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
    41074107    suite to determine what naming services to use and in what order
    41084108    to resolve host names to IP addresses. Its main purpose to is to
    … …  
    41104110    separated string of name resolution options.</p><p>The options are: "lmhosts", "host",
    41114111    "wins" and "bcast". They cause names to be
    4112     resolved as follows:</p><div class="itemizedlist"><ul type="disc"><li><p>
     4112    resolved as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>
    41134113                <code class="constant">lmhosts</code> : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has
    41144114            no name type attached to the NetBIOS name (see the manpage for lmhosts for details) then
    41154115            any name type matches for lookup.
    4116                 </p></li><li><p>
     4116                </p></li><li class="listitem"><p>
    41174117                <code class="constant">host</code> : Do a standard host name to IP address resolution, using the system
    41184118                <code class="filename">/etc/hosts </code>, NIS, or DNS lookups. This method of name resolution is
    … …  
    41214121                useful for active directory domains and results in a DNS query for the SRV RR entry matching
    41224122                _ldap._tcp.domain.
    4123         </p></li><li><p><code class="constant">wins</code> : Query a name with
     4123        </p></li><li class="listitem"><p><code class="constant">wins</code> : Query a name with
    41244124            the IP address listed in the <a class="link" href="smb.conf.5.html#WINSSERVER" target="_top">WINSSERVER</a> parameter.  If no WINS server has
    4125             been specified this method will be ignored.</p></li><li><p><code class="constant">bcast</code> : Do a broadcast on
     4125            been specified this method will be ignored.</p></li><li class="listitem"><p><code class="constant">bcast</code> : Do a broadcast on
    41264126            each of the known local interfaces listed in the <a class="link" href="smb.conf.5.html#INTERFACES" target="_top">interfaces</a>
    41274127            parameter. This is the least reliable of the name resolution
    … …  
    41354135</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code>
    41364136</em></span>
    4137 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553831"></a>
     4137</p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327146"></a>
    41384138
    41394139netbios aliases (G)
    4140 </h3></div></div></div><a class="indexterm" name="id2553832"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
     4140</h3></div></div></div><a class="indexterm" name="id327147"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
    41414141        advertise as additional names by which the Samba server is known. This allows one machine
    41424142        to appear in browse lists under multiple names. If a machine is acting as a browse server
    … …  
    41484148</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code>
    41494149</em></span>
    4150 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553897"></a>
     4150</p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327207"></a>
    41514151
    41524152netbios name (G)
    4153 </h3></div></div></div><a class="indexterm" name="id2553898"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4153</h3></div></div></div><a class="indexterm" name="id327208"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41544154                This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component
    41554155                of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of
    … …  
    41644164</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code>
    41654165</em></span>
    4166 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2553978"></a>
     4166</p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327284"></a>
    41674167
    41684168netbios scope (G)
    4169 </h3></div></div></div><a class="indexterm" name="id2553979"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
     4169</h3></div></div></div><a class="indexterm" name="id327285"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
    41704170        operate under. This should not be set unless every machine
    41714171        on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code>
    41724172</em></span>
    4173 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554021"></a>
     4173</p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327324"></a>
    41744174
    41754175nis homedir (G)
    4176 </h3></div></div></div><a class="indexterm" name="id2554022"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
     4176</h3></div></div></div><a class="indexterm" name="id327326"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
    41774177        UNIX systems that use an automounter, the user's home directory
    41784178        will often be mounted on a workstation on demand from a remote
    … …  
    41934193        be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code>
    41944194</em></span>
    4195 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554101"></a>
     4195</p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327395"></a>
    41964196
    41974197nmbd bind explicit broadcast (G)
    4198 </h3></div></div></div><a class="indexterm" name="id2554102"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4198</h3></div></div></div><a class="indexterm" name="id327396"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41994199        This option causes <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to explicitly bind to the
    42004200        broadcast address of the local subnets. This is needed to make nmbd
    … …  
    42034203        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nmbd bind explicit broadcast</code></em> = <code class="literal">yes</code>
    42044204</em></span>
    4205 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554168"></a>
     4205</p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327457"></a>
    42064206
    42074207nt acl support (S)
    4208 </h3></div></div></div><a class="indexterm" name="id2554169"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
     4208</h3></div></div></div><a class="indexterm" name="id327458"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
    42094209    UNIX permissions into Windows NT access control lists.  The UNIX
    42104210    permissions considered are the the traditional UNIX owner and
    … …  
    42134213    releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code>
    42144214</em></span>
    4215 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554222"></a>
     4215</p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327509"></a>
    42164216
    42174217ntlm auth (G)
    4218 </h3></div></div></div><a class="indexterm" name="id2554224"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     4218</h3></div></div></div><a class="indexterm" name="id327510"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    42194219    authenticate users using the NTLM encrypted password response.
    42204220    If disabled, either the lanman password hash or an NTLMv2 response
    … …  
    42244224        special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code>
    42254225</em></span>
    4226 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554286"></a>
     4226</p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327569"></a>
    42274227
    42284228nt pipe support (G)
    4229 </h3></div></div></div><a class="indexterm" name="id2554288"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
     4229</h3></div></div></div><a class="indexterm" name="id327570"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
    42304230    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT
    42314231    clients to connect to the NT SMB specific <code class="constant">IPC$</code>
    … …  
    42334233        alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code>
    42344234</em></span>
    4235 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554342"></a>
     4235</p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327622"></a>
    42364236
    42374237nt status support (G)
    4238 </h3></div></div></div><a class="indexterm" name="id2554343"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
     4238</h3></div></div></div><a class="indexterm" name="id327624"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
    42394239    support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone.
    42404240    If this option is set to <code class="constant">no</code> then Samba offers
    … …  
    42424242    reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code>
    42434243</em></span>
    4244 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554404"></a>
     4244</p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327681"></a>
    42454245
    42464246null passwords (G)
    4247 </h3></div></div></div><a class="indexterm" name="id2554405"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
    4248 </em></span>
    4249 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554457"></a>
     4247</h3></div></div></div><a class="indexterm" name="id327682"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
     4248</em></span>
     4249</p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327733"></a>
    42504250
    42514251obey pam restrictions (G)
    4252 </h3></div></div></div><a class="indexterm" name="id2554458"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
     4252</h3></div></div></div><a class="indexterm" name="id327734"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
    42534253    (i.e. --with-pam), this parameter will control whether or not Samba
    42544254    should obey PAM's account and session management directives.  The
    … …  
    42604260</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code>
    42614261</em></span>
    4262 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554522"></a>
     4262</p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327790"></a>
    42634263
    42644264only user (S)
    4265 </h3></div></div></div><a class="indexterm" name="id2554523"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
     4265</h3></div></div></div><a class="indexterm" name="id327791"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
    42664266    connections with usernames not in the <em class="parameter"><code>user</code></em>
    42674267    list will be allowed. By default this option is disabled so that a
    … …  
    42764276    name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code>
    42774277</em></span>
    4278 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554611"></a>
     4278</p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327873"></a>
    42794279
    42804280oplock break wait time (G)
    4281 </h3></div></div></div><a class="indexterm" name="id2554612"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4281</h3></div></div></div><a class="indexterm" name="id327874"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42824282        This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too
    42834283        quickly when that client issues an SMB that can cause an oplock break request, then the network client can
    42844284        fail and not respond to the break request. This tuning parameter (which is set in milliseconds) is the amount
    42854285        of time Samba will wait before sending an oplock break request to such (broken) clients.
    4286         </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
     4286        </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
    42874287        DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.
    42884288        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code>
    42894289</em></span>
    4290 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554666"></a>
     4290</p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327922"></a>
    42914291
    42924292oplock contention limit (S)
    4293 </h3></div></div></div><a class="indexterm" name="id2554667"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4293</h3></div></div></div><a class="indexterm" name="id327923"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42944294        This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the
    42954295        granting of oplocks under multiple client contention for the same file.
    … …  
    42994299        limit. This causes <code class="literal">smbd</code> to behave in a similar
    43004300        way to Windows NT.
    4301         </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
     4301        </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>
    43024302        DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.
    43034303        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code>
    43044304</em></span>
    4305 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554748"></a>
     4305</p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328000"></a>
    43064306
    43074307oplocks (S)
    4308 </h3></div></div></div><a class="indexterm" name="id2554749"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4308</h3></div></div></div><a class="indexterm" name="id328001"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43094309        This boolean option tells <code class="literal">smbd</code> whether to
    43104310        issue oplocks (opportunistic locks) to file open requests on this
    … …  
    43234323        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code>
    43244324</em></span>
    4325 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554834"></a>
     4325</p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328077"></a>
    43264326
    43274327os2 driver map (G)
    4328 </h3></div></div></div><a class="indexterm" name="id2554835"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
     4328</h3></div></div></div><a class="indexterm" name="id328078"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
    43294329    path to a file containing a mapping of Windows NT printer driver
    43304330    names to OS/2 printer driver names.  The format is:</p><p>&lt;nt driver name&gt; = &lt;os2 driver name&gt;.&lt;device name&gt;</p><p>For example, a valid entry using the HP LaserJet 5
    … …  
    43364336    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code>
    43374337</em></span>
    4338 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2554901"></a>
     4338</p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328137"></a>
    43394339
    43404340os level (G)
    4341 </h3></div></div></div><a class="indexterm" name="id2554902"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4341</h3></div></div></div><a class="indexterm" name="id328138"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43424342        This integer value controls what level Samba advertises itself as for browse elections. The value of this
    43434343        parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area.
    … …  
    43554355</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code>
    43564356</em></span>
    4357 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555010"></a>
     4357</p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328235"></a>
    43584358
    43594359pam password change (G)
    4360 </h3></div></div></div><a class="indexterm" name="id2555011"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
     4360</h3></div></div></div><a class="indexterm" name="id328236"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
    43614361    this parameter, it is possible to use PAM's password change control
    43624362    flag for Samba.  If enabled, then PAM will be used for password
    … …  
    43664366    <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code>
    43674367</em></span>
    4368 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555082"></a>
     4368</p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328302"></a>
    43694369
    43704370panic action (G)
    4371 </h3></div></div></div><a class="indexterm" name="id2555083"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
     4371</h3></div></div></div><a class="indexterm" name="id328303"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
    43724372        system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>      crashes. This is usually used to
    43734373        draw attention to the fact that a problem occurred.
    … …  
    43764376</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code>
    43774377</em></span>
    4378 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555158"></a>
     4378</p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328376"></a>
    43794379
    43804380paranoid server security (G)
    4381 </h3></div></div></div><a class="indexterm" name="id2555159"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
     4381</h3></div></div></div><a class="indexterm" name="id328377"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
    43824382    users with a bad passowrd. When this option is enabled, samba will not
    43834383    use a broken NT 4.x server as password server, but instead complain
    … …  
    43874387    bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code>
    43884388</em></span>
    4389 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555209"></a>
     4389</p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328424"></a>
    43904390
    43914391passdb backend (G)
    4392 </h3></div></div></div><a class="indexterm" name="id2555210"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
     4392</h3></div></div></div><a class="indexterm" name="id328425"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
    43934393    will be used for storing user and possibly group information.  This allows
    43944394    you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location'
    43954395    string that has meaning only to that particular backed.  These are separated
    43964396    by a : character.</p><p>Available backends can include:
    4397         </p><div class="itemizedlist"><ul type="disc"><li><p><code class="literal">smbpasswd</code> - The old plaintext passdb
     4397        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="literal">smbpasswd</code> - The old plaintext passdb
    43984398                backend. Some Samba features will not work if this passdb
    43994399                backend is used. Takes a path to the smbpasswd file as an
    44004400                optional argument.
    4401                 </p></li><li><p><code class="literal">tdbsam</code> - The TDB based password storage
     4401                </p></li><li class="listitem"><p><code class="literal">tdbsam</code> - The TDB based password storage
    44024402                backend.  Takes a path to the TDB as an optional argument (defaults to passdb.tdb
    4403                 in the <a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a> directory.</p></li><li><p><code class="literal">ldapsam</code> - The LDAP based passdb
     4403                in the <a class="link" href="smb.conf.5.html#PRIVATEDIR" target="_top">private dir</a> directory.</p></li><li class="listitem"><p><code class="literal">ldapsam</code> - The LDAP based passdb
    44044404                backend.  Takes an LDAP URL as an optional argument (defaults to
    44054405                <code class="literal">ldap://localhost</code>)</p><p>LDAP connections should be secured where possible.  This may be done using either
    … …  
    44254425</pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">tdbsam</code>
    44264426</em></span>
    4427 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555368"></a>
     4427</p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328568"></a>
    44284428
    44294429passdb expand explicit (G)
    4430 </h3></div></div></div><a class="indexterm" name="id2555369"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4430</h3></div></div></div><a class="indexterm" name="id328569"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44314431        This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We
    44324432        used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable
    … …  
    44344434    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code>
    44354435</em></span>
    4436 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555415"></a>
     4436</p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328610"></a>
    44374437
    44384438passwd chat debug (G)
    4439 </h3></div></div></div><a class="indexterm" name="id2555416"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
     4439</h3></div></div></div><a class="indexterm" name="id328611"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
    44404440    parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
    44414441    strings passed to and received from the passwd chat are printed
    … …  
    44504450        parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code>
    44514451</em></span>
    4452 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555518"></a>
     4452</p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328707"></a>
    44534453
    44544454passwd chat timeout (G)
    4455 </h3></div></div></div><a class="indexterm" name="id2555519"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
     4455</h3></div></div></div><a class="indexterm" name="id328708"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
    44564456    answer from a passwd chat script being run. Once the initial answer is received
    44574457    the subsequent answers must be received in one tenth of this time. The default it
    44584458    two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code>
    44594459</em></span>
    4460 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555563"></a>
     4460</p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328750"></a>
    44614461
    44624462passwd chat (G)
    4463 </h3></div></div></div><a class="indexterm" name="id2555564"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
     4463</h3></div></div></div><a class="indexterm" name="id328751"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
    44644464    conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing
    44654465    program to change the user's password. The string describes a
    … …  
    44924492</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code>
    44934493</em></span>
    4494 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555769"></a>
     4494</p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328933"></a>
    44954495
    44964496passwd program (G)
    4497 </h3></div></div></div><a class="indexterm" name="id2555770"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
     4497</h3></div></div></div><a class="indexterm" name="id328934"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
    44984498    UNIX user passwords.  Any occurrences of <em class="parameter"><code>%u</code></em>
    44994499    will be replaced with the user name. The user name is checked for
    … …  
    45164516</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code>
    45174517</em></span>
    4518 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2555904"></a>
     4518</p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329059"></a>
    45194519
    45204520password level (G)
    4521 </h3></div></div></div><a class="indexterm" name="id2555905"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
     4521</h3></div></div></div><a class="indexterm" name="id329060"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
    45224522    with mixed-case passwords.  One offending client is Windows for
    45234523    Workgroups, which for some reason forces passwords to upper
    … …  
    45414541</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code>
    45424542</em></span>
    4543 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556041"></a>
     4543</p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329182"></a>
    45444544
    45454545password server (G)
    4546 </h3></div></div></div><a class="indexterm" name="id2556042"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
     4546</h3></div></div></div><a class="indexterm" name="id329183"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
    45474547    or Active Directory domain controller with this option,
    45484548    and using <code class="literal">security = [ads|domain|server]</code>
    … …  
    45594559    by any method and order described in that parameter.</p><p>The password server must be a machine capable of using
    45604560    the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in
    4561     user level security mode.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Using a password server  means your UNIX box (running
     4561    user level security mode.</p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Using a password server  means your UNIX box (running
    45624562    Samba) is only as secure as your  password server. <span class="emphasis"><em>DO NOT
    45634563    CHOOSE A PASSWORD SERVER THAT  YOU DON'T COMPLETELY TRUST</em></span>.
    … …  
    45884588    set to <code class="constant">server</code>, then there are different
    45894589    restrictions that <code class="literal">security = domain</code> doesn't
    4590     suffer from:</p><div class="itemizedlist"><ul type="disc"><li><p>You may list several password servers in
     4590    suffer from:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>You may list several password servers in
    45914591            the <em class="parameter"><code>password server</code></em> parameter, however if an
    45924592            <code class="literal">smbd</code> makes a connection to a password server,
    … …  
    45944594            to be authenticated from this <code class="literal">smbd</code>.  This is a
    45954595            restriction of the SMB/CIFS protocol when in <code class="literal">security = server
    4596             </code> mode and cannot be fixed in Samba.</p></li><li><p>If you are using a Windows NT server as your
     4596            </code> mode and cannot be fixed in Samba.</p></li><li class="listitem"><p>If you are using a Windows NT server as your
    45974597            password server then you will have to ensure that your users
    45984598            are able to login from the Samba server, as when in <code class="literal">
    … …  
    46044604</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code>
    46054605</em></span>
    4606 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556339"></a>
     4606</p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329447"></a>
    46074607
    46084608<a name="DIRECTORY"></a>directory
    4609 </h3></div></div></div><a class="indexterm" name="id2556340"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556370"></a>
     4609</h3></div></div></div><a class="indexterm" name="id329448"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329478"></a>
    46104610
    46114611path (S)
    4612 </h3></div></div></div><a class="indexterm" name="id2556371"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
     4612</h3></div></div></div><a class="indexterm" name="id329479"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
    46134613        the user of the service is to be given access. In the case of
    46144614        printable services, this is where print data will spool prior to
    … …  
    46274627</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code>
    46284628</em></span>
    4629 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556474"></a>
     4629</p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329575"></a>
    46304630
    46314631perfcount module (G)
    4632 </h3></div></div></div><a class="indexterm" name="id2556476"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
     4632</h3></div></div></div><a class="indexterm" name="id329576"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
    46334633        operations.  Only one perfcount module may be used, and it must implement all of the
    46344634        apis contained in the smb_perfcount_handler structure defined in smb.h.
    4635         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556508"></a>
     4635        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329606"></a>
    46364636
    46374637pid directory (G)
    4638 </h3></div></div></div><a class="indexterm" name="id2556509"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4638</h3></div></div></div><a class="indexterm" name="id329607"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46394639        This option specifies the directory where pid files will be placed. 
    46404640        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code>
    … …  
    46424642</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code>
    46434643</em></span>
    4644 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556568"></a>
     4644</p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329663"></a>
    46454645
    46464646posix locking (S)
    4647 </h3></div></div></div><a class="indexterm" name="id2556569"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4647</h3></div></div></div><a class="indexterm" name="id329664"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46484648        The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    46494649        daemon maintains an database of file locks obtained by SMB clients. The default behavior is
    … …  
    46534653        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code>
    46544654</em></span>
    4655 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556623"></a>
     4655</p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329715"></a>
    46564656
    46574657postexec (S)
    4658 </h3></div></div></div><a class="indexterm" name="id2556624"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
     4658</h3></div></div></div><a class="indexterm" name="id329716"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
    46594659        whenever the service is disconnected. It takes the usual
    46604660        substitutions. The command may be run as the root on some
    … …  
    46644664</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    46654665</em></span>
    4666 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556696"></a>
     4666</p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329784"></a>
    46674667
    46684668preexec close (S)
    4669 </h3></div></div></div><a class="indexterm" name="id2556697"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4669</h3></div></div></div><a class="indexterm" name="id329785"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46704670        This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a>
    46714671        should close the service being connected to.
    46724672        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code>
    46734673</em></span>
    4674 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556751"></a>
     4674</p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329837"></a>
    46754675
    46764676<a name="EXEC"></a>exec
    4677 </h3></div></div></div><a class="indexterm" name="id2556752"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556783"></a>
     4677</h3></div></div></div><a class="indexterm" name="id329838"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329868"></a>
    46784678
    46794679preexec (S)
    4680 </h3></div></div></div><a class="indexterm" name="id2556784"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
     4680</h3></div></div></div><a class="indexterm" name="id329869"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
    46814681        the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome
    46824682        message every time they log in. Maybe a message of the day? Here
    … …  
    46904690</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    46914691</em></span>
    4692 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556891"></a>
     4692</p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id329970"></a>
    46934693
    46944694<a name="PREFEREDMASTER"></a>prefered master
    4695 </h3></div></div></div><a class="indexterm" name="id2556892"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2556924"></a>
     4695</h3></div></div></div><a class="indexterm" name="id329971"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330002"></a>
    46964696
    46974697preferred master (G)
    4698 </h3></div></div></div><a class="indexterm" name="id2556926"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4698</h3></div></div></div><a class="indexterm" name="id330003"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46994699        This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser  for its workgroup.
    47004700        </p><p>
    … …  
    47104710        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code>
    47114711</em></span>
    4712 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557017"></a>
     4712</p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330088"></a>
    47134713
    47144714preload modules (G)
    4715 </h3></div></div></div><a class="indexterm" name="id2557018"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
     4715</h3></div></div></div><a class="indexterm" name="id330089"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
    47164716        be loaded into smbd before a client connects. This improves
    47174717        the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code>
    … …  
    47194719</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code>
    47204720</em></span>
    4721 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557078"></a>
     4721</p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330146"></a>
    47224722
    47234723<a name="AUTOSERVICES"></a>auto services
    4724 </h3></div></div></div><a class="indexterm" name="id2557079"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557111"></a>
     4724</h3></div></div></div><a class="indexterm" name="id330148"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330178"></a>
    47254725
    47264726preload (G)
    4727 </h3></div></div></div><a class="indexterm" name="id2557112"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
     4727</h3></div></div></div><a class="indexterm" name="id330179"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
    47284728        automatically added to the browse lists. This is most useful
    47294729        for homes and printers services that would otherwise not be
    … …  
    47364736</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code>
    47374737</em></span>
    4738 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557189"></a>
     4738</p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330252"></a>
    47394739
    47404740preserve case (S)
    4741 </h3></div></div></div><a class="indexterm" name="id2557190"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4741</h3></div></div></div><a class="indexterm" name="id330253"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47424742        This controls if new filenames are created with the case that the client passes, or if
    47434743        they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
    … …  
    47464746        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code>
    47474747</em></span>
    4748 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557256"></a>
     4748</p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330315"></a>
    47494749
    47504750<a name="PRINTOK"></a>print ok
    4751 </h3></div></div></div><a class="indexterm" name="id2557257"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557287"></a>
     4751</h3></div></div></div><a class="indexterm" name="id330316"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330347"></a>
    47524752
    47534753printable (S)
    4754 </h3></div></div></div><a class="indexterm" name="id2557288"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
     4754</h3></div></div></div><a class="indexterm" name="id330348"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
    47554755    clients may open, write to and submit spool files on the directory
    47564756    specified for the service. </p><p>Note that a printable service will ALWAYS allow writing
    … …  
    47594759    the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code>
    47604760</em></span>
    4761 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557350"></a>
     4761</p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330407"></a>
    47624762
    47634763printcap cache time (G)
    4764 </h3></div></div></div><a class="indexterm" name="id2557351"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
     4764</h3></div></div></div><a class="indexterm" name="id330408"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
    47654765    subsystem is again asked for the known printers.  If the value
    47664766    is greater than 60 the initial waiting time is set to 60 seconds
    … …  
    47724772</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code>
    47734773</em></span>
    4774 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557419"></a>
     4774</p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330472"></a>
    47754775
    47764776<a name="PRINTCAP"></a>printcap
    4777 </h3></div></div></div><a class="indexterm" name="id2557420"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557452"></a>
     4777</h3></div></div></div><a class="indexterm" name="id330473"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330504"></a>
    47784778
    47794779printcap name (G)
    4780 </h3></div></div></div><a class="indexterm" name="id2557453"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4780</h3></div></div></div><a class="indexterm" name="id330505"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47814781        This parameter may be used to override the compiled-in default printcap name used by the server (usually
    47824782        <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this.
    … …  
    48064806    where the '|' separates aliases of a printer. The fact that the second alias has a space in
    48074807        it gives a hint to Samba that it's a comment.
    4808         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     4808        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    48094809        Under AIX the default printcap name is <code class="filename">/etc/qconfig</code>. Samba will
    48104810        assume the file is in AIX <code class="filename">qconfig</code> format if the string <code class="filename">qconfig</code> appears in the printcap filename.
    … …  
    48134813</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code>
    48144814</em></span>
    4815 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557636"></a>
     4815</p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330675"></a>
    48164816
    48174817print command (S)
    4818 </h3></div></div></div><a class="indexterm" name="id2557637"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
     4818</h3></div></div></div><a class="indexterm" name="id330676"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
    48194819    a service, this command will be used via a <code class="literal">system()</code>
    48204820    call to process the spool file. Typically the command specified will
    … …  
    48584858        set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code>
    48594859</em></span>
    4860 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557906"></a>
     4860</p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330918"></a>
    48614861
    48624862printer admin (S)
    4863 </h3></div></div></div><a class="indexterm" name="id2557907"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4863</h3></div></div></div><a class="indexterm" name="id330919"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48644864        This lists users who can do anything to printers
    48654865        via the remote administration interfaces offered
    … …  
    48774877</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code>
    48784878</em></span>
    4879 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2557975"></a>
     4879</p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id330982"></a>
    48804880
    48814881<a name="PRINTER"></a>printer
    4882 </h3></div></div></div><a class="indexterm" name="id2557976"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558007"></a>
     4882</h3></div></div></div><a class="indexterm" name="id330983"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331012"></a>
    48834883
    48844884printer name (S)
    4885 </h3></div></div></div><a class="indexterm" name="id2558008"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4885</h3></div></div></div><a class="indexterm" name="id331014"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48864886        This parameter specifies the name of the printer to which print jobs spooled through a printable service
    48874887        will be sent.
    … …  
    48964896</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code>
    48974897</em></span>
    4898 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558094"></a>
     4898</p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331096"></a>
    48994899
    49004900printing (S)
    4901 </h3></div></div></div><a class="indexterm" name="id2558096"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
     4901</h3></div></div></div><a class="indexterm" name="id331097"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
    49024902    interpreted on your system. It also affects the  default values for
    49034903    the <em class="parameter"><code>print command</code></em>,  <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and  <em class="parameter"><code>lprm command</code></em> if specified in the
    … …  
    49164916<code class="literal">testparm -v.</code></code>
    49174917</em></span>
    4918 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558248"></a>
     4918</p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331242"></a>
    49194919
    49204920printjob username (S)
    4921 </h3></div></div></div><a class="indexterm" name="id2558249"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
     4921</h3></div></div></div><a class="indexterm" name="id331243"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
    49224922    passed to the printing system. Usually, the username is sent,
    49234923    but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code>
    … …  
    49254925</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code>
    49264926</em></span>
    4927 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558309"></a>
     4927</p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331301"></a>
    49284928
    49294929private dir (G)
    4930 </h3></div></div></div><a class="indexterm" name="id2558310"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
     4930</h3></div></div></div><a class="indexterm" name="id331302"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
    49314931    smbd will use for storing such files as <code class="filename">smbpasswd</code>
    49324932    and <code class="filename">secrets.tdb</code>.
    49334933</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code>
    49344934</em></span>
    4935 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558363"></a>
     4935</p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331354"></a>
    49364936
    49374937profile acls (S)
    4938 </h3></div></div></div><a class="indexterm" name="id2558364"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4938</h3></div></div></div><a class="indexterm" name="id331355"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49394939        This boolean parameter was added to fix the problems that people have been
    49404940        having with storing user profiles on Samba shares from Windows 2000 or
    … …  
    49644964        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code>
    49654965</em></span>
    4966 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558436"></a>
     4966</p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331414"></a>
    49674967
    49684968queuepause command (S)
    4969 </h3></div></div></div><a class="indexterm" name="id2558437"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4969</h3></div></div></div><a class="indexterm" name="id331415"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    49704970    executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
    49714971    a printer name as its only parameter and stops the printer queue,
    … …  
    49784978        server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code>
    49794979</em></span>
    4980 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558513"></a>
     4980</p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331485"></a>
    49814981
    49824982queueresume command (S)
    4983 </h3></div></div></div><a class="indexterm" name="id2558514"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4983</h3></div></div></div><a class="indexterm" name="id331486"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    49844984    executed on the server host in order to resume the printer queue. It
    49854985    is the command to undo the behavior that is caused by the
    … …  
    49964996</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code>
    49974997</em></span>
    4998 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558616"></a>
     4998</p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331579"></a>
    49994999
    50005000read list (S)
    5001 </h3></div></div></div><a class="indexterm" name="id2558617"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5001</h3></div></div></div><a class="indexterm" name="id331580"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50025002        This is a list of users that are given read-only access to a service. If the connecting user is in this list
    50035003        then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set
    … …  
    50095009</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code>
    50105010</em></span>
    5011 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558715"></a>
     5011</p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331673"></a>
    50125012
    50135013read only (S)
    5014 </h3></div></div></div><a class="indexterm" name="id2558716"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
     5014</h3></div></div></div><a class="indexterm" name="id331674"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
    50155015    of a service may not create or modify files in the service's
    50165016    directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>)
    … …  
    50185018    (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code>
    50195019</em></span>
    5020 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558792"></a>
     5020</p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331746"></a>
    50215021
    50225022read raw (G)
    5023 </h3></div></div></div><a class="indexterm" name="id2558793"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     5023</h3></div></div></div><a class="indexterm" name="id331747"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    50245024    will support the raw read SMB requests when transferring data
    50255025    to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in
    … …  
    50305030        tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code>
    50315031</em></span>
    5032 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558852"></a>
     5032</p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331801"></a>
    50335033
    50345034realm (G)
    5035 </h3></div></div></div><a class="indexterm" name="id2558854"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
     5035</h3></div></div></div><a class="indexterm" name="id331802"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
    50365036        used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It
    50375037        is usually set to the DNS name of the kerberos server.
    … …  
    50405040</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code>
    50415041</em></span>
    5042 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2558917"></a>
     5042</p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331864"></a>
    50435043
    50445044registry shares (G)
    5045 </h3></div></div></div><a class="indexterm" name="id2558918"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5045</h3></div></div></div><a class="indexterm" name="id331865"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50465046        This turns on or off support for share definitions read from
    50475047        registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take
    … …  
    50585058</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code>
    50595059</em></span>
    5060 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559004"></a>
     5060</p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331947"></a>
    50615061
    50625062remote announce (G)
    5063 </h3></div></div></div><a class="indexterm" name="id2559005"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5063</h3></div></div></div><a class="indexterm" name="id331948"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50645064        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself
    50655065        to arbitrary IP addresses with an arbitrary workgroup name.
    … …  
    50855085        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code>
    50865086</em></span>
    5087 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559109"></a>
     5087</p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332043"></a>
    50885088
    50895089remote browse sync (G)
    5090 </h3></div></div></div><a class="indexterm" name="id2559110"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5090</h3></div></div></div><a class="indexterm" name="id332044"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50915091        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
    50925092        synchronization of browse lists with the master browser of a Samba
    … …  
    51205120        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code>
    51215121</em></span>
    5122 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559222"></a>
     5122</p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332143"></a>
    51235123
    51245124rename user script (G)
    5125 </h3></div></div></div><a class="indexterm" name="id2559223"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5125</h3></div></div></div><a class="indexterm" name="id332144"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51265126        This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below.
    51275127        </p><p>
    … …  
    51305130        <code class="literal">%unew</code>, will be substituted with the old and new usernames, respectively.  The script should
    51315131        return 0 upon successful completion, and nonzero otherwise.
    5132         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     5132        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    51335133        The script has all responsibility to rename all the necessary data that is accessible in this posix method.
    51345134        This can mean different requirements for different backends.  The tdbsam and smbpasswd backends will take care
    … …  
    51415141        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code>
    51425142</em></span>
    5143 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559312"></a>
     5143</p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332222"></a>
    51445144
    51455145reset on zero vc (G)
    5146 </h3></div></div></div><a class="indexterm" name="id2559313"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5146</h3></div></div></div><a class="indexterm" name="id332224"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51475147        This boolean option controls whether an incoming session setup
    51485148        should kill other connections coming from the same IP. This matches
    … …  
    51635163        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code>
    51645164</em></span>
    5165 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559365"></a>
     5165</p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332269"></a>
    51665166
    51675167restrict anonymous (G)
    5168 </h3></div></div></div><a class="indexterm" name="id2559366"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
     5168</h3></div></div></div><a class="indexterm" name="id332270"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
    51695169    group list information is returned for an anonymous connection.
    51705170    and mirrors the effects of the
    … …  
    51845184    as user and group list information can be obtained using other
    51855185        means.
    5186         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
     5186        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>
    51875187    The security advantage of using restrict anonymous = 2 is removed
    51885188    by setting <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a> on any share.
    51895189        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code>
    51905190</em></span>
    5191 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559449"></a>
     5191</p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332342"></a>
    51925192
    51935193<a name="ROOT"></a>root
    5194 </h3></div></div></div><a class="indexterm" name="id2559450"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559482"></a>
     5194</h3></div></div></div><a class="indexterm" name="id332343"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332375"></a>
    51955195
    51965196<a name="ROOTDIR"></a>root dir
    5197 </h3></div></div></div><a class="indexterm" name="id2559483"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559514"></a>
     5197</h3></div></div></div><a class="indexterm" name="id332376"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332405"></a>
    51985198
    51995199root directory (G)
    5200 </h3></div></div></div><a class="indexterm" name="id2559515"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
     5200</h3></div></div></div><a class="indexterm" name="id332406"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
    52015201    Change its root directory) to this directory on startup. This is
    52025202    not strictly necessary for secure operation. Even without it the
    … …  
    52215221</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code>
    52225222</em></span>
    5223 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559638"></a>
     5223</p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332518"></a>
    52245224
    52255225root postexec (S)
    5226 </h3></div></div></div><a class="indexterm" name="id2559639"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5226</h3></div></div></div><a class="indexterm" name="id332519"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52275227        This is the same as the <em class="parameter"><code>postexec</code></em>
    52285228        parameter except that the command is run as root. This is useful for
    … …  
    52305230        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code>
    52315231</em></span>
    5232 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559686"></a>
     5232</p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332565"></a>
    52335233
    52345234root preexec close (S)
    5235 </h3></div></div></div><a class="indexterm" name="id2559687"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
     5235</h3></div></div></div><a class="indexterm" name="id332566"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
    52365236        </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code>
    52375237</em></span>
    5238 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559735"></a>
     5238</p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332612"></a>
    52395239
    52405240root preexec (S)
    5241 </h3></div></div></div><a class="indexterm" name="id2559736"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5241</h3></div></div></div><a class="indexterm" name="id332613"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52425242        This is the same as the <em class="parameter"><code>preexec</code></em>
    52435243        parameter except that the command is run as root. This is useful for
    … …  
    52455245        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code>
    52465246</em></span>
    5247 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559783"></a>
     5247</p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332659"></a>
    52485248
    52495249security mask (S)
    5250 </h3></div></div></div><a class="indexterm" name="id2559784"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5250</h3></div></div></div><a class="indexterm" name="id332660"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52515251        This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    52525252        UNIX permission on a file using the native NT security dialog box.
    … …  
    52675267</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code>
    52685268</em></span>
    5269 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2559889"></a>
     5269</p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332755"></a>
    52705270
    52715271security (G)
    5272 </h3></div></div></div><a class="indexterm" name="id2559890"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
     5272</h3></div></div></div><a class="indexterm" name="id332756"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
    52735273    Samba and is one of the most important settings in the <code class="filename">
    52745274    smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to
    … …  
    53095309    techniques to determine the correct UNIX user to use on behalf
    53105310    of the client.</p><p>A list of possible UNIX usernames to match with the given
    5311     client password is constructed using the following methods :</p><div class="itemizedlist"><ul type="disc"><li><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> parameter is set, then all the other
     5311    client password is constructed using the following methods :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>If the <a class="link" href="smb.conf.5.html#GUESTONLY" target="_top">guest only</a> parameter is set, then all the other
    53125312            stages are missed and only the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a> username is checked.
    5313             </p></li><li><p>Is a username is sent with the share connection
     5313            </p></li><li class="listitem"><p>Is a username is sent with the share connection
    53145314            request, then this username (after mapping - see <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a>),
    53155315            is added as a potential username.
    5316             </p></li><li><p>If the client did a previous <span class="emphasis"><em>logon
     5316            </p></li><li class="listitem"><p>If the client did a previous <span class="emphasis"><em>logon
    53175317            </em></span> request (the SessionSetup SMB call) then the
    53185318            username sent in this SMB will be added as a potential username.
    5319             </p></li><li><p>The name of the service the client requested is
     5319            </p></li><li class="listitem"><p>The name of the service the client requested is
    53205320            added as a potential username.
    5321             </p></li><li><p>The NetBIOS name of the client is added to
     5321            </p></li><li class="listitem"><p>The NetBIOS name of the client is added to
    53225322            the list as a potential username.
    5323             </p></li><li><p>Any users on the <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> list are added as potential usernames.
     5323            </p></li><li class="listitem"><p>Any users on the <a class="link" href="smb.conf.5.html#USER" target="_top">user</a> list are added as potential usernames.
    53245324            </p></li></ul></div><p>If the <em class="parameter"><code>guest only</code></em> parameter is
    53255325    not set, then this list is then tried with the supplied password.
    … …  
    53675367        revert back to checking the UNIX password file, it must have a valid <code class="filename">smbpasswd</code> file to check users against. See the chapter about the User Database in
    53685368        the Samba HOWTO Collection for details on how to set this up.
    5369 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This mode of operation has
     5369</p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This mode of operation has
    53705370    significant pitfalls since it is more vulnerable to
    53715371    man-in-the-middle attacks and server impersonation.  In particular,
    … …  
    53755375    there is no way to reestablish it, and futher authentications to the
    53765376    Samba server may fail (from a single client, till it disconnects).
    5377         </p></div><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of
     5377        </p></div><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>From the client's point of
    53785378    view, <code class="literal">security = server</code> is the
    53795379    same as <code class="literal">security = user</code>.  It
    … …  
    53945394</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code>
    53955395</em></span>
    5396 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560768"></a>
     5396</p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333543"></a>
    53975397
    53985398server schannel (G)
    5399 </h3></div></div></div><a class="indexterm" name="id2560770"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5399</h3></div></div></div><a class="indexterm" name="id333544"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54005400        This controls whether the server offers or even demands the use of the netlogon schannel.
    54015401        <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
    … …  
    54085408</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code>
    54095409</em></span>
    5410 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560884"></a>
     5410</p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333651"></a>
    54115411
    54125412server signing (G)
    5413 </h3></div></div></div><a class="indexterm" name="id2560885"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
     5413</h3></div></div></div><a class="indexterm" name="id333652"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
    54145414    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    54155415    and <span class="emphasis"><em>disabled</em></span>.
    … …  
    54185418        to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code>
    54195419</em></span>
    5420 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2560945"></a>
     5420</p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333708"></a>
    54215421
    54225422server string (G)
    5423 </h3></div></div></div><a class="indexterm" name="id2560946"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
     5423</h3></div></div></div><a class="indexterm" name="id333709"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
    54245424        manager and next to the IPC connection in <code class="literal">net view</code>. It
    54255425        can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next
    … …  
    54305430</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code>
    54315431</em></span>
    5432 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561036"></a>
     5432</p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333795"></a>
    54335433
    54345434set directory (S)
    5435 </h3></div></div></div><a class="indexterm" name="id2561038"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5435</h3></div></div></div><a class="indexterm" name="id333796"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54365436        If <code class="literal">set directory = no</code>, then        users of the
    54375437        service may not use the setdir command to change directory.
    … …  
    54425442        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code>
    54435443</em></span>
    5444 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561096"></a>
     5444</p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333852"></a>
    54455445
    54465446set primary group script (G)
    5447 </h3></div></div></div><a class="indexterm" name="id2561098"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
     5447</h3></div></div></div><a class="indexterm" name="id333854"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
    54485448        primary group in addition to the auxiliary groups.  This script
    54495449        sets the primary group in the unix userdatase when an
    … …  
    54575457</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code>
    54585458</em></span>
    5459 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561178"></a>
     5459</p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333930"></a>
    54605460
    54615461set quota command (G)
    5462 </h3></div></div></div><a class="indexterm" name="id2561180"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
     5462</h3></div></div></div><a class="indexterm" name="id333931"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
    54635463        whenever there is no operating system API available from the OS that
    54645464        samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or
    54655465        on linux when <code class="literal">./configure --with-quotas</code> was used and a working quota api
    54665466        was found in the system. Most packages are configured with these options already.</p><p>This parameter should specify the path to a script that
    5467         can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul type="disc"><li><p>1 - quota type
    5468                         </p><div class="itemizedlist"><ul type="circle"><li><p>1 - user quotas</p></li><li><p>2 - user default quotas (uid = -1)</p></li><li><p>3 - group quotas</p></li><li><p>4 - group default quotas (gid = -1)</p></li></ul></div></li><li><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li><p>4 - block softlimit</p></li><li><p>5 - block hardlimit</p></li><li><p>6 - inode softlimit</p></li><li><p>7 - inode hardlimit</p></li><li><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code>
     5467        can set quota for the specified arguments.</p><p>The specified script should take the following arguments:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>1 - quota type
     5468                        </p><div class="itemizedlist"><ul class="itemizedlist" type="circle"><li class="listitem"><p>1 - user quotas</p></li><li class="listitem"><p>2 - user default quotas (uid = -1)</p></li><li class="listitem"><p>3 - group quotas</p></li><li class="listitem"><p>4 - group default quotas (gid = -1)</p></li></ul></div></li><li class="listitem"><p>2 - id (uid for user, gid for group, -1 if N/A)</p></li><li class="listitem"><p>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</p></li><li class="listitem"><p>4 - block softlimit</p></li><li class="listitem"><p>5 - block hardlimit</p></li><li class="listitem"><p>6 - inode softlimit</p></li><li class="listitem"><p>7 - inode hardlimit</p></li><li class="listitem"><p>8(optional) - block size, defaults to 1024</p></li></ul></div><p>The script should output at least one line of data on success. And nothing on failure.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal"></code>
    54695469</em></span>
    54705470</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code>
    54715471</em></span>
    5472 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561342"></a>
     5472</p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334083"></a>
    54735473
    54745474share:fake_fscaps (G)
    5475 </h3></div></div></div><a class="indexterm" name="id2561343"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5475</h3></div></div></div><a class="indexterm" name="id334084"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54765476        This is needed to support some special application that makes
    54775477        QFSINFO calls to check whether we set the SPARSE_FILES bit
    … …  
    54835483        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share:fake_fscaps</code></em> = <code class="literal">0</code>
    54845484</em></span>
    5485 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561401"></a>
     5485</p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334140"></a>
    54865486
    54875487share modes (S)
    5488 </h3></div></div></div><a class="indexterm" name="id2561402"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
     5488</h3></div></div></div><a class="indexterm" name="id334141"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
    54895489        the <em class="parameter"><code>share modes</code></em> during a file open. These
    54905490        modes are used by clients to gain exclusive read or write access
    … …  
    54985498        off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code>
    54995499</em></span>
    5500 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561478"></a>
     5500</p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334210"></a>
    55015501
    55025502short preserve case (S)
    5503 </h3></div></div></div><a class="indexterm" name="id2561479"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5503</h3></div></div></div><a class="indexterm" name="id334211"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    55045504        This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
    55055505        suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
    … …  
    55085508        </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code>
    55095509</em></span>
    5510 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561557"></a>
     5510</p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334284"></a>
    55115511
    55125512show add printer wizard (G)
    5513 </h3></div></div></div><a class="indexterm" name="id2561558"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
     5513</h3></div></div></div><a class="indexterm" name="id334285"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
    55145514    for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
    55155515    appear on Samba hosts in the share listing.  Normally this folder will
    … …  
    55265526    parameter will always cause the OpenPrinterEx() on the server
    55275527        to fail.  Thus the APW icon will never be displayed.
    5528 </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This does not prevent the same user from having
     5528</p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>This does not prevent the same user from having
    55295529                administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code>
    55305530</em></span>
    5531 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561640"></a>
     5531</p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334356"></a>
    55325532
    55335533shutdown script (G)
    5534 </h3></div></div></div><a class="indexterm" name="id2561642"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
     5534</h3></div></div></div><a class="indexterm" name="id334357"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
    55355535         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should
    55365536        start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    5537         right, this command will be run as root.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>%z</code></em> will be substituted with the
    5538                         shutdown message sent to the server.</p></li><li><p><em class="parameter"><code>%t</code></em> will be substituted with the
     5537        right, this command will be run as root.</p><p>The %z %t %r %f variables are expanded as follows:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>%z</code></em> will be substituted with the
     5538                        shutdown message sent to the server.</p></li><li class="listitem"><p><em class="parameter"><code>%t</code></em> will be substituted with the
    55395539                        number of seconds to wait before effectively starting the
    5540                         shutdown procedure.</p></li><li><p><em class="parameter"><code>%r</code></em> will be substituted with the
     5540                        shutdown procedure.</p></li><li class="listitem"><p><em class="parameter"><code>%r</code></em> will be substituted with the
    55415541                        switch <span class="emphasis"><em>-r</em></span>. It means reboot after shutdown
    5542                         for NT.</p></li><li><p><em class="parameter"><code>%f</code></em> will be substituted with the
     5542                        for NT.</p></li><li class="listitem"><p><em class="parameter"><code>%f</code></em> will be substituted with the
    55435543                        switch <span class="emphasis"><em>-f</em></span>. It means force the shutdown
    55445544                        even if applications do not respond for NT.</p></li></ul></div><p>Shutdown script example:
    … …  
    55585558</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code>
    55595559</em></span>
    5560 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561794"></a>
     5560</p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334503"></a>
    55615561
    55625562smb encrypt (S)
    5563 </h3></div></div></div><a class="indexterm" name="id2561796"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
     5563</h3></div></div></div><a class="indexterm" name="id334504"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
    55645564    extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
    55655565    SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
    … …  
    55895589    to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code>
    55905590</em></span>
    5591 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561911"></a>
     5591</p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334599"></a>
    55925592
    55935593smb passwd file (G)
    5594 </h3></div></div></div><a class="indexterm" name="id2561912"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
     5594</h3></div></div></div><a class="indexterm" name="id334600"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
    55955595    default the path to the smbpasswd file  is compiled into Samba.</p><p>
    55965596    An example of use is:
    … …  
    56005600    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code>
    56015601</em></span>
    5602 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2561965"></a>
     5602</p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334651"></a>
    56035603
    56045604smb ports (G)
    5605 </h3></div></div></div><a class="indexterm" name="id2561966"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
    5606 </em></span>
    5607 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562007"></a>
     5605</h3></div></div></div><a class="indexterm" name="id334652"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
     5606</em></span>
     5607</p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334692"></a>
    56085608
    56095609socket address (G)
    5610 </h3></div></div></div><a class="indexterm" name="id2562008"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
     5610</h3></div></div></div><a class="indexterm" name="id334693"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
    56115611        address Samba will listen for connections on. This is used to
    56125612        support multiple virtual interfaces on the one server, each
    … …  
    56175617</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code>
    56185618</em></span>
    5619 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562076"></a>
     5619</p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334758"></a>
    56205620
    56215621socket options (G)
    5622 </h3></div></div></div><a class="indexterm" name="id2562078"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
     5622</h3></div></div></div><a class="indexterm" name="id334759"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
    56235623    to be used when talking with the client.</p><p>Socket options are controls on the networking layer
    56245624    of the operating systems which allow the connection to be
    … …  
    56365636    samba-technical@samba.org</a>.</p><p>Any of the supported socket options may be combined
    56375637    in any way you like, as long as your OS allows it.</p><p>This is the list of socket options currently settable
    5638     using this option:</p><div class="itemizedlist"><ul type="disc"><li><p>SO_KEEPALIVE</p></li><li><p>SO_REUSEADDR</p></li><li><p>SO_BROADCAST</p></li><li><p>TCP_NODELAY</p></li><li><p>IPTOS_LOWDELAY</p></li><li><p>IPTOS_THROUGHPUT</p></li><li><p>SO_SNDBUF *</p></li><li><p>SO_RCVBUF *</p></li><li><p>SO_SNDLOWAT *</p></li><li><p>SO_RCVLOWAT *</p></li></ul></div><p>Those marked with a <span class="emphasis"><em>'*'</em></span> take an integer
     5638    using this option:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>SO_KEEPALIVE</p></li><li class="listitem"><p>SO_REUSEADDR</p></li><li class="listitem"><p>SO_BROADCAST</p></li><li class="listitem"><p>TCP_NODELAY</p></li><li class="listitem"><p>IPTOS_LOWDELAY</p></li><li class="listitem"><p>IPTOS_THROUGHPUT</p></li><li class="listitem"><p>SO_SNDBUF *</p></li><li class="listitem"><p>SO_RCVBUF *</p></li><li class="listitem"><p>SO_SNDLOWAT *</p></li><li class="listitem"><p>SO_RCVLOWAT *</p></li></ul></div><p>Those marked with a <span class="emphasis"><em>'*'</em></span> take an integer
    56395639    argument. The others can optionally take a 1 or 0 argument to enable
    56405640    or disable the option, by default they will be enabled if you
    … …  
    56485648</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code>
    56495649</em></span>
    5650 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562287"></a>
     5650</p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334950"></a>
    56515651
    56525652stat cache (G)
    5653 </h3></div></div></div><a class="indexterm" name="id2562288"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
     5653</h3></div></div></div><a class="indexterm" name="id334951"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
    56545654        speed up case insensitive name mappings. You should never need
    56555655        to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code>
    56565656</em></span>
    5657 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562338"></a>
     5657</p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335000"></a>
    56585658
    56595659state directory (G)
    5660 </h3></div></div></div><a class="indexterm" name="id2562339"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
     5660</h3></div></div></div><a class="indexterm" name="id335001"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
    56615661        <em class="parameter"><code>lock directory</code></em>. Since
    56625662        Samba 3.4.0, it is possible to differentiate between TDB files
    … …  
    56705670</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>state directory</code></em> = <code class="literal">/var/run/samba/locks/state</code>
    56715671</em></span>
    5672 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562424"></a>
     5672</p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335082"></a>
    56735673
    56745674store dos attributes (S)
    5675 </h3></div></div></div><a class="indexterm" name="id2562425"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5675</h3></div></div></div><a class="indexterm" name="id335083"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56765676        If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
    56775677        READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
    … …  
    56925692        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code>
    56935693</em></span>
    5694 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562554"></a>
     5694</p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335198"></a>
    56955695
    56965696strict allocate (S)
    5697 </h3></div></div></div><a class="indexterm" name="id2562555"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
     5697</h3></div></div></div><a class="indexterm" name="id335199"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
    56985698    disk space allocation in the server. When this is set to <code class="constant">yes</code>
    56995699    the server will change from UNIX behaviour of not committing real
    … …  
    57185718    activate this setting on those filesystems.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>
    57195719</em></span>
    5720 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562638"></a>
     5720</p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335264"></a>
    57215721
    57225722strict locking (S)
    5723 </h3></div></div></div><a class="indexterm" name="id2562639"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5723</h3></div></div></div><a class="indexterm" name="id335266"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57245724        This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>,
    57255725        the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
    … …  
    57375737        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code>
    57385738</em></span>
    5739 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562718"></a>
     5739</p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335336"></a>
    57405740
    57415741strict sync (S)
    5742 </h3></div></div></div><a class="indexterm" name="id2562719"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
     5742</h3></div></div></div><a class="indexterm" name="id335337"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
    57435743    shell) seem to confuse flushing buffer contents to disk with doing
    57445744    a sync to disk. Under UNIX, a sync call forces the process to be
    … …  
    57545754    reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code>
    57555755</em></span>
    5756 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562783"></a>
     5756</p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335394"></a>
    57575757
    57585758svcctl list (G)
    5759 </h3></div></div></div><a class="indexterm" name="id2562784"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
     5759</h3></div></div></div><a class="indexterm" name="id335395"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
    57605760    will use for starting and stopping Unix services via the Win32
    57615761    ServiceControl API.  This allows Windows administrators to
    … …  
    57705770</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code>
    57715771</em></span>
    5772 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562869"></a>
     5772</p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335475"></a>
    57735773
    57745774sync always (S)
    5775 </h3></div></div></div><a class="indexterm" name="id2562870"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
     5775</h3></div></div></div><a class="indexterm" name="id335476"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
    57765776    whether writes will always be written to stable storage before
    57775777    the write call returns. If this is <code class="constant">no</code> then the server will be
    … …  
    57845784    any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code>
    57855785</em></span>
    5786 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562940"></a>
     5786</p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335542"></a>
    57875787
    57885788syslog only (G)
    5789 </h3></div></div></div><a class="indexterm" name="id2562942"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5789</h3></div></div></div><a class="indexterm" name="id335543"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57905790    If this parameter is set then Samba debug messages are logged into the system
    57915791    syslog only, and not to the debug log files. There still will be some
    … …  
    57935793    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code>
    57945794</em></span>
    5795 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2562988"></a>
     5795</p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335587"></a>
    57965796
    57975797syslog (G)
    5798 </h3></div></div></div><a class="indexterm" name="id2562989"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5798</h3></div></div></div><a class="indexterm" name="id335588"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57995799    This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
    58005800    Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto
    … …  
    58075807    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code>
    58085808</em></span>
    5809 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563058"></a>
     5809</p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335654"></a>
    58105810
    58115811template homedir (G)
    5812 </h3></div></div></div><a class="indexterm" name="id2563060"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5812</h3></div></div></div><a class="indexterm" name="id335655"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58135813        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon  uses this
    58145814        parameter to fill in the home directory for that user. If the
    … …  
    58185818        is substituted with the user's Windows  NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code>
    58195819</em></span>
    5820 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563124"></a>
     5820</p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335716"></a>
    58215821
    58225822template shell (G)
    5823 </h3></div></div></div><a class="indexterm" name="id2563125"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5823</h3></div></div></div><a class="indexterm" name="id335717"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58245824        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
    5825         parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563163"></a>
     5825        parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335753"></a>
    58265826
    58275827time offset (G)
    5828 </h3></div></div></div><a class="indexterm" name="id2563164"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
     5828</h3></div></div></div><a class="indexterm" name="id335754"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
    58295829        to the normal GMT to local time conversion. This is useful if
    58305830        you are serving a lot of PCs that have incorrect daylight
    … …  
    58335833</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code>
    58345834</em></span>
    5835 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563223"></a>
     5835</p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335812"></a>
    58365836
    58375837time server (G)
    5838 </h3></div></div></div><a class="indexterm" name="id2563224"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
     5838</h3></div></div></div><a class="indexterm" name="id335814"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
    58395839clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code>
    58405840</em></span>
    5841 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563274"></a>
     5841</p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335862"></a>
    58425842
    58435843unix charset (G)
    5844 </h3></div></div></div><a class="indexterm" name="id2563275"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
     5844</h3></div></div></div><a class="indexterm" name="id335863"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
    58455845                Samba runs on uses. Samba needs to know this in order to be able to
    58465846                convert text to the charsets other SMB clients use.
    … …  
    58515851</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code>
    58525852</em></span>
    5853 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563340"></a>
     5853</p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335925"></a>
    58545854
    58555855unix extensions (G)
    5856 </h3></div></div></div><a class="indexterm" name="id2563341"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5856</h3></div></div></div><a class="indexterm" name="id335926"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58575857    implements the CIFS UNIX extensions, as defined by HP.
    58585858    These extensions enable Samba to better serve UNIX CIFS clients
    … …  
    58645864    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code>
    58655865</em></span>
    5866 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563404"></a>
     5866</p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335986"></a>
    58675867
    58685868unix password sync (G)
    5869 </h3></div></div></div><a class="indexterm" name="id2563406"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5869</h3></div></div></div><a class="indexterm" name="id335987"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58705870    attempts to synchronize the UNIX password with the SMB password
    58715871    when the encrypted SMB password in the smbpasswd file is changed.
    … …  
    58765876        access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code>
    58775877</em></span>
    5878 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563466"></a>
     5878</p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336043"></a>
    58795879
    58805880update encrypted (G)
    5881 </h3></div></div></div><a class="indexterm" name="id2563467"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5881</h3></div></div></div><a class="indexterm" name="id336044"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    58825882        This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
    58835883        password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
    … …  
    58975897        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code>
    58985898</em></span>
    5899 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563583"></a>
     5899</p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336148"></a>
    59005900
    59015901use client driver (S)
    5902 </h3></div></div></div><a class="indexterm" name="id2563584"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
     5902</h3></div></div></div><a class="indexterm" name="id336149"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
    59035903    clients.  It has no effect on Windows 95/98/ME clients.  When
    59045904    serving a printer to Windows NT/2000 clients without first installing
    … …  
    59255925        server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code>
    59265926</em></span>
    5927 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563676"></a>
     5927</p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336222"></a>
    59285928
    59295929use mmap (G)
    5930 </h3></div></div></div><a class="indexterm" name="id2563677"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
     5930</h3></div></div></div><a class="indexterm" name="id336223"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
    59315931    depend on mmap working correctly on the running system. Samba requires a coherent
    59325932    mmap/read-write system memory cache. Currently only HPUX does not have such a
    … …  
    59375937    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code>
    59385938</em></span>
    5939 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563728"></a>
     5939</p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336270"></a>
    59405940
    59415941username level (G)
    5942 </h3></div></div></div><a class="indexterm" name="id2563729"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
     5942</h3></div></div></div><a class="indexterm" name="id336271"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
    59435943    the real UNIX username, as many DOS clients send an all-uppercase
    59445944    username. By default Samba tries all lowercase, followed by the
    … …  
    59555955</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code>
    59565956</em></span>
    5957 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563810"></a>
     5957</p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336343"></a>
    59585958
    59595959username map script (G)
    5960 </h3></div></div></div><a class="indexterm" name="id2563811"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
     5960</h3></div></div></div><a class="indexterm" name="id336344"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
    59615961        <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter.  This parameter
    59625962        specifies and external program or script that must accept a single
    … …  
    59695969</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code>
    59705970</em></span>
    5971 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2563886"></a>
     5971</p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336415"></a>
    59725972
    59735973username map (G)
    5974 </h3></div></div></div><a class="indexterm" name="id2563887"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5974</h3></div></div></div><a class="indexterm" name="id336416"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59755975        This option allows you to specify a file containing a mapping of usernames from the clients to the server.
    59765976        This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
    … …  
    60566056# no username map</code>
    60576057</em></span>
    6058 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564166"></a>
     6058</p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id336657"></a>
    60596059
    60606060<a name="USER"></a>user
    6061 </h3></div></div></div><a class="indexterm" name="id2564167"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564198"></a>
     6061</h3></div></div></div><a class="indexterm" name="id336658"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id336689"></a>
    60626062
    60636063<a name="USERS"></a>users
    6064 </h3></div></div></div><a class="indexterm" name="id2564199"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564229"></a>
     6064</h3></div></div></div><a class="indexterm" name="id336690"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336720"></a>
    60656065
    60666066username (S)
    6067 </h3></div></div></div><a class="indexterm" name="id2564230"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
     6067</h3></div></div></div><a class="indexterm" name="id336721"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
    60686068    list, in which case the supplied password will be tested against
    60696069    each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when
    … …  
    61036103</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code>
    61046104</em></span>
    6105 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564400"></a>
     6105</p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336866"></a>
    61066106
    61076107usershare allow guests (G)
    6108 </h3></div></div></div><a class="indexterm" name="id2564401"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
     6108</h3></div></div></div><a class="indexterm" name="id336867"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
    61096109        to be accessed by non-authenticated users or not. It is the equivalent
    61106110        of allowing people who can create a share the option of setting
    … …  
    61136113        is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code>
    61146114</em></span>
    6115 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564452"></a>
     6115</p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336915"></a>
    61166116
    61176117usershare max shares (G)
    6118 </h3></div></div></div><a class="indexterm" name="id2564453"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
     6118</h3></div></div></div><a class="indexterm" name="id336916"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
    61196119        that are allowed to be created by users belonging to the group owning the
    61206120        usershare directory. If set to zero (the default) user defined shares are ignored.
    61216121        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code>
    61226122</em></span>
    6123 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564498"></a>
     6123</p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336957"></a>
    61246124
    61256125usershare owner only (G)
    6126 </h3></div></div></div><a class="indexterm" name="id2564499"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
     6126</h3></div></div></div><a class="indexterm" name="id336958"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
    61276127        a user defined shares must be owned by the user creating the
    61286128        user defined share or not. If set to True (the default) then
    … …  
    61346134        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code>
    61356135</em></span>
    6136 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564547"></a>
     6136</p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337002"></a>
    61376137
    61386138usershare path (G)
    6139 </h3></div></div></div><a class="indexterm" name="id2564548"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
     6139</h3></div></div></div><a class="indexterm" name="id337003"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
    61406140        filesystem used to store the user defined share definition files.
    61416141        This directory must be owned by root, and have no access for
    … …  
    61586158        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code>
    61596159</em></span>
    6160 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564618"></a>
     6160</p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337065"></a>
    61616161
    61626162usershare prefix allow list (G)
    6163 </h3></div></div></div><a class="indexterm" name="id2564619"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6163</h3></div></div></div><a class="indexterm" name="id337066"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    61646164        the root of which are allowed to be exported by user defined share definitions.
    61656165        If the pathname to be exported doesn't start with one of the strings in this
    … …  
    61766176</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code>
    61776177</em></span>
    6178 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564691"></a>
     6178</p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337133"></a>
    61796179
    61806180usershare prefix deny list (G)
    6181 </h3></div></div></div><a class="indexterm" name="id2564692"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6181</h3></div></div></div><a class="indexterm" name="id337134"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    61826182        the root of which are NOT allowed to be exported by user defined share definitions.
    61836183        If the pathname exported starts with one of the strings in this
    … …  
    61956195</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code>
    61966196</em></span>
    6197 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564766"></a>
     6197</p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337199"></a>
    61986198
    61996199usershare template share (G)
    6200 </h3></div></div></div><a class="indexterm" name="id2564767"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
     6200</h3></div></div></div><a class="indexterm" name="id337200"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
    62016201        such as path, guest ok, etc. This parameter allows usershares to
    62026202        "cloned" from an existing share. If "usershare template share"
    … …  
    62136213</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code>
    62146214</em></span>
    6215 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564839"></a>
     6215</p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337266"></a>
    62166216
    62176217use sendfile (S)
    6218 </h3></div></div></div><a class="indexterm" name="id2564840"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
     6218</h3></div></div></div><a class="indexterm" name="id337267"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
    62196219    system call is supported by the underlying operating system, then some SMB read calls
    62206220    (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
    … …  
    62256225    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code>
    62266226</em></span>
    6227 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564896"></a>
     6227</p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337319"></a>
    62286228
    62296229use spnego (G)
    6230 </h3></div></div></div><a class="indexterm" name="id2564897"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
     6230</h3></div></div></div><a class="indexterm" name="id337320"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
    62316231    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    62326232    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
    … …  
    62366236        disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code>
    62376237</em></span>
    6238 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2564946"></a>
     6238</p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337365"></a>
    62396239
    62406240utmp directory (G)
    6241 </h3></div></div></div><a class="indexterm" name="id2564947"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
     6241</h3></div></div></div><a class="indexterm" name="id337366"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
    62426242        been configured and compiled with the option <code class="literal">
    62436243        --with-utmp</code>. It specifies a directory pathname that is
    … …  
    62516251</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code>
    62526252</em></span>
    6253 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565024"></a>
     6253</p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337439"></a>
    62546254
    62556255utmp (G)
    6256 </h3></div></div></div><a class="indexterm" name="id2565025"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6256</h3></div></div></div><a class="indexterm" name="id337440"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62576257        This boolean parameter is only available if Samba has been configured and compiled 
    62586258        with the option <code class="literal">--with-utmp</code>. If set to
    … …  
    62666266        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code>
    62676267</em></span>
    6268 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565086"></a>
     6268</p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337496"></a>
    62696269
    62706270valid users (S)
    6271 </h3></div></div></div><a class="indexterm" name="id2565087"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6271</h3></div></div></div><a class="indexterm" name="id337497"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62726272    This is a list of users that should be allowed to login to this service. Names starting with
    62736273    '@', '+' and  '&amp;' are interpreted using the same rules as described in the
    … …  
    62856285</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code>
    62866286</em></span>
    6287 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565178"></a>
     6287</p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337583"></a>
    62886288
    62896289-valid (S)
    6290 </h3></div></div></div><a class="indexterm" name="id2565179"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
     6290</h3></div></div></div><a class="indexterm" name="id337584"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
    62916291        valid and thus can be used. When this parameter is set to false,
    62926292        the share will be in no way visible nor accessible.
    … …  
    62976297        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code>
    62986298</em></span>
    6299 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565227"></a>
     6299</p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337629"></a>
    63006300
    63016301veto files (S)
    6302 </h3></div></div></div><a class="indexterm" name="id2565228"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6302</h3></div></div></div><a class="indexterm" name="id337630"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63036303        This is a list of files and directories that are neither visible nor accessible.  Each entry in
    63046304        the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
    … …  
    63316331        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code>
    63326332</em></span>
    6333 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565346"></a>
     6333</p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337736"></a>
    63346334
    63356335veto oplock files (S)
    6336 </h3></div></div></div><a class="indexterm" name="id2565347"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6336</h3></div></div></div><a class="indexterm" name="id337737"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63376337        This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    63386338        parameter is turned on for a share. It allows the Samba administrator
    … …  
    63556355# No files are vetoed for oplock grants</code>
    63566356</em></span>
    6357 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565439"></a>
     6357</p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id337822"></a>
    63586358
    63596359<a name="VFSOBJECT"></a>vfs object
    6360 </h3></div></div></div><a class="indexterm" name="id2565440"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565471"></a>
     6360</h3></div></div></div><a class="indexterm" name="id337823"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337854"></a>
    63616361
    63626362vfs objects (S)
    6363 </h3></div></div></div><a class="indexterm" name="id2565472"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
     6363</h3></div></div></div><a class="indexterm" name="id337855"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
    63646364        are used for Samba VFS I/O operations.  By default, normal
    63656365        disk I/O operations are used but these can be overloaded
    … …  
    63686368</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code>
    63696369</em></span>
    6370 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565531"></a>
     6370</p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337912"></a>
    63716371
    63726372volume (S)
    6373 </h3></div></div></div><a class="indexterm" name="id2565532"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
     6373</h3></div></div></div><a class="indexterm" name="id337913"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
    63746374        returned for a share. Useful for CDROMs with installation programs
    63756375        that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal">
    63766376# the name of the share</code>
    63776377</em></span>
    6378 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565575"></a>
     6378</p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337953"></a>
    63796379
    63806380wide links (S)
    6381 </h3></div></div></div><a class="indexterm" name="id2565576"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
     6381</h3></div></div></div><a class="indexterm" name="id337954"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
    63826382        in the UNIX file system may be followed by the server. Links
    63836383        that point to areas within the directory tree exported by the
    … …  
    63926392        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">no</code>
    63936393</em></span>
    6394 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565643"></a>
     6394</p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338014"></a>
    63956395
    63966396winbind cache time (G)
    6397 </h3></div></div></div><a class="indexterm" name="id2565644"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6397</h3></div></div></div><a class="indexterm" name="id338015"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    63986398        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache
    63996399        user and group information before querying a Windows NT server
    … …  
    64036403        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code>
    64046404</em></span>
    6405 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565714"></a>
     6405</p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338080"></a>
    64066406
    64076407winbind enum groups (G)
    6408 </h3></div></div></div><a class="indexterm" name="id2565715"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
     6408</h3></div></div></div><a class="indexterm" name="id338082"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
    64096409        the enumeration of groups through the <code class="literal">setgrent()</code>,
    64106410        <code class="literal">getgrent()</code> and
    … …  
    64126412        the <em class="parameter"><code>winbind enum groups</code></em> parameter is
    64136413        <code class="constant">no</code>, calls to the <code class="literal">getgrent()</code> system
    6414         call will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
    6415 </em></span>
    6416 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565805"></a>
     6414        call will not return any data. </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
     6415</em></span>
     6416</p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338168"></a>
    64176417
    64186418winbind enum users (G)
    6419 </h3></div></div></div><a class="indexterm" name="id2565806"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
     6419</h3></div></div></div><a class="indexterm" name="id338169"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
    64206420        necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>,
    64216421         <code class="literal">getpwent()</code> and
    … …  
    64236423        the <em class="parameter"><code>winbind enum users</code></em> parameter is
    64246424         <code class="constant">no</code>, calls to the <code class="literal">getpwent</code> system call
    6425         will not return any data. </p><div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off user
     6425        will not return any data. </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off user
    64266426        enumeration may cause some programs to behave oddly.  For
    64276427        example, the finger program relies on having access to the
    … …  
    64296429        usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code>
    64306430</em></span>
    6431 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565898"></a>
     6431</p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338257"></a>
    64326432
    64336433winbind expand groups (G)
    6434 </h3></div></div></div><a class="indexterm" name="id2565899"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
     6434</h3></div></div></div><a class="indexterm" name="id338258"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
    64356435              will traverse when flattening nested group memberships
    64366436              of Windows domain groups.  This is different from the
    … …  
    64446444         incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code>
    64456445</em></span>
    6446 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2565967"></a>
     6446</p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338319"></a>
    64476447
    64486448winbind nested groups (G)
    6449 </h3></div></div></div><a class="indexterm" name="id2565968"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
     6449</h3></div></div></div><a class="indexterm" name="id338320"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
    64506450                 groups. Nested groups are also called local groups or
    64516451                 aliases. They work like their counterparts in Windows: Nested
    … …  
    64556455                 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code>
    64566456</em></span>
    6457 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566017"></a>
     6457</p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338364"></a>
    64586458
    64596459winbind normalize names (G)
    6460 </h3></div></div></div><a class="indexterm" name="id2566018"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
     6460</h3></div></div></div><a class="indexterm" name="id338365"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
    64616461          whitespace in user and group names with an underscore (_) character.
    64626462          For example, whether the name "Space Kadet" should be
    … …  
    64786478</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code>
    64796479</em></span>
    6480 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566095"></a>
     6480</p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338433"></a>
    64816481
    64826482winbind nss info (G)
    6483 </h3></div></div></div><a class="indexterm" name="id2566096"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
     6483</h3></div></div></div><a class="indexterm" name="id338434"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
    64846484        Service Information to construct a user's home directory and login shell.
    64856485        Currently the following settings are available:
    64866486
    6487         </p><div class="itemizedlist"><ul type="disc"><li><p><em class="parameter"><code>template</code></em>
     6487        </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>template</code></em>
    64886488                        - The default, using the parameters of <em class="parameter"><code>template
    64896489                        shell</code></em> and <em class="parameter"><code>template homedir</code></em>)
    6490                         </p></li><li><p><em class="parameter"><code>&lt;sfu | rfc2307 &gt;</code></em>
     6490                        </p></li><li class="listitem"><p><em class="parameter"><code>&lt;sfu | rfc2307 &gt;</code></em>
    64916491                        - When Samba is running in security = ads and your Active Directory
    64926492                        Domain Controller does support the Microsoft "Services for Unix" (SFU)
    … …  
    65026502</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">sfu</code>
    65036503</em></span>
    6504 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566209"></a>
     6504</p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338540"></a>
    65056505
    65066506winbind offline logon (G)
    6507 </h3></div></div></div><a class="indexterm" name="id2566210"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
     6507</h3></div></div></div><a class="indexterm" name="id338541"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
    65086508        allow to login with the <em class="parameter"><code>pam_winbind</code></em>
    65096509        module using Cached Credentials. If enabled, winbindd will store user credentials
    … …  
    65136513</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code>
    65146514</em></span>
    6515 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566278"></a>
     6515</p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338605"></a>
    65166516
    65176517winbind reconnect delay (G)
    6518 </h3></div></div></div><a class="indexterm" name="id2566279"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6518</h3></div></div></div><a class="indexterm" name="id338606"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    65196519        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will wait between
    65206520        attempts to contact a Domain controller for a domain that is
    65216521        determined to be down or not contactable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind reconnect delay</code></em> = <code class="literal">30</code>
    65226522</em></span>
    6523 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566331"></a>
     6523</p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338655"></a>
    65246524
    65256525winbind refresh tickets (G)
    6526 </h3></div></div></div><a class="indexterm" name="id2566332"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
     6526</h3></div></div></div><a class="indexterm" name="id338656"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
    65276527        retrieved using the <em class="parameter"><code>pam_winbind</code></em> module.
    65286528
    … …  
    65316531</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code>
    65326532</em></span>
    6533 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566398"></a>
     6533</p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338721"></a>
    65346534
    65356535winbind rpc only (G)
    6536 </h3></div></div></div><a class="indexterm" name="id2566399"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6536</h3></div></div></div><a class="indexterm" name="id338722"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65376537        Setting this parameter to <code class="literal">yes</code> forces
    65386538        winbindd to use RPC instead of LDAP to retrieve information from Domain
    … …  
    65406540        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code>
    65416541</em></span>
    6542 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566447"></a>
     6542</p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338768"></a>
    65436543
    65446544winbind separator (G)
    6545 </h3></div></div></div><a class="indexterm" name="id2566448"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
     6545</h3></div></div></div><a class="indexterm" name="id338769"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
    65466546        used when listing a username of the form of <em class="replaceable"><code>DOMAIN
    65476547        </code></em>\<em class="replaceable"><code>user</code></em>.  This parameter
    … …  
    65546554</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code>
    65556555</em></span>
    6556 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566534"></a>
     6556</p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338850"></a>
    65576557
    65586558winbind trusted domains only (G)
    6559 </h3></div></div></div><a class="indexterm" name="id2566535"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6559</h3></div></div></div><a class="indexterm" name="id338851"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65606560        This parameter is designed to allow Samba servers that are members
    65616561        of a Samba controlled domain to use UNIX accounts distributed via NIS,
    … …  
    65686568        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code>
    65696569</em></span>
    6570 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566601"></a>
     6570</p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338912"></a>
    65716571
    65726572winbind use default domain (G)
    6573 </h3></div></div></div><a class="indexterm" name="id2566602"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
     6573</h3></div></div></div><a class="indexterm" name="id338913"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
    65746574         <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 
    65756575        without domain component in their username. Users without a domain
    … …  
    65816581</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code>
    65826582</em></span>
    6583 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566674"></a>
     6583</p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338981"></a>
    65846584
    65856585wins hook (G)
    6586 </h3></div></div></div><a class="indexterm" name="id2566675"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
     6586</h3></div></div></div><a class="indexterm" name="id338982"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
    65876587        allows you to call an external program for all changes to the
    65886588        WINS database. The primary use for this option is to allow the
    65896589        dynamic update of external name resolution databases such as
    65906590        dynamic DNS.</p><p>The wins hook parameter specifies the name of a script
    6591         or executable that will be called as follows:</p><p><code class="literal">wins_hook operation name nametype ttl IP_list</code></p><div class="itemizedlist"><ul type="disc"><li><p>The first argument is the operation and is
     6591        or executable that will be called as follows:</p><p><code class="literal">wins_hook operation name nametype ttl IP_list</code></p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>The first argument is the operation and is
    65926592                        one  of "add", "delete", or
    65936593                        "refresh". In most cases the operation
    … …  
    65966596                        "refresh" may sometimes be called when
    65976597                        the  name has not previously been added, in that
    6598                         case it should be treated  as an add.</p></li><li><p>The second argument is the NetBIOS name. If the
     6598                        case it should be treated  as an add.</p></li><li class="listitem"><p>The second argument is the NetBIOS name. If the
    65996599                        name is not a legal name then the wins hook is not called.
    66006600                        Legal names contain only  letters, digits, hyphens, underscores
    6601                         and periods.</p></li><li><p>The third argument is the NetBIOS name
    6602                         type as a 2 digit hexadecimal number. </p></li><li><p>The fourth argument is the TTL (time to live)
    6603                         for the name in seconds.</p></li><li><p>The fifth and subsequent arguments are the IP
     6601                        and periods.</p></li><li class="listitem"><p>The third argument is the NetBIOS name
     6602                        type as a 2 digit hexadecimal number. </p></li><li class="listitem"><p>The fourth argument is the TTL (time to live)
     6603                        for the name in seconds.</p></li><li class="listitem"><p>The fifth and subsequent arguments are the IP
    66046604                        addresses currently registered for that name. If this list is
    66056605                        empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update
    66066606        program <code class="literal">nsupdate</code> is provided in the examples
    6607         directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566781"></a>
     6607        directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339076"></a>
    66086608
    66096609wins proxy (G)
    6610 </h3></div></div></div><a class="indexterm" name="id2566782"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
     6610</h3></div></div></div><a class="indexterm" name="id339077"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
    66116611        queries on behalf of  other hosts. You may need to set this
    66126612        to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code>
    66136613</em></span>
    6614 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566835"></a>
     6614</p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339129"></a>
    66156615
    66166616wins server (G)
    6617 </h3></div></div></div><a class="indexterm" name="id2566836"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
     6617</h3></div></div></div><a class="indexterm" name="id339130"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
    66186618        address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on
    66196619        your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a
    … …  
    66226622        (working) server will be queried for a name. The tag should be
    66236623        separated from the ip address by a colon.
    6624         </p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You need to set up Samba to point
     6624        </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>You need to set up Samba to point
    66256625        to a WINS server if you have multiple subnets and wish cross-subnet
    66266626        browsing to work correctly.</p></div><p>See the chapter in the Samba3-HOWTO on Network Browsing.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal"></code>
    … …  
    66346634</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code>
    66356635</em></span>
    6636 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2566946"></a>
     6636</p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339232"></a>
    66376637
    66386638wins support (G)
    6639 </h3></div></div></div><a class="indexterm" name="id2566947"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
     6639</h3></div></div></div><a class="indexterm" name="id339233"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
    66406640        not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and
    66416641        you wish a particular <code class="literal">nmbd</code> to be your WINS server.
    … …  
    66436643        on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code>
    66446644</em></span>
    6645 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567016"></a>
     6645</p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339298"></a>
    66466646
    66476647workgroup (G)
    6648 </h3></div></div></div><a class="indexterm" name="id2567017"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
     6648</h3></div></div></div><a class="indexterm" name="id339299"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
    66496649        appear to be in when queried by clients. Note that this parameter
    66506650        also controls the Domain name used with
    … …  
    66546654</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code>
    66556655</em></span>
    6656 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567088"></a>
     6656</p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id339369"></a>
    66576657
    66586658<a name="WRITABLE"></a>writable
    6659 </h3></div></div></div><a class="indexterm" name="id2567089"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567120"></a>
     6659</h3></div></div></div><a class="indexterm" name="id339370"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339400"></a>
    66606660
    66616661writeable (S)
    6662 </h3></div></div></div><a class="indexterm" name="id2567121"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
    6663 </em></span>
    6664 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567171"></a>
     6662</h3></div></div></div><a class="indexterm" name="id339401"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
     6663</em></span>
     6664</p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339451"></a>
    66656665
    66666666write cache size (S)
    6667 </h3></div></div></div><a class="indexterm" name="id2567172"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
     6667</h3></div></div></div><a class="indexterm" name="id339452"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
    66686668    Samba will create an in-memory cache for each oplocked file
    66696669    (it does <span class="emphasis"><em>not</em></span> do this for
    … …  
    66836683#  for a 256k cache size per file</code>
    66846684</em></span>
    6685 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567254"></a>
     6685</p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339525"></a>
    66866686
    66876687write list (S)
    6688 </h3></div></div></div><a class="indexterm" name="id2567255"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6688</h3></div></div></div><a class="indexterm" name="id339526"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    66896689    This is a list of users that are given read-write access to a service. If the
    66906690    connecting user is in this list then they will be given write access, no matter
    … …  
    67016701</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code>
    67026702</em></span>
    6703 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567347"></a>
     6703</p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339614"></a>
    67046704
    67056705write raw (G)
    6706 </h3></div></div></div><a class="indexterm" name="id2567348"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     6706</h3></div></div></div><a class="indexterm" name="id339615"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    67076707    will support raw write SMB's when transferring data from clients.
    67086708    You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code>
    67096709</em></span>
    6710 </p></dd></dl></div></div><div class="section" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2567391"></a>
     6710</p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339656"></a>
    67116711
    67126712wtmp directory (G)
    6713 </h3></div></div></div><a class="indexterm" name="id2567392"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6713</h3></div></div></div><a class="indexterm" name="id339657"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    67146714        This parameter is only available if Samba has been configured and compiled with the option <code class="literal">
    67156715        --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
    … …  
    67236723</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code>
    67246724</em></span>
    6725 </p></dd></dl></div></div></div></div><div class="refsect1" lang="en"><a name="id2567475"></a><h2>WARNINGS</h2><p>
     6725</p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id339734"></a><h2>WARNINGS</h2><p>
    67266726        Although the configuration file permits service names to contain spaces, your client software may not.
    67276727        Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
    … …  
    67366736        care when designing these sections. In particular, ensure that the permissions on spool directories are
    67376737        correct.
    6738         </p></div><div class="refsect1" lang="en"><a name="id2567525"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" lang="en"><a name="id2567536"></a><h2>SEE ALSO</h2><p>
    6739         <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" lang="en"><a name="id2567615"></a><h2>AUTHOR</h2><p>
     6738        </p></div><div class="refsect1" title="VERSION"><a name="id339777"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id339788"></a><h2>SEE ALSO</h2><p>
     6739        <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id339866"></a><h2>AUTHOR</h2><p>
    67406740        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
    67416741        by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note: See TracChangeset for help on using the changeset viewer.