Ignore:
Timestamp:
Nov 12, 2012, 5:38:52 PM (13 years ago)
Author:
Silvan Scherrer
Message:

Samba Server 3.5: update branche to 3.5.16

Location:
branches/samba-3.5.x/docs/htmldocs/manpages
Files:
1 added
5 edited

Legend:

Unmodified
Added
Removed

  • branches/samba-3.5.x/docs/htmldocs/manpages/index.html

    r599 r736  
    6565</p></dd><dt><span class="term"><a class="ulink" href="vfs_acl_tdb.8.html" target="_top">vfs_acl_tdb(8)</a></span></dt><dd><p>Save NTFS-ACLs in a tdb file
    6666</p></dd><dt><span class="term"><a class="ulink" href="vfs_acl_xattr.8.html" target="_top">vfs_acl_xattr(8)</a></span></dt><dd><p>Save NTFS-ACLs in Extended Attributes (EAs)
     67</p></dd><dt><span class="term"><a class="ulink" href="vfs_aio_fork.8.html" target="_top">vfs_aio_fork(8)</a></span></dt><dd><p>implement async I/O in Samba vfs
    6768</p></dd><dt><span class="term"><a class="ulink" href="vfs_audit.8.html" target="_top">vfs_audit(8)</a></span></dt><dd><p>record selected Samba VFS operations in the system log
    6869</p></dd><dt><span class="term"><a class="ulink" href="vfs_cacheprime.8.html" target="_top">vfs_cacheprime(8)</a></span></dt><dd><p>prime the kernel file data cache

  • branches/samba-3.5.x/docs/htmldocs/manpages/mount.cifs.8.html

    r599 r736  
    6161at version 1.10 or higher to support specifying the uid in non-numeric
    6262form. See the section on FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS below for more
    63 information.  </p></dd><dt><span class="term">forceuid</span></dt><dd><p>instructs the client to ignore any uid provided by
     63information.  </p></dd><dt><span class="term">prefixpath=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>
     64                        It's possible to mount a subdirectory of a share. The preferred way
     65                        to do this is to append the path to the UNC when mounting. However,
     66                        it's also possible to do the same by setting this option and
     67                        providing the path there.
     68                </p></dd><dt><span class="term">cifsacl</span></dt><dd><p>
     69           This option is used to map CIFS/NTFS ACLs to/from Linux permission
     70           bits, map SIDs to/from UIDs and GIDs, and get and set Security
     71           Descriptors.
     72                </p></dd><dt><span class="term">forceuid</span></dt><dd><p>instructs the client to ignore any uid provided by
    6473the server for files and directories and to always assign the owner to
    6574be the value of the uid= option. See the section on FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS below for more information.</p></dd><dt><span class="term">gid=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>sets the gid that will own all files or
    … …  
    7584if it is not specified, the default ports will be tried i.e.
    7685port 445 is tried and if no response then port 139 is tried.
    77                 </p></dd><dt><span class="term">servern=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>
     86                </p></dd><dt><span class="term">servernetbiosname=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>
    7887                Specify the server netbios name (RFC1001 name) to use
    7988                when attempting to setup a session to the server. Although
    … …  
    8493                support a default server name.  A server name can be up
    8594                to 15 characters long and is usually uppercased.
    86                 </p></dd><dt><span class="term">netbiosname=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>When mounting to servers via port 139, specifies the RFC1001
     95                </p></dd><dt><span class="term">servern=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>synonym for <span class="emphasis"><em>servernetbiosname=</em></span></p></dd><dt><span class="term">netbiosname=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>When mounting to servers via port 139, specifies the RFC1001
    8796                source name to use to represent the client netbios machine
    8897                name when doing the RFC1001 netbios session initialize.
    … …  
    154163                "noacl" on mount.</p></dd><dt><span class="term">nocase</span></dt><dd><p>Request case insensitive path name matching (case
    155164                sensitive is the default if the server suports it).
     165                </p></dd><dt><span class="term">ignorecase</span></dt><dd><p>
     166                Synonym for <span class="emphasis"><em>nocase</em></span>
    156167                </p></dd><dt><span class="term">sec=</span></dt><dd><p>Security mode.  Allowed values are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>none    attempt to connection as a null user (no name) </p></li><li class="listitem"><p>krb5    Use Kerberos version 5 authentication</p></li><li class="listitem"><p>krb5i   Use Kerberos authentication and packet signing</p></li><li class="listitem"><p>ntlm    Use NTLM password hashing (default)</p></li><li class="listitem"><p>ntlmi   Use NTLM password hashing with signing (if
    157168                                /proc/fs/cifs/PacketSigningEnabled on or if
    … …  
    220231                </p></dd><dt><span class="term">wsize=<em class="replaceable"><code>arg</code></em></span></dt><dd><p>default network write size (default 57344)
    221232                maximum wsize currently allowed by CIFS is 57344 (fourteen
    222                 4096 byte pages)</p></dd><dt><span class="term">--verbose</span></dt><dd><p>Print additional debugging information for the mount. Note that this parameter must be specified before the -o. For example:</p><p>mount -t cifs //server/share /mnt --verbose -o user=username</p></dd></dl></div></div><div class="refsect1" title="SERVICE FORMATTING AND DELIMITERS"><a name="id307577"></a><h2>SERVICE FORMATTING AND DELIMITERS</h2><p>
     233                4096 byte pages)</p></dd><dt><span class="term">noposixpaths</span></dt><dd><p>
     234           If unix extensions are enabled on a share, then the client will
     235           typically allow filenames to include any character besides '/' in a
     236           pathname component, and will use forward slashes as a pathname
     237           delimiter. This option prevents the client from attempting to
     238           negotiate the use of posix-style pathnames to the server.
     239                </p></dd><dt><span class="term">posixpaths</span></dt><dd><p>
     240                Inverse of <span class="emphasis"><em>noposixpaths</em></span>
     241                </p></dd><dt><span class="term">--verbose</span></dt><dd><p>Print additional debugging information for the mount. Note that this parameter must be specified before the -o. For example:</p><p>mount -t cifs //server/share /mnt --verbose -o user=username</p></dd></dl></div></div><div class="refsect1" title="SERVICE FORMATTING AND DELIMITERS"><a name="id307612"></a><h2>SERVICE FORMATTING AND DELIMITERS</h2><p>
    223242                It's generally preferred to use forward slashes (/) as a delimiter in service names. They are considered to be the "universal delimiter" since they are generally not allowed to be embedded within path components on Windows machines and the client can convert them to blackslashes (\) unconditionally. Conversely, backslash characters are allowed by POSIX to be part of a path component, and can't be automatically converted in the same way.
    224243        </p><p>
    225244                mount.cifs will attempt to convert backslashes to forward slashes where it's able to do so, but it cannot do so in any path component following the sharename.
    226         </p></div><div class="refsect1" title="INODE NUMBERS"><a name="id307595"></a><h2>INODE NUMBERS</h2><p>
     245        </p></div><div class="refsect1" title="INODE NUMBERS"><a name="id307630"></a><h2>INODE NUMBERS</h2><p>
    227246                When Unix Extensions are enabled, we use the actual inode
    228247        number provided by the server in response to the POSIX calls as an
    … …  
    244263        numbers smaller than 2 power 32 on the client. But you may not be able
    245264        to detect hardlinks properly.
    246         </p></div><div class="refsect1" title="FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS"><a name="id307620"></a><h2>FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS</h2><p> The core CIFS protocol does not provide unix ownership
     265        </p></div><div class="refsect1" title="FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS"><a name="id307655"></a><h2>FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS</h2><p> The core CIFS protocol does not provide unix ownership
    247266information or mode for files and directories. Because of this, files
    248267and directories will generally appear to be owned by whatever values the
    … …  
    269288altogether via the noperm option. Server-side permission checks cannot be
    270289overriden. The permission checks done by the server will always correspond to
    271 the credentials used to mount the share, and not necessarily to the user who is accessing the share.</p></div><div class="refsect1" title="ENVIRONMENT VARIABLES"><a name="id307658"></a><h2>ENVIRONMENT VARIABLES</h2><p>
     290the credentials used to mount the share, and not necessarily to the user who is accessing the share.</p></div><div class="refsect1" title="ENVIRONMENT VARIABLES"><a name="id307697"></a><h2>ENVIRONMENT VARIABLES</h2><p>
    272291                The variable <span class="emphasis"><em>USER</em></span> may contain the username of the
    273292person to be used to authenticate to the server.
    … …  
    281300of a file to read the password from. A single line of input is
    282301read and used as the password.
    283         </p></div><div class="refsect1" title="NOTES"><a name="id307687"></a><h2>NOTES</h2><p>This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled. When installed as a setuid program, the program follows the conventions set forth by the mount program for user mounts.</p><p>
     302        </p></div><div class="refsect1" title="NOTES"><a name="id307726"></a><h2>NOTES</h2><p>This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled. When installed as a setuid program, the program follows the conventions set forth by the mount program for user mounts.</p><p>
    284303        Some samba client tools like smbclient(8) honour client-side
    285304        configuration parameters present in smb.conf. Unlike those
    286305        client tools, <span class="emphasis"><em>mount.cifs</em></span> ignores smb.conf
    287306        completely.
    288         </p></div><div class="refsect1" title="CONFIGURATION"><a name="id307706"></a><h2>CONFIGURATION</h2><p>
     307        </p></div><div class="refsect1" title="CONFIGURATION"><a name="id307745"></a><h2>CONFIGURATION</h2><p>
    289308The primary mechanism for making configuration changes and for reading
    290309debug information for the cifs vfs is via the Linux /proc filesystem.
    … …  
    297316installation (device driver load).
    298317For more information see the kernel file <code class="filename">fs/cifs/README</code>.
    299 </p></div><div class="refsect1" title="BUGS"><a name="id307732"></a><h2>BUGS</h2><p>Mounting using the CIFS URL specification is currently not supported.
     318</p></div><div class="refsect1" title="BUGS"><a name="id307771"></a><h2>BUGS</h2><p>Mounting using the CIFS URL specification is currently not supported.
    300319        </p><p>The credentials file does not handle usernames or passwords with
    301320                leading space.</p><p>
    … …  
    305324when reporting bugs (minimum: mount.cifs (try mount.cifs -V), kernel (see /proc/version) and
    306325server type you are trying to contact.
    307 </p></div><div class="refsect1" title="VERSION"><a name="id307751"></a><h2>VERSION</h2><p>This man page is correct for version 1.52 of
    308         the cifs vfs filesystem (roughly Linux kernel 2.6.24).</p></div><div class="refsect1" title="SEE ALSO"><a name="id307761"></a><h2>SEE ALSO</h2><p>
     326</p></div><div class="refsect1" title="VERSION"><a name="id307790"></a><h2>VERSION</h2><p>This man page is correct for version 1.52 of
     327        the cifs vfs filesystem (roughly Linux kernel 2.6.24).</p></div><div class="refsect1" title="SEE ALSO"><a name="id307801"></a><h2>SEE ALSO</h2><p>
    309328        Documentation/filesystems/cifs.txt and fs/cifs/README in the linux kernel
    310329        source tree may contain additional options and information.
    311 </p><p><a class="citerefentry" href="umount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">umount.cifs</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307781"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax and manpage were loosely based on that of smbmount. It
     330</p><p><a class="citerefentry" href="umount.cifs.8.html"><span class="citerefentry"><span class="refentrytitle">umount.cifs</span>(8)</span></a></p></div><div class="refsect1" title="AUTHOR"><a name="id307820"></a><h2>AUTHOR</h2><p>Steve French</p><p>The syntax and manpage were loosely based on that of smbmount. It
    312331                was converted to Docbook/XML by Jelmer Vernooij.</p><p>The maintainer of the Linux cifs vfs and the userspace
    313332                tool <span class="emphasis"><em>mount.cifs</em></span> is <a class="ulink" href="mailto:sfrench@samba.org" target="_top">Steve French</a>.

  • branches/samba-3.5.x/docs/htmldocs/manpages/smb.conf.5.html

    r599 r736  
    930930
    931931case sensitive (S)
    932 </h3></div></div></div><a class="indexterm" name="id311071"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>
     932</h3></div></div></div><a class="indexterm" name="id311071"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">auto</code>
    933933</em></span>
    934934</p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311114"></a>
    … …  
    10791079</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code>
    10801080</em></span>
    1081 </p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311813"></a>
     1081</p></dd></dl></div></div><div class="section" title="client use spnego principal (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311813"></a>
     1082
     1083client use spnego principal (G)
     1084</h3></div></div></div><a class="indexterm" name="id311814"></a><a name="CLIENTUSESPNEGOPRINCIPAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     1085    <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba components
     1086    acting as a client will attempt to use the server-supplied
     1087    principal sometimes given in the SPNEGO exchange.</p><p>If enabled, Samba can attempt to use Kerberos to contact
     1088    servers known only by IP address.  Kerberos relies on names, so
     1089    ordinarily cannot function in this situation. </p><p>If disabled, Samba will use the name used to look up the
     1090    server when asking the KDC for a ticket.  This avoids situations
     1091    where a server may impersonate another, soliciting authentication
     1092    as one principal while being known on the network as another.
     1093    </p><p>Note that Windows XP SP2 and later versions already follow
     1094    this behaviour, and Windows Vista and later servers no longer
     1095    supply this 'rfc4178 hint' principal on the server side.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego principal</code></em> = <code class="literal">no</code>
     1096</em></span>
     1097</p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311874"></a>
    10821098
    10831099client use spnego (G)
    1084 </h3></div></div></div><a class="indexterm" name="id311814"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
     1100</h3></div></div></div><a class="indexterm" name="id311875"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
    10851101    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    10861102    supporting servers (including WindowsXP, Windows2000 and Samba
    … …  
    10881104    mechanism.  This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code>
    10891105</em></span>
    1090 </p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311852"></a>
     1106</p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311913"></a>
    10911107
    10921108cluster addresses (G)
    1093 </h3></div></div></div><a class="indexterm" name="id311853"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
     1109</h3></div></div></div><a class="indexterm" name="id311914"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
    10941110        nmbd will register with a WINS server. These addresses are not
    10951111        necessarily present on all nodes simultaneously, but they will
    … …  
    11001116</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code>
    11011117</em></span>
    1102 </p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311906"></a>
     1118</p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311967"></a>
    11031119
    11041120clustering (G)
    1105 </h3></div></div></div><a class="indexterm" name="id311907"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
     1121</h3></div></div></div><a class="indexterm" name="id311968"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
    11061122        ctdb for accessing its tdb files and use ctdb as a backend
    11071123        for its messaging backend.
    … …  
    11101126        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code>
    11111127</em></span>
    1112 </p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311953"></a>
     1128</p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312014"></a>
    11131129
    11141130comment (S)
    1115 </h3></div></div></div><a class="indexterm" name="id311954"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
     1131</h3></div></div></div><a class="indexterm" name="id312015"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
    11161132        when a client does a queries the server, either via the network
    11171133        neighborhood or via <code class="literal">net view</code> to list what shares
    … …  
    11221138</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code>
    11231139</em></span>
    1124 </p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312024"></a>
     1140</p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312085"></a>
    11251141
    11261142config backend (G)
    1127 </h3></div></div></div><a class="indexterm" name="id312025"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1143</h3></div></div></div><a class="indexterm" name="id312086"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11281144                This controls the backend for storing the configuration.
    11291145                Possible values are <span class="emphasis"><em>file</em></span> (the default)
    … …  
    11431159</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code>
    11441160</em></span>
    1145 </p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312108"></a>
     1161</p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312168"></a>
    11461162
    11471163config file (G)
    1148 </h3></div></div></div><a class="indexterm" name="id312109"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
     1164</h3></div></div></div><a class="indexterm" name="id312170"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
    11491165        to use, instead of the default (usually <code class="filename">smb.conf</code>).
    11501166        There is a chicken and egg problem here as this option is set
    … …  
    11561172        clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code>
    11571173</em></span>
    1158 </p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312168"></a>
     1174</p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312229"></a>
    11591175
    11601176copy (S)
    1161 </h3></div></div></div><a class="indexterm" name="id312169"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
     1177</h3></div></div></div><a class="indexterm" name="id312230"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
    11621178        entries. The specified service is simply duplicated under the
    11631179        current service's name. Any parameters specified in the current
    … …  
    11691185</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code>
    11701186</em></span>
    1171 </p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312227"></a>
     1187</p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312288"></a>
    11721188
    11731189create krb5 conf (G)
    1174 </h3></div></div></div><a class="indexterm" name="id312228"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1190</h3></div></div></div><a class="indexterm" name="id312289"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11751191        Setting this paramter to <code class="literal">no</code> prevents
    11761192        winbind from creating custom krb5.conf files. Winbind normally does
    … …  
    11851201        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create krb5 conf</code></em> = <code class="literal">yes</code>
    11861202</em></span>
    1187 </p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312276"></a>
     1203</p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312337"></a>
    11881204
    11891205<a name="CREATEMODE"></a>create mode
    1190 </h3></div></div></div><a class="indexterm" name="id312278"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312303"></a>
     1206</h3></div></div></div><a class="indexterm" name="id312338"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312364"></a>
    11911207
    11921208create mask (S)
    1193 </h3></div></div></div><a class="indexterm" name="id312304"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1209</h3></div></div></div><a class="indexterm" name="id312365"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11941210        When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
    11951211        UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
    … …  
    12121228</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code>
    12131229</em></span>
    1214 </p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312411"></a>
     1230</p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312472"></a>
    12151231
    12161232csc policy (S)
    1217 </h3></div></div></div><a class="indexterm" name="id312412"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1233</h3></div></div></div><a class="indexterm" name="id312473"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12181234        This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline
    12191235        caching will cache the files in the share. The valid values are: manual, documents, programs, disable.
    … …  
    12271243</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code>
    12281244</em></span>
    1229 </p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312483"></a>
     1245</p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312544"></a>
    12301246
    12311247ctdbd socket (G)
    1232 </h3></div></div></div><a class="indexterm" name="id312484"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
     1248</h3></div></div></div><a class="indexterm" name="id312545"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
    12331249        you need to tell Samba where ctdbd listens on its unix domain
    12341250        socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which
    … …  
    12381254</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code>
    12391255</em></span>
    1240 </p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312542"></a>
     1256</p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312603"></a>
    12411257
    12421258ctdb timeout (G)
    1243 </h3></div></div></div><a class="indexterm" name="id312543"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
     1259</h3></div></div></div><a class="indexterm" name="id312604"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
    12441260          connection between Samba and ctdb. It is only valid if you
    12451261          have compiled Samba with clustering and if you have
    … …  
    12671283        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ctdb timeout</code></em> = <code class="literal">0</code>
    12681284</em></span>
    1269 </p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312614"></a>
     1285</p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312670"></a>
    12701286
    12711287cups connection timeout (G)
    1272 </h3></div></div></div><a class="indexterm" name="id312616"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1288</h3></div></div></div><a class="indexterm" name="id312671"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12731289    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    12741290    </p><p>
    … …  
    12801296</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups connection timeout</code></em> = <code class="literal">60</code>
    12811297</em></span>
    1282 </p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312682"></a>
     1298</p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312738"></a>
    12831299
    12841300cups encrypt (G)
    1285 </h3></div></div></div><a class="indexterm" name="id312684"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1301</h3></div></div></div><a class="indexterm" name="id312739"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12861302        This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a>
    12871303        is set to <code class="constant">cups</code> and if you use CUPS newer than
    … …  
    12961312        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>cups encrypt</code></em> = <code class="literal">"no"</code>
    12971313</em></span>
    1298 </p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312745"></a>
     1314</p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312801"></a>
    12991315
    13001316cups options (S)
    1301 </h3></div></div></div><a class="indexterm" name="id312746"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1317</h3></div></div></div><a class="indexterm" name="id312802"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13021318    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is
    13031319    set to <code class="constant">cups</code>.  Its value is a free form string of options
    … …  
    13211337</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code>
    13221338</em></span>
    1323 </p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312835"></a>
     1339</p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312891"></a>
    13241340
    13251341cups server (G)
    1326 </h3></div></div></div><a class="indexterm" name="id312836"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1342</h3></div></div></div><a class="indexterm" name="id312892"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13271343    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    13281344    </p><p>
    … …  
    13381354</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code>
    13391355</em></span>
    1340 </p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312927"></a>
     1356</p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312983"></a>
    13411357
    13421358deadtime (G)
    1343 </h3></div></div></div><a class="indexterm" name="id312928"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
     1359</h3></div></div></div><a class="indexterm" name="id312984"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
    13441360    represents the number of minutes of inactivity before a connection
    13451361    is considered dead, and it is disconnected. The deadtime only takes
    … …  
    13531369</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code>
    13541370</em></span>
    1355 </p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312998"></a>
     1371</p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313054"></a>
    13561372
    13571373debug class (G)
    1358 </h3></div></div></div><a class="indexterm" name="id312999"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1374</h3></div></div></div><a class="indexterm" name="id313055"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13591375    With this boolean parameter enabled, the debug class (DBGC_CLASS)
    13601376    will be displayed in the debug header.
    … …  
    13641380    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code>
    13651381</em></span>
    1366 </p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313048"></a>
     1382</p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313104"></a>
    13671383
    13681384debug hires timestamp (G)
    1369 </h3></div></div></div><a class="indexterm" name="id313049"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1385</h3></div></div></div><a class="indexterm" name="id313105"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13701386    Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this
    13711387    boolean parameter adds microsecond resolution to the timestamp  message header when turned on.
    … …  
    13741390    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">yes</code>
    13751391</em></span>
    1376 </p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313097"></a>
     1392</p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313153"></a>
    13771393
    13781394debug pid (G)
    1379 </h3></div></div></div><a class="indexterm" name="id313098"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1395</h3></div></div></div><a class="indexterm" name="id313154"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13801396    When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which
    13811397    message. This boolean parameter is adds the process-id to the timestamp message headers in the
    … …  
    13851401    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code>
    13861402</em></span>
    1387 </p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313154"></a>
     1403</p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313210"></a>
    13881404
    13891405debug prefix timestamp (G)
    1390 </h3></div></div></div><a class="indexterm" name="id313155"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1406</h3></div></div></div><a class="indexterm" name="id313211"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13911407    With this option enabled, the timestamp message header is prefixed to the debug message without the
    13921408    filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a>
    … …  
    13961412    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code>
    13971413</em></span>
    1398 </p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313211"></a>
     1414</p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313267"></a>
    13991415
    14001416<a name="TIMESTAMPLOGS"></a>timestamp logs
    1401 </h3></div></div></div><a class="indexterm" name="id313212"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313237"></a>
     1417</h3></div></div></div><a class="indexterm" name="id313268"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313293"></a>
    14021418
    14031419debug timestamp (G)
    1404 </h3></div></div></div><a class="indexterm" name="id313238"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1420</h3></div></div></div><a class="indexterm" name="id313294"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14051421    Samba debug log messages are timestamped by default. If you are running at a high
    14061422    <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This
    … …  
    14081424        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code>
    14091425</em></span>
    1410 </p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313283"></a>
     1426</p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313339"></a>
    14111427
    14121428debug uid (G)
    1413 </h3></div></div></div><a class="indexterm" name="id313284"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1429</h3></div></div></div><a class="indexterm" name="id313340"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14141430    Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the
    14151431    current euid, egid, uid and gid to the timestamp message headers in the log file if turned on.
    … …  
    14181434    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code>
    14191435</em></span>
    1420 </p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313332"></a>
     1436</p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313388"></a>
    14211437
    14221438dedicated keytab file (G)
    1423 </h3></div></div></div><a class="indexterm" name="id313334"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1439</h3></div></div></div><a class="indexterm" name="id313389"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14241440          Specifies the path to the kerberos keytab file when
    14251441          <a class="link" href="smb.conf.5.html#KERBEROSMETHOD" target="_top">kerberos method</a> is set to "dedicated
    … …  
    14291445</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dedicated keytab file</code></em> = <code class="literal">/usr/local/etc/krb5.keytab</code>
    14301446</em></span>
    1431 </p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313392"></a>
     1447</p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313448"></a>
    14321448
    14331449default case (S)
    1434 </h3></div></div></div><a class="indexterm" name="id313393"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
     1450</h3></div></div></div><a class="indexterm" name="id313449"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
    14351451        Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code>
    14361452</em></span>
    1437 </p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313443"></a>
     1453</p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313499"></a>
    14381454
    14391455default devmode (S)
    1440 </h3></div></div></div><a class="indexterm" name="id313444"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
     1456</h3></div></div></div><a class="indexterm" name="id313500"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
    14411457    When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
    14421458    server has a Device Mode which defines things such as paper size and
    … …  
    14611477</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code>
    14621478</em></span>
    1463 </p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313517"></a>
     1479</p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313577"></a>
    14641480
    14651481<a name="DEFAULT"></a>default
    1466 </h3></div></div></div><a class="indexterm" name="id313518"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313544"></a>
     1482</h3></div></div></div><a class="indexterm" name="id313578"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313603"></a>
    14671483
    14681484default service (G)
    1469 </h3></div></div></div><a class="indexterm" name="id313545"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
     1485</h3></div></div></div><a class="indexterm" name="id313604"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
    14701486        which will be connected to if the service actually requested cannot
    14711487        be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span>
    … …  
    14811497</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code>
    14821498</em></span>
    1483 </p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313637"></a>
     1499</p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313696"></a>
    14841500
    14851501defer sharing violations (G)
    1486 </h3></div></div></div><a class="indexterm" name="id313638"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1502</h3></div></div></div><a class="indexterm" name="id313698"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14871503        Windows allows specifying how a file will be shared with
    14881504        other processes when it is opened. Sharing violations occur when
    … …  
    14971513        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code>
    14981514</em></span>
    1499 </p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313686"></a>
     1515</p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313745"></a>
    15001516
    15011517delete group script (G)
    1502 </h3></div></div></div><a class="indexterm" name="id313687"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1518</h3></div></div></div><a class="indexterm" name="id313746"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15031519        be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted.
    15041520        It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. 
    … …  
    15061522        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code>
    15071523</em></span>
    1508 </p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313740"></a>
     1524</p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313799"></a>
    15091525
    15101526deleteprinter command (G)
    1511 </h3></div></div></div><a class="indexterm" name="id313741"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
     1527</h3></div></div></div><a class="indexterm" name="id313800"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
    15121528    support for Windows NT/2000 clients in Samba 2.2, it is now
    15131529    possible to delete a printer at run time by issuing the
    … …  
    15271543</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code>
    15281544</em></span>
    1529 </p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313856"></a>
     1545</p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313915"></a>
    15301546
    15311547delete readonly (S)
    1532 </h3></div></div></div><a class="indexterm" name="id313857"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
     1548</h3></div></div></div><a class="indexterm" name="id313916"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
    15331549        This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such
    15341550        as rcs, where UNIX file ownership prevents changing file
    15351551        permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code>
    15361552</em></span>
    1537 </p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313898"></a>
     1553</p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313958"></a>
    15381554
    15391555delete share command (G)
    1540 </h3></div></div></div><a class="indexterm" name="id313900"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1556</h3></div></div></div><a class="indexterm" name="id313959"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    15411557        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    15421558        Manager.  The <em class="parameter"><code>delete share command</code></em> is used to define an external
    … …  
    15641580</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code>
    15651581</em></span>
    1566 </p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314042"></a>
     1582</p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314101"></a>
    15671583
    15681584delete user from group script (G)
    1569 </h3></div></div></div><a class="indexterm" name="id314043"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
     1585</h3></div></div></div><a class="indexterm" name="id314102"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
    15701586        a user is removed from a group using the Windows NT domain administration
    15711587        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>.
    … …  
    15761592</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code>
    15771593</em></span>
    1578 </p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314116"></a>
     1594</p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314175"></a>
    15791595
    15801596delete user script (G)
    1581 </h3></div></div></div><a class="indexterm" name="id314117"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1597</h3></div></div></div><a class="indexterm" name="id314176"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15821598        be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users
    15831599        with remote RPC (NT) tools.
    … …  
    15881604</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code>
    15891605</em></span>
    1590 </p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314188"></a>
     1606</p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314248"></a>
    15911607
    15921608delete veto files (S)
    1593 </h3></div></div></div><a class="indexterm" name="id314189"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
     1609</h3></div></div></div><a class="indexterm" name="id314249"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
    15941610        delete a directory that contains one or more vetoed directories
    15951611        (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a>
    … …  
    16051621        is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code>
    16061622</em></span>
    1607 </p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314264"></a>
     1623</p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314323"></a>
    16081624
    16091625dfree cache time (S)
    1610 </h3></div></div></div><a class="indexterm" name="id314265"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1626</h3></div></div></div><a class="indexterm" name="id314324"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16111627        The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem
    16121628        occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur
    … …  
    16211637        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code>
    16221638</em></span>
    1623 </p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314329"></a>
     1639</p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314389"></a>
    16241640
    16251641dfree command (S)
    1626 </h3></div></div></div><a class="indexterm" name="id314330"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1642</h3></div></div></div><a class="indexterm" name="id314390"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16271643        The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a
    16281644        problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may
    … …  
    16621678        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code>
    16631679</em></span>
    1664 </p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314435"></a>
     1680</p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314495"></a>
    16651681
    16661682<a name="DIRECTORYMODE"></a>directory mode
    1667 </h3></div></div></div><a class="indexterm" name="id314436"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314462"></a>
     1683</h3></div></div></div><a class="indexterm" name="id314496"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314521"></a>
    16681684
    16691685directory mask (S)
    1670 </h3></div></div></div><a class="indexterm" name="id314463"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
     1686</h3></div></div></div><a class="indexterm" name="id314522"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
    16711687    used when converting DOS modes to UNIX modes when creating UNIX
    16721688    directories.</p><p>When a directory is created, the necessary permissions are
    … …  
    16861702</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code>
    16871703</em></span>
    1688 </p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314556"></a>
     1704</p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314615"></a>
    16891705
    16901706directory name cache size (S)
    1691 </h3></div></div></div><a class="indexterm" name="id314557"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1707</h3></div></div></div><a class="indexterm" name="id314616"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16921708        This parameter specifies the the size of the directory name cache.
    16931709        It will be needed to turn this off for *BSD systems.
    16941710        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory name cache size</code></em> = <code class="literal">100</code>
    16951711</em></span>
    1696 </p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314594"></a>
     1712</p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314653"></a>
    16971713
    16981714directory security mask (S)
    1699 </h3></div></div></div><a class="indexterm" name="id314595"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
     1715</h3></div></div></div><a class="indexterm" name="id314654"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
    17001716    will be set when a Windows NT client is manipulating the UNIX
    17011717    permission on a directory using the native NT security dialog
    … …  
    17171733</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code>
    17181734</em></span>
    1719 </p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314682"></a>
     1735</p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314741"></a>
    17201736
    17211737disable netbios (G)
    1722 </h3></div></div></div><a class="indexterm" name="id314683"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
     1738</h3></div></div></div><a class="indexterm" name="id314742"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
    17231739    in Samba. Netbios is the only available form of browsing in
    17241740    all windows versions except for 2000 and XP. </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to
    … …  
    17261742        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code>
    17271743</em></span>
    1728 </p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314725"></a>
     1744</p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314785"></a>
    17291745
    17301746disable spoolss (G)
    1731 </h3></div></div></div><a class="indexterm" name="id314726"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
     1747</h3></div></div></div><a class="indexterm" name="id314786"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
    17321748    for the SPOOLSS set of MS-RPC's and will yield identical behavior
    17331749    as Samba 2.0.x.  Windows NT/2000 clients will downgrade to using
    … …  
    17411757</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code>
    17421758</em></span>
    1743 </p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314770"></a>
     1759</p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314830"></a>
    17441760
    17451761display charset (G)
    1746 </h3></div></div></div><a class="indexterm" name="id314772"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1762</h3></div></div></div><a class="indexterm" name="id314831"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17471763        Specifies the charset that samba will use to print messages to stdout and stderr.
    17481764        The default value is "LOCALE", which means automatically set, depending on the
    … …  
    17531769</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code>
    17541770</em></span>
    1755 </p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314832"></a>
     1771</p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314892"></a>
    17561772
    17571773dmapi support (S)
    1758 </h3></div></div></div><a class="indexterm" name="id314834"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
     1774</h3></div></div></div><a class="indexterm" name="id314893"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
    17591775        determine whether a file is offline or not. This would typically
    17601776        be used in conjunction with a hierarchical storage system that
    … …  
    17711787        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code>
    17721788</em></span>
    1773 </p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314885"></a>
     1789</p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314945"></a>
    17741790
    17751791dns proxy (G)
    1776 </h3></div></div></div><a class="indexterm" name="id314886"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
     1792</h3></div></div></div><a class="indexterm" name="id314946"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
    17771793        finding that a NetBIOS name has not been registered, should treat the
    17781794        NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server
    … …  
    17831799        action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code>
    17841800</em></span>
    1785 </p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314945"></a>
     1801</p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315004"></a>
    17861802
    17871803domain logons (G)
    1788 </h3></div></div></div><a class="indexterm" name="id314946"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1804</h3></div></div></div><a class="indexterm" name="id315005"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17891805        If set to <code class="constant">yes</code>, the Samba server will
    17901806        provide the netlogon service for Windows 9X network logons for the
    … …  
    17961812        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code>
    17971813</em></span>
    1798 </p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314995"></a>
     1814</p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315054"></a>
    17991815
    18001816domain master (G)
    1801 </h3></div></div></div><a class="indexterm" name="id314996"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1817</h3></div></div></div><a class="indexterm" name="id315055"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    18021818        Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable
    18031819        WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a
    … …  
    18251841        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code>
    18261842</em></span>
    1827 </p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315162"></a>
     1843</p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315221"></a>
    18281844
    18291845dont descend (S)
    1830 </h3></div></div></div><a class="indexterm" name="id315163"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
     1846</h3></div></div></div><a class="indexterm" name="id315222"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
    18311847        (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not
    18321848        of interest to clients or are infinitely deep (recursive). This
    … …  
    18391855</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code>
    18401856</em></span>
    1841 </p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315236"></a>
     1857</p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315295"></a>
    18421858
    18431859dos charset (G)
    1844 </h3></div></div></div><a class="indexterm" name="id315237"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
     1860</h3></div></div></div><a class="indexterm" name="id315296"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
    18451861        the same charset as they do. This option specifies which
    18461862        charset Samba should talk to DOS clients.
    18471863        </p><p>The default depends on which charsets you have installed.
    18481864        Samba tries to use charset 850 but falls back to ASCII in
    1849         case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315274"></a>
     1865        case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315334"></a>
    18501866
    18511867dos filemode (S)
    1852 </h3></div></div></div><a class="indexterm" name="id315275"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
     1868</h3></div></div></div><a class="indexterm" name="id315335"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
    18531869        UNIX-like behavior where only the owner of a file/directory is
    18541870        able to change the permissions on it.  However, this behavior
    … …  
    18671883        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code>
    18681884</em></span>
    1869 </p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315325"></a>
     1885</p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315378"></a>
    18701886
    18711887dos filetime resolution (S)
    1872 </h3></div></div></div><a class="indexterm" name="id315326"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
     1888</h3></div></div></div><a class="indexterm" name="id315379"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
    18731889        granularity on time resolution is two seconds. Setting this parameter
    18741890        for a share causes Samba to round the reported time down to the
    … …  
    18851901        happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code>
    18861902</em></span>
    1887 </p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315380"></a>
     1903</p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315433"></a>
    18881904
    18891905dos filetimes (S)
    1890 </h3></div></div></div><a class="indexterm" name="id315381"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
     1906</h3></div></div></div><a class="indexterm" name="id315434"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
    18911907        file they can change the timestamp on it. Under POSIX semantics,
    18921908        only the owner of the file or root may change the timestamp. By
    … …  
    19011917        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code>
    19021918</em></span>
    1903 </p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315428"></a>
     1919</p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id265648"></a>
    19041920
    19051921ea support (S)
    1906 </h3></div></div></div><a class="indexterm" name="id315429"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
     1922</h3></div></div></div><a class="indexterm" name="id265649"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
    19071923    attributes on a share. In order to enable this parameter the underlying filesystem exported by
    19081924    the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the
    … …  
    19111927                extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code>
    19121928</em></span>
    1913 </p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315476"></a>
     1929</p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315602"></a>
    19141930
    19151931enable asu support (G)
    1916 </h3></div></div></div><a class="indexterm" name="id315477"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
     1932</h3></div></div></div><a class="indexterm" name="id315603"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
    19171933    require some special accomodations such as creating a builtin [ADMIN$]
    19181934    share that only supports IPC connections.  The has been the default
    … …  
    19221938    an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code>
    19231939</em></span>
    1924 </p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315517"></a>
     1940</p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315642"></a>
    19251941
    19261942enable core files (G)
    1927 </h3></div></div></div><a class="indexterm" name="id315518"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
     1943</h3></div></div></div><a class="indexterm" name="id315644"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
    19281944        on internal exits. Normally set to <code class="constant">yes</code>.
    19291945        You should never need to change this.
    … …  
    19321948</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enable core files</code></em> = <code class="literal">no</code>
    19331949</em></span>
    1934 </p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315574"></a>
     1950</p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315699"></a>
    19351951
    19361952enable privileges (G)
    1937 </h3></div></div></div><a class="indexterm" name="id315575"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1953</h3></div></div></div><a class="indexterm" name="id315700"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    19381954        This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
    19391955         <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools.  This parameter is
    … …  
    19481964        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code>
    19491965</em></span>
    1950 </p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315628"></a>
     1966</p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315753"></a>
    19511967
    19521968enable spoolss (G)
    1953 </h3></div></div></div><a class="indexterm" name="id315629"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
    1954 </em></span>
    1955 </p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315673"></a>
     1969</h3></div></div></div><a class="indexterm" name="id315754"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
     1970</em></span>
     1971</p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315798"></a>
    19561972
    19571973encrypt passwords (G)
    1958 </h3></div></div></div><a class="indexterm" name="id315674"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
     1974</h3></div></div></div><a class="indexterm" name="id315799"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
    19591975    will be negotiated with the client. Note that Windows NT 4.0 SP3 and
    19601976    above and also Windows 98 will by default expect encrypted passwords
    … …  
    19791995        server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code>
    19801996</em></span>
    1981 </p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315837"></a>
     1997</p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315889"></a>
    19821998
    19831999enhanced browsing (G)
    1984 </h3></div></div></div><a class="indexterm" name="id315838"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
     2000</h3></div></div></div><a class="indexterm" name="id315890"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
    19852001        cross-subnet browse propagation that have been added in Samba
    19862002        but which are not standard in Microsoft implementations. 
    … …  
    19952011        cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code>
    19962012</em></span>
    1997 </p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315891"></a>
     2013</p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315946"></a>
    19982014
    19992015enumports command (G)
    2000 </h3></div></div></div><a class="indexterm" name="id315892"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
     2016</h3></div></div></div><a class="indexterm" name="id315947"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
    20012017    to UNIX hosts.  Under Windows NT/2000 print servers, a port
    20022018    is associated with a port monitor and generally takes the form of
    … …  
    20152031</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code>
    20162032</em></span>
    2017 </p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315971"></a>
     2033</p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316028"></a>
    20182034
    20192035eventlog list (G)
    2020 </h3></div></div></div><a class="indexterm" name="id315972"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
     2036</h3></div></div></div><a class="indexterm" name="id316029"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
    20212037    report to the Microsoft EventViewer utility.  The listed
    20222038    eventlogs will be associated with tdb file on disk in the
    … …  
    20312047</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code>
    20322048</em></span>
    2033 </p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316046"></a>
     2049</p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316103"></a>
    20342050
    20352051fake directory create times (S)
    2036 </h3></div></div></div><a class="indexterm" name="id316047"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
     2052</h3></div></div></div><a class="indexterm" name="id316104"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
    20372053        time for all files and directories. This is not the same as the
    20382054        ctime - status change time - that Unix keeps, so Samba by default
    … …  
    20562072        will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code>
    20572073</em></span>
    2058 </p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316106"></a>
     2074</p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316167"></a>
    20592075
    20602076fake oplocks (S)
    2061 </h3></div></div></div><a class="indexterm" name="id316107"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
     2077</h3></div></div></div><a class="indexterm" name="id316168"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
    20622078        from a server to locally cache file operations. If a server grants
    20632079        an oplock (opportunistic lock) then the client is free to assume
    … …  
    20752091        this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code>
    20762092</em></span>
    2077 </p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316188"></a>
     2093</p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316249"></a>
    20782094
    20792095follow symlinks (S)
    2080 </h3></div></div></div><a class="indexterm" name="id316189"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2096</h3></div></div></div><a class="indexterm" name="id316250"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20812097        This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>       from following symbolic links in a particular share. Setting this
    20822098        parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being
    … …  
    20882104        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code>
    20892105</em></span>
    2090 </p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316258"></a>
     2106</p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316319"></a>
    20912107
    20922108force create mode (S)
    2093 </h3></div></div></div><a class="indexterm" name="id316259"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2109</h3></div></div></div><a class="indexterm" name="id316320"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    20942110    permissions that will <span class="emphasis"><em>always</em></span> be set on a
    20952111    file created by Samba. This is done by bitwise 'OR'ing these bits onto
    … …  
    21032119</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code>
    21042120</em></span>
    2105 </p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316334"></a>
     2121</p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316395"></a>
    21062122
    21072123force directory mode (S)
    2108 </h3></div></div></div><a class="indexterm" name="id316335"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2124</h3></div></div></div><a class="indexterm" name="id316396"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    21092125    permissions that will <span class="emphasis"><em>always</em></span> be set on a directory
    21102126    created by Samba. This is done by bitwise 'OR'ing these bits onto the
    … …  
    21192135</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code>
    21202136</em></span>
    2121 </p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316409"></a>
     2137</p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316470"></a>
    21222138
    21232139force directory security mode (S)
    2124 </h3></div></div></div><a class="indexterm" name="id316410"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2140</h3></div></div></div><a class="indexterm" name="id316471"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    21252141        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    21262142        the UNIX permission on a directory using the native NT security dialog box.
    … …  
    21432159</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code>
    21442160</em></span>
    2145 </p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316502"></a>
     2161</p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316563"></a>
    21462162
    21472163<a name="GROUP"></a>group
    2148 </h3></div></div></div><a class="indexterm" name="id316503"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316534"></a>
     2164</h3></div></div></div><a class="indexterm" name="id316564"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316595"></a>
    21492165
    21502166force group (S)
    2151 </h3></div></div></div><a class="indexterm" name="id316535"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
     2167</h3></div></div></div><a class="indexterm" name="id316596"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
    21522168    assigned as the default primary group for all users connecting
    21532169    to this service. This is useful for sharing files by ensuring
    … …  
    21732189</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code>
    21742190</em></span>
    2175 </p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316636"></a>
     2191</p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316697"></a>
    21762192
    21772193force printername (S)
    2178 </h3></div></div></div><a class="indexterm" name="id316637"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
     2194</h3></div></div></div><a class="indexterm" name="id316698"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
    21792195    each printer in <code class="filename">smb.conf</code> has two
    21802196    associated names which can be used by the client.  The first
    … …  
    21992215    folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code>
    22002216</em></span>
    2201 </p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316716"></a>
     2217</p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316777"></a>
    22022218
    22032219force security mode (S)
    2204 </h3></div></div></div><a class="indexterm" name="id316717"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2220</h3></div></div></div><a class="indexterm" name="id316778"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22052221        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    22062222    the UNIX permission on a file using the native NT security dialog box.
    … …  
    22222238</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code>
    22232239</em></span>
    2224 </p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316807"></a>
     2240</p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316868"></a>
    22252241
    22262242force unknown acl user (S)
    2227 </h3></div></div></div><a class="indexterm" name="id316808"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2243</h3></div></div></div><a class="indexterm" name="id316869"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22282244    If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or
    22292245    representation of a user or group id) as the owner or group owner of the file will be silently
    … …  
    22392255    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code>
    22402256</em></span>
    2241 </p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316861"></a>
     2257</p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316922"></a>
    22422258
    22432259force user (S)
    2244 </h3></div></div></div><a class="indexterm" name="id316862"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
     2260</h3></div></div></div><a class="indexterm" name="id316923"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
    22452261    assigned as the default user for all users connecting to this service.
    22462262    This is useful for sharing files. You should also use it carefully
    … …  
    22562272</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code>
    22572273</em></span>
    2258 </p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316931"></a>
     2274</p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316992"></a>
    22592275
    22602276fstype (S)
    2261 </h3></div></div></div><a class="indexterm" name="id316932"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2277</h3></div></div></div><a class="indexterm" name="id316993"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22622278        This parameter allows the administrator to configure the string that specifies the type of filesystem a share
    22632279        is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    … …  
    22692285</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code>
    22702286</em></span>
    2271 </p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317010"></a>
     2287</p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317071"></a>
    22722288
    22732289get quota command (G)
    2274 </h3></div></div></div><a class="indexterm" name="id317011"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
     2290</h3></div></div></div><a class="indexterm" name="id317072"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
    22752291        whenever there is no operating system API available from the OS that
    22762292        samba can use.</p><p>This option is only available you have compiled Samba with the
    … …  
    22852301</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code>
    22862302</em></span>
    2287 </p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317186"></a>
     2303</p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317247"></a>
    22882304
    22892305getwd cache (G)
    2290 </h3></div></div></div><a class="indexterm" name="id317187"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
     2306</h3></div></div></div><a class="indexterm" name="id317248"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
    22912307    caching algorithm will be used to reduce the time taken for getwd()
    22922308    calls. This can have a significant impact on performance, especially
    22932309    when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code>
    22942310</em></span>
    2295 </p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317244"></a>
     2311</p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317305"></a>
    22962312
    22972313guest account (G)
    2298 </h3></div></div></div><a class="indexterm" name="id317245"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
     2314</h3></div></div></div><a class="indexterm" name="id317306"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
    22992315    to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this
    23002316    user has will be available to any client connecting to the guest service.
    … …  
    23142330</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code>
    23152331</em></span>
    2316 </p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317343"></a>
     2332</p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317404"></a>
    23172333
    23182334<a name="PUBLIC"></a>public
    2319 </h3></div></div></div><a class="indexterm" name="id317344"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317374"></a>
     2335</h3></div></div></div><a class="indexterm" name="id317405"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317435"></a>
    23202336
    23212337guest ok (S)
    2322 </h3></div></div></div><a class="indexterm" name="id317375"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2338</h3></div></div></div><a class="indexterm" name="id317436"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23232339    a service, then no password is required to connect to the service.
    23242340    Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This paramater nullifies the benifits of setting
    … …  
    23272343        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code>
    23282344</em></span>
    2329 </p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317459"></a>
     2345</p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317520"></a>
    23302346
    23312347<a name="ONLYGUEST"></a>only guest
    2332 </h3></div></div></div><a class="indexterm" name="id317460"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317492"></a>
     2348</h3></div></div></div><a class="indexterm" name="id317521"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317553"></a>
    23332349
    23342350guest only (S)
    2335 </h3></div></div></div><a class="indexterm" name="id317493"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2351</h3></div></div></div><a class="indexterm" name="id317554"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23362352    a service, then only guest connections to the service are permitted.
    23372353    This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option.
    23382354        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code>
    23392355</em></span>
    2340 </p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317561"></a>
     2356</p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317622"></a>
    23412357
    23422358hide dot files (S)
    2343 </h3></div></div></div><a class="indexterm" name="id317562"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
     2359</h3></div></div></div><a class="indexterm" name="id317623"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
    23442360        files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code>
    23452361</em></span>
    2346 </p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317602"></a>
     2362</p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317663"></a>
    23472363
    23482364hide files (S)
    2349 </h3></div></div></div><a class="indexterm" name="id317603"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
     2365</h3></div></div></div><a class="indexterm" name="id317664"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
    23502366        visible but are accessible.  The DOS 'hidden' attribute is applied
    23512367        to any files or directories that match.</p><p>Each entry in the list must be separated by a '/',
    … …  
    23692385# no file are hidden</code>
    23702386</em></span>
    2371 </p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317681"></a>
     2387</p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317742"></a>
    23722388
    23732389hide special files (S)
    2374 </h3></div></div></div><a class="indexterm" name="id317682"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2390</h3></div></div></div><a class="indexterm" name="id317743"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23752391        This parameter prevents clients from seeing special files such as sockets, devices and
    23762392        fifo's in directory listings.
    23772393        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code>
    23782394</em></span>
    2379 </p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317722"></a>
     2395</p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317783"></a>
    23802396
    23812397hide unreadable (S)
    2382 </h3></div></div></div><a class="indexterm" name="id317723"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
     2398</h3></div></div></div><a class="indexterm" name="id317784"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
    23832399                existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code>
    23842400</em></span>
    2385 </p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317764"></a>
     2401</p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317825"></a>
    23862402
    23872403hide unwriteable files (S)
    2388 </h3></div></div></div><a class="indexterm" name="id317765"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2404</h3></div></div></div><a class="indexterm" name="id317826"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23892405    This parameter prevents clients from seeing the existance of files that cannot be written to.
    23902406    Defaults to off. Note that unwriteable directories are shown as usual.
    23912407    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code>
    23922408</em></span>
    2393 </p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317805"></a>
     2409</p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317866"></a>
    23942410
    23952411homedir map (G)
    2396 </h3></div></div></div><a class="indexterm" name="id317806"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2412</h3></div></div></div><a class="indexterm" name="id317868"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23972413        If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting         as a Win95/98 <em class="parameter"><code>logon server</code></em>
    23982414        then this parameter specifies the NIS (or YP) map from which the server for the user's  home directory should be extracted. 
    … …  
    24092425</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code>
    24102426</em></span>
    2411 </p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317912"></a>
     2427</p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317973"></a>
    24122428
    24132429host msdfs (G)
    2414 </h3></div></div></div><a class="indexterm" name="id317913"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2430</h3></div></div></div><a class="indexterm" name="id317974"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24152431        If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse
    24162432        Dfs trees hosted on the server.
    … …  
    24202436        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code>
    24212437</em></span>
    2422 </p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317974"></a>
     2438</p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318035"></a>
    24232439
    24242440hostname lookups (G)
    2425 </h3></div></div></div><a class="indexterm" name="id317975"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
     2441</h3></div></div></div><a class="indexterm" name="id318036"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
    24262442    hostname lookups or use the ip addresses instead. An example place
    24272443    where hostname lookups are currently used is when checking
    … …  
    24312447</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code>
    24322448</em></span>
    2433 </p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318045"></a>
     2449</p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318106"></a>
    24342450
    24352451<a name="ALLOWHOSTS"></a>allow hosts
    2436 </h3></div></div></div><a class="indexterm" name="id318046"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318077"></a>
     2452</h3></div></div></div><a class="indexterm" name="id318107"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318138"></a>
    24372453
    24382454hosts allow (S)
    2439 </h3></div></div></div><a class="indexterm" name="id318078"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
     2455</h3></div></div></div><a class="indexterm" name="id318139"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
    24402456    set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will
    24412457    apply to all services, regardless of whether the individual
    … …  
    24572473</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code>
    24582474</em></span>
    2459 </p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318265"></a>
     2475</p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318326"></a>
    24602476
    24612477<a name="DENYHOSTS"></a>deny hosts
    2462 </h3></div></div></div><a class="indexterm" name="id318266"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318296"></a>
     2478</h3></div></div></div><a class="indexterm" name="id318327"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318357"></a>
    24632479
    24642480hosts deny (S)
    2465 </h3></div></div></div><a class="indexterm" name="id318297"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
     2481</h3></div></div></div><a class="indexterm" name="id318358"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
    24662482    - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to
    24672483    services unless the specific services have their own lists to override
    … …  
    24772493</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code>
    24782494</em></span>
    2479 </p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318393"></a>
     2495</p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318454"></a>
    24802496
    24812497idmap alloc backend (G)
    2482 </h3></div></div></div><a class="indexterm" name="id318394"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2498</h3></div></div></div><a class="indexterm" name="id318455"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24832499        The idmap alloc backend provides a plugin interface for Winbind to use
    24842500        when allocating Unix uids/gids for Windows SIDs. This option refers
    … …  
    24972513        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code>
    24982514</em></span>
    2499 </p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318490"></a>
     2515</p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318551"></a>
    25002516
    25012517idmap alloc config (G)
    2502 </h3></div></div></div><a class="indexterm" name="id318491"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2518</h3></div></div></div><a class="indexterm" name="id318552"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25032519        The idmap alloc config prefix provides a means of managing settings
    25042520        for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a>
    25052521        parameter.  Refer to the man page for each idmap plugin regarding
    25062522        specific configuration details.
    2507         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318530"></a>
     2523        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318591"></a>
    25082524
    25092525idmap backend (G)
    2510 </h3></div></div></div><a class="indexterm" name="id318532"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2526</h3></div></div></div><a class="indexterm" name="id318592"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25112527        The idmap backend provides a plugin interface for Winbind to use
    25122528        varying backends to store SID/uid/gid mapping tables.
    … …  
    25292545        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code>
    25302546</em></span>
    2531 </p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318694"></a>
     2547</p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318755"></a>
    25322548
    25332549idmap cache time (G)
    2534 </h3></div></div></div><a class="indexterm" name="id318695"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2550</h3></div></div></div><a class="indexterm" name="id318756"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    25352551        idmap interface will cache positive SID/uid/gid query results.
    25362552        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">604800 (one week)</code>
    25372553</em></span>
    2538 </p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318736"></a>
     2554</p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318797"></a>
    25392555
    25402556idmap config (G)
    2541 </h3></div></div></div><a class="indexterm" name="id318737"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2557</h3></div></div></div><a class="indexterm" name="id318798"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25422558        The idmap config prefix provides a means of managing each trusted
    25432559        domain separately. The idmap config prefix should be followed by the
    … …  
    25712587        idmap config CORP : backend  = ad
    25722588        idmap config CORP : range = 1000-999999
    2573         </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id318858"></a>
     2589        </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id318917"></a>
    25742590
    25752591<a name="WINBINDGID"></a>winbind gid
    2576 </h3></div></div></div><a class="indexterm" name="id318859"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318889"></a>
     2592</h3></div></div></div><a class="indexterm" name="id318918"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318948"></a>
    25772593
    25782594idmap gid (G)
    2579 </h3></div></div></div><a class="indexterm" name="id318890"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
     2595</h3></div></div></div><a class="indexterm" name="id318949"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
    25802596        that are allocated for the purpose of mapping UNX groups to NT group
    25812597        SIDs. This range of group ids should have no
    … …  
    25872603</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code>
    25882604</em></span>
    2589 </p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318972"></a>
     2605</p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319031"></a>
    25902606
    25912607idmap negative cache time (G)
    2592 </h3></div></div></div><a class="indexterm" name="id318973"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2608</h3></div></div></div><a class="indexterm" name="id319032"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    25932609        idmap interface will cache negative SID/uid/gid query results.
    25942610        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code>
    25952611</em></span>
    2596 </p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id319015"></a>
     2612</p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id319074"></a>
    25972613
    25982614<a name="WINBINDUID"></a>winbind uid
    2599 </h3></div></div></div><a class="indexterm" name="id319016"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319046"></a>
     2615</h3></div></div></div><a class="indexterm" name="id319075"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319105"></a>
    26002616
    26012617idmap uid (G)
    2602 </h3></div></div></div><a class="indexterm" name="id319047"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2618</h3></div></div></div><a class="indexterm" name="id319106"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26032619        The idmap uid parameter specifies the range of user ids that are
    26042620        allocated for use in mapping UNIX users to NT user SIDs. This
    … …  
    26102626</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code>
    26112627</em></span>
    2612 </p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319129"></a>
     2628</p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319187"></a>
    26132629
    26142630include (G)
    2615 </h3></div></div></div><a class="indexterm" name="id319130"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2631</h3></div></div></div><a class="indexterm" name="id319188"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26162632        This allows you to include one config file inside another.  The file is included literally, as though typed
    26172633        in place.
    … …  
    26312647</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code>
    26322648</em></span>
    2633 </p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319225"></a>
     2649</p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319284"></a>
    26342650
    26352651inherit acls (S)
    2636 </h3></div></div></div><a class="indexterm" name="id319226"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
     2652</h3></div></div></div><a class="indexterm" name="id319285"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
    26372653    exist on parent directories, they are always honored when creating a
    26382654    new file or subdirectory in these parent directories. The default
    … …  
    26472663</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code>
    26482664</em></span>
    2649 </p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319271"></a>
     2665</p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319329"></a>
    26502666
    26512667inherit owner (S)
    2652 </h3></div></div></div><a class="indexterm" name="id319272"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
     2668</h3></div></div></div><a class="indexterm" name="id319330"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
    26532669        is normally governed by effective uid of the connected user.
    26542670        This option allows the Samba administrator to specify that
    … …  
    26592675        roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code>
    26602676</em></span>
    2661 </p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319319"></a>
     2677</p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319377"></a>
    26622678
    26632679inherit permissions (S)
    2664 </h3></div></div></div><a class="indexterm" name="id319320"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2680</h3></div></div></div><a class="indexterm" name="id319378"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26652681        The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>,
    26662682        <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this.
    … …  
    26742690    share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code>
    26752691</em></span>
    2676 </p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319457"></a>
     2692</p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319516"></a>
    26772693
    26782694init logon delayed hosts (G)
    2679 </h3></div></div></div><a class="indexterm" name="id319458"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2695</h3></div></div></div><a class="indexterm" name="id319517"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26802696        This parameter takes a list of host names, addresses or networks for
    26812697        which the initial samlogon reply should be delayed (so other DCs get
    … …  
    26882704</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>init logon delayed hosts</code></em> = <code class="literal">150.203.5. myhost.mynet.de</code>
    26892705</em></span>
    2690 </p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319531"></a>
     2706</p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319588"></a>
    26912707
    26922708init logon delay (G)
    2693 </h3></div></div></div><a class="indexterm" name="id319532"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2709</h3></div></div></div><a class="indexterm" name="id319590"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26942710        This parameter specifies a delay in milliseconds for the hosts configured
    26952711        for delayed initial samlogon with
    … …  
    26972713        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>init logon delay</code></em> = <code class="literal">100</code>
    26982714</em></span>
    2699 </p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319582"></a>
     2715</p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319642"></a>
    27002716
    27012717interfaces (G)
    2702 </h3></div></div></div><a class="indexterm" name="id319583"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
     2718</h3></div></div></div><a class="indexterm" name="id319643"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
    27032719        network interfaces list that Samba will use for browsing, name
    27042720        registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query
    … …  
    27242740</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code>
    27252741</em></span>
    2726 </p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319688"></a>
     2742</p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319747"></a>
    27272743
    27282744invalid users (S)
    2729 </h3></div></div></div><a class="indexterm" name="id319689"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
     2745</h3></div></div></div><a class="indexterm" name="id319748"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
    27302746    to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span>
    27312747    check to absolutely ensure an improper setting does not breach
    … …  
    27472763</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code>
    27482764</em></span>
    2749 </p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319789"></a>
     2765</p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319848"></a>
    27502766
    27512767iprint server (G)
    2752 </h3></div></div></div><a class="indexterm" name="id319790"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2768</h3></div></div></div><a class="indexterm" name="id319849"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27532769    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>.
    27542770    </p><p>
    … …  
    27592775</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code>
    27602776</em></span>
    2761 </p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319872"></a>
     2777</p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319930"></a>
    27622778
    27632779keepalive (G)
    2764 </h3></div></div></div><a class="indexterm" name="id319873"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
     2780</h3></div></div></div><a class="indexterm" name="id319931"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
    27652781    the number of seconds between <em class="parameter"><code>keepalive</code></em>
    27662782    packets. If this parameter is zero, no keepalive packets will be
    … …  
    27722788</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code>
    27732789</em></span>
    2774 </p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319953"></a>
     2790</p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320012"></a>
    27752791
    27762792kerberos method (G)
    2777 </h3></div></div></div><a class="indexterm" name="id319954"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2793</h3></div></div></div><a class="indexterm" name="id320013"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27782794        Controls how kerberos tickets are verified.
    27792795        </p><p>Valid options are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>secrets only - use only the secrets.tdb for
    … …  
    27922808        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kerberos method</code></em> = <code class="literal">secrets only</code>
    27932809</em></span>
    2794 </p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320042"></a>
     2810</p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320101"></a>
    27952811
    27962812kernel change notify (S)
    2797 </h3></div></div></div><a class="indexterm" name="id320044"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
     2813</h3></div></div></div><a class="indexterm" name="id320102"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
    27982814        kernel for change notifications in directories so that
    27992815        SMB clients can refresh whenever the data on the server changes.
    … …  
    28022818        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code>
    28032819</em></span>
    2804 </p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320089"></a>
     2820</p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320147"></a>
    28052821
    28062822kernel oplocks (G)
    2807 </h3></div></div></div><a class="indexterm" name="id320090"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
     2823</h3></div></div></div><a class="indexterm" name="id320148"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    28082824        (currently only IRIX and the Linux 2.4 kernel), this parameter
    28092825        allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks
    … …  
    28152831        You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code>
    28162832</em></span>
    2817 </p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320171"></a>
     2833</p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320229"></a>
    28182834
    28192835lanman auth (G)
    2820 </h3></div></div></div><a class="indexterm" name="id320172"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     2836</h3></div></div></div><a class="indexterm" name="id320230"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    28212837    authenticate users or permit password changes
    28222838    using the LANMAN password hash. If disabled, only clients which support NT
    … …  
    28402856    special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code>
    28412857</em></span>
    2842 </p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320265"></a>
     2858</p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320324"></a>
    28432859
    28442860large readwrite (G)
    2845 </h3></div></div></div><a class="indexterm" name="id320266"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     2861</h3></div></div></div><a class="indexterm" name="id320325"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
    28462862    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k
    28472863    streaming read and write variant SMB requests introduced with
    … …  
    28522868        tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code>
    28532869</em></span>
    2854 </p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320321"></a>
     2870</p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320376"></a>
    28552871
    28562872ldap admin dn (G)
    2857 </h3></div></div></div><a class="indexterm" name="id320322"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2873</h3></div></div></div><a class="indexterm" name="id320377"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28582874        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished  Name (DN) name used by Samba to contact
    28592875        the ldap server when retreiving  user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used
    … …  
    28632879        </p><p>
    28642880        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap  suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>.
    2865         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320424"></a>
     2881        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320478"></a>
    28662882
    28672883ldap connection timeout (G)
    2868 </h3></div></div></div><a class="indexterm" name="id320425"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2884</h3></div></div></div><a class="indexterm" name="id320480"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28692885        This parameter tells the LDAP library calls which timeout in seconds
    28702886        they should honor during initial connection establishments to LDAP servers.
    … …  
    28782894        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code>
    28792895</em></span>
    2880 </p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320482"></a>
     2896</p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320537"></a>
    28812897
    28822898ldap debug level (G)
    2883 </h3></div></div></div><a class="indexterm" name="id320483"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2899</h3></div></div></div><a class="indexterm" name="id320538"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28842900                This parameter controls the debug level of the LDAP library
    28852901                calls. In the case of OpenLDAP, it is the same
    … …  
    28982914</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code>
    28992915</em></span>
    2900 </p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320566"></a>
     2916</p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320621"></a>
    29012917
    29022918ldap debug threshold (G)
    2903 </h3></div></div></div><a class="indexterm" name="id320567"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2919</h3></div></div></div><a class="indexterm" name="id320622"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29042920                This parameter controls the Samba debug level at which
    29052921                the ldap library debug output is
    … …  
    29102926</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code>
    29112927</em></span>
    2912 </p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320630"></a>
     2928</p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320685"></a>
    29132929
    29142930ldap delete dn (G)
    2915 </h3></div></div></div><a class="indexterm" name="id320632"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
     2931</h3></div></div></div><a class="indexterm" name="id320686"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
    29162932        operation in the ldapsam deletes the complete entry or only the attributes
    29172933        specific to Samba.
    29182934        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code>
    29192935</em></span>
    2920 </p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320672"></a>
     2936</p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320727"></a>
    29212937
    29222938ldap deref (G)
    2923 </h3></div></div></div><a class="indexterm" name="id320674"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
     2939</h3></div></div></div><a class="indexterm" name="id320728"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
    29242940        to use a certain alias dereferencing method. The default is
    29252941        <span class="emphasis"><em>auto</em></span>, which means that the default setting of the
    … …  
    29322948</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap deref</code></em> = <code class="literal">searching</code>
    29332949</em></span>
    2934 </p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320750"></a>
     2950</p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320805"></a>
    29352951
    29362952ldap follow referral (G)
    2937 </h3></div></div></div><a class="indexterm" name="id320751"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
     2953</h3></div></div></div><a class="indexterm" name="id320806"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
    29382954        searching for entries in the LDAP database. Possible values are
    29392955        <span class="emphasis"><em>on</em></span> to enable following referrals,
    … …  
    29462962</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap follow referral</code></em> = <code class="literal">off</code>
    29472963</em></span>
    2948 </p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320821"></a>
     2964</p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320876"></a>
    29492965
    29502966ldap group suffix (G)
    2951 </h3></div></div></div><a class="indexterm" name="id320822"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
     2967</h3></div></div></div><a class="indexterm" name="id320877"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
    29522968        used for groups when these are added to the LDAP directory.
    29532969        If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    … …  
    29562972</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code>
    29572973</em></span>
    2958 </p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320901"></a>
     2974</p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320956"></a>
    29592975
    29602976ldap idmap suffix (G)
    2961 </h3></div></div></div><a class="indexterm" name="id320902"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2977</h3></div></div></div><a class="indexterm" name="id320957"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29622978        This parameters specifies the suffix that is used when storing idmap mappings. If this parameter
    29632979        is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
    … …  
    29672983</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code>
    29682984</em></span>
    2969 </p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320980"></a>
     2985</p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321035"></a>
    29702986
    29712987ldap machine suffix (G)
    2972 </h3></div></div></div><a class="indexterm" name="id320981"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2988</h3></div></div></div><a class="indexterm" name="id321036"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29732989        It specifies where machines should be added to the ldap tree.  If this parameter is unset, the value of
    29742990        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
    … …  
    29782994</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code>
    29792995</em></span>
    2980 </p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321059"></a>
     2996</p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321114"></a>
    29812997
    29822998ldap page size (G)
    2983 </h3></div></div></div><a class="indexterm" name="id321060"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2999</h3></div></div></div><a class="indexterm" name="id321115"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29843000        This parameter specifies the number of entries per page.
    29853001        </p><p>If the LDAP server supports paged results, clients can
    … …  
    29903006</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap page size</code></em> = <code class="literal">512</code>
    29913007</em></span>
    2992 </p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321122"></a>
     3008</p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321177"></a>
    29933009
    29943010ldap passwd sync (G)
    2995 </h3></div></div></div><a class="indexterm" name="id321123"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3011</h3></div></div></div><a class="indexterm" name="id321178"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29963012        This option is used to define whether or not Samba should sync the LDAP password with the NT
    29973013        and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
    … …  
    30043020                        the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code>
    30053021</em></span>
    3006 </p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321217"></a>
     3022</p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321272"></a>
    30073023
    30083024ldap replication sleep (G)
    3009 </h3></div></div></div><a class="indexterm" name="id321218"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3025</h3></div></div></div><a class="indexterm" name="id321273"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30103026        When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server.
    30113027        This server then replicates our changes back to the 'local' server, however the replication might take some seconds,
    … …  
    30203036        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code>
    30213037</em></span>
    3022 </p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321273"></a>
     3038</p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321328"></a>
    30233039
    30243040ldapsam:editposix (G)
    3025 </h3></div></div></div><a class="indexterm" name="id321274"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3041</h3></div></div></div><a class="indexterm" name="id321329"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30263042        Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller
    30273043        eliminating the need to set up custom scripts to add and manage the posix users and groups. This option
    … …  
    31013117        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code>
    31023118</em></span>
    3103 </p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321384"></a>
     3119</p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321433"></a>
    31043120
    31053121ldapsam:trusted (G)
    3106 </h3></div></div></div><a class="indexterm" name="id321385"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3122</h3></div></div></div><a class="indexterm" name="id321434"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31073123        By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
    31083124        access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
    … …  
    31223138        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code>
    31233139</em></span>
    3124 </p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321459"></a>
     3140</p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321508"></a>
    31253141
    31263142ldap ssl ads (G)
    3127 </h3></div></div></div><a class="indexterm" name="id321460"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3143</h3></div></div></div><a class="indexterm" name="id321510"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31283144        use SSL when connecting to the ldap server using
    31293145        <span class="emphasis"><em>ads</em></span> methods.
    … …  
    31353151        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl ads</code></em> = <code class="literal">no</code>
    31363152</em></span>
    3137 </p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321541"></a>
     3153</p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321590"></a>
    31383154
    31393155ldap ssl (G)
    3140 </h3></div></div></div><a class="indexterm" name="id321542"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3156</h3></div></div></div><a class="indexterm" name="id321592"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31413157        use SSL when connecting to the ldap server
    31423158        This is <span class="emphasis"><em>NOT</em></span> related to
    … …  
    31633179        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start tls</code>
    31643180</em></span>
    3165 </p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321725"></a>
     3181</p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321775"></a>
    31663182
    31673183ldap suffix (G)
    3168 </h3></div></div></div><a class="indexterm" name="id321726"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
     3184</h3></div></div></div><a class="indexterm" name="id321776"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
    31693185        The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>,
    31703186         <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the
    … …  
    31753191</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code>
    31763192</em></span>
    3177 </p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321841"></a>
     3193</p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321891"></a>
    31783194
    31793195ldap timeout (G)
    3180 </h3></div></div></div><a class="indexterm" name="id321842"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3196</h3></div></div></div><a class="indexterm" name="id321892"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31813197        This parameter defines the number of seconds that Samba should use as timeout for LDAP operations.
    31823198        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code>
    31833199</em></span>
    3184 </p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321881"></a>
     3200</p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321932"></a>
    31853201
    31863202ldap user suffix (G)
    3187 </h3></div></div></div><a class="indexterm" name="id321882"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3203</h3></div></div></div><a class="indexterm" name="id321933"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31883204        This parameter specifies where users are added to the tree. If this parameter is unset,
    31893205        the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
    … …  
    31933209</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code>
    31943210</em></span>
    3195 </p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id321960"></a>
     3211</p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322010"></a>
    31963212
    31973213level2 oplocks (S)
    3198 </h3></div></div></div><a class="indexterm" name="id321962"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
     3214</h3></div></div></div><a class="indexterm" name="id322011"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
    31993215        level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients
    32003216        that have an oplock on a file to downgrade from a read-write oplock
    … …  
    32163232        this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code>
    32173233</em></span>
    3218 </p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322056"></a>
     3234</p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322105"></a>
    32193235
    32203236lm announce (G)
    3221 </h3></div></div></div><a class="indexterm" name="id322057"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
     3237</h3></div></div></div><a class="indexterm" name="id322106"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
    32223238        broadcasts that are needed by OS/2 clients in order for them to see
    32233239        the Samba server in their browse list. This parameter can have three
    … …  
    32353251</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code>
    32363252</em></span>
    3237 </p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322171"></a>
     3253</p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322221"></a>
    32383254
    32393255lm interval (G)
    3240 </h3></div></div></div><a class="indexterm" name="id322172"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
     3256</h3></div></div></div><a class="indexterm" name="id322222"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
    32413257        broadcasts needed by OS/2 clients (see the
    32423258                <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this
    … …  
    32483264</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code>
    32493265</em></span>
    3250 </p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322252"></a>
     3266</p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322302"></a>
    32513267
    32523268load printers (G)
    3253 </h3></div></div></div><a class="indexterm" name="id322253"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
     3269</h3></div></div></div><a class="indexterm" name="id322303"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
    32543270    printers in the printcap will be loaded for browsing by default.
    32553271    See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for
    32563272    more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code>
    32573273</em></span>
    3258 </p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322306"></a>
     3274</p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322355"></a>
    32593275
    32603276local master (G)
    3261 </h3></div></div></div><a class="indexterm" name="id322307"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
     3277</h3></div></div></div><a class="indexterm" name="id322356"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
    32623278        on a subnet. If set to <code class="constant">no</code> then <code class="literal">
    32633279        nmbd</code> will not attempt to become a local master browser
    … …  
    32693285master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code>
    32703286</em></span>
    3271 </p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id322402"></a>
     3287</p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id322452"></a>
    32723288
    32733289<a name="LOCKDIR"></a>lock dir
    3274 </h3></div></div></div><a class="indexterm" name="id322403"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322434"></a>
     3290</h3></div></div></div><a class="indexterm" name="id322453"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322483"></a>
    32753291
    32763292lock directory (G)
    3277 </h3></div></div></div><a class="indexterm" name="id322435"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
     3293</h3></div></div></div><a class="indexterm" name="id322484"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
    32783294        files will be placed.  The lock files are used to implement the
    32793295        <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option.
    … …  
    32853301</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code>
    32863302</em></span>
    3287 </p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322508"></a>
     3303</p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322558"></a>
    32883304
    32893305locking (S)
    3290 </h3></div></div></div><a class="indexterm" name="id322509"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
     3306</h3></div></div></div><a class="indexterm" name="id322559"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
    32913307        performed by the server in response to lock requests from the
    32923308        client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock
    … …  
    32983314        is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a
    32993315        specific service, as lack of locking may result in data corruption.
    3300         You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322577"></a>
     3316        You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322626"></a>
    33013317
    33023318lock spin count (G)
    3303 </h3></div></div></div><a class="indexterm" name="id322578"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
     3319</h3></div></div></div><a class="indexterm" name="id322627"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
    33043320        The functionality it contolled is now controlled by the parameter
    33053321        <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>.
    33063322        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code>
    33073323</em></span>
    3308 </p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322630"></a>
     3324</p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322679"></a>
    33093325
    33103326lock spin time (G)
    3311 </h3></div></div></div><a class="indexterm" name="id322631"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
     3327</h3></div></div></div><a class="indexterm" name="id322680"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
    33123328        keep waiting to see if a failed lock request can
    33133329        be granted. This parameter has changed in default
    … …  
    33173333        to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code>
    33183334</em></span>
    3319 </p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322684"></a>
     3335</p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322733"></a>
    33203336
    33213337log file (G)
    3322 </h3></div></div></div><a class="indexterm" name="id322685"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3338</h3></div></div></div><a class="indexterm" name="id322734"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33233339    This option allows you to override the name of the Samba log file (also known as the debug file).
    33243340    </p><p>
    … …  
    33263342    </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code>
    33273343</em></span>
    3328 </p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id322734"></a>
     3344</p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id322784"></a>
    33293345
    33303346<a name="DEBUGLEVEL"></a>debuglevel
    3331 </h3></div></div></div><a class="indexterm" name="id322735"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322764"></a>
     3347</h3></div></div></div><a class="indexterm" name="id322785"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322814"></a>
    33323348
    33333349log level (G)
    3334 </h3></div></div></div><a class="indexterm" name="id322766"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3350</h3></div></div></div><a class="indexterm" name="id322815"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33353351    The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
    33363352    <code class="filename">smb.conf</code> file.
    … …  
    33433359</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code>
    33443360</em></span>
    3345 </p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322993"></a>
     3361</p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323043"></a>
    33463362
    33473363logon drive (G)
    3348 </h3></div></div></div><a class="indexterm" name="id322994"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3364</h3></div></div></div><a class="indexterm" name="id323044"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33493365        This parameter specifies the local path to which the home directory will be
    33503366        connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT
    … …  
    33563372</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code>
    33573373</em></span>
    3358 </p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323066"></a>
     3374</p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323116"></a>
    33593375
    33603376logon home (G)
    3361 </h3></div></div></div><a class="indexterm" name="id323067"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3377</h3></div></div></div><a class="indexterm" name="id323117"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33623378        This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 
    33633379        It allows you to do
    … …  
    33903406</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code>
    33913407</em></span>
    3392 </p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323220"></a>
     3408</p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323269"></a>
    33933409
    33943410logon path (G)
    3395 </h3></div></div></div><a class="indexterm" name="id323221"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3411</h3></div></div></div><a class="indexterm" name="id323270"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33963412        This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are
    33973413        stored.  Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming
    … …  
    34373453        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code>
    34383454</em></span>
    3439 </p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323366"></a>
     3455</p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323415"></a>
    34403456
    34413457logon script (G)
    3442 </h3></div></div></div><a class="indexterm" name="id323367"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3458</h3></div></div></div><a class="indexterm" name="id323416"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34433459        This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file
    34443460        (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in.  The file
    … …  
    34713487</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code>
    34723488</em></span>
    3473 </p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323524"></a>
     3489</p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323573"></a>
    34743490
    34753491lppause command (S)
    3476 </h3></div></div></div><a class="indexterm" name="id323525"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3492</h3></div></div></div><a class="indexterm" name="id323574"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    34773493    executed on the server host in order to stop printing or spooling
    34783494    a specific print job.</p><p>This command should be a program or script which takes
    … …  
    34983514</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code>
    34993515</em></span>
    3500 </p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323660"></a>
     3516</p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323710"></a>
    35013517
    35023518lpq cache time (G)
    3503 </h3></div></div></div><a class="indexterm" name="id323661"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
     3519</h3></div></div></div><a class="indexterm" name="id323711"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
    35043520        for to prevent the <code class="literal">lpq</code> command being called too
    35053521        often. A separate cache is kept for each variation of the <code class="literal">
    … …  
    35143530</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code>
    35153531</em></span>
    3516 </p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323771"></a>
     3532</p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323821"></a>
    35173533
    35183534lpq command (S)
    3519 </h3></div></div></div><a class="indexterm" name="id323772"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3535</h3></div></div></div><a class="indexterm" name="id323822"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35203536    executed on the server host in order to obtain <code class="literal">lpq
    35213537    </code>-style printer status information.</p><p>This command should be a program or script which
    … …  
    35393555</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code>
    35403556</em></span>
    3541 </p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323888"></a>
     3557</p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323937"></a>
    35423558
    35433559lpresume command (S)
    3544 </h3></div></div></div><a class="indexterm" name="id323889"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3560</h3></div></div></div><a class="indexterm" name="id323938"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35453561    executed on the server host in order to restart or continue
    35463562    printing or spooling a specific print job.</p><p>This command should be a program or script which takes
    … …  
    35553571    is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code>
    35563572</em></span>
    3557 </p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324032"></a>
     3573</p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324081"></a>
    35583574
    35593575lprm command (S)
    3560 </h3></div></div></div><a class="indexterm" name="id324033"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3576</h3></div></div></div><a class="indexterm" name="id324082"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35613577    executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes
    35623578    a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
    … …  
    35753591        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code>
    35763592</em></span>
    3577 </p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324113"></a>
     3593</p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324162"></a>
    35783594
    35793595machine password timeout (G)
    3580 </h3></div></div></div><a class="indexterm" name="id324114"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3596</h3></div></div></div><a class="indexterm" name="id324164"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35813597        If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change
    35823598        the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb
    … …  
    35883604        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code>
    35893605</em></span>
    3590 </p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324197"></a>
     3606</p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324246"></a>
    35913607
    35923608magic output (S)
    3593 </h3></div></div></div><a class="indexterm" name="id324198"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3609</h3></div></div></div><a class="indexterm" name="id324247"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35943610        This parameter specifies the name of a file which will contain output created by a magic script (see the
    35953611        <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below).
    … …  
    36003616</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code>
    36013617</em></span>
    3602 </p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324277"></a>
     3618</p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324326"></a>
    36033619
    36043620magic script (S)
    3605 </h3></div></div></div><a class="indexterm" name="id324278"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
     3621</h3></div></div></div><a class="indexterm" name="id324328"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
    36063622        if opened, will be executed by the server when the file is closed.
    36073623        This allows a UNIX script to be sent to the Samba host and
    … …  
    36193635</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code>
    36203636</em></span>
    3621 </p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324375"></a>
     3637</p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324424"></a>
    36223638
    36233639mangled names (S)
    3624 </h3></div></div></div><a class="indexterm" name="id324376"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
     3640</h3></div></div></div><a class="indexterm" name="id324425"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
    36253641        should be mapped to DOS-compatible names ("mangled") and made visible,
    36263642        or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for
    … …  
    36473663        do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code>
    36483664</em></span>
    3649 </p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324494"></a>
     3665</p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324544"></a>
    36503666
    36513667mangle prefix (G)
    3652 </h3></div></div></div><a class="indexterm" name="id324495"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
     3668</h3></div></div></div><a class="indexterm" name="id324545"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
    36533669        characters from the original name used when generating
    36543670        the mangled names. A larger value will give a weaker
    … …  
    36603676</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code>
    36613677</em></span>
    3662 </p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324558"></a>
     3678</p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324607"></a>
    36633679
    36643680mangling char (S)
    3665 </h3></div></div></div><a class="indexterm" name="id324559"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
     3681</h3></div></div></div><a class="indexterm" name="id324608"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
    36663682        the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The
    36673683        default is a '~' but this may interfere with some software. Use this option to set
    … …  
    36703686</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code>
    36713687</em></span>
    3672 </p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324632"></a>
     3688</p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324681"></a>
    36733689
    36743690mangling method (G)
    3675 </h3></div></div></div><a class="indexterm" name="id324633"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
     3691</h3></div></div></div><a class="indexterm" name="id324682"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
    36763692        the mangled names. Can take two different values, "hash" and
    36773693        "hash2". "hash" is the algorithm that was used
    … …  
    36843700</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code>
    36853701</em></span>
    3686 </p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324694"></a>
     3702</p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324743"></a>
    36873703
    36883704map acl inherit (S)
    3689 </h3></div></div></div><a class="indexterm" name="id324695"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
     3705</h3></div></div></div><a class="indexterm" name="id324744"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
    36903706    access control entry flags stored in Windows ACLs into an extended attribute
    36913707    called user.SAMBA_PAI. This parameter only takes effect if Samba is being run
    … …  
    36953711    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code>
    36963712</em></span>
    3697 </p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324746"></a>
     3713</p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324796"></a>
    36983714
    36993715map archive (S)
    3700 </h3></div></div></div><a class="indexterm" name="id324747"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3716</h3></div></div></div><a class="indexterm" name="id324797"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37013717        This controls whether the DOS archive attribute
    37023718        should be mapped to the UNIX owner execute bit.  The DOS archive bit
    … …  
    37113727        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code>
    37123728</em></span>
    3713 </p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324815"></a>
     3729</p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324865"></a>
    37143730
    37153731map hidden (S)
    3716 </h3></div></div></div><a class="indexterm" name="id324816"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3732</h3></div></div></div><a class="indexterm" name="id324866"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37173733        This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
    37183734        </p><p>
    … …  
    37203736        bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>
    37213737        for details.
    3722         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324870"></a>
     3738        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324919"></a>
    37233739
    37243740map readonly (S)
    3725 </h3></div></div></div><a class="indexterm" name="id324871"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3741</h3></div></div></div><a class="indexterm" name="id324920"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37263742        This controls how the DOS read only attribute should be mapped from a UNIX filesystem.
    37273743        </p><p>
    … …  
    37483764                </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map readonly</code></em> = <code class="literal">yes</code>
    37493765</em></span>
    3750 </p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325012"></a>
     3766</p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325062"></a>
    37513767
    37523768map system (S)
    3753 </h3></div></div></div><a class="indexterm" name="id325013"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3769</h3></div></div></div><a class="indexterm" name="id325063"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37543770        This controls whether DOS style system files should be mapped to the UNIX group execute bit.
    37553771        </p><p>
    … …  
    37593775        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code>
    37603776</em></span>
    3761 </p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325078"></a>
     3777</p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325128"></a>
    37623778
    37633779map to guest (G)
    3764 </h3></div></div></div><a class="indexterm" name="id325079"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
     3780</h3></div></div></div><a class="indexterm" name="id325129"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
    37653781    security</a> modes other than <em class="parameter"><code>security = share</code></em>
    37663782    and <em class="parameter"><code>security = server</code></em>
    … …  
    38043820</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code>
    38053821</em></span>
    3806 </p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325294"></a>
     3822</p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325344"></a>
    38073823
    38083824map untrusted to domain (G)
    3809 </h3></div></div></div><a class="indexterm" name="id325295"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3825</h3></div></div></div><a class="indexterm" name="id325345"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38103826    If a client connects to smbd using an untrusted domain name, such as
    38113827    BOGUS\user, smbd replaces the BOGUS domain with it's SAM name before
    … …  
    38253841    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map untrusted to domain</code></em> = <code class="literal">no</code>
    38263842</em></span>
    3827 </p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325352"></a>
     3843</p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325402"></a>
    38283844
    38293845max connections (S)
    3830 </h3></div></div></div><a class="indexterm" name="id325353"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
     3846</h3></div></div></div><a class="indexterm" name="id325403"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
    38313847    If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections
    38323848    will be refused if this number of connections to the service are already open. A value
    … …  
    38363852</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code>
    38373853</em></span>
    3838 </p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325434"></a>
     3854</p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325483"></a>
    38393855
    38403856max disk size (G)
    3841 </h3></div></div></div><a class="indexterm" name="id325435"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
     3857</h3></div></div></div><a class="indexterm" name="id325484"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
    38423858    on the apparent size of disks. If you set this option to 100
    38433859    then all shares will appear to be not larger than 100 MB in
    … …  
    38533869</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code>
    38543870</em></span>
    3855 </p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325519"></a>
     3871</p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325569"></a>
    38563872
    38573873max log size (G)
    3858 </h3></div></div></div><a class="indexterm" name="id325520"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3874</h3></div></div></div><a class="indexterm" name="id325570"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38593875    This option (an integer in kilobytes) specifies the max size the log file should grow to.
    38603876    Samba periodically checks the size and if it is exceeded it will rename the file, adding
    … …  
    38653881</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code>
    38663882</em></span>
    3867 </p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325587"></a>
     3883</p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325637"></a>
    38683884
    38693885max mux (G)
    3870 </h3></div></div></div><a class="indexterm" name="id325588"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
     3886</h3></div></div></div><a class="indexterm" name="id325638"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
    38713887    outstanding simultaneous SMB operations that Samba tells the client
    38723888        it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code>
    38733889</em></span>
    3874 </p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325629"></a>
     3890</p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325678"></a>
    38753891
    38763892max open files (G)
    3877 </h3></div></div></div><a class="indexterm" name="id325630"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3893</h3></div></div></div><a class="indexterm" name="id325679"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    38783894    open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file
    38793895    serving process may have open for a client at any one time. The
    … …  
    38863902    this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">16404</code>
    38873903</em></span>
    3888 </p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325686"></a>
     3904</p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325736"></a>
    38893905
    38903906max print jobs (S)
    3891 </h3></div></div></div><a class="indexterm" name="id325687"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3907</h3></div></div></div><a class="indexterm" name="id325737"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    38923908    jobs allowable in a Samba printer queue at any given moment.
    38933909    If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client.
    … …  
    38963912</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code>
    38973913</em></span>
    3898 </p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325754"></a>
     3914</p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325803"></a>
    38993915
    39003916<a name="PROTOCOL"></a>protocol
    3901 </h3></div></div></div><a class="indexterm" name="id325755"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325786"></a>
     3917</h3></div></div></div><a class="indexterm" name="id325804"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325835"></a>
    39023918
    39033919max protocol (G)
    3904 </h3></div></div></div><a class="indexterm" name="id325787"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
     3920</h3></div></div></div><a class="indexterm" name="id325836"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
    39053921    protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">CORE</code>: Earliest version. No
    39063922            concept of user names.</p></li><li class="listitem"><p><code class="constant">COREPLUS</code>: Slight improvements on
    … …  
    39163932</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code>
    39173933</em></span>
    3918 </p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325915"></a>
     3934</p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325964"></a>
    39193935
    39203936max reported print jobs (S)
    3921 </h3></div></div></div><a class="indexterm" name="id325916"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3937</h3></div></div></div><a class="indexterm" name="id325966"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39223938    This parameter limits the maximum number of jobs displayed in a port monitor for
    39233939    Samba printer queue at any given moment. If this number is exceeded, the excess
    … …  
    39283944</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code>
    39293945</em></span>
    3930 </p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325974"></a>
     3946</p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326024"></a>
    39313947
    39323948max smbd processes (G)
    3933 </h3></div></div></div><a class="indexterm" name="id325975"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
     3949</h3></div></div></div><a class="indexterm" name="id326025"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
    39343950    as a stopgap to prevent degrading service to clients in the event that the server has insufficient
    39353951    resources to handle more than this number of connections.  Remember that under normal operating
    … …  
    39393955</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code>
    39403956</em></span>
    3941 </p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326051"></a>
     3957</p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326101"></a>
    39423958
    39433959max stat cache size (G)
    3944 </h3></div></div></div><a class="indexterm" name="id326052"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
     3960</h3></div></div></div><a class="indexterm" name="id326102"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
    39453961          <em class="parameter"><code>stat cache</code></em> being used
    39463962          to speed up case insensitive name mappings. It represents
    … …  
    39533969</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code>
    39543970</em></span>
    3955 </p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326117"></a>
     3971</p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326167"></a>
    39563972
    39573973max ttl (G)
    3958 </h3></div></div></div><a class="indexterm" name="id326118"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
     3974</h3></div></div></div><a class="indexterm" name="id326168"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
    39593975    of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is
    39603976    requesting a name using either a broadcast packet or from a WINS server. You should
    39613977        never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code>
    39623978</em></span>
    3963 </p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326174"></a>
     3979</p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326223"></a>
    39643980
    39653981max wins ttl (G)
    3966 </h3></div></div></div><a class="indexterm" name="id326175"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
     3982</h3></div></div></div><a class="indexterm" name="id326224"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
    39673983        (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum
    39683984    'time to live' of NetBIOS names that <code class="literal">nmbd</code>
    … …  
    39703986        parameter.  The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code>
    39713987</em></span>
    3972 </p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326243"></a>
     3988</p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326292"></a>
    39733989
    39743990max xmit (G)
    3975 </h3></div></div></div><a class="indexterm" name="id326244"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
     3991</h3></div></div></div><a class="indexterm" name="id326293"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
    39763992    that will be negotiated by Samba. The default is 16644, which
    39773993    matches the behavior of Windows 2000.  A value below 2048 is likely to cause problems.
    … …  
    39813997</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code>
    39823998</em></span>
    3983 </p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326303"></a>
     3999</p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326352"></a>
    39844000
    39854001message command (G)
    3986 </h3></div></div></div><a class="indexterm" name="id326304"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
     4002</h3></div></div></div><a class="indexterm" name="id326353"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
    39874003        server receives a WinPopup style message.</p><p>This would normally be a command that would
    39884004        deliver the message somehow. How this is to be done is
    … …  
    40234039</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &amp;</code>
    40244040</em></span>
    4025 </p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326495"></a>
     4041</p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326544"></a>
    40264042
    40274043min print space (S)
    4028 </h3></div></div></div><a class="indexterm" name="id326496"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
     4044</h3></div></div></div><a class="indexterm" name="id326545"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
    40294045    space that must be available before a user will be able to spool
    40304046    a print job. It is specified in kilobytes. The default is 0, which
    … …  
    40334049</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code>
    40344050</em></span>
    4035 </p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326554"></a>
     4051</p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326604"></a>
    40364052
    40374053min protocol (G)
    4038 </h3></div></div></div><a class="indexterm" name="id326556"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
     4054</h3></div></div></div><a class="indexterm" name="id326605"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
    40394055    lowest SMB protocol dialect than Samba will support.  Please refer
    40404056    to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a>
    … …  
    40484064</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code>
    40494065</em></span>
    4050 </p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326647"></a>
     4066</p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326697"></a>
    40514067
    40524068min receivefile size (G)
    4053 </h3></div></div></div><a class="indexterm" name="id326648"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
     4069</h3></div></div></div><a class="indexterm" name="id326698"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
    40544070SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will
    40554071be passed to any underlying kernel recvfile or splice system call (if there is no such
    … …  
    40604076nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code>
    40614077</em></span>
    4062 </p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326709"></a>
     4078</p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326758"></a>
    40634079
    40644080min wins ttl (G)
    4065 </h3></div></div></div><a class="indexterm" name="id326710"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
     4081</h3></div></div></div><a class="indexterm" name="id326759"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
    40664082    when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live'
    40674083    of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in
    … …  
    40694085    is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code>
    40704086</em></span>
    4071 </p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326776"></a>
     4087</p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326826"></a>
    40724088
    40734089msdfs proxy (S)
    4074 </h3></div></div></div><a class="indexterm" name="id326777"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
     4090</h3></div></div></div><a class="indexterm" name="id326827"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
    40754091        stand-in for another CIFS share whose location is specified by
    40764092        the value of the parameter. When clients attempt to connect to
    … …  
    40804096        options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code>
    40814097</em></span>
    4082 </p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326849"></a>
     4098</p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326899"></a>
    40834099
    40844100msdfs root (S)
    4085 </h3></div></div></div><a class="indexterm" name="id326850"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
     4101</h3></div></div></div><a class="indexterm" name="id326900"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
    40864102        share as a Dfs root and allows clients to browse the
    40874103        distributed file system tree rooted at the share directory.
    … …  
    40914107        Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code>
    40924108</em></span>
    4093 </p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326902"></a>
     4109</p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326952"></a>
    40944110
    40954111name cache timeout (G)
    4096 </h3></div></div></div><a class="indexterm" name="id326903"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
     4112</h3></div></div></div><a class="indexterm" name="id326953"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
    40974113    entries in samba's hostname resolve cache time out. If
    40984114    the timeout is set to 0. the caching is disabled.
    … …  
    41014117</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code>
    41024118</em></span>
    4103 </p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326961"></a>
     4119</p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327010"></a>
    41044120
    41054121name resolve order (G)
    4106 </h3></div></div></div><a class="indexterm" name="id326962"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
     4122</h3></div></div></div><a class="indexterm" name="id327011"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
    41074123    suite to determine what naming services to use and in what order
    41084124    to resolve host names to IP addresses. Its main purpose to is to
    … …  
    41314147    system hostname lookup.</p><p>When Samba is functioning in ADS security mode (<code class="literal">security = ads</code>)
    41324148    it is advised to use following settings for <em class="parameter"><code>name resolve order</code></em>:</p><p><code class="literal">name resolve order = wins bcast</code></p><p>DC lookups will still be done via DNS, but fallbacks to netbios names will
    4133                 not inundate your DNS servers with needless querys for DOMAIN&lt;0x1c&gt; lookups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts host wins bcast</code>
     4149                not inundate your DNS servers with needless querys for DOMAIN&lt;0x1c&gt; lookups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts wins host bcast</code>
    41344150</em></span>
    41354151</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code>
    41364152</em></span>
    4137 </p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327146"></a>
     4153</p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327192"></a>
    41384154
    41394155netbios aliases (G)
    4140 </h3></div></div></div><a class="indexterm" name="id327147"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
     4156</h3></div></div></div><a class="indexterm" name="id327193"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
    41414157        advertise as additional names by which the Samba server is known. This allows one machine
    41424158        to appear in browse lists under multiple names. If a machine is acting as a browse server
    … …  
    41484164</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code>
    41494165</em></span>
    4150 </p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327207"></a>
     4166</p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327254"></a>
    41514167
    41524168netbios name (G)
    4153 </h3></div></div></div><a class="indexterm" name="id327208"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4169</h3></div></div></div><a class="indexterm" name="id327255"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41544170                This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component
    41554171                of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of
    … …  
    41644180</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code>
    41654181</em></span>
    4166 </p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327284"></a>
     4182</p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327331"></a>
    41674183
    41684184netbios scope (G)
    4169 </h3></div></div></div><a class="indexterm" name="id327285"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
     4185</h3></div></div></div><a class="indexterm" name="id327332"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
    41704186        operate under. This should not be set unless every machine
    41714187        on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code>
    41724188</em></span>
    4173 </p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327324"></a>
     4189</p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327371"></a>
    41744190
    41754191nis homedir (G)
    4176 </h3></div></div></div><a class="indexterm" name="id327326"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
     4192</h3></div></div></div><a class="indexterm" name="id327372"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
    41774193        UNIX systems that use an automounter, the user's home directory
    41784194        will often be mounted on a workstation on demand from a remote
    … …  
    41934209        be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code>
    41944210</em></span>
    4195 </p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327395"></a>
     4211</p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327442"></a>
    41964212
    41974213nmbd bind explicit broadcast (G)
    4198 </h3></div></div></div><a class="indexterm" name="id327396"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4214</h3></div></div></div><a class="indexterm" name="id327443"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41994215        This option causes <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to explicitly bind to the
    42004216        broadcast address of the local subnets. This is needed to make nmbd
    … …  
    42034219        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nmbd bind explicit broadcast</code></em> = <code class="literal">yes</code>
    42044220</em></span>
    4205 </p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327457"></a>
     4221</p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327505"></a>
    42064222
    42074223nt acl support (S)
    4208 </h3></div></div></div><a class="indexterm" name="id327458"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
     4224</h3></div></div></div><a class="indexterm" name="id327506"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
    42094225    UNIX permissions into Windows NT access control lists.  The UNIX
    42104226    permissions considered are the the traditional UNIX owner and
    … …  
    42134229    releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code>
    42144230</em></span>
    4215 </p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327509"></a>
     4231</p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327556"></a>
    42164232
    42174233ntlm auth (G)
    4218 </h3></div></div></div><a class="indexterm" name="id327510"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     4234</h3></div></div></div><a class="indexterm" name="id327557"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    42194235    authenticate users using the NTLM encrypted password response.
    42204236    If disabled, either the lanman password hash or an NTLMv2 response
    … …  
    42244240        special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code>
    42254241</em></span>
    4226 </p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327569"></a>
     4242</p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327617"></a>
    42274243
    42284244nt pipe support (G)
    4229 </h3></div></div></div><a class="indexterm" name="id327570"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
     4245</h3></div></div></div><a class="indexterm" name="id327618"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
    42304246    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT
    42314247    clients to connect to the NT SMB specific <code class="constant">IPC$</code>
    … …  
    42334249        alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code>
    42344250</em></span>
    4235 </p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327622"></a>
     4251</p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327669"></a>
    42364252
    42374253nt status support (G)
    4238 </h3></div></div></div><a class="indexterm" name="id327624"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
     4254</h3></div></div></div><a class="indexterm" name="id327670"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
    42394255    support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone.
    42404256    If this option is set to <code class="constant">no</code> then Samba offers
    … …  
    42424258    reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code>
    42434259</em></span>
    4244 </p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327681"></a>
     4260</p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327727"></a>
    42454261
    42464262null passwords (G)
    4247 </h3></div></div></div><a class="indexterm" name="id327682"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
    4248 </em></span>
    4249 </p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327733"></a>
     4263</h3></div></div></div><a class="indexterm" name="id327728"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
     4264</em></span>
     4265</p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327779"></a>
    42504266
    42514267obey pam restrictions (G)
    4252 </h3></div></div></div><a class="indexterm" name="id327734"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
     4268</h3></div></div></div><a class="indexterm" name="id327780"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
    42534269    (i.e. --with-pam), this parameter will control whether or not Samba
    42544270    should obey PAM's account and session management directives.  The
    … …  
    42604276</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code>
    42614277</em></span>
    4262 </p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327790"></a>
     4278</p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327837"></a>
    42634279
    42644280only user (S)
    4265 </h3></div></div></div><a class="indexterm" name="id327791"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
     4281</h3></div></div></div><a class="indexterm" name="id327838"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
    42664282    connections with usernames not in the <em class="parameter"><code>user</code></em>
    42674283    list will be allowed. By default this option is disabled so that a
    … …  
    42764292    name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code>
    42774293</em></span>
    4278 </p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327873"></a>
     4294</p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327920"></a>
    42794295
    42804296oplock break wait time (G)
    4281 </h3></div></div></div><a class="indexterm" name="id327874"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4297</h3></div></div></div><a class="indexterm" name="id327921"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42824298        This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too
    42834299        quickly when that client issues an SMB that can cause an oplock break request, then the network client can
    … …  
    42884304        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code>
    42894305</em></span>
    4290 </p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327922"></a>
     4306</p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327968"></a>
    42914307
    42924308oplock contention limit (S)
    4293 </h3></div></div></div><a class="indexterm" name="id327923"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4309</h3></div></div></div><a class="indexterm" name="id327970"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42944310        This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the
    42954311        granting of oplocks under multiple client contention for the same file.
    … …  
    43034319        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code>
    43044320</em></span>
    4305 </p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328000"></a>
     4321</p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328047"></a>
    43064322
    43074323oplocks (S)
    4308 </h3></div></div></div><a class="indexterm" name="id328001"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4324</h3></div></div></div><a class="indexterm" name="id328048"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43094325        This boolean option tells <code class="literal">smbd</code> whether to
    43104326        issue oplocks (opportunistic locks) to file open requests on this
    … …  
    43234339        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code>
    43244340</em></span>
    4325 </p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328077"></a>
     4341</p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328124"></a>
    43264342
    43274343os2 driver map (G)
    4328 </h3></div></div></div><a class="indexterm" name="id328078"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
     4344</h3></div></div></div><a class="indexterm" name="id328125"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
    43294345    path to a file containing a mapping of Windows NT printer driver
    43304346    names to OS/2 printer driver names.  The format is:</p><p>&lt;nt driver name&gt; = &lt;os2 driver name&gt;.&lt;device name&gt;</p><p>For example, a valid entry using the HP LaserJet 5
    … …  
    43364352    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code>
    43374353</em></span>
    4338 </p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328137"></a>
     4354</p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328184"></a>
    43394355
    43404356os level (G)
    4341 </h3></div></div></div><a class="indexterm" name="id328138"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4357</h3></div></div></div><a class="indexterm" name="id328185"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43424358        This integer value controls what level Samba advertises itself as for browse elections. The value of this
    43434359        parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area.
    … …  
    43554371</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code>
    43564372</em></span>
    4357 </p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328235"></a>
     4373</p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328277"></a>
    43584374
    43594375pam password change (G)
    4360 </h3></div></div></div><a class="indexterm" name="id328236"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
     4376</h3></div></div></div><a class="indexterm" name="id328278"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
    43614377    this parameter, it is possible to use PAM's password change control
    43624378    flag for Samba.  If enabled, then PAM will be used for password
    … …  
    43664382    <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code>
    43674383</em></span>
    4368 </p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328302"></a>
     4384</p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328345"></a>
    43694385
    43704386panic action (G)
    4371 </h3></div></div></div><a class="indexterm" name="id328303"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
     4387</h3></div></div></div><a class="indexterm" name="id328346"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
    43724388        system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>      crashes. This is usually used to
    43734389        draw attention to the fact that a problem occurred.
    … …  
    43764392</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code>
    43774393</em></span>
    4378 </p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328376"></a>
     4394</p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328419"></a>
    43794395
    43804396paranoid server security (G)
    4381 </h3></div></div></div><a class="indexterm" name="id328377"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
     4397</h3></div></div></div><a class="indexterm" name="id328420"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
    43824398    users with a bad passowrd. When this option is enabled, samba will not
    43834399    use a broken NT 4.x server as password server, but instead complain
    … …  
    43874403    bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code>
    43884404</em></span>
    4389 </p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328424"></a>
     4405</p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328466"></a>
    43904406
    43914407passdb backend (G)
    4392 </h3></div></div></div><a class="indexterm" name="id328425"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
     4408</h3></div></div></div><a class="indexterm" name="id328467"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
    43934409    will be used for storing user and possibly group information.  This allows
    43944410    you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location'
    … …  
    44254441</pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">tdbsam</code>
    44264442</em></span>
    4427 </p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328568"></a>
     4443</p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328609"></a>
    44284444
    44294445passdb expand explicit (G)
    4430 </h3></div></div></div><a class="indexterm" name="id328569"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4446</h3></div></div></div><a class="indexterm" name="id328610"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44314447        This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We
    44324448        used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable
    … …  
    44344450    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code>
    44354451</em></span>
    4436 </p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328610"></a>
     4452</p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328652"></a>
    44374453
    44384454passwd chat debug (G)
    4439 </h3></div></div></div><a class="indexterm" name="id328611"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
     4455</h3></div></div></div><a class="indexterm" name="id328653"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
    44404456    parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
    44414457    strings passed to and received from the passwd chat are printed
    … …  
    44504466        parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code>
    44514467</em></span>
    4452 </p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328707"></a>
     4468</p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328749"></a>
    44534469
    44544470passwd chat timeout (G)
    4455 </h3></div></div></div><a class="indexterm" name="id328708"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
     4471</h3></div></div></div><a class="indexterm" name="id328750"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
    44564472    answer from a passwd chat script being run. Once the initial answer is received
    44574473    the subsequent answers must be received in one tenth of this time. The default it
    44584474    two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code>
    44594475</em></span>
    4460 </p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328750"></a>
     4476</p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328792"></a>
    44614477
    44624478passwd chat (G)
    4463 </h3></div></div></div><a class="indexterm" name="id328751"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
     4479</h3></div></div></div><a class="indexterm" name="id328793"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
    44644480    conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing
    44654481    program to change the user's password. The string describes a
    … …  
    44924508</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code>
    44934509</em></span>
    4494 </p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328933"></a>
     4510</p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328976"></a>
    44954511
    44964512passwd program (G)
    4497 </h3></div></div></div><a class="indexterm" name="id328934"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
     4513</h3></div></div></div><a class="indexterm" name="id328977"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
    44984514    UNIX user passwords.  Any occurrences of <em class="parameter"><code>%u</code></em>
    44994515    will be replaced with the user name. The user name is checked for
    … …  
    45164532</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code>
    45174533</em></span>
    4518 </p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329059"></a>
     4534</p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329102"></a>
    45194535
    45204536password level (G)
    4521 </h3></div></div></div><a class="indexterm" name="id329060"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
     4537</h3></div></div></div><a class="indexterm" name="id329103"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
    45224538    with mixed-case passwords.  One offending client is Windows for
    45234539    Workgroups, which for some reason forces passwords to upper
    … …  
    45414557</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code>
    45424558</em></span>
    4543 </p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329182"></a>
     4559</p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329228"></a>
    45444560
    45454561password server (G)
    4546 </h3></div></div></div><a class="indexterm" name="id329183"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
     4562</h3></div></div></div><a class="indexterm" name="id329229"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
    45474563    or Active Directory domain controller with this option,
    45484564    and using <code class="literal">security = [ads|domain|server]</code>
    … …  
    46044620</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code>
    46054621</em></span>
    4606 </p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329447"></a>
     4622</p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329493"></a>
    46074623
    46084624<a name="DIRECTORY"></a>directory
    4609 </h3></div></div></div><a class="indexterm" name="id329448"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329478"></a>
     4625</h3></div></div></div><a class="indexterm" name="id329494"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329524"></a>
    46104626
    46114627path (S)
    4612 </h3></div></div></div><a class="indexterm" name="id329479"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
     4628</h3></div></div></div><a class="indexterm" name="id329525"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
    46134629        the user of the service is to be given access. In the case of
    46144630        printable services, this is where print data will spool prior to
    … …  
    46274643</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code>
    46284644</em></span>
    4629 </p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329575"></a>
     4645</p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329622"></a>
    46304646
    46314647perfcount module (G)
    4632 </h3></div></div></div><a class="indexterm" name="id329576"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
     4648</h3></div></div></div><a class="indexterm" name="id329623"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
    46334649        operations.  Only one perfcount module may be used, and it must implement all of the
    46344650        apis contained in the smb_perfcount_handler structure defined in smb.h.
    4635         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329606"></a>
     4651        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329652"></a>
    46364652
    46374653pid directory (G)
    4638 </h3></div></div></div><a class="indexterm" name="id329607"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4654</h3></div></div></div><a class="indexterm" name="id329653"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46394655        This option specifies the directory where pid files will be placed. 
    46404656        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code>
    … …  
    46424658</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code>
    46434659</em></span>
    4644 </p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329663"></a>
     4660</p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329710"></a>
    46454661
    46464662posix locking (S)
    4647 </h3></div></div></div><a class="indexterm" name="id329664"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4663</h3></div></div></div><a class="indexterm" name="id329711"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46484664        The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    46494665        daemon maintains an database of file locks obtained by SMB clients. The default behavior is
    … …  
    46534669        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code>
    46544670</em></span>
    4655 </p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329715"></a>
     4671</p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329761"></a>
    46564672
    46574673postexec (S)
    4658 </h3></div></div></div><a class="indexterm" name="id329716"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
     4674</h3></div></div></div><a class="indexterm" name="id329762"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
    46594675        whenever the service is disconnected. It takes the usual
    46604676        substitutions. The command may be run as the root on some
    … …  
    46644680</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    46654681</em></span>
    4666 </p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329784"></a>
     4682</p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329831"></a>
    46674683
    46684684preexec close (S)
    4669 </h3></div></div></div><a class="indexterm" name="id329785"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4685</h3></div></div></div><a class="indexterm" name="id329832"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46704686        This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a>
    46714687        should close the service being connected to.
    46724688        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code>
    46734689</em></span>
    4674 </p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329837"></a>
     4690</p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329884"></a>
    46754691
    46764692<a name="EXEC"></a>exec
    4677 </h3></div></div></div><a class="indexterm" name="id329838"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329868"></a>
     4693</h3></div></div></div><a class="indexterm" name="id329885"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329915"></a>
    46784694
    46794695preexec (S)
    4680 </h3></div></div></div><a class="indexterm" name="id329869"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
     4696</h3></div></div></div><a class="indexterm" name="id329916"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
    46814697        the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome
    46824698        message every time they log in. Maybe a message of the day? Here
    … …  
    46904706</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    46914707</em></span>
    4692 </p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id329970"></a>
     4708</p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id330016"></a>
    46934709
    46944710<a name="PREFEREDMASTER"></a>prefered master
    4695 </h3></div></div></div><a class="indexterm" name="id329971"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330002"></a>
     4711</h3></div></div></div><a class="indexterm" name="id330017"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330048"></a>
    46964712
    46974713preferred master (G)
    4698 </h3></div></div></div><a class="indexterm" name="id330003"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4714</h3></div></div></div><a class="indexterm" name="id330049"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46994715        This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser  for its workgroup.
    47004716        </p><p>
    … …  
    47104726        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code>
    47114727</em></span>
    4712 </p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330088"></a>
     4728</p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330135"></a>
    47134729
    47144730preload modules (G)
    4715 </h3></div></div></div><a class="indexterm" name="id330089"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
     4731</h3></div></div></div><a class="indexterm" name="id330136"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
    47164732        be loaded into smbd before a client connects. This improves
    47174733        the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code>
    … …  
    47194735</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code>
    47204736</em></span>
    4721 </p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330146"></a>
     4737</p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330193"></a>
    47224738
    47234739<a name="AUTOSERVICES"></a>auto services
    4724 </h3></div></div></div><a class="indexterm" name="id330148"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330178"></a>
     4740</h3></div></div></div><a class="indexterm" name="id330194"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330225"></a>
    47254741
    47264742preload (G)
    4727 </h3></div></div></div><a class="indexterm" name="id330179"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
     4743</h3></div></div></div><a class="indexterm" name="id330226"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
    47284744        automatically added to the browse lists. This is most useful
    47294745        for homes and printers services that would otherwise not be
    … …  
    47364752</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code>
    47374753</em></span>
    4738 </p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330252"></a>
     4754</p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330298"></a>
    47394755
    47404756preserve case (S)
    4741 </h3></div></div></div><a class="indexterm" name="id330253"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4757</h3></div></div></div><a class="indexterm" name="id330299"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47424758        This controls if new filenames are created with the case that the client passes, or if
    47434759        they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
    … …  
    47464762        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code>
    47474763</em></span>
    4748 </p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330315"></a>
     4764</p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330362"></a>
    47494765
    47504766<a name="PRINTOK"></a>print ok
    4751 </h3></div></div></div><a class="indexterm" name="id330316"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330347"></a>
     4767</h3></div></div></div><a class="indexterm" name="id330363"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330393"></a>
    47524768
    47534769printable (S)
    4754 </h3></div></div></div><a class="indexterm" name="id330348"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
     4770</h3></div></div></div><a class="indexterm" name="id330394"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
    47554771    clients may open, write to and submit spool files on the directory
    47564772    specified for the service. </p><p>Note that a printable service will ALWAYS allow writing
    … …  
    47594775    the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code>
    47604776</em></span>
    4761 </p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330407"></a>
     4777</p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330453"></a>
    47624778
    47634779printcap cache time (G)
    4764 </h3></div></div></div><a class="indexterm" name="id330408"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
     4780</h3></div></div></div><a class="indexterm" name="id330454"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
    47654781    subsystem is again asked for the known printers.  If the value
    47664782    is greater than 60 the initial waiting time is set to 60 seconds
    … …  
    47724788</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code>
    47734789</em></span>
    4774 </p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330472"></a>
     4790</p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330518"></a>
    47754791
    47764792<a name="PRINTCAP"></a>printcap
    4777 </h3></div></div></div><a class="indexterm" name="id330473"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330504"></a>
     4793</h3></div></div></div><a class="indexterm" name="id330519"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330550"></a>
    47784794
    47794795printcap name (G)
    4780 </h3></div></div></div><a class="indexterm" name="id330505"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4796</h3></div></div></div><a class="indexterm" name="id330551"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47814797        This parameter may be used to override the compiled-in default printcap name used by the server (usually
    47824798        <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this.
    … …  
    48134829</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code>
    48144830</em></span>
    4815 </p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330675"></a>
     4831</p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330722"></a>
    48164832
    48174833print command (S)
    4818 </h3></div></div></div><a class="indexterm" name="id330676"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
     4834</h3></div></div></div><a class="indexterm" name="id330723"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
    48194835    a service, this command will be used via a <code class="literal">system()</code>
    48204836    call to process the spool file. Typically the command specified will
    … …  
    48584874        set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code>
    48594875</em></span>
    4860 </p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330918"></a>
     4876</p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330968"></a>
    48614877
    48624878printer admin (S)
    4863 </h3></div></div></div><a class="indexterm" name="id330919"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4879</h3></div></div></div><a class="indexterm" name="id330969"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48644880        This lists users who can do anything to printers
    48654881        via the remote administration interfaces offered
    … …  
    48774893</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code>
    48784894</em></span>
    4879 </p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id330982"></a>
     4895</p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id331032"></a>
    48804896
    48814897<a name="PRINTER"></a>printer
    4882 </h3></div></div></div><a class="indexterm" name="id330983"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331012"></a>
     4898</h3></div></div></div><a class="indexterm" name="id331033"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331062"></a>
    48834899
    48844900printer name (S)
    4885 </h3></div></div></div><a class="indexterm" name="id331014"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4901</h3></div></div></div><a class="indexterm" name="id331063"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48864902        This parameter specifies the name of the printer to which print jobs spooled through a printable service
    48874903        will be sent.
    … …  
    48964912</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code>
    48974913</em></span>
    4898 </p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331096"></a>
     4914</p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331146"></a>
    48994915
    49004916printing (S)
    4901 </h3></div></div></div><a class="indexterm" name="id331097"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
     4917</h3></div></div></div><a class="indexterm" name="id331147"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
    49024918    interpreted on your system. It also affects the  default values for
    49034919    the <em class="parameter"><code>print command</code></em>,  <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and  <em class="parameter"><code>lprm command</code></em> if specified in the
    … …  
    49164932<code class="literal">testparm -v.</code></code>
    49174933</em></span>
    4918 </p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331242"></a>
     4934</p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331292"></a>
    49194935
    49204936printjob username (S)
    4921 </h3></div></div></div><a class="indexterm" name="id331243"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
     4937</h3></div></div></div><a class="indexterm" name="id331293"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
    49224938    passed to the printing system. Usually, the username is sent,
    49234939    but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code>
    … …  
    49254941</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code>
    49264942</em></span>
    4927 </p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331301"></a>
     4943</p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331351"></a>
    49284944
    49294945private dir (G)
    4930 </h3></div></div></div><a class="indexterm" name="id331302"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
     4946</h3></div></div></div><a class="indexterm" name="id331352"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
    49314947    smbd will use for storing such files as <code class="filename">smbpasswd</code>
    49324948    and <code class="filename">secrets.tdb</code>.
    49334949</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code>
    49344950</em></span>
    4935 </p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331354"></a>
     4951</p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331404"></a>
    49364952
    49374953profile acls (S)
    4938 </h3></div></div></div><a class="indexterm" name="id331355"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4954</h3></div></div></div><a class="indexterm" name="id331405"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49394955        This boolean parameter was added to fix the problems that people have been
    49404956        having with storing user profiles on Samba shares from Windows 2000 or
    … …  
    49624978        workstation profile code and has an ACL restricting entry to the directory
    49634979        tree to the owning user.
     4980        </p><p>
     4981        Note that this parameter should be set to yes on dedicated profile shares only.
     4982        On other shares, it might cause incorrect file ownerships.
    49644983        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code>
    49654984</em></span>
    4966 </p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331414"></a>
     4985</p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331469"></a>
    49674986
    49684987queuepause command (S)
    4969 </h3></div></div></div><a class="indexterm" name="id331415"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4988</h3></div></div></div><a class="indexterm" name="id331470"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    49704989    executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
    49714990    a printer name as its only parameter and stops the printer queue,
    … …  
    49784997        server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code>
    49794998</em></span>
    4980 </p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331485"></a>
     4999</p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331539"></a>
    49815000
    49825001queueresume command (S)
    4983 </h3></div></div></div><a class="indexterm" name="id331486"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     5002</h3></div></div></div><a class="indexterm" name="id331540"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    49845003    executed on the server host in order to resume the printer queue. It
    49855004    is the command to undo the behavior that is caused by the
    … …  
    49965015</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code>
    49975016</em></span>
    4998 </p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331579"></a>
     5017</p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331633"></a>
    49995018
    50005019read list (S)
    5001 </h3></div></div></div><a class="indexterm" name="id331580"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5020</h3></div></div></div><a class="indexterm" name="id331634"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50025021        This is a list of users that are given read-only access to a service. If the connecting user is in this list
    50035022        then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set
    … …  
    50095028</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code>
    50105029</em></span>
    5011 </p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331673"></a>
     5030</p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331728"></a>
    50125031
    50135032read only (S)
    5014 </h3></div></div></div><a class="indexterm" name="id331674"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
     5033</h3></div></div></div><a class="indexterm" name="id331729"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
    50155034    of a service may not create or modify files in the service's
    50165035    directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>)
    … …  
    50185037    (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code>
    50195038</em></span>
    5020 </p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331746"></a>
     5039</p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331800"></a>
    50215040
    50225041read raw (G)
    5023 </h3></div></div></div><a class="indexterm" name="id331747"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     5042</h3></div></div></div><a class="indexterm" name="id331801"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    50245043    will support the raw read SMB requests when transferring data
    50255044    to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in
    … …  
    50305049        tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code>
    50315050</em></span>
    5032 </p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331801"></a>
     5051</p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331855"></a>
    50335052
    50345053realm (G)
    5035 </h3></div></div></div><a class="indexterm" name="id331802"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
     5054</h3></div></div></div><a class="indexterm" name="id331856"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
    50365055        used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It
    50375056        is usually set to the DNS name of the kerberos server.
    … …  
    50405059</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code>
    50415060</em></span>
    5042 </p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331864"></a>
     5061</p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331918"></a>
    50435062
    50445063registry shares (G)
    5045 </h3></div></div></div><a class="indexterm" name="id331865"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5064</h3></div></div></div><a class="indexterm" name="id331920"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50465065        This turns on or off support for share definitions read from
    50475066        registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take
    … …  
    50585077</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code>
    50595078</em></span>
    5060 </p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331947"></a>
     5079</p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332001"></a>
    50615080
    50625081remote announce (G)
    5063 </h3></div></div></div><a class="indexterm" name="id331948"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5082</h3></div></div></div><a class="indexterm" name="id332002"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50645083        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself
    50655084        to arbitrary IP addresses with an arbitrary workgroup name.
    … …  
    50855104        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code>
    50865105</em></span>
    5087 </p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332043"></a>
     5106</p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332097"></a>
    50885107
    50895108remote browse sync (G)
    5090 </h3></div></div></div><a class="indexterm" name="id332044"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5109</h3></div></div></div><a class="indexterm" name="id332098"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50915110        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
    50925111        synchronization of browse lists with the master browser of a Samba
    … …  
    51205139        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code>
    51215140</em></span>
    5122 </p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332143"></a>
     5141</p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332198"></a>
    51235142
    51245143rename user script (G)
    5125 </h3></div></div></div><a class="indexterm" name="id332144"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5144</h3></div></div></div><a class="indexterm" name="id332199"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51265145        This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below.
    51275146        </p><p>
    … …  
    51415160        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code>
    51425161</em></span>
    5143 </p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332222"></a>
     5162</p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332284"></a>
    51445163
    51455164reset on zero vc (G)
    5146 </h3></div></div></div><a class="indexterm" name="id332224"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5165</h3></div></div></div><a class="indexterm" name="id332285"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51475166        This boolean option controls whether an incoming session setup
    51485167        should kill other connections coming from the same IP. This matches
    … …  
    51635182        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code>
    51645183</em></span>
    5165 </p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332269"></a>
     5184</p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332330"></a>
    51665185
    51675186restrict anonymous (G)
    5168 </h3></div></div></div><a class="indexterm" name="id332270"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
     5187</h3></div></div></div><a class="indexterm" name="id332331"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
    51695188    group list information is returned for an anonymous connection.
    51705189    and mirrors the effects of the
    … …  
    51895208        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code>
    51905209</em></span>
    5191 </p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332342"></a>
     5210</p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332404"></a>
    51925211
    51935212<a name="ROOT"></a>root
    5194 </h3></div></div></div><a class="indexterm" name="id332343"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332375"></a>
     5213</h3></div></div></div><a class="indexterm" name="id332405"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332436"></a>
    51955214
    51965215<a name="ROOTDIR"></a>root dir
    5197 </h3></div></div></div><a class="indexterm" name="id332376"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332405"></a>
     5216</h3></div></div></div><a class="indexterm" name="id332437"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332467"></a>
    51985217
    51995218root directory (G)
    5200 </h3></div></div></div><a class="indexterm" name="id332406"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
     5219</h3></div></div></div><a class="indexterm" name="id332468"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
    52015220    Change its root directory) to this directory on startup. This is
    52025221    not strictly necessary for secure operation. Even without it the
    … …  
    52215240</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code>
    52225241</em></span>
    5223 </p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332518"></a>
     5242</p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332583"></a>
    52245243
    52255244root postexec (S)
    5226 </h3></div></div></div><a class="indexterm" name="id332519"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5245</h3></div></div></div><a class="indexterm" name="id332584"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52275246        This is the same as the <em class="parameter"><code>postexec</code></em>
    52285247        parameter except that the command is run as root. This is useful for
    … …  
    52305249        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code>
    52315250</em></span>
    5232 </p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332565"></a>
     5251</p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332630"></a>
    52335252
    52345253root preexec close (S)
    5235 </h3></div></div></div><a class="indexterm" name="id332566"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
     5254</h3></div></div></div><a class="indexterm" name="id332631"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
    52365255        </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code>
    52375256</em></span>
    5238 </p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332612"></a>
     5257</p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332677"></a>
    52395258
    52405259root preexec (S)
    5241 </h3></div></div></div><a class="indexterm" name="id332613"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5260</h3></div></div></div><a class="indexterm" name="id332678"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52425261        This is the same as the <em class="parameter"><code>preexec</code></em>
    52435262        parameter except that the command is run as root. This is useful for
    … …  
    52455264        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code>
    52465265</em></span>
    5247 </p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332659"></a>
     5266</p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332724"></a>
    52485267
    52495268security mask (S)
    5250 </h3></div></div></div><a class="indexterm" name="id332660"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5269</h3></div></div></div><a class="indexterm" name="id332726"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52515270        This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    52525271        UNIX permission on a file using the native NT security dialog box.
    … …  
    52675286</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code>
    52685287</em></span>
    5269 </p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332755"></a>
     5288</p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332820"></a>
    52705289
    52715290security (G)
    5272 </h3></div></div></div><a class="indexterm" name="id332756"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
     5291</h3></div></div></div><a class="indexterm" name="id332821"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
    52735292    Samba and is one of the most important settings in the <code class="filename">
    52745293    smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to
    … …  
    53945413</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code>
    53955414</em></span>
    5396 </p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333543"></a>
     5415</p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333611"></a>
    53975416
    53985417server schannel (G)
    5399 </h3></div></div></div><a class="indexterm" name="id333544"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5418</h3></div></div></div><a class="indexterm" name="id333612"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54005419        This controls whether the server offers or even demands the use of the netlogon schannel.
    54015420        <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
    … …  
    54085427</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code>
    54095428</em></span>
    5410 </p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333651"></a>
     5429</p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333719"></a>
    54115430
    54125431server signing (G)
    5413 </h3></div></div></div><a class="indexterm" name="id333652"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
     5432</h3></div></div></div><a class="indexterm" name="id333720"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
    54145433    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    54155434    and <span class="emphasis"><em>disabled</em></span>.
    … …  
    54185437        to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code>
    54195438</em></span>
    5420 </p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333708"></a>
     5439</p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333776"></a>
    54215440
    54225441server string (G)
    5423 </h3></div></div></div><a class="indexterm" name="id333709"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
     5442</h3></div></div></div><a class="indexterm" name="id333777"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
    54245443        manager and next to the IPC connection in <code class="literal">net view</code>. It
    54255444        can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next
    … …  
    54305449</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code>
    54315450</em></span>
    5432 </p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333795"></a>
     5451</p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333863"></a>
    54335452
    54345453set directory (S)
    5435 </h3></div></div></div><a class="indexterm" name="id333796"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5454</h3></div></div></div><a class="indexterm" name="id333864"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54365455        If <code class="literal">set directory = no</code>, then        users of the
    54375456        service may not use the setdir command to change directory.
    … …  
    54425461        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code>
    54435462</em></span>
    5444 </p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333852"></a>
     5463</p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333920"></a>
    54455464
    54465465set primary group script (G)
    5447 </h3></div></div></div><a class="indexterm" name="id333854"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
     5466</h3></div></div></div><a class="indexterm" name="id333921"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
    54485467        primary group in addition to the auxiliary groups.  This script
    54495468        sets the primary group in the unix userdatase when an
    … …  
    54575476</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code>
    54585477</em></span>
    5459 </p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333930"></a>
     5478</p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333998"></a>
    54605479
    54615480set quota command (G)
    5462 </h3></div></div></div><a class="indexterm" name="id333931"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
     5481</h3></div></div></div><a class="indexterm" name="id333999"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
    54635482        whenever there is no operating system API available from the OS that
    54645483        samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or
    … …  
    54705489</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code>
    54715490</em></span>
    5472 </p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334083"></a>
     5491</p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334151"></a>
    54735492
    54745493share:fake_fscaps (G)
    5475 </h3></div></div></div><a class="indexterm" name="id334084"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5494</h3></div></div></div><a class="indexterm" name="id334152"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54765495        This is needed to support some special application that makes
    54775496        QFSINFO calls to check whether we set the SPARSE_FILES bit
    … …  
    54835502        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share:fake_fscaps</code></em> = <code class="literal">0</code>
    54845503</em></span>
    5485 </p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334140"></a>
     5504</p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334207"></a>
    54865505
    54875506share modes (S)
    5488 </h3></div></div></div><a class="indexterm" name="id334141"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
     5507</h3></div></div></div><a class="indexterm" name="id334208"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
    54895508        the <em class="parameter"><code>share modes</code></em> during a file open. These
    54905509        modes are used by clients to gain exclusive read or write access
    … …  
    54985517        off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code>
    54995518</em></span>
    5500 </p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334210"></a>
     5519</p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334278"></a>
    55015520
    55025521short preserve case (S)
    5503 </h3></div></div></div><a class="indexterm" name="id334211"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5522</h3></div></div></div><a class="indexterm" name="id334279"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    55045523        This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
    55055524        suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
    … …  
    55085527        </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code>
    55095528</em></span>
    5510 </p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334284"></a>
     5529</p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334352"></a>
    55115530
    55125531show add printer wizard (G)
    5513 </h3></div></div></div><a class="indexterm" name="id334285"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
     5532</h3></div></div></div><a class="indexterm" name="id334353"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
    55145533    for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
    55155534    appear on Samba hosts in the share listing.  Normally this folder will
    … …  
    55295548                administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code>
    55305549</em></span>
    5531 </p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334356"></a>
     5550</p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334424"></a>
    55325551
    55335552shutdown script (G)
    5534 </h3></div></div></div><a class="indexterm" name="id334357"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
     5553</h3></div></div></div><a class="indexterm" name="id334425"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
    55355554         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should
    55365555        start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    … …  
    55585577</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code>
    55595578</em></span>
    5560 </p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334503"></a>
     5579</p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334570"></a>
    55615580
    55625581smb encrypt (S)
    5563 </h3></div></div></div><a class="indexterm" name="id334504"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
     5582</h3></div></div></div><a class="indexterm" name="id334572"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
    55645583    extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
    55655584    SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
    … …  
    55895608    to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code>
    55905609</em></span>
    5591 </p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334599"></a>
     5610</p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334661"></a>
    55925611
    55935612smb passwd file (G)
    5594 </h3></div></div></div><a class="indexterm" name="id334600"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
     5613</h3></div></div></div><a class="indexterm" name="id334662"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
    55955614    default the path to the smbpasswd file  is compiled into Samba.</p><p>
    55965615    An example of use is:
    … …  
    56005619    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code>
    56015620</em></span>
    5602 </p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334651"></a>
     5621</p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334713"></a>
    56035622
    56045623smb ports (G)
    5605 </h3></div></div></div><a class="indexterm" name="id334652"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
    5606 </em></span>
    5607 </p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334692"></a>
     5624</h3></div></div></div><a class="indexterm" name="id334714"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
     5625</em></span>
     5626</p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334754"></a>
    56085627
    56095628socket address (G)
    5610 </h3></div></div></div><a class="indexterm" name="id334693"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
     5629</h3></div></div></div><a class="indexterm" name="id334755"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
    56115630        address Samba will listen for connections on. This is used to
    56125631        support multiple virtual interfaces on the one server, each
    … …  
    56175636</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code>
    56185637</em></span>
    5619 </p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334758"></a>
     5638</p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334820"></a>
    56205639
    56215640socket options (G)
    5622 </h3></div></div></div><a class="indexterm" name="id334759"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
     5641</h3></div></div></div><a class="indexterm" name="id334821"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
    56235642    to be used when talking with the client.</p><p>Socket options are controls on the networking layer
    56245643    of the operating systems which allow the connection to be
    … …  
    56485667</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code>
    56495668</em></span>
    5650 </p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334950"></a>
     5669</p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335012"></a>
    56515670
    56525671stat cache (G)
    5653 </h3></div></div></div><a class="indexterm" name="id334951"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
     5672</h3></div></div></div><a class="indexterm" name="id335013"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
    56545673        speed up case insensitive name mappings. You should never need
    56555674        to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code>
    56565675</em></span>
    5657 </p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335000"></a>
     5676</p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335062"></a>
    56585677
    56595678state directory (G)
    5660 </h3></div></div></div><a class="indexterm" name="id335001"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
     5679</h3></div></div></div><a class="indexterm" name="id335063"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
    56615680        <em class="parameter"><code>lock directory</code></em>. Since
    56625681        Samba 3.4.0, it is possible to differentiate between TDB files
    … …  
    56705689</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>state directory</code></em> = <code class="literal">/var/run/samba/locks/state</code>
    56715690</em></span>
    5672 </p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335082"></a>
     5691</p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335144"></a>
    56735692
    56745693store dos attributes (S)
    5675 </h3></div></div></div><a class="indexterm" name="id335083"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5694</h3></div></div></div><a class="indexterm" name="id335145"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56765695        If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
    56775696        READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
    … …  
    56925711        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code>
    56935712</em></span>
    5694 </p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335198"></a>
     5713</p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335265"></a>
    56955714
    56965715strict allocate (S)
    5697 </h3></div></div></div><a class="indexterm" name="id335199"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
     5716</h3></div></div></div><a class="indexterm" name="id335266"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
    56985717    disk space allocation in the server. When this is set to <code class="constant">yes</code>
    56995718    the server will change from UNIX behaviour of not committing real
    … …  
    57185737    activate this setting on those filesystems.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>
    57195738</em></span>
    5720 </p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335264"></a>
     5739</p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335332"></a>
    57215740
    57225741strict locking (S)
    5723 </h3></div></div></div><a class="indexterm" name="id335266"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5742</h3></div></div></div><a class="indexterm" name="id335333"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57245743        This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>,
    57255744        the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
    … …  
    57375756        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code>
    57385757</em></span>
    5739 </p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335336"></a>
     5758</p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335404"></a>
    57405759
    57415760strict sync (S)
    5742 </h3></div></div></div><a class="indexterm" name="id335337"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
     5761</h3></div></div></div><a class="indexterm" name="id335405"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
    57435762    shell) seem to confuse flushing buffer contents to disk with doing
    57445763    a sync to disk. Under UNIX, a sync call forces the process to be
    … …  
    57545773    reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code>
    57555774</em></span>
    5756 </p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335394"></a>
     5775</p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335462"></a>
    57575776
    57585777svcctl list (G)
    5759 </h3></div></div></div><a class="indexterm" name="id335395"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
     5778</h3></div></div></div><a class="indexterm" name="id335463"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
    57605779    will use for starting and stopping Unix services via the Win32
    57615780    ServiceControl API.  This allows Windows administrators to
    … …  
    57705789</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code>
    57715790</em></span>
    5772 </p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335475"></a>
     5791</p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335542"></a>
    57735792
    57745793sync always (S)
    5775 </h3></div></div></div><a class="indexterm" name="id335476"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
     5794</h3></div></div></div><a class="indexterm" name="id335544"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
    57765795    whether writes will always be written to stable storage before
    57775796    the write call returns. If this is <code class="constant">no</code> then the server will be
    … …  
    57845803    any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code>
    57855804</em></span>
    5786 </p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335542"></a>
     5805</p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335609"></a>
    57875806
    57885807syslog only (G)
    5789 </h3></div></div></div><a class="indexterm" name="id335543"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5808</h3></div></div></div><a class="indexterm" name="id335610"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57905809    If this parameter is set then Samba debug messages are logged into the system
    57915810    syslog only, and not to the debug log files. There still will be some
    … …  
    57935812    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code>
    57945813</em></span>
    5795 </p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335587"></a>
     5814</p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335655"></a>
    57965815
    57975816syslog (G)
    5798 </h3></div></div></div><a class="indexterm" name="id335588"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5817</h3></div></div></div><a class="indexterm" name="id335656"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57995818    This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
    58005819    Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto
    … …  
    58075826    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code>
    58085827</em></span>
    5809 </p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335654"></a>
     5828</p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335721"></a>
    58105829
    58115830template homedir (G)
    5812 </h3></div></div></div><a class="indexterm" name="id335655"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5831</h3></div></div></div><a class="indexterm" name="id335722"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58135832        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon  uses this
    58145833        parameter to fill in the home directory for that user. If the
    … …  
    58185837        is substituted with the user's Windows  NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code>
    58195838</em></span>
    5820 </p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335716"></a>
     5839</p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335784"></a>
    58215840
    58225841template shell (G)
    5823 </h3></div></div></div><a class="indexterm" name="id335717"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5842</h3></div></div></div><a class="indexterm" name="id335785"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58245843        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
    5825         parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335753"></a>
     5844        parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335821"></a>
    58265845
    58275846time offset (G)
    5828 </h3></div></div></div><a class="indexterm" name="id335754"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
     5847</h3></div></div></div><a class="indexterm" name="id335822"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
    58295848        to the normal GMT to local time conversion. This is useful if
    58305849        you are serving a lot of PCs that have incorrect daylight
    … …  
    58335852</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code>
    58345853</em></span>
    5835 </p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335812"></a>
     5854</p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335880"></a>
    58365855
    58375856time server (G)
    5838 </h3></div></div></div><a class="indexterm" name="id335814"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
     5857</h3></div></div></div><a class="indexterm" name="id335881"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
    58395858clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code>
    58405859</em></span>
    5841 </p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335862"></a>
     5860</p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335930"></a>
    58425861
    58435862unix charset (G)
    5844 </h3></div></div></div><a class="indexterm" name="id335863"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
     5863</h3></div></div></div><a class="indexterm" name="id335931"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
    58455864                Samba runs on uses. Samba needs to know this in order to be able to
    58465865                convert text to the charsets other SMB clients use.
    … …  
    58515870</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code>
    58525871</em></span>
    5853 </p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335925"></a>
     5872</p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335993"></a>
    58545873
    58555874unix extensions (G)
    5856 </h3></div></div></div><a class="indexterm" name="id335926"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5875</h3></div></div></div><a class="indexterm" name="id335994"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58575876    implements the CIFS UNIX extensions, as defined by HP.
    58585877    These extensions enable Samba to better serve UNIX CIFS clients
    … …  
    58645883    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code>
    58655884</em></span>
    5866 </p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335986"></a>
     5885</p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336053"></a>
    58675886
    58685887unix password sync (G)
    5869 </h3></div></div></div><a class="indexterm" name="id335987"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5888</h3></div></div></div><a class="indexterm" name="id336054"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58705889    attempts to synchronize the UNIX password with the SMB password
    58715890    when the encrypted SMB password in the smbpasswd file is changed.
    … …  
    58765895        access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code>
    58775896</em></span>
    5878 </p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336043"></a>
     5897</p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336110"></a>
    58795898
    58805899update encrypted (G)
    5881 </h3></div></div></div><a class="indexterm" name="id336044"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5900</h3></div></div></div><a class="indexterm" name="id336112"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    58825901        This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
    58835902        password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
    … …  
    58975916        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code>
    58985917</em></span>
    5899 </p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336148"></a>
     5918</p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336216"></a>
    59005919
    59015920use client driver (S)
    5902 </h3></div></div></div><a class="indexterm" name="id336149"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
     5921</h3></div></div></div><a class="indexterm" name="id336217"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
    59035922    clients.  It has no effect on Windows 95/98/ME clients.  When
    59045923    serving a printer to Windows NT/2000 clients without first installing
    … …  
    59255944        server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code>
    59265945</em></span>
    5927 </p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336222"></a>
     5946</p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336284"></a>
    59285947
    59295948use mmap (G)
    5930 </h3></div></div></div><a class="indexterm" name="id336223"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
     5949</h3></div></div></div><a class="indexterm" name="id336285"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
    59315950    depend on mmap working correctly on the running system. Samba requires a coherent
    59325951    mmap/read-write system memory cache. Currently only HPUX does not have such a
    … …  
    59375956    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code>
    59385957</em></span>
    5939 </p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336270"></a>
     5958</p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336332"></a>
    59405959
    59415960username level (G)
    5942 </h3></div></div></div><a class="indexterm" name="id336271"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
     5961</h3></div></div></div><a class="indexterm" name="id336333"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
    59435962    the real UNIX username, as many DOS clients send an all-uppercase
    59445963    username. By default Samba tries all lowercase, followed by the
    … …  
    59555974</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code>
    59565975</em></span>
    5957 </p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336343"></a>
     5976</p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336408"></a>
    59585977
    59595978username map script (G)
    5960 </h3></div></div></div><a class="indexterm" name="id336344"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
     5979</h3></div></div></div><a class="indexterm" name="id336410"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
    59615980        <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter.  This parameter
    59625981        specifies and external program or script that must accept a single
    … …  
    59695988</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code>
    59705989</em></span>
    5971 </p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336415"></a>
     5990</p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336480"></a>
    59725991
    59735992username map (G)
    5974 </h3></div></div></div><a class="indexterm" name="id336416"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5993</h3></div></div></div><a class="indexterm" name="id336481"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59755994        This option allows you to specify a file containing a mapping of usernames from the clients to the server.
    59765995        This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
    … …  
    60566075# no username map</code>
    60576076</em></span>
    6058 </p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id336657"></a>
     6077</p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id336722"></a>
    60596078
    60606079<a name="USER"></a>user
    6061 </h3></div></div></div><a class="indexterm" name="id336658"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id336689"></a>
     6080</h3></div></div></div><a class="indexterm" name="id336723"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id336754"></a>
    60626081
    60636082<a name="USERS"></a>users
    6064 </h3></div></div></div><a class="indexterm" name="id336690"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336720"></a>
     6083</h3></div></div></div><a class="indexterm" name="id336755"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336785"></a>
    60656084
    60666085username (S)
    6067 </h3></div></div></div><a class="indexterm" name="id336721"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
     6086</h3></div></div></div><a class="indexterm" name="id336786"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
    60686087    list, in which case the supplied password will be tested against
    60696088    each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when
    … …  
    61036122</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code>
    61046123</em></span>
    6105 </p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336866"></a>
     6124</p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336932"></a>
    61066125
    61076126usershare allow guests (G)
    6108 </h3></div></div></div><a class="indexterm" name="id336867"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
     6127</h3></div></div></div><a class="indexterm" name="id336933"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
    61096128        to be accessed by non-authenticated users or not. It is the equivalent
    61106129        of allowing people who can create a share the option of setting
    … …  
    61136132        is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code>
    61146133</em></span>
    6115 </p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336915"></a>
     6134</p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336981"></a>
    61166135
    61176136usershare max shares (G)
    6118 </h3></div></div></div><a class="indexterm" name="id336916"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
     6137</h3></div></div></div><a class="indexterm" name="id336982"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
    61196138        that are allowed to be created by users belonging to the group owning the
    61206139        usershare directory. If set to zero (the default) user defined shares are ignored.
    61216140        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code>
    61226141</em></span>
    6123 </p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336957"></a>
     6142</p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337022"></a>
    61246143
    61256144usershare owner only (G)
    6126 </h3></div></div></div><a class="indexterm" name="id336958"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
     6145</h3></div></div></div><a class="indexterm" name="id337024"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
    61276146        a user defined shares must be owned by the user creating the
    61286147        user defined share or not. If set to True (the default) then
    … …  
    61346153        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code>
    61356154</em></span>
    6136 </p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337002"></a>
     6155</p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337067"></a>
    61376156
    61386157usershare path (G)
    6139 </h3></div></div></div><a class="indexterm" name="id337003"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
     6158</h3></div></div></div><a class="indexterm" name="id337068"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
    61406159        filesystem used to store the user defined share definition files.
    61416160        This directory must be owned by root, and have no access for
    … …  
    61586177        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code>
    61596178</em></span>
    6160 </p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337065"></a>
     6179</p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337131"></a>
    61616180
    61626181usershare prefix allow list (G)
    6163 </h3></div></div></div><a class="indexterm" name="id337066"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6182</h3></div></div></div><a class="indexterm" name="id337132"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    61646183        the root of which are allowed to be exported by user defined share definitions.
    61656184        If the pathname to be exported doesn't start with one of the strings in this
    … …  
    61766195</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code>
    61776196</em></span>
    6178 </p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337133"></a>
     6197</p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337198"></a>
    61796198
    61806199usershare prefix deny list (G)
    6181 </h3></div></div></div><a class="indexterm" name="id337134"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6200</h3></div></div></div><a class="indexterm" name="id337199"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    61826201        the root of which are NOT allowed to be exported by user defined share definitions.
    61836202        If the pathname exported starts with one of the strings in this
    … …  
    61956214</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code>
    61966215</em></span>
    6197 </p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337199"></a>
     6216</p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337265"></a>
    61986217
    61996218usershare template share (G)
    6200 </h3></div></div></div><a class="indexterm" name="id337200"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
     6219</h3></div></div></div><a class="indexterm" name="id337266"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
    62016220        such as path, guest ok, etc. This parameter allows usershares to
    62026221        "cloned" from an existing share. If "usershare template share"
    … …  
    62136232</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code>
    62146233</em></span>
    6215 </p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337266"></a>
     6234</p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337332"></a>
    62166235
    62176236use sendfile (S)
    6218 </h3></div></div></div><a class="indexterm" name="id337267"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
     6237</h3></div></div></div><a class="indexterm" name="id337333"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
    62196238    system call is supported by the underlying operating system, then some SMB read calls
    62206239    (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
    … …  
    62256244    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code>
    62266245</em></span>
    6227 </p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337319"></a>
     6246</p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337384"></a>
    62286247
    62296248use spnego (G)
    6230 </h3></div></div></div><a class="indexterm" name="id337320"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
     6249</h3></div></div></div><a class="indexterm" name="id337385"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
    62316250    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    62326251    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
    … …  
    62366255        disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code>
    62376256</em></span>
    6238 </p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337365"></a>
     6257</p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337431"></a>
    62396258
    62406259utmp directory (G)
    6241 </h3></div></div></div><a class="indexterm" name="id337366"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
     6260</h3></div></div></div><a class="indexterm" name="id337432"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
    62426261        been configured and compiled with the option <code class="literal">
    62436262        --with-utmp</code>. It specifies a directory pathname that is
    … …  
    62516270</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code>
    62526271</em></span>
    6253 </p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337439"></a>
     6272</p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337504"></a>
    62546273
    62556274utmp (G)
    6256 </h3></div></div></div><a class="indexterm" name="id337440"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6275</h3></div></div></div><a class="indexterm" name="id337505"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62576276        This boolean parameter is only available if Samba has been configured and compiled 
    62586277        with the option <code class="literal">--with-utmp</code>. If set to
    … …  
    62666285        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code>
    62676286</em></span>
    6268 </p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337496"></a>
     6287</p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337562"></a>
    62696288
    62706289valid users (S)
    6271 </h3></div></div></div><a class="indexterm" name="id337497"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6290</h3></div></div></div><a class="indexterm" name="id337563"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62726291    This is a list of users that should be allowed to login to this service. Names starting with
    62736292    '@', '+' and  '&amp;' are interpreted using the same rules as described in the
    … …  
    62856304</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code>
    62866305</em></span>
    6287 </p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337583"></a>
     6306</p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337648"></a>
    62886307
    62896308-valid (S)
    6290 </h3></div></div></div><a class="indexterm" name="id337584"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
     6309</h3></div></div></div><a class="indexterm" name="id337649"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
    62916310        valid and thus can be used. When this parameter is set to false,
    62926311        the share will be in no way visible nor accessible.
    … …  
    62976316        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code>
    62986317</em></span>
    6299 </p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337629"></a>
     6318</p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337694"></a>
    63006319
    63016320veto files (S)
    6302 </h3></div></div></div><a class="indexterm" name="id337630"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6321</h3></div></div></div><a class="indexterm" name="id337695"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63036322        This is a list of files and directories that are neither visible nor accessible.  Each entry in
    63046323        the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
    … …  
    63316350        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code>
    63326351</em></span>
    6333 </p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337736"></a>
     6352</p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337801"></a>
    63346353
    63356354veto oplock files (S)
    6336 </h3></div></div></div><a class="indexterm" name="id337737"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6355</h3></div></div></div><a class="indexterm" name="id337802"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63376356        This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    63386357        parameter is turned on for a share. It allows the Samba administrator
    … …  
    63556374# No files are vetoed for oplock grants</code>
    63566375</em></span>
    6357 </p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id337822"></a>
     6376</p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id337887"></a>
    63586377
    63596378<a name="VFSOBJECT"></a>vfs object
    6360 </h3></div></div></div><a class="indexterm" name="id337823"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337854"></a>
     6379</h3></div></div></div><a class="indexterm" name="id337888"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337919"></a>
    63616380
    63626381vfs objects (S)
    6363 </h3></div></div></div><a class="indexterm" name="id337855"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
     6382</h3></div></div></div><a class="indexterm" name="id337920"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
    63646383        are used for Samba VFS I/O operations.  By default, normal
    63656384        disk I/O operations are used but these can be overloaded
    … …  
    63686387</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code>
    63696388</em></span>
    6370 </p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337912"></a>
     6389</p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337977"></a>
    63716390
    63726391volume (S)
    6373 </h3></div></div></div><a class="indexterm" name="id337913"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
     6392</h3></div></div></div><a class="indexterm" name="id337978"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
    63746393        returned for a share. Useful for CDROMs with installation programs
    63756394        that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal">
    63766395# the name of the share</code>
    63776396</em></span>
    6378 </p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337953"></a>
     6397</p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338019"></a>
    63796398
    63806399wide links (S)
    6381 </h3></div></div></div><a class="indexterm" name="id337954"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
     6400</h3></div></div></div><a class="indexterm" name="id338020"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
    63826401        in the UNIX file system may be followed by the server. Links
    63836402        that point to areas within the directory tree exported by the
    … …  
    63926411        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">no</code>
    63936412</em></span>
    6394 </p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338014"></a>
     6413</p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338079"></a>
    63956414
    63966415winbind cache time (G)
    6397 </h3></div></div></div><a class="indexterm" name="id338015"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6416</h3></div></div></div><a class="indexterm" name="id338080"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    63986417        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache
    63996418        user and group information before querying a Windows NT server
    … …  
    64036422        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code>
    64046423</em></span>
    6405 </p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338080"></a>
     6424</p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338146"></a>
    64066425
    64076426winbind enum groups (G)
    6408 </h3></div></div></div><a class="indexterm" name="id338082"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
     6427</h3></div></div></div><a class="indexterm" name="id338147"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
    64096428        the enumeration of groups through the <code class="literal">setgrent()</code>,
    64106429        <code class="literal">getgrent()</code> and
    … …  
    64146433        call will not return any data. </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
    64156434</em></span>
    6416 </p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338168"></a>
     6435</p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338233"></a>
    64176436
    64186437winbind enum users (G)
    6419 </h3></div></div></div><a class="indexterm" name="id338169"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
     6438</h3></div></div></div><a class="indexterm" name="id338234"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
    64206439        necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>,
    64216440         <code class="literal">getpwent()</code> and
    … …  
    64296448        usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code>
    64306449</em></span>
    6431 </p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338257"></a>
     6450</p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338322"></a>
    64326451
    64336452winbind expand groups (G)
    6434 </h3></div></div></div><a class="indexterm" name="id338258"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
     6453</h3></div></div></div><a class="indexterm" name="id338323"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
    64356454              will traverse when flattening nested group memberships
    64366455              of Windows domain groups.  This is different from the
    … …  
    64446463         incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code>
    64456464</em></span>
    6446 </p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338319"></a>
     6465</p></dd></dl></div></div><div class="section" title="winbind max clients (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338385"></a>
     6466
     6467winbind max clients (G)
     6468</h3></div></div></div><a class="indexterm" name="id338386"></a><a name="WINBINDMAXCLIENTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the maximum number of clients
     6469        the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon can connect with.
     6470        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind max clients</code></em> = <code class="literal">200</code>
     6471</em></span>
     6472</p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338434"></a>
    64476473
    64486474winbind nested groups (G)
    6449 </h3></div></div></div><a class="indexterm" name="id338320"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
     6475</h3></div></div></div><a class="indexterm" name="id338435"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
    64506476                 groups. Nested groups are also called local groups or
    64516477                 aliases. They work like their counterparts in Windows: Nested
    … …  
    64556481                 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code>
    64566482</em></span>
    6457 </p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338364"></a>
     6483</p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338479"></a>
    64586484
    64596485winbind normalize names (G)
    6460 </h3></div></div></div><a class="indexterm" name="id338365"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
     6486</h3></div></div></div><a class="indexterm" name="id338480"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
    64616487          whitespace in user and group names with an underscore (_) character.
    64626488          For example, whether the name "Space Kadet" should be
    … …  
    64786504</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code>
    64796505</em></span>
    6480 </p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338433"></a>
     6506</p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338548"></a>
    64816507
    64826508winbind nss info (G)
    6483 </h3></div></div></div><a class="indexterm" name="id338434"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
     6509</h3></div></div></div><a class="indexterm" name="id338549"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
    64846510        Service Information to construct a user's home directory and login shell.
    64856511        Currently the following settings are available:
    … …  
    65026528</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">sfu</code>
    65036529</em></span>
    6504 </p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338540"></a>
     6530</p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338655"></a>
    65056531
    65066532winbind offline logon (G)
    6507 </h3></div></div></div><a class="indexterm" name="id338541"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
     6533</h3></div></div></div><a class="indexterm" name="id338656"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
    65086534        allow to login with the <em class="parameter"><code>pam_winbind</code></em>
    65096535        module using Cached Credentials. If enabled, winbindd will store user credentials
    … …  
    65136539</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code>
    65146540</em></span>
    6515 </p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338605"></a>
     6541</p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338720"></a>
    65166542
    65176543winbind reconnect delay (G)
    6518 </h3></div></div></div><a class="indexterm" name="id338606"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6544</h3></div></div></div><a class="indexterm" name="id338721"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    65196545        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will wait between
    65206546        attempts to contact a Domain controller for a domain that is
    65216547        determined to be down or not contactable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind reconnect delay</code></em> = <code class="literal">30</code>
    65226548</em></span>
    6523 </p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338655"></a>
     6549</p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338770"></a>
    65246550
    65256551winbind refresh tickets (G)
    6526 </h3></div></div></div><a class="indexterm" name="id338656"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
     6552</h3></div></div></div><a class="indexterm" name="id338771"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
    65276553        retrieved using the <em class="parameter"><code>pam_winbind</code></em> module.
    65286554
    … …  
    65316557</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code>
    65326558</em></span>
    6533 </p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338721"></a>
     6559</p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338836"></a>
    65346560
    65356561winbind rpc only (G)
    6536 </h3></div></div></div><a class="indexterm" name="id338722"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6562</h3></div></div></div><a class="indexterm" name="id338837"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65376563        Setting this parameter to <code class="literal">yes</code> forces
    65386564        winbindd to use RPC instead of LDAP to retrieve information from Domain
    … …  
    65406566        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code>
    65416567</em></span>
    6542 </p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338768"></a>
     6568</p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338883"></a>
    65436569
    65446570winbind separator (G)
    6545 </h3></div></div></div><a class="indexterm" name="id338769"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
     6571</h3></div></div></div><a class="indexterm" name="id338884"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
    65466572        used when listing a username of the form of <em class="replaceable"><code>DOMAIN
    65476573        </code></em>\<em class="replaceable"><code>user</code></em>.  This parameter
    … …  
    65546580</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code>
    65556581</em></span>
    6556 </p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338850"></a>
     6582</p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338965"></a>
    65576583
    65586584winbind trusted domains only (G)
    6559 </h3></div></div></div><a class="indexterm" name="id338851"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6585</h3></div></div></div><a class="indexterm" name="id338966"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65606586        This parameter is designed to allow Samba servers that are members
    65616587        of a Samba controlled domain to use UNIX accounts distributed via NIS,
    … …  
    65686594        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code>
    65696595</em></span>
    6570 </p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338912"></a>
     6596</p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339027"></a>
    65716597
    65726598winbind use default domain (G)
    6573 </h3></div></div></div><a class="indexterm" name="id338913"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
     6599</h3></div></div></div><a class="indexterm" name="id339028"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
    65746600         <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 
    65756601        without domain component in their username. Users without a domain
    … …  
    65816607</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code>
    65826608</em></span>
    6583 </p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338981"></a>
     6609</p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339096"></a>
    65846610
    65856611wins hook (G)
    6586 </h3></div></div></div><a class="indexterm" name="id338982"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
     6612</h3></div></div></div><a class="indexterm" name="id339097"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
    65876613        allows you to call an external program for all changes to the
    65886614        WINS database. The primary use for this option is to allow the
    … …  
    66056631                        empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update
    66066632        program <code class="literal">nsupdate</code> is provided in the examples
    6607         directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339076"></a>
     6633        directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339190"></a>
    66086634
    66096635wins proxy (G)
    6610 </h3></div></div></div><a class="indexterm" name="id339077"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
     6636</h3></div></div></div><a class="indexterm" name="id339192"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
    66116637        queries on behalf of  other hosts. You may need to set this
    66126638        to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code>
    66136639</em></span>
    6614 </p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339129"></a>
     6640</p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339244"></a>
    66156641
    66166642wins server (G)
    6617 </h3></div></div></div><a class="indexterm" name="id339130"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
     6643</h3></div></div></div><a class="indexterm" name="id339245"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
    66186644        address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on
    66196645        your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a
    … …  
    66346660</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code>
    66356661</em></span>
    6636 </p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339232"></a>
     6662</p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339346"></a>
    66376663
    66386664wins support (G)
    6639 </h3></div></div></div><a class="indexterm" name="id339233"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
     6665</h3></div></div></div><a class="indexterm" name="id339348"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
    66406666        not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and
    66416667        you wish a particular <code class="literal">nmbd</code> to be your WINS server.
    … …  
    66436669        on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code>
    66446670</em></span>
    6645 </p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339298"></a>
     6671</p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339413"></a>
    66466672
    66476673workgroup (G)
    6648 </h3></div></div></div><a class="indexterm" name="id339299"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
     6674</h3></div></div></div><a class="indexterm" name="id339414"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
    66496675        appear to be in when queried by clients. Note that this parameter
    66506676        also controls the Domain name used with
    … …  
    66546680</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code>
    66556681</em></span>
    6656 </p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id339369"></a>
     6682</p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id339484"></a>
    66576683
    66586684<a name="WRITABLE"></a>writable
    6659 </h3></div></div></div><a class="indexterm" name="id339370"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339400"></a>
     6685</h3></div></div></div><a class="indexterm" name="id339485"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339515"></a>
    66606686
    66616687writeable (S)
    6662 </h3></div></div></div><a class="indexterm" name="id339401"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
    6663 </em></span>
    6664 </p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339451"></a>
     6688</h3></div></div></div><a class="indexterm" name="id339516"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
     6689</em></span>
     6690</p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339566"></a>
    66656691
    66666692write cache size (S)
    6667 </h3></div></div></div><a class="indexterm" name="id339452"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
     6693</h3></div></div></div><a class="indexterm" name="id339567"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
    66686694    Samba will create an in-memory cache for each oplocked file
    66696695    (it does <span class="emphasis"><em>not</em></span> do this for
    … …  
    66836709#  for a 256k cache size per file</code>
    66846710</em></span>
    6685 </p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339525"></a>
     6711</p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339640"></a>
    66866712
    66876713write list (S)
    6688 </h3></div></div></div><a class="indexterm" name="id339526"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6714</h3></div></div></div><a class="indexterm" name="id339641"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    66896715    This is a list of users that are given read-write access to a service. If the
    66906716    connecting user is in this list then they will be given write access, no matter
    … …  
    67016727</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code>
    67026728</em></span>
    6703 </p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339614"></a>
     6729</p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339728"></a>
    67046730
    67056731write raw (G)
    6706 </h3></div></div></div><a class="indexterm" name="id339615"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     6732</h3></div></div></div><a class="indexterm" name="id339730"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    67076733    will support raw write SMB's when transferring data from clients.
    67086734    You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code>
    67096735</em></span>
    6710 </p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339656"></a>
     6736</p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339771"></a>
    67116737
    67126738wtmp directory (G)
    6713 </h3></div></div></div><a class="indexterm" name="id339657"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6739</h3></div></div></div><a class="indexterm" name="id339772"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    67146740        This parameter is only available if Samba has been configured and compiled with the option <code class="literal">
    67156741        --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
    … …  
    67236749</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code>
    67246750</em></span>
    6725 </p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id339734"></a><h2>WARNINGS</h2><p>
     6751</p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id339848"></a><h2>WARNINGS</h2><p>
    67266752        Although the configuration file permits service names to contain spaces, your client software may not.
    67276753        Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
    … …  
    67366762        care when designing these sections. In particular, ensure that the permissions on spool directories are
    67376763        correct.
    6738         </p></div><div class="refsect1" title="VERSION"><a name="id339777"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id339788"></a><h2>SEE ALSO</h2><p>
    6739         <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id339866"></a><h2>AUTHOR</h2><p>
     6764        </p></div><div class="refsect1" title="VERSION"><a name="id339891"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id339902"></a><h2>SEE ALSO</h2><p>
     6765        <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id339981"></a><h2>AUTHOR</h2><p>
    67406766        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
    67416767        by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.

  • branches/samba-3.5.x/docs/htmldocs/manpages/vfs_acl_tdb.8.html

    r599 r736  
    77        The ACL settings are stored in
    88        <code class="filename">$LOCKDIR/file_ntacls.tdb</code>.
    9         </p><p>Please note that this module is
    10         <span class="emphasis"><em>experimental</em></span>!
    11         </p><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id266844"></a><h2>OPTIONS</h2><p>
    12         There are no options for <code class="literal">vfs_acl_tdb</code>.
    13         </p></div><div class="refsect1" title="AUTHOR"><a name="id266860"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
     9        </p><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id266837"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">acl_tdb:ignore system acls = [yes|no]</span></dt><dd><p>
     10                When set to <span class="emphasis"><em>yes</em></span>, a best effort mapping
     11                from/to the POSIX ACL layer will <span class="emphasis"><em>not</em></span> be
     12                done by this module. The default is <span class="emphasis"><em>no</em></span>,
     13                which means that Samba keeps setting and evaluating both the
     14                system ACLs and the NT ACLs. This is better if you need your
     15                system ACLs be set for local or NFS file access, too. If you only
     16                access the data via Samba you might set this to yes to achieve
     17                better NT ACL compatibility.
     18                </p></dd></dl></div></div><div class="refsect1" title="AUTHOR"><a name="id266876"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
    1419        were created by Andrew Tridgell. Samba is now developed
    1520        by the Samba Team as an Open Source project similar

  • branches/samba-3.5.x/docs/htmldocs/manpages/vfs_acl_xattr.8.html

    r599 r736  
    1111        (e.g. <code class="literal">getfattr -n security.NTACL <code class="filename">filename</code>
    1212        </code>).
    13         </p><p>Please note that this module is
    14         <span class="emphasis"><em>experimental</em></span>!
    15         </p><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id266870"></a><h2>OPTIONS</h2><p>
    16         There are no options for <code class="literal">vfs_acl_xattr</code>.
    17         </p></div><div class="refsect1" title="AUTHOR"><a name="id266886"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
     13        </p><p>This module is stackable.</p></div><div class="refsect1" title="OPTIONS"><a name="id266863"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">acl_xattr:ignore system acls = [yes|no]</span></dt><dd><p>
     14                When set to <span class="emphasis"><em>yes</em></span>, a best effort mapping
     15                from/to the POSIX ACL layer will <span class="emphasis"><em>not</em></span> be
     16                done by this module. The default is <span class="emphasis"><em>no</em></span>,
     17                which means that Samba keeps setting and evaluating both the
     18                system ACLs and the NT ACLs. This is better if you need your
     19                system ACLs be set for local or NFS file access, too. If you only
     20                access the data via Samba you might set this to yes to achieve
     21                better NT ACL compatibility.
     22                </p></dd></dl></div></div><div class="refsect1" title="AUTHOR"><a name="id265698"></a><h2>AUTHOR</h2><p>The original Samba software and related utilities
    1823        were created by Andrew Tridgell. Samba is now developed
    1924        by the Samba Team as an Open Source project similar
Note: See TracChangeset for help on using the changeset viewer.