Ignore:
Timestamp:
Nov 12, 2012, 7:37:04 PM (13 years ago)
Author:
Silvan Scherrer
Message:

Samba Server 3.5: update branche to 3.5.19

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/samba-3.5.x/docs/htmldocs/manpages/smb.conf.5.html

    r736 r739  
    1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id266327"></a><h2>SYNOPSIS</h2><p>
     1<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf &#8212; The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id292031"></a><h2>SYNOPSIS</h2><p>
    22        The <code class="filename">smb.conf</code> file is a configuration  file for the Samba suite. <code class="filename">smb.conf</code> contains  runtime configuration information for the Samba programs. The
    33         <code class="filename">smb.conf</code> file is designed to be configured and administered by the
     
    2727        which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved
    2828        in string values. Some items such as create masks are numeric.
    29         </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id266888"></a><h2>SECTION DESCRIPTIONS</h2><p>
     29        </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id281214"></a><h2>SECTION DESCRIPTIONS</h2><p>
    3030        Each section in the configuration file (except for the [global] section) describes a shared resource (known as
    3131        a <span class="quote">&#8220;<span class="quote">share</span>&#8221;</span>). The section name is the name of the shared resource and the parameters within the
     
    7070        <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a>
    7171</pre><p>
    72         </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id265957"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id265962"></a><h3>The [global] section</h3><p>
     72        </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id266348"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id266354"></a><h3>The [global] section</h3><p>
    7373                Parameters in this section apply to the server as a whole, or are defaults for sections that do not
    7474                specifically define certain items. See the notes under PARAMETERS for more information.
     
    161161                <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the
    162162                <code class="literal">printcap name</code> option for more details.
    163                 </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id307273"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
     163                </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id305380"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
    164164        their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and
    165165        is controlled by a set of parameters in the [global] section of the smb.conf.
     
    185185        to the global
    186186        section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares
    187         using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id307466"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
     187        using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id305573"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>
    188188        Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>).  Some parameters
    189189        are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal
     
    197197        find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred
    198198        synonym.
    199         </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id307505"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
     199        </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id305611"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>
    200200        Many of the strings that are settable in the config file can take substitutions. For example the option
    201201        <span class="quote">&#8220;<span class="quote">path = /tmp/%u</span>&#8221;</span> is interpreted as <span class="quote">&#8220;<span class="quote">path = /tmp/john</span>&#8221;</span> if the user connected with the
     
    306306                If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account
    307307                =</code> for the service, irrespective of the supplied password.
    308                 </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id308130"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
     308                </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id306237"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>
    309309                Starting with Samba version 3.2.0, the capability to
    310310                store Samba configuration in the registry is available.
     
    361361                accessing the database file, circumventing the
    362362                server.
    363         </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id308284"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308293"></a>
     363        </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id306390"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id306400"></a>
    364364
    365365abort shutdown script (G)
    366 </h3></div></div></div><a class="indexterm" name="id308294"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
     366</h3></div></div></div><a class="indexterm" name="id306401"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that
    367367        should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
    368368        right, this command will be run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code>
     
    370370</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code>
    371371</em></span>
    372 </p></dd></dl></div></div><div class="section" title="access based share enum (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308368"></a>
     372</p></dd></dl></div></div><div class="section" title="access based share enum (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id306474"></a>
    373373
    374374access based share enum (S)
    375 </h3></div></div></div><a class="indexterm" name="id308369"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a
     375</h3></div></div></div><a class="indexterm" name="id306475"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a
    376376    service, then the share hosted by the service will only be visible
    377377    to users who have read or write access to the share during share
     
    382382    computing enumeration access rights.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>access based share enum</code></em> = <code class="literal">no</code>
    383383</em></span>
    384 </p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308412"></a>
     384</p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id306518"></a>
    385385
    386386acl check permissions (S)
    387 </h3></div></div></div><a class="indexterm" name="id308413"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
     387</h3></div></div></div><a class="indexterm" name="id306519"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"
    388388    from a Windows client. If a Windows client doesn't have permissions to delete a file then they
    389389    expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by
     
    405405    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code>
    406406</em></span>
    407 </p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308483"></a>
     407</p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id306590"></a>
    408408
    409409acl compatibility (G)
    410 </h3></div></div></div><a class="indexterm" name="id308484"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
     410</h3></div></div></div><a class="indexterm" name="id306591"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should
    411411        be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4,
    412412        <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>.
     
    417417</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code>
    418418</em></span>
    419 </p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308550"></a>
     419</p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id306657"></a>
    420420
    421421acl group control (S)
    422 </h3></div></div></div><a class="indexterm" name="id308552"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     422</h3></div></div></div><a class="indexterm" name="id306658"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    423423        In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions
    424424        and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the
     
    447447        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code>
    448448</em></span>
    449 </p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308632"></a>
     449</p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id306738"></a>
    450450
    451451acl map full control (S)
    452 </h3></div></div></div><a class="indexterm" name="id308633"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     452</h3></div></div></div><a class="indexterm" name="id306740"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    453453        This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum
    454454        allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX
     
    458458        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code>
    459459</em></span>
    460 </p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308680"></a>
     460</p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id306786"></a>
    461461
    462462add group script (G)
    463 </h3></div></div></div><a class="indexterm" name="id308681"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     463</h3></div></div></div><a class="indexterm" name="id306787"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    464464        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It
    465465        will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful
     
    471471</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code>
    472472</em></span>
    473 </p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308750"></a>
     473</p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id306857"></a>
    474474
    475475add machine script (G)
    476 </h3></div></div></div><a class="indexterm" name="id308751"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     476</h3></div></div></div><a class="indexterm" name="id306858"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    477477        This is the full pathname to a script that will  be run by
    478478         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is
     
    485485</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code>
    486486</em></span>
    487 </p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308823"></a>
     487</p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id306929"></a>
    488488
    489489add port command (G)
    490 </h3></div></div></div><a class="indexterm" name="id308824"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
     490</h3></div></div></div><a class="indexterm" name="id306930"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports
    491491        remotely using the Windows "Add Standard TCP/IP Port Wizard".
    492492        This option defines an external program to be executed when
     
    497497</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code>
    498498</em></span>
    499 </p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308901"></a>
     499</p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id307009"></a>
    500500
    501501addprinter command (G)
    502 </h3></div></div></div><a class="indexterm" name="id308902"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
     502</h3></div></div></div><a class="indexterm" name="id307010"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing
    503503    support for Windows NT/2000 clients in Samba 2.2, The MS Add
    504504    Printer Wizard (APW) icon is now also available in the
     
    531531</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code>
    532532</em></span>
    533 </p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309076"></a>
     533</p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id307184"></a>
    534534
    535535add share command (G)
    536 </h3></div></div></div><a class="indexterm" name="id309077"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     536</h3></div></div></div><a class="indexterm" name="id307185"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    537537        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    538538        Manager.  The <em class="parameter"><code>add share command</code></em> is used to define an external program
     
    566566</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code>
    567567</em></span>
    568 </p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309253"></a>
     568</p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id307360"></a>
    569569
    570570add user script (G)
    571 </h3></div></div></div><a class="indexterm" name="id309254"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     571</h3></div></div></div><a class="indexterm" name="id307361"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    572572        This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by
    573573        <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
     
    604604</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code>
    605605</em></span>
    606 </p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309441"></a>
     606</p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id307548"></a>
    607607
    608608add user to group script (G)
    609 </h3></div></div></div><a class="indexterm" name="id309442"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     609</h3></div></div></div><a class="indexterm" name="id307549"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    610610        Full path to the script that will be called when a user is added to a group using the Windows NT domain administration
    611611        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
     
    619619</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code>
    620620</em></span>
    621 </p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309524"></a>
     621</p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id307631"></a>
    622622
    623623administrative share (S)
    624 </h3></div></div></div><a class="indexterm" name="id309526"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
     624</h3></div></div></div><a class="indexterm" name="id307632"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for
    625625      a share, then the share will be an administrative share. The Administrative
    626626      Shares are the default network shares created by all Windows NT-based
     
    629629      information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code>
    630630</em></span>
    631 </p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309577"></a>
     631</p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id307684"></a>
    632632
    633633admin users (S)
    634 </h3></div></div></div><a class="indexterm" name="id309578"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
     634</h3></div></div></div><a class="indexterm" name="id307685"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted
    635635    administrative privileges on the share. This means that they
    636636    will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in
     
    641641</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code>
    642642</em></span>
    643 </p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309646"></a>
     643</p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id307752"></a>
    644644
    645645afs share (S)
    646 </h3></div></div></div><a class="indexterm" name="id309647"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
     646</h3></div></div></div><a class="indexterm" name="id307753"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled
    647647        for this share. If enabled, it assumes that the directory exported via
    648648        the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The
     
    651651        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code>
    652652</em></span>
    653 </p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309690"></a>
     653</p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id307797"></a>
    654654
    655655afs username map (G)
    656 </h3></div></div></div><a class="indexterm" name="id309691"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
     656</h3></div></div></div><a class="indexterm" name="id307798"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might
    657657        want to hand-craft the usernames you are creating tokens for.
    658658        For example this is necessary if you have users from several domain
     
    664664</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code>
    665665</em></span>
    666 </p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309749"></a>
     666</p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id307856"></a>
    667667
    668668aio read size (S)
    669 </h3></div></div></div><a class="indexterm" name="id309750"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     669</h3></div></div></div><a class="indexterm" name="id307857"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    670670    integer parameter is set to non-zero value,
    671671    Samba will read from file asynchronously when size of request is bigger
     
    678678    request size</code>
    679679</em></span>
    680 </p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309827"></a>
     680</p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id307934"></a>
    681681
    682682aio write behind (S)
    683 </h3></div></div></div><a class="indexterm" name="id309828"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,
     683</h3></div></div></div><a class="indexterm" name="id307935"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,
    684684        Samba will not wait until write requests are finished before returning
    685685        the result to the client for files listed in this parameter.
     
    696696</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write behind</code></em> = <code class="literal">/*.tmp/</code>
    697697</em></span>
    698 </p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309898"></a>
     698</p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308005"></a>
    699699
    700700aio write size (S)
    701 </h3></div></div></div><a class="indexterm" name="id309899"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
     701</h3></div></div></div><a class="indexterm" name="id308006"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this
    702702    integer parameter is set to non-zero value,
    703703    Samba will write to file asynchronously when size of request is bigger
     
    710710    request size</code>
    711711</em></span>
    712 </p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309976"></a>
     712</p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308083"></a>
    713713
    714714algorithmic rid base (G)
    715 </h3></div></div></div><a class="indexterm" name="id309977"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
     715</h3></div></div></div><a class="indexterm" name="id308084"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its
    716716    algorithmic mapping from uids/gid to the RIDs needed to construct
    717717    NT Security Identifiers.
     
    728728</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code>
    729729</em></span>
    730 </p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310041"></a>
     730</p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308148"></a>
    731731
    732732allocation roundup size (S)
    733 </h3></div></div></div><a class="indexterm" name="id310042"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
     733</h3></div></div></div><a class="indexterm" name="id308149"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the
    734734    allocation size reported to Windows clients.  The default
    735735    size of 1Mb generally results in improved Windows client
     
    743743# (to disable roundups)</code>
    744744</em></span>
    745 </p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310101"></a>
     745</p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308208"></a>
    746746
    747747allow trusted domains (G)
    748 </h3></div></div></div><a class="indexterm" name="id310102"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     748</h3></div></div></div><a class="indexterm" name="id308209"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    749749    This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> option is set to
    750750    <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. 
     
    761761    can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code>
    762762</em></span>
    763 </p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310166"></a>
     763</p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308272"></a>
    764764
    765765announce as (G)
    766 </h3></div></div></div><a class="indexterm" name="id310167"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
     766</h3></div></div></div><a class="indexterm" name="id308273"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse
    767767    list. By default this is set to Windows NT. The valid options
    768768    are : "NT Server" (which can also be written as "NT"),
     
    776776</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code>
    777777</em></span>
    778 </p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310230"></a>
     778</p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308337"></a>
    779779
    780780announce version (G)
    781 </h3></div></div></div><a class="indexterm" name="id310231"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
     781</h3></div></div></div><a class="indexterm" name="id308338"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers
    782782    that nmbd will use when announcing itself as a server. The default
    783783    is 4.9.  Do not change this parameter unless you have a specific
     
    786786</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code>
    787787</em></span>
    788 </p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310285"></a>
     788</p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308392"></a>
    789789
    790790auth methods (G)
    791 </h3></div></div></div><a class="indexterm" name="id310286"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     791</h3></div></div></div><a class="indexterm" name="id308393"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    792792    This option allows the administrator to chose what authentication methods <code class="literal">smbd</code>
    793793    will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>. 
     
    810810</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code>
    811811</em></span>
    812 </p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310379"></a>
     812</p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308486"></a>
    813813
    814814available (S)
    815 </h3></div></div></div><a class="indexterm" name="id310380"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
     815</h3></div></div></div><a class="indexterm" name="id308487"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If
    816816        <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span>
    817817        attempts to connect to the service will fail. Such failures are
    818818        logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code>
    819819</em></span>
    820 </p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310425"></a>
     820</p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308532"></a>
    821821
    822822bind interfaces only (G)
    823 </h3></div></div></div><a class="indexterm" name="id310426"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
     823</h3></div></div></div><a class="indexterm" name="id308533"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin
    824824        to limit what interfaces on a machine will serve SMB requests. It
    825825        affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p>
     
    862862        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code>
    863863</em></span>
    864 </p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310722"></a>
     864</p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308829"></a>
    865865
    866866blocking locks (S)
    867 </h3></div></div></div><a class="indexterm" name="id310724"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
     867</h3></div></div></div><a class="indexterm" name="id308830"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior
    868868        of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client
    869869        to obtain a byte range lock on a region of an open file, and the
     
    876876        cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code>
    877877</em></span>
    878 </p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310781"></a>
     878</p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308888"></a>
    879879
    880880block size (S)
    881 </h3></div></div></div><a class="indexterm" name="id310782"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
     881</h3></div></div></div><a class="indexterm" name="id308889"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free
    882882    sizes. By default, this reports a disk block size of 1024 bytes.
    883883    </p><p>Changing this parameter may have some effect on the
     
    893893</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code>
    894894</em></span>
    895 </p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id310853"></a>
     895</p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id308960"></a>
    896896
    897897<a name="BROWSABLE"></a>browsable
    898 </h3></div></div></div><a class="indexterm" name="id310854"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310879"></a>
     898</h3></div></div></div><a class="indexterm" name="id308961"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308986"></a>
    899899
    900900browseable (S)
    901 </h3></div></div></div><a class="indexterm" name="id310880"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
     901</h3></div></div></div><a class="indexterm" name="id308987"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in
    902902        the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code>
    903903</em></span>
    904 </p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310917"></a>
     904</p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309024"></a>
    905905
    906906browse list (G)
    907 </h3></div></div></div><a class="indexterm" name="id310918"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
     907</h3></div></div></div><a class="indexterm" name="id309025"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to
    908908        a client doing a <code class="literal">NetServerEnum</code> call. Normally
    909909        set to <code class="constant">yes</code>. You should never need to change
    910910        this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code>
    911911</em></span>
    912 </p></dd></dl></div></div><div class="section" title="cache directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310970"></a>
     912</p></dd></dl></div></div><div class="section" title="cache directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309076"></a>
    913913
    914914cache directory (G)
    915 </h3></div></div></div><a class="indexterm" name="id310971"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is
     915</h3></div></div></div><a class="indexterm" name="id309078"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is
    916916        possible to differentiate between TDB files with persistent data and
    917917        TDB files with non-persistent data using the
     
    924924</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cache directory</code></em> = <code class="literal">/var/run/samba/locks/cache</code>
    925925</em></span>
    926 </p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id311043"></a>
     926</p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id309150"></a>
    927927
    928928<a name="CASESIGNAMES"></a>casesignames
    929 </h3></div></div></div><a class="indexterm" name="id311044"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311070"></a>
     929</h3></div></div></div><a class="indexterm" name="id309151"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309176"></a>
    930930
    931931case sensitive (S)
    932 </h3></div></div></div><a class="indexterm" name="id311071"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">auto</code>
    933 </em></span>
    934 </p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311114"></a>
     932</h3></div></div></div><a class="indexterm" name="id309177"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">auto</code>
     933</em></span>
     934</p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309221"></a>
    935935
    936936change notify (S)
    937 </h3></div></div></div><a class="indexterm" name="id311115"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
     937</h3></div></div></div><a class="indexterm" name="id309222"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply
    938938        to a client's file change notify requests.
    939939        </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code>
    940940</em></span>
    941 </p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311155"></a>
     941</p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309262"></a>
    942942
    943943change share command (G)
    944 </h3></div></div></div><a class="indexterm" name="id311156"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     944</h3></div></div></div><a class="indexterm" name="id309263"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    945945        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    946946Manager.  The <em class="parameter"><code>change share command</code></em> is used to define an external
     
    977977</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/changeshare</code>
    978978</em></span>
    979 </p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311325"></a>
     979</p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309432"></a>
    980980
    981981check password script (G)
    982 </h3></div></div></div><a class="indexterm" name="id311326"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
     982</h3></div></div></div><a class="indexterm" name="id309433"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password
    983983    complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value
    984984    if the password is bad.
     
    989989</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">/usr/local/sbin/crackcheck</code>
    990990</em></span>
    991 </p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311393"></a>
     991</p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309500"></a>
    992992
    993993client lanman auth (G)
    994 </h3></div></div></div><a class="indexterm" name="id311394"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
     994</h3></div></div></div><a class="indexterm" name="id309501"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client
    995995    tools will attempt to authenticate itself to servers using the
    996996    weaker LANMAN password hash. If disabled, only server which support NT
     
    10031003    attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code>
    10041004</em></span>
    1005 </p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311462"></a>
     1005</p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309569"></a>
    10061006
    10071007client ldap sasl wrapping (G)
    1008 </h3></div></div></div><a class="indexterm" name="id311464"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1008</h3></div></div></div><a class="indexterm" name="id309570"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10091009        The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING" target="_top">client ldap sasl wrapping</a> defines whether
    10101010        ldap traffic will be signed or signed and encrypted (sealed).
     
    10341034        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code>
    10351035</em></span>
    1036 </p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311568"></a>
     1036</p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309675"></a>
    10371037
    10381038client ntlmv2 auth (G)
    1039 </h3></div></div></div><a class="indexterm" name="id311569"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
     1039</h3></div></div></div><a class="indexterm" name="id309676"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to
    10401040    authenticate itself to servers using the NTLMv2 encrypted password
    10411041    response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more
     
    10491049        responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code>
    10501050</em></span>
    1051 </p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311648"></a>
     1051</p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309755"></a>
    10521052
    10531053client plaintext auth (G)
    1054 </h3></div></div></div><a class="indexterm" name="id311649"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
     1054</h3></div></div></div><a class="indexterm" name="id309756"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext
    10551055                password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code>
    10561056</em></span>
    1057 </p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311686"></a>
     1057</p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309792"></a>
    10581058
    10591059client schannel (G)
    1060 </h3></div></div></div><a class="indexterm" name="id311687"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1060</h3></div></div></div><a class="indexterm" name="id309794"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    10611061    This controls whether the client offers or even demands the use of the netlogon schannel.
    10621062    <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = no</a> does not offer the schannel,
     
    10681068</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code>
    10691069</em></span>
    1070 </p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311761"></a>
     1070</p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309868"></a>
    10711071
    10721072client signing (G)
    1073 </h3></div></div></div><a class="indexterm" name="id311762"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
     1073</h3></div></div></div><a class="indexterm" name="id309869"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
    10741074    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    10751075    and <span class="emphasis"><em>disabled</em></span>.
     
    10791079</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code>
    10801080</em></span>
    1081 </p></dd></dl></div></div><div class="section" title="client use spnego principal (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311813"></a>
     1081</p></dd></dl></div></div><div class="section" title="client use spnego principal (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309920"></a>
    10821082
    10831083client use spnego principal (G)
    1084 </h3></div></div></div><a class="indexterm" name="id311814"></a><a name="CLIENTUSESPNEGOPRINCIPAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     1084</h3></div></div></div><a class="indexterm" name="id309921"></a><a name="CLIENTUSESPNEGOPRINCIPAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
    10851085    <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba components
    10861086    acting as a client will attempt to use the server-supplied
     
    10951095    supply this 'rfc4178 hint' principal on the server side.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego principal</code></em> = <code class="literal">no</code>
    10961096</em></span>
    1097 </p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311874"></a>
     1097</p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309981"></a>
    10981098
    10991099client use spnego (G)
    1100 </h3></div></div></div><a class="indexterm" name="id311875"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
     1100</h3></div></div></div><a class="indexterm" name="id309982"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try
    11011101    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    11021102    supporting servers (including WindowsXP, Windows2000 and Samba
     
    11041104    mechanism.  This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code>
    11051105</em></span>
    1106 </p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311913"></a>
     1106</p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310020"></a>
    11071107
    11081108cluster addresses (G)
    1109 </h3></div></div></div><a class="indexterm" name="id311914"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
     1109</h3></div></div></div><a class="indexterm" name="id310021"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses
    11101110        nmbd will register with a WINS server. These addresses are not
    11111111        necessarily present on all nodes simultaneously, but they will
     
    11161116</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code>
    11171117</em></span>
    1118 </p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311967"></a>
     1118</p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310074"></a>
    11191119
    11201120clustering (G)
    1121 </h3></div></div></div><a class="indexterm" name="id311968"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
     1121</h3></div></div></div><a class="indexterm" name="id310075"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact
    11221122        ctdb for accessing its tdb files and use ctdb as a backend
    11231123        for its messaging backend.
     
    11261126        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code>
    11271127</em></span>
    1128 </p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312014"></a>
     1128</p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310120"></a>
    11291129
    11301130comment (S)
    1131 </h3></div></div></div><a class="indexterm" name="id312015"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
     1131</h3></div></div></div><a class="indexterm" name="id310122"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share
    11321132        when a client does a queries the server, either via the network
    11331133        neighborhood or via <code class="literal">net view</code> to list what shares
     
    11381138</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code>
    11391139</em></span>
    1140 </p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312085"></a>
     1140</p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310192"></a>
    11411141
    11421142config backend (G)
    1143 </h3></div></div></div><a class="indexterm" name="id312086"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1143</h3></div></div></div><a class="indexterm" name="id310193"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11441144                This controls the backend for storing the configuration.
    11451145                Possible values are <span class="emphasis"><em>file</em></span> (the default)
     
    11591159</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code>
    11601160</em></span>
    1161 </p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312168"></a>
     1161</p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310275"></a>
    11621162
    11631163config file (G)
    1164 </h3></div></div></div><a class="indexterm" name="id312170"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
     1164</h3></div></div></div><a class="indexterm" name="id310276"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file
    11651165        to use, instead of the default (usually <code class="filename">smb.conf</code>).
    11661166        There is a chicken and egg problem here as this option is set
     
    11721172        clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code>
    11731173</em></span>
    1174 </p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312229"></a>
     1174</p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310336"></a>
    11751175
    11761176copy (S)
    1177 </h3></div></div></div><a class="indexterm" name="id312230"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
     1177</h3></div></div></div><a class="indexterm" name="id310337"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service
    11781178        entries. The specified service is simply duplicated under the
    11791179        current service's name. Any parameters specified in the current
     
    11851185</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code>
    11861186</em></span>
    1187 </p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312288"></a>
     1187</p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310395"></a>
    11881188
    11891189create krb5 conf (G)
    1190 </h3></div></div></div><a class="indexterm" name="id312289"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1190</h3></div></div></div><a class="indexterm" name="id310396"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>
    11911191        Setting this paramter to <code class="literal">no</code> prevents
    11921192        winbind from creating custom krb5.conf files. Winbind normally does
     
    12011201        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create krb5 conf</code></em> = <code class="literal">yes</code>
    12021202</em></span>
    1203 </p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312337"></a>
     1203</p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id310444"></a>
    12041204
    12051205<a name="CREATEMODE"></a>create mode
    1206 </h3></div></div></div><a class="indexterm" name="id312338"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312364"></a>
     1206</h3></div></div></div><a class="indexterm" name="id310445"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310470"></a>
    12071207
    12081208create mask (S)
    1209 </h3></div></div></div><a class="indexterm" name="id312365"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1209</h3></div></div></div><a class="indexterm" name="id310472"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12101210        When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
    12111211        UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
     
    12281228</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code>
    12291229</em></span>
    1230 </p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312472"></a>
     1230</p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310579"></a>
    12311231
    12321232csc policy (S)
    1233 </h3></div></div></div><a class="indexterm" name="id312473"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1233</h3></div></div></div><a class="indexterm" name="id310580"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12341234        This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline
    12351235        caching will cache the files in the share. The valid values are: manual, documents, programs, disable.
     
    12431243</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code>
    12441244</em></span>
    1245 </p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312544"></a>
     1245</p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310651"></a>
    12461246
    12471247ctdbd socket (G)
    1248 </h3></div></div></div><a class="indexterm" name="id312545"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
     1248</h3></div></div></div><a class="indexterm" name="id310652"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,
    12491249        you need to tell Samba where ctdbd listens on its unix domain
    12501250        socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which
     
    12541254</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code>
    12551255</em></span>
    1256 </p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312603"></a>
     1256</p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310709"></a>
    12571257
    12581258ctdb timeout (G)
    1259 </h3></div></div></div><a class="indexterm" name="id312604"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
     1259</h3></div></div></div><a class="indexterm" name="id310710"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the
    12601260          connection between Samba and ctdb. It is only valid if you
    12611261          have compiled Samba with clustering and if you have
     
    12831283        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ctdb timeout</code></em> = <code class="literal">0</code>
    12841284</em></span>
    1285 </p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312670"></a>
     1285</p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310777"></a>
    12861286
    12871287cups connection timeout (G)
    1288 </h3></div></div></div><a class="indexterm" name="id312671"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1288</h3></div></div></div><a class="indexterm" name="id310778"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    12891289    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    12901290    </p><p>
     
    12961296</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups connection timeout</code></em> = <code class="literal">60</code>
    12971297</em></span>
    1298 </p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312738"></a>
     1298</p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310845"></a>
    12991299
    13001300cups encrypt (G)
    1301 </h3></div></div></div><a class="indexterm" name="id312739"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1301</h3></div></div></div><a class="indexterm" name="id310846"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13021302        This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a>
    13031303        is set to <code class="constant">cups</code> and if you use CUPS newer than
     
    13121312        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>cups encrypt</code></em> = <code class="literal">"no"</code>
    13131313</em></span>
    1314 </p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312801"></a>
     1314</p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310908"></a>
    13151315
    13161316cups options (S)
    1317 </h3></div></div></div><a class="indexterm" name="id312802"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1317</h3></div></div></div><a class="indexterm" name="id310909"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13181318    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is
    13191319    set to <code class="constant">cups</code>.  Its value is a free form string of options
     
    13371337</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code>
    13381338</em></span>
    1339 </p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312891"></a>
     1339</p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310997"></a>
    13401340
    13411341cups server (G)
    1342 </h3></div></div></div><a class="indexterm" name="id312892"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1342</h3></div></div></div><a class="indexterm" name="id310998"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13431343    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>.
    13441344    </p><p>
     
    13541354</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code>
    13551355</em></span>
    1356 </p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312983"></a>
     1356</p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311090"></a>
    13571357
    13581358deadtime (G)
    1359 </h3></div></div></div><a class="indexterm" name="id312984"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
     1359</h3></div></div></div><a class="indexterm" name="id311091"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)
    13601360    represents the number of minutes of inactivity before a connection
    13611361    is considered dead, and it is disconnected. The deadtime only takes
     
    13691369</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code>
    13701370</em></span>
    1371 </p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313054"></a>
     1371</p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311161"></a>
    13721372
    13731373debug class (G)
    1374 </h3></div></div></div><a class="indexterm" name="id313055"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1374</h3></div></div></div><a class="indexterm" name="id311162"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13751375    With this boolean parameter enabled, the debug class (DBGC_CLASS)
    13761376    will be displayed in the debug header.
     
    13801380    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code>
    13811381</em></span>
    1382 </p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313104"></a>
     1382</p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311211"></a>
    13831383
    13841384debug hires timestamp (G)
    1385 </h3></div></div></div><a class="indexterm" name="id313105"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1385</h3></div></div></div><a class="indexterm" name="id311212"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13861386    Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this
    13871387    boolean parameter adds microsecond resolution to the timestamp  message header when turned on.
     
    13901390    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">yes</code>
    13911391</em></span>
    1392 </p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313153"></a>
     1392</p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311260"></a>
    13931393
    13941394debug pid (G)
    1395 </h3></div></div></div><a class="indexterm" name="id313154"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1395</h3></div></div></div><a class="indexterm" name="id311261"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    13961396    When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which
    13971397    message. This boolean parameter is adds the process-id to the timestamp message headers in the
     
    14011401    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code>
    14021402</em></span>
    1403 </p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313210"></a>
     1403</p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311317"></a>
    14041404
    14051405debug prefix timestamp (G)
    1406 </h3></div></div></div><a class="indexterm" name="id313211"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1406</h3></div></div></div><a class="indexterm" name="id311318"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14071407    With this option enabled, the timestamp message header is prefixed to the debug message without the
    14081408    filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a>
     
    14121412    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code>
    14131413</em></span>
    1414 </p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313267"></a>
     1414</p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id311374"></a>
    14151415
    14161416<a name="TIMESTAMPLOGS"></a>timestamp logs
    1417 </h3></div></div></div><a class="indexterm" name="id313268"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313293"></a>
     1417</h3></div></div></div><a class="indexterm" name="id311375"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311400"></a>
    14181418
    14191419debug timestamp (G)
    1420 </h3></div></div></div><a class="indexterm" name="id313294"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1420</h3></div></div></div><a class="indexterm" name="id311401"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14211421    Samba debug log messages are timestamped by default. If you are running at a high
    14221422    <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This
     
    14241424        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code>
    14251425</em></span>
    1426 </p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313339"></a>
     1426</p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311446"></a>
    14271427
    14281428debug uid (G)
    1429 </h3></div></div></div><a class="indexterm" name="id313340"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1429</h3></div></div></div><a class="indexterm" name="id311447"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14301430    Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the
    14311431    current euid, egid, uid and gid to the timestamp message headers in the log file if turned on.
     
    14341434    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code>
    14351435</em></span>
    1436 </p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313388"></a>
     1436</p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311495"></a>
    14371437
    14381438dedicated keytab file (G)
    1439 </h3></div></div></div><a class="indexterm" name="id313389"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1439</h3></div></div></div><a class="indexterm" name="id311496"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    14401440          Specifies the path to the kerberos keytab file when
    14411441          <a class="link" href="smb.conf.5.html#KERBEROSMETHOD" target="_top">kerberos method</a> is set to "dedicated
     
    14451445</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dedicated keytab file</code></em> = <code class="literal">/usr/local/etc/krb5.keytab</code>
    14461446</em></span>
    1447 </p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313448"></a>
     1447</p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311554"></a>
    14481448
    14491449default case (S)
    1450 </h3></div></div></div><a class="indexterm" name="id313449"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
     1450</h3></div></div></div><a class="indexterm" name="id311555"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.
    14511451        Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code>
    14521452</em></span>
    1453 </p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313499"></a>
     1453</p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311606"></a>
    14541454
    14551455default devmode (S)
    1456 </h3></div></div></div><a class="indexterm" name="id313500"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
     1456</h3></div></div></div><a class="indexterm" name="id311607"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.
    14571457    When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
    14581458    server has a Device Mode which defines things such as paper size and
     
    14771477</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code>
    14781478</em></span>
    1479 </p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313577"></a>
     1479</p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id311683"></a>
    14801480
    14811481<a name="DEFAULT"></a>default
    1482 </h3></div></div></div><a class="indexterm" name="id313578"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313603"></a>
     1482</h3></div></div></div><a class="indexterm" name="id311684"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311710"></a>
    14831483
    14841484default service (G)
    1485 </h3></div></div></div><a class="indexterm" name="id313604"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
     1485</h3></div></div></div><a class="indexterm" name="id311711"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service
    14861486        which will be connected to if the service actually requested cannot
    14871487        be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span>
     
    14971497</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code>
    14981498</em></span>
    1499 </p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313696"></a>
     1499</p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311803"></a>
    15001500
    15011501defer sharing violations (G)
    1502 </h3></div></div></div><a class="indexterm" name="id313698"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1502</h3></div></div></div><a class="indexterm" name="id311804"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    15031503        Windows allows specifying how a file will be shared with
    15041504        other processes when it is opened. Sharing violations occur when
     
    15131513        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code>
    15141514</em></span>
    1515 </p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313745"></a>
     1515</p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311852"></a>
    15161516
    15171517delete group script (G)
    1518 </h3></div></div></div><a class="indexterm" name="id313746"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1518</h3></div></div></div><a class="indexterm" name="id311853"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15191519        be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted.
    15201520        It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. 
     
    15221522        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code>
    15231523</em></span>
    1524 </p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313799"></a>
     1524</p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311906"></a>
    15251525
    15261526deleteprinter command (G)
    1527 </h3></div></div></div><a class="indexterm" name="id313800"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
     1527</h3></div></div></div><a class="indexterm" name="id311907"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer
    15281528    support for Windows NT/2000 clients in Samba 2.2, it is now
    15291529    possible to delete a printer at run time by issuing the
     
    15431543</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code>
    15441544</em></span>
    1545 </p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313915"></a>
     1545</p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312022"></a>
    15461546
    15471547delete readonly (S)
    1548 </h3></div></div></div><a class="indexterm" name="id313916"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
     1548</h3></div></div></div><a class="indexterm" name="id312023"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 
    15491549        This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such
    15501550        as rcs, where UNIX file ownership prevents changing file
    15511551        permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code>
    15521552</em></span>
    1553 </p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313958"></a>
     1553</p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312065"></a>
    15541554
    15551555delete share command (G)
    1556 </h3></div></div></div><a class="indexterm" name="id313959"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1556</h3></div></div></div><a class="indexterm" name="id312066"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    15571557        Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
    15581558        Manager.  The <em class="parameter"><code>delete share command</code></em> is used to define an external
     
    15801580</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code>
    15811581</em></span>
    1582 </p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314101"></a>
     1582</p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312208"></a>
    15831583
    15841584delete user from group script (G)
    1585 </h3></div></div></div><a class="indexterm" name="id314102"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
     1585</h3></div></div></div><a class="indexterm" name="id312209"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when
    15861586        a user is removed from a group using the Windows NT domain administration
    15871587        tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>.
     
    15921592</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code>
    15931593</em></span>
    1594 </p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314175"></a>
     1594</p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312282"></a>
    15951595
    15961596delete user script (G)
    1597 </h3></div></div></div><a class="indexterm" name="id314176"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
     1597</h3></div></div></div><a class="indexterm" name="id312283"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will
    15981598        be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users
    15991599        with remote RPC (NT) tools.
     
    16041604</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code>
    16051605</em></span>
    1606 </p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314248"></a>
     1606</p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312354"></a>
    16071607
    16081608delete veto files (S)
    1609 </h3></div></div></div><a class="indexterm" name="id314249"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
     1609</h3></div></div></div><a class="indexterm" name="id312355"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to
    16101610        delete a directory that contains one or more vetoed directories
    16111611        (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a>
     
    16211621        is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code>
    16221622</em></span>
    1623 </p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314323"></a>
     1623</p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312430"></a>
    16241624
    16251625dfree cache time (S)
    1626 </h3></div></div></div><a class="indexterm" name="id314324"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1626</h3></div></div></div><a class="indexterm" name="id312431"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16271627        The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem
    16281628        occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur
     
    16371637        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code>
    16381638</em></span>
    1639 </p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314389"></a>
     1639</p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312496"></a>
    16401640
    16411641dfree command (S)
    1642 </h3></div></div></div><a class="indexterm" name="id314390"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1642</h3></div></div></div><a class="indexterm" name="id312497"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    16431643        The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a
    16441644        problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may
     
    16781678        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code>
    16791679</em></span>
    1680 </p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314495"></a>
     1680</p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312602"></a>
    16811681
    16821682<a name="DIRECTORYMODE"></a>directory mode
    1683 </h3></div></div></div><a class="indexterm" name="id314496"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314521"></a>
     1683</h3></div></div></div><a class="indexterm" name="id312603"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312628"></a>
    16841684
    16851685directory mask (S)
    1686 </h3></div></div></div><a class="indexterm" name="id314522"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
     1686</h3></div></div></div><a class="indexterm" name="id312629"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are
    16871687    used when converting DOS modes to UNIX modes when creating UNIX
    16881688    directories.</p><p>When a directory is created, the necessary permissions are
     
    17021702</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code>
    17031703</em></span>
    1704 </p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314615"></a>
     1704</p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312722"></a>
    17051705
    17061706directory name cache size (S)
    1707 </h3></div></div></div><a class="indexterm" name="id314616"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1707</h3></div></div></div><a class="indexterm" name="id312723"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17081708        This parameter specifies the the size of the directory name cache.
    17091709        It will be needed to turn this off for *BSD systems.
    17101710        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory name cache size</code></em> = <code class="literal">100</code>
    17111711</em></span>
    1712 </p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314653"></a>
     1712</p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312760"></a>
    17131713
    17141714directory security mask (S)
    1715 </h3></div></div></div><a class="indexterm" name="id314654"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
     1715</h3></div></div></div><a class="indexterm" name="id312761"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits
    17161716    will be set when a Windows NT client is manipulating the UNIX
    17171717    permission on a directory using the native NT security dialog
     
    17331733</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code>
    17341734</em></span>
    1735 </p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314741"></a>
     1735</p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312848"></a>
    17361736
    17371737disable netbios (G)
    1738 </h3></div></div></div><a class="indexterm" name="id314742"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
     1738</h3></div></div></div><a class="indexterm" name="id312849"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support
    17391739    in Samba. Netbios is the only available form of browsing in
    17401740    all windows versions except for 2000 and XP. </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to
     
    17421742        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code>
    17431743</em></span>
    1744 </p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314785"></a>
     1744</p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312892"></a>
    17451745
    17461746disable spoolss (G)
    1747 </h3></div></div></div><a class="indexterm" name="id314786"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
     1747</h3></div></div></div><a class="indexterm" name="id312893"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support
    17481748    for the SPOOLSS set of MS-RPC's and will yield identical behavior
    17491749    as Samba 2.0.x.  Windows NT/2000 clients will downgrade to using
     
    17571757</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code>
    17581758</em></span>
    1759 </p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314830"></a>
     1759</p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312937"></a>
    17601760
    17611761display charset (G)
    1762 </h3></div></div></div><a class="indexterm" name="id314831"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1762</h3></div></div></div><a class="indexterm" name="id312938"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>
    17631763        Specifies the charset that samba will use to print messages to stdout and stderr.
    17641764        The default value is "LOCALE", which means automatically set, depending on the
     
    17691769</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code>
    17701770</em></span>
    1771 </p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314892"></a>
     1771</p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312999"></a>
    17721772
    17731773dmapi support (S)
    1774 </h3></div></div></div><a class="indexterm" name="id314893"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
     1774</h3></div></div></div><a class="indexterm" name="id313000"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to
    17751775        determine whether a file is offline or not. This would typically
    17761776        be used in conjunction with a hierarchical storage system that
     
    17871787        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code>
    17881788</em></span>
    1789 </p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314945"></a>
     1789</p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313052"></a>
    17901790
    17911791dns proxy (G)
    1792 </h3></div></div></div><a class="indexterm" name="id314946"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
     1792</h3></div></div></div><a class="indexterm" name="id313053"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and
    17931793        finding that a NetBIOS name has not been registered, should treat the
    17941794        NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server
     
    17991799        action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code>
    18001800</em></span>
    1801 </p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315004"></a>
     1801</p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313111"></a>
    18021802
    18031803domain logons (G)
    1804 </h3></div></div></div><a class="indexterm" name="id315005"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1804</h3></div></div></div><a class="indexterm" name="id313112"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    18051805        If set to <code class="constant">yes</code>, the Samba server will
    18061806        provide the netlogon service for Windows 9X network logons for the
     
    18121812        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code>
    18131813</em></span>
    1814 </p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315054"></a>
     1814</p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313161"></a>
    18151815
    18161816domain master (G)
    1817 </h3></div></div></div><a class="indexterm" name="id315055"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1817</h3></div></div></div><a class="indexterm" name="id313162"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    18181818        Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable
    18191819        WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a
     
    18411841        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code>
    18421842</em></span>
    1843 </p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315221"></a>
     1843</p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313328"></a>
    18441844
    18451845dont descend (S)
    1846 </h3></div></div></div><a class="indexterm" name="id315222"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
     1846</h3></div></div></div><a class="indexterm" name="id313329"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems
    18471847        (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not
    18481848        of interest to clients or are infinitely deep (recursive). This
     
    18551855</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code>
    18561856</em></span>
    1857 </p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315295"></a>
     1857</p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313402"></a>
    18581858
    18591859dos charset (G)
    1860 </h3></div></div></div><a class="indexterm" name="id315296"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
     1860</h3></div></div></div><a class="indexterm" name="id313403"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has
    18611861        the same charset as they do. This option specifies which
    18621862        charset Samba should talk to DOS clients.
    18631863        </p><p>The default depends on which charsets you have installed.
    18641864        Samba tries to use charset 850 but falls back to ASCII in
    1865         case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315334"></a>
     1865        case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313440"></a>
    18661866
    18671867dos filemode (S)
    1868 </h3></div></div></div><a class="indexterm" name="id315335"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
     1868</h3></div></div></div><a class="indexterm" name="id313442"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide
    18691869        UNIX-like behavior where only the owner of a file/directory is
    18701870        able to change the permissions on it.  However, this behavior
     
    18831883        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code>
    18841884</em></span>
    1885 </p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315378"></a>
     1885</p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313484"></a>
    18861886
    18871887dos filetime resolution (S)
    1888 </h3></div></div></div><a class="indexterm" name="id315379"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
     1888</h3></div></div></div><a class="indexterm" name="id313485"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest
    18891889        granularity on time resolution is two seconds. Setting this parameter
    18901890        for a share causes Samba to round the reported time down to the
     
    19011901        happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code>
    19021902</em></span>
    1903 </p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315433"></a>
     1903</p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313540"></a>
    19041904
    19051905dos filetimes (S)
    1906 </h3></div></div></div><a class="indexterm" name="id315434"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
     1906</h3></div></div></div><a class="indexterm" name="id313541"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a
    19071907        file they can change the timestamp on it. Under POSIX semantics,
    19081908        only the owner of the file or root may change the timestamp. By
     
    19171917        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code>
    19181918</em></span>
    1919 </p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id265648"></a>
     1919</p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id265863"></a>
    19201920
    19211921ea support (S)
    1922 </h3></div></div></div><a class="indexterm" name="id265649"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
     1922</h3></div></div></div><a class="indexterm" name="id265864"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended
    19231923    attributes on a share. In order to enable this parameter the underlying filesystem exported by
    19241924    the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the
     
    19271927                extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code>
    19281928</em></span>
    1929 </p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315602"></a>
     1929</p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313708"></a>
    19301930
    19311931enable asu support (G)
    1932 </h3></div></div></div><a class="indexterm" name="id315603"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
     1932</h3></div></div></div><a class="indexterm" name="id313709"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product
    19331933    require some special accomodations such as creating a builtin [ADMIN$]
    19341934    share that only supports IPC connections.  The has been the default
     
    19381938    an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code>
    19391939</em></span>
    1940 </p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315642"></a>
     1940</p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313749"></a>
    19411941
    19421942enable core files (G)
    1943 </h3></div></div></div><a class="indexterm" name="id315644"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
     1943</h3></div></div></div><a class="indexterm" name="id313750"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written
    19441944        on internal exits. Normally set to <code class="constant">yes</code>.
    19451945        You should never need to change this.
     
    19481948</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enable core files</code></em> = <code class="literal">no</code>
    19491949</em></span>
    1950 </p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315699"></a>
     1950</p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313806"></a>
    19511951
    19521952enable privileges (G)
    1953 </h3></div></div></div><a class="indexterm" name="id315700"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     1953</h3></div></div></div><a class="indexterm" name="id313807"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    19541954        This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
    19551955         <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools.  This parameter is
     
    19641964        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code>
    19651965</em></span>
    1966 </p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315753"></a>
     1966</p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313860"></a>
    19671967
    19681968enable spoolss (G)
    1969 </h3></div></div></div><a class="indexterm" name="id315754"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
    1970 </em></span>
    1971 </p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315798"></a>
     1969</h3></div></div></div><a class="indexterm" name="id313861"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>
     1970</em></span>
     1971</p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313910"></a>
    19721972
    19731973encrypt passwords (G)
    1974 </h3></div></div></div><a class="indexterm" name="id315799"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
     1974</h3></div></div></div><a class="indexterm" name="id313911"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords
    19751975    will be negotiated with the client. Note that Windows NT 4.0 SP3 and
    19761976    above and also Windows 98 will by default expect encrypted passwords
     
    19951995        server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code>
    19961996</em></span>
    1997 </p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315889"></a>
     1997</p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314010"></a>
    19981998
    19991999enhanced browsing (G)
    2000 </h3></div></div></div><a class="indexterm" name="id315890"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
     2000</h3></div></div></div><a class="indexterm" name="id314011"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to
    20012001        cross-subnet browse propagation that have been added in Samba
    20022002        but which are not standard in Microsoft implementations. 
     
    20112011        cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code>
    20122012</em></span>
    2013 </p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315946"></a>
     2013</p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314068"></a>
    20142014
    20152015enumports command (G)
    2016 </h3></div></div></div><a class="indexterm" name="id315947"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
     2016</h3></div></div></div><a class="indexterm" name="id314069"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign
    20172017    to UNIX hosts.  Under Windows NT/2000 print servers, a port
    20182018    is associated with a port monitor and generally takes the form of
     
    20312031</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code>
    20322032</em></span>
    2033 </p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316028"></a>
     2033</p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314149"></a>
    20342034
    20352035eventlog list (G)
    2036 </h3></div></div></div><a class="indexterm" name="id316029"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
     2036</h3></div></div></div><a class="indexterm" name="id314150"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will
    20372037    report to the Microsoft EventViewer utility.  The listed
    20382038    eventlogs will be associated with tdb file on disk in the
     
    20472047</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code>
    20482048</em></span>
    2049 </p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316103"></a>
     2049</p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314224"></a>
    20502050
    20512051fake directory create times (S)
    2052 </h3></div></div></div><a class="indexterm" name="id316104"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
     2052</h3></div></div></div><a class="indexterm" name="id314225"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create
    20532053        time for all files and directories. This is not the same as the
    20542054        ctime - status change time - that Unix keeps, so Samba by default
     
    20722072        will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code>
    20732073</em></span>
    2074 </p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316167"></a>
     2074</p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314288"></a>
    20752075
    20762076fake oplocks (S)
    2077 </h3></div></div></div><a class="indexterm" name="id316168"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
     2077</h3></div></div></div><a class="indexterm" name="id314289"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission
    20782078        from a server to locally cache file operations. If a server grants
    20792079        an oplock (opportunistic lock) then the client is free to assume
     
    20912091        this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code>
    20922092</em></span>
    2093 </p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316249"></a>
     2093</p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314371"></a>
    20942094
    20952095follow symlinks (S)
    2096 </h3></div></div></div><a class="indexterm" name="id316250"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2096</h3></div></div></div><a class="indexterm" name="id314372"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    20972097        This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>       from following symbolic links in a particular share. Setting this
    20982098        parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being
     
    21042104        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code>
    21052105</em></span>
    2106 </p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316319"></a>
     2106</p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314441"></a>
    21072107
    21082108force create mode (S)
    2109 </h3></div></div></div><a class="indexterm" name="id316320"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2109</h3></div></div></div><a class="indexterm" name="id314442"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    21102110    permissions that will <span class="emphasis"><em>always</em></span> be set on a
    21112111    file created by Samba. This is done by bitwise 'OR'ing these bits onto
     
    21192119</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code>
    21202120</em></span>
    2121 </p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316395"></a>
     2121</p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314516"></a>
    21222122
    21232123force directory mode (S)
    2124 </h3></div></div></div><a class="indexterm" name="id316396"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
     2124</h3></div></div></div><a class="indexterm" name="id314517"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit
    21252125    permissions that will <span class="emphasis"><em>always</em></span> be set on a directory
    21262126    created by Samba. This is done by bitwise 'OR'ing these bits onto the
     
    21352135</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code>
    21362136</em></span>
    2137 </p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316470"></a>
     2137</p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314591"></a>
    21382138
    21392139force directory security mode (S)
    2140 </h3></div></div></div><a class="indexterm" name="id316471"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2140</h3></div></div></div><a class="indexterm" name="id314592"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    21412141        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    21422142        the UNIX permission on a directory using the native NT security dialog box.
     
    21592159</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code>
    21602160</em></span>
    2161 </p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316563"></a>
     2161</p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id314683"></a>
    21622162
    21632163<a name="GROUP"></a>group
    2164 </h3></div></div></div><a class="indexterm" name="id316564"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316595"></a>
     2164</h3></div></div></div><a class="indexterm" name="id314684"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314715"></a>
    21652165
    21662166force group (S)
    2167 </h3></div></div></div><a class="indexterm" name="id316596"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
     2167</h3></div></div></div><a class="indexterm" name="id314716"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be
    21682168    assigned as the default primary group for all users connecting
    21692169    to this service. This is useful for sharing files by ensuring
     
    21892189</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code>
    21902190</em></span>
    2191 </p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316697"></a>
     2191</p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314818"></a>
    21922192
    21932193force printername (S)
    2194 </h3></div></div></div><a class="indexterm" name="id316698"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
     2194</h3></div></div></div><a class="indexterm" name="id314819"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),
    21952195    each printer in <code class="filename">smb.conf</code> has two
    21962196    associated names which can be used by the client.  The first
     
    22152215    folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code>
    22162216</em></span>
    2217 </p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316777"></a>
     2217</p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314897"></a>
    22182218
    22192219force security mode (S)
    2220 </h3></div></div></div><a class="indexterm" name="id316778"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2220</h3></div></div></div><a class="indexterm" name="id314898"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22212221        This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    22222222    the UNIX permission on a file using the native NT security dialog box.
     
    22382238</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code>
    22392239</em></span>
    2240 </p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316868"></a>
     2240</p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314988"></a>
    22412241
    22422242force unknown acl user (S)
    2243 </h3></div></div></div><a class="indexterm" name="id316869"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2243</h3></div></div></div><a class="indexterm" name="id314989"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22442244    If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or
    22452245    representation of a user or group id) as the owner or group owner of the file will be silently
     
    22552255    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code>
    22562256</em></span>
    2257 </p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316922"></a>
     2257</p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315042"></a>
    22582258
    22592259force user (S)
    2260 </h3></div></div></div><a class="indexterm" name="id316923"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
     2260</h3></div></div></div><a class="indexterm" name="id315043"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be
    22612261    assigned as the default user for all users connecting to this service.
    22622262    This is useful for sharing files. You should also use it carefully
     
    22722272</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code>
    22732273</em></span>
    2274 </p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316992"></a>
     2274</p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315112"></a>
    22752275
    22762276fstype (S)
    2277 </h3></div></div></div><a class="indexterm" name="id316993"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2277</h3></div></div></div><a class="indexterm" name="id315113"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    22782278        This parameter allows the administrator to configure the string that specifies the type of filesystem a share
    22792279        is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
     
    22852285</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code>
    22862286</em></span>
    2287 </p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317071"></a>
     2287</p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315190"></a>
    22882288
    22892289get quota command (G)
    2290 </h3></div></div></div><a class="indexterm" name="id317072"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
     2290</h3></div></div></div><a class="indexterm" name="id315191"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used
    22912291        whenever there is no operating system API available from the OS that
    22922292        samba can use.</p><p>This option is only available you have compiled Samba with the
     
    23012301</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code>
    23022302</em></span>
    2303 </p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317247"></a>
     2303</p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315366"></a>
    23042304
    23052305getwd cache (G)
    2306 </h3></div></div></div><a class="indexterm" name="id317248"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
     2306</h3></div></div></div><a class="indexterm" name="id315367"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a
    23072307    caching algorithm will be used to reduce the time taken for getwd()
    23082308    calls. This can have a significant impact on performance, especially
    23092309    when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code>
    23102310</em></span>
    2311 </p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317305"></a>
     2311</p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315424"></a>
    23122312
    23132313guest account (G)
    2314 </h3></div></div></div><a class="indexterm" name="id317306"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
     2314</h3></div></div></div><a class="indexterm" name="id315425"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access
    23152315    to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this
    23162316    user has will be available to any client connecting to the guest service.
     
    23302330</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code>
    23312331</em></span>
    2332 </p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317404"></a>
     2332</p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id315522"></a>
    23332333
    23342334<a name="PUBLIC"></a>public
    2335 </h3></div></div></div><a class="indexterm" name="id317405"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317435"></a>
     2335</h3></div></div></div><a class="indexterm" name="id315523"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315553"></a>
    23362336
    23372337guest ok (S)
    2338 </h3></div></div></div><a class="indexterm" name="id317436"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2338</h3></div></div></div><a class="indexterm" name="id315554"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23392339    a service, then no password is required to connect to the service.
    23402340    Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This paramater nullifies the benifits of setting
     
    23432343        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code>
    23442344</em></span>
    2345 </p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317520"></a>
     2345</p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id315638"></a>
    23462346
    23472347<a name="ONLYGUEST"></a>only guest
    2348 </h3></div></div></div><a class="indexterm" name="id317521"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317553"></a>
     2348</h3></div></div></div><a class="indexterm" name="id315639"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315669"></a>
    23492349
    23502350guest only (S)
    2351 </h3></div></div></div><a class="indexterm" name="id317554"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
     2351</h3></div></div></div><a class="indexterm" name="id315670"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for
    23522352    a service, then only guest connections to the service are permitted.
    23532353    This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option.
    23542354        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code>
    23552355</em></span>
    2356 </p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317622"></a>
     2356</p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315739"></a>
    23572357
    23582358hide dot files (S)
    2359 </h3></div></div></div><a class="indexterm" name="id317623"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
     2359</h3></div></div></div><a class="indexterm" name="id315740"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether
    23602360        files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code>
    23612361</em></span>
    2362 </p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317663"></a>
     2362</p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315780"></a>
    23632363
    23642364hide files (S)
    2365 </h3></div></div></div><a class="indexterm" name="id317664"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
     2365</h3></div></div></div><a class="indexterm" name="id315781"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not
    23662366        visible but are accessible.  The DOS 'hidden' attribute is applied
    23672367        to any files or directories that match.</p><p>Each entry in the list must be separated by a '/',
     
    23852385# no file are hidden</code>
    23862386</em></span>
    2387 </p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317742"></a>
     2387</p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315859"></a>
    23882388
    23892389hide special files (S)
    2390 </h3></div></div></div><a class="indexterm" name="id317743"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2390</h3></div></div></div><a class="indexterm" name="id315860"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    23912391        This parameter prevents clients from seeing special files such as sockets, devices and
    23922392        fifo's in directory listings.
    23932393        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code>
    23942394</em></span>
    2395 </p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317783"></a>
     2395</p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315901"></a>
    23962396
    23972397hide unreadable (S)
    2398 </h3></div></div></div><a class="indexterm" name="id317784"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
     2398</h3></div></div></div><a class="indexterm" name="id315902"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the
    23992399                existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code>
    24002400</em></span>
    2401 </p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317825"></a>
     2401</p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315942"></a>
    24022402
    24032403hide unwriteable files (S)
    2404 </h3></div></div></div><a class="indexterm" name="id317826"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2404</h3></div></div></div><a class="indexterm" name="id315944"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24052405    This parameter prevents clients from seeing the existance of files that cannot be written to.
    24062406    Defaults to off. Note that unwriteable directories are shown as usual.
    24072407    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code>
    24082408</em></span>
    2409 </p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317866"></a>
     2409</p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315985"></a>
    24102410
    24112411homedir map (G)
    2412 </h3></div></div></div><a class="indexterm" name="id317868"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2412</h3></div></div></div><a class="indexterm" name="id315986"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24132413        If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting         as a Win95/98 <em class="parameter"><code>logon server</code></em>
    24142414        then this parameter specifies the NIS (or YP) map from which the server for the user's  home directory should be extracted. 
     
    24252425</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code>
    24262426</em></span>
    2427 </p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317973"></a>
     2427</p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316089"></a>
    24282428
    24292429host msdfs (G)
    2430 </h3></div></div></div><a class="indexterm" name="id317974"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2430</h3></div></div></div><a class="indexterm" name="id316090"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24312431        If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse
    24322432        Dfs trees hosted on the server.
     
    24362436        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code>
    24372437</em></span>
    2438 </p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318035"></a>
     2438</p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316150"></a>
    24392439
    24402440hostname lookups (G)
    2441 </h3></div></div></div><a class="indexterm" name="id318036"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
     2441</h3></div></div></div><a class="indexterm" name="id316151"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)
    24422442    hostname lookups or use the ip addresses instead. An example place
    24432443    where hostname lookups are currently used is when checking
     
    24472447</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code>
    24482448</em></span>
    2449 </p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318106"></a>
     2449</p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id316221"></a>
    24502450
    24512451<a name="ALLOWHOSTS"></a>allow hosts
    2452 </h3></div></div></div><a class="indexterm" name="id318107"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318138"></a>
     2452</h3></div></div></div><a class="indexterm" name="id316222"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316254"></a>
    24532453
    24542454hosts allow (S)
    2455 </h3></div></div></div><a class="indexterm" name="id318139"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
     2455</h3></div></div></div><a class="indexterm" name="id316255"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited
    24562456    set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will
    24572457    apply to all services, regardless of whether the individual
     
    24732473</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code>
    24742474</em></span>
    2475 </p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318326"></a>
     2475</p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id316441"></a>
    24762476
    24772477<a name="DENYHOSTS"></a>deny hosts
    2478 </h3></div></div></div><a class="indexterm" name="id318327"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318357"></a>
     2478</h3></div></div></div><a class="indexterm" name="id316442"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316472"></a>
    24792479
    24802480hosts deny (S)
    2481 </h3></div></div></div><a class="indexterm" name="id318358"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
     2481</h3></div></div></div><a class="indexterm" name="id316473"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>
    24822482    - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to
    24832483    services unless the specific services have their own lists to override
     
    24932493</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code>
    24942494</em></span>
    2495 </p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318454"></a>
     2495</p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316569"></a>
    24962496
    24972497idmap alloc backend (G)
    2498 </h3></div></div></div><a class="indexterm" name="id318455"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2498</h3></div></div></div><a class="indexterm" name="id316570"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    24992499        The idmap alloc backend provides a plugin interface for Winbind to use
    25002500        when allocating Unix uids/gids for Windows SIDs. This option refers
     
    25132513        </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code>
    25142514</em></span>
    2515 </p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318551"></a>
     2515</p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316666"></a>
    25162516
    25172517idmap alloc config (G)
    2518 </h3></div></div></div><a class="indexterm" name="id318552"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2518</h3></div></div></div><a class="indexterm" name="id316667"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25192519        The idmap alloc config prefix provides a means of managing settings
    25202520        for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a>
    25212521        parameter.  Refer to the man page for each idmap plugin regarding
    25222522        specific configuration details.
    2523         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318591"></a>
     2523        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316707"></a>
    25242524
    25252525idmap backend (G)
    2526 </h3></div></div></div><a class="indexterm" name="id318592"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2526</h3></div></div></div><a class="indexterm" name="id316708"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25272527        The idmap backend provides a plugin interface for Winbind to use
    25282528        varying backends to store SID/uid/gid mapping tables.
     
    25452545        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code>
    25462546</em></span>
    2547 </p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318755"></a>
     2547</p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316871"></a>
    25482548
    25492549idmap cache time (G)
    2550 </h3></div></div></div><a class="indexterm" name="id318756"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2550</h3></div></div></div><a class="indexterm" name="id316872"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    25512551        idmap interface will cache positive SID/uid/gid query results.
    25522552        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">604800 (one week)</code>
    25532553</em></span>
    2554 </p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318797"></a>
     2554</p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316913"></a>
    25552555
    25562556idmap config (G)
    2557 </h3></div></div></div><a class="indexterm" name="id318798"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2557</h3></div></div></div><a class="indexterm" name="id316914"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    25582558        The idmap config prefix provides a means of managing each trusted
    25592559        domain separately. The idmap config prefix should be followed by the
     
    25872587        idmap config CORP : backend  = ad
    25882588        idmap config CORP : range = 1000-999999
    2589         </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id318917"></a>
     2589        </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id317032"></a>
    25902590
    25912591<a name="WINBINDGID"></a>winbind gid
    2592 </h3></div></div></div><a class="indexterm" name="id318918"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318948"></a>
     2592</h3></div></div></div><a class="indexterm" name="id317033"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317063"></a>
    25932593
    25942594idmap gid (G)
    2595 </h3></div></div></div><a class="indexterm" name="id318949"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
     2595</h3></div></div></div><a class="indexterm" name="id317064"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids
    25962596        that are allocated for the purpose of mapping UNX groups to NT group
    25972597        SIDs. This range of group ids should have no
     
    26032603</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code>
    26042604</em></span>
    2605 </p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319031"></a>
     2605</p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317145"></a>
    26062606
    26072607idmap negative cache time (G)
    2608 </h3></div></div></div><a class="indexterm" name="id319032"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
     2608</h3></div></div></div><a class="indexterm" name="id317146"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's
    26092609        idmap interface will cache negative SID/uid/gid query results.
    26102610        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code>
    26112611</em></span>
    2612 </p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id319074"></a>
     2612</p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id317187"></a>
    26132613
    26142614<a name="WINBINDUID"></a>winbind uid
    2615 </h3></div></div></div><a class="indexterm" name="id319075"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319105"></a>
     2615</h3></div></div></div><a class="indexterm" name="id317188"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317219"></a>
    26162616
    26172617idmap uid (G)
    2618 </h3></div></div></div><a class="indexterm" name="id319106"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2618</h3></div></div></div><a class="indexterm" name="id317220"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26192619        The idmap uid parameter specifies the range of user ids that are
    26202620        allocated for use in mapping UNIX users to NT user SIDs. This
     
    26262626</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code>
    26272627</em></span>
    2628 </p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319187"></a>
     2628</p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317301"></a>
    26292629
    26302630include (G)
    2631 </h3></div></div></div><a class="indexterm" name="id319188"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2631</h3></div></div></div><a class="indexterm" name="id317302"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26322632        This allows you to include one config file inside another.  The file is included literally, as though typed
    26332633        in place.
     
    26472647</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code>
    26482648</em></span>
    2649 </p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319284"></a>
     2649</p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317398"></a>
    26502650
    26512651inherit acls (S)
    2652 </h3></div></div></div><a class="indexterm" name="id319285"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
     2652</h3></div></div></div><a class="indexterm" name="id317399"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls
    26532653    exist on parent directories, they are always honored when creating a
    26542654    new file or subdirectory in these parent directories. The default
     
    26632663</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code>
    26642664</em></span>
    2665 </p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319329"></a>
     2665</p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317443"></a>
    26662666
    26672667inherit owner (S)
    2668 </h3></div></div></div><a class="indexterm" name="id319330"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
     2668</h3></div></div></div><a class="indexterm" name="id317444"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories
    26692669        is normally governed by effective uid of the connected user.
    26702670        This option allows the Samba administrator to specify that
     
    26752675        roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code>
    26762676</em></span>
    2677 </p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319377"></a>
     2677</p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317491"></a>
    26782678
    26792679inherit permissions (S)
    2680 </h3></div></div></div><a class="indexterm" name="id319378"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2680</h3></div></div></div><a class="indexterm" name="id317492"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26812681        The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>,
    26822682        <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this.
     
    26902690    share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code>
    26912691</em></span>
    2692 </p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319516"></a>
     2692</p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317630"></a>
    26932693
    26942694init logon delayed hosts (G)
    2695 </h3></div></div></div><a class="indexterm" name="id319517"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2695</h3></div></div></div><a class="indexterm" name="id317631"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    26962696        This parameter takes a list of host names, addresses or networks for
    26972697        which the initial samlogon reply should be delayed (so other DCs get
     
    27042704</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>init logon delayed hosts</code></em> = <code class="literal">150.203.5. myhost.mynet.de</code>
    27052705</em></span>
    2706 </p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319588"></a>
     2706</p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317703"></a>
    27072707
    27082708init logon delay (G)
    2709 </h3></div></div></div><a class="indexterm" name="id319590"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2709</h3></div></div></div><a class="indexterm" name="id317704"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27102710        This parameter specifies a delay in milliseconds for the hosts configured
    27112711        for delayed initial samlogon with
     
    27132713        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>init logon delay</code></em> = <code class="literal">100</code>
    27142714</em></span>
    2715 </p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319642"></a>
     2715</p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317755"></a>
    27162716
    27172717interfaces (G)
    2718 </h3></div></div></div><a class="indexterm" name="id319643"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
     2718</h3></div></div></div><a class="indexterm" name="id317756"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default
    27192719        network interfaces list that Samba will use for browsing, name
    27202720        registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query
     
    27402740</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code>
    27412741</em></span>
    2742 </p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319747"></a>
     2742</p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317861"></a>
    27432743
    27442744invalid users (S)
    2745 </h3></div></div></div><a class="indexterm" name="id319748"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
     2745</h3></div></div></div><a class="indexterm" name="id317862"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed
    27462746    to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span>
    27472747    check to absolutely ensure an improper setting does not breach
     
    27632763</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code>
    27642764</em></span>
    2765 </p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319848"></a>
     2765</p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317960"></a>
    27662766
    27672767iprint server (G)
    2768 </h3></div></div></div><a class="indexterm" name="id319849"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2768</h3></div></div></div><a class="indexterm" name="id317961"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27692769    This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>.
    27702770    </p><p>
     
    27752775</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code>
    27762776</em></span>
    2777 </p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319930"></a>
     2777</p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318044"></a>
    27782778
    27792779keepalive (G)
    2780 </h3></div></div></div><a class="indexterm" name="id319931"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
     2780</h3></div></div></div><a class="indexterm" name="id318045"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents
    27812781    the number of seconds between <em class="parameter"><code>keepalive</code></em>
    27822782    packets. If this parameter is zero, no keepalive packets will be
     
    27882788</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code>
    27892789</em></span>
    2790 </p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320012"></a>
     2790</p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318125"></a>
    27912791
    27922792kerberos method (G)
    2793 </h3></div></div></div><a class="indexterm" name="id320013"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2793</h3></div></div></div><a class="indexterm" name="id318126"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    27942794        Controls how kerberos tickets are verified.
    27952795        </p><p>Valid options are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>secrets only - use only the secrets.tdb for
     
    28082808        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kerberos method</code></em> = <code class="literal">secrets only</code>
    28092809</em></span>
    2810 </p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320101"></a>
     2810</p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318214"></a>
    28112811
    28122812kernel change notify (S)
    2813 </h3></div></div></div><a class="indexterm" name="id320102"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
     2813</h3></div></div></div><a class="indexterm" name="id318215"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the
    28142814        kernel for change notifications in directories so that
    28152815        SMB clients can refresh whenever the data on the server changes.
     
    28182818        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code>
    28192819</em></span>
    2820 </p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320147"></a>
     2820</p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318260"></a>
    28212821
    28222822kernel oplocks (G)
    2823 </h3></div></div></div><a class="indexterm" name="id320148"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
     2823</h3></div></div></div><a class="indexterm" name="id318261"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    28242824        (currently only IRIX and the Linux 2.4 kernel), this parameter
    28252825        allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks
     
    28312831        You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code>
    28322832</em></span>
    2833 </p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320229"></a>
     2833</p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318342"></a>
    28342834
    28352835lanman auth (G)
    2836 </h3></div></div></div><a class="indexterm" name="id320230"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     2836</h3></div></div></div><a class="indexterm" name="id318343"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    28372837    authenticate users or permit password changes
    28382838    using the LANMAN password hash. If disabled, only clients which support NT
     
    28562856    special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code>
    28572857</em></span>
    2858 </p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320324"></a>
     2858</p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318438"></a>
    28592859
    28602860large readwrite (G)
    2861 </h3></div></div></div><a class="indexterm" name="id320325"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
     2861</h3></div></div></div><a class="indexterm" name="id318439"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not
    28622862    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k
    28632863    streaming read and write variant SMB requests introduced with
     
    28682868        tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code>
    28692869</em></span>
    2870 </p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320376"></a>
     2870</p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318489"></a>
    28712871
    28722872ldap admin dn (G)
    2873 </h3></div></div></div><a class="indexterm" name="id320377"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2873</h3></div></div></div><a class="indexterm" name="id318490"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28742874        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished  Name (DN) name used by Samba to contact
    28752875        the ldap server when retreiving  user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used
     
    28792879        </p><p>
    28802880        The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap  suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>.
    2881         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320478"></a>
     2881        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318592"></a>
    28822882
    28832883ldap connection timeout (G)
    2884 </h3></div></div></div><a class="indexterm" name="id320480"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2884</h3></div></div></div><a class="indexterm" name="id318593"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    28852885        This parameter tells the LDAP library calls which timeout in seconds
    28862886        they should honor during initial connection establishments to LDAP servers.
     
    28942894        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code>
    28952895</em></span>
    2896 </p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320537"></a>
     2896</p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318652"></a>
    28972897
    28982898ldap debug level (G)
    2899 </h3></div></div></div><a class="indexterm" name="id320538"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2899</h3></div></div></div><a class="indexterm" name="id318653"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29002900                This parameter controls the debug level of the LDAP library
    29012901                calls. In the case of OpenLDAP, it is the same
     
    29142914</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code>
    29152915</em></span>
    2916 </p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320621"></a>
     2916</p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318735"></a>
    29172917
    29182918ldap debug threshold (G)
    2919 </h3></div></div></div><a class="indexterm" name="id320622"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2919</h3></div></div></div><a class="indexterm" name="id318736"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29202920                This parameter controls the Samba debug level at which
    29212921                the ldap library debug output is
     
    29262926</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code>
    29272927</em></span>
    2928 </p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320685"></a>
     2928</p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318800"></a>
    29292929
    29302930ldap delete dn (G)
    2931 </h3></div></div></div><a class="indexterm" name="id320686"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
     2931</h3></div></div></div><a class="indexterm" name="id318801"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete
    29322932        operation in the ldapsam deletes the complete entry or only the attributes
    29332933        specific to Samba.
    29342934        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code>
    29352935</em></span>
    2936 </p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320727"></a>
     2936</p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318842"></a>
    29372937
    29382938ldap deref (G)
    2939 </h3></div></div></div><a class="indexterm" name="id320728"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
     2939</h3></div></div></div><a class="indexterm" name="id318843"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library
    29402940        to use a certain alias dereferencing method. The default is
    29412941        <span class="emphasis"><em>auto</em></span>, which means that the default setting of the
     
    29482948</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap deref</code></em> = <code class="literal">searching</code>
    29492949</em></span>
    2950 </p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320805"></a>
     2950</p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318919"></a>
    29512951
    29522952ldap follow referral (G)
    2953 </h3></div></div></div><a class="indexterm" name="id320806"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
     2953</h3></div></div></div><a class="indexterm" name="id318920"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when
    29542954        searching for entries in the LDAP database. Possible values are
    29552955        <span class="emphasis"><em>on</em></span> to enable following referrals,
     
    29622962</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap follow referral</code></em> = <code class="literal">off</code>
    29632963</em></span>
    2964 </p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320876"></a>
     2964</p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318990"></a>
    29652965
    29662966ldap group suffix (G)
    2967 </h3></div></div></div><a class="indexterm" name="id320877"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
     2967</h3></div></div></div><a class="indexterm" name="id318991"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is
    29682968        used for groups when these are added to the LDAP directory.
    29692969        If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
     
    29722972</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code>
    29732973</em></span>
    2974 </p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320956"></a>
     2974</p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319068"></a>
    29752975
    29762976ldap idmap suffix (G)
    2977 </h3></div></div></div><a class="indexterm" name="id320957"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2977</h3></div></div></div><a class="indexterm" name="id319069"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29782978        This parameters specifies the suffix that is used when storing idmap mappings. If this parameter
    29792979        is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
     
    29832983</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code>
    29842984</em></span>
    2985 </p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321035"></a>
     2985</p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319149"></a>
    29862986
    29872987ldap machine suffix (G)
    2988 </h3></div></div></div><a class="indexterm" name="id321036"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2988</h3></div></div></div><a class="indexterm" name="id319150"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    29892989        It specifies where machines should be added to the ldap tree.  If this parameter is unset, the value of
    29902990        <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix string is pre-pended to the
     
    29942994</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code>
    29952995</em></span>
    2996 </p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321114"></a>
     2996</p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319228"></a>
    29972997
    29982998ldap page size (G)
    2999 </h3></div></div></div><a class="indexterm" name="id321115"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     2999</h3></div></div></div><a class="indexterm" name="id319229"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30003000        This parameter specifies the number of entries per page.
    30013001        </p><p>If the LDAP server supports paged results, clients can
     
    30063006</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap page size</code></em> = <code class="literal">512</code>
    30073007</em></span>
    3008 </p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321177"></a>
     3008</p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319292"></a>
    30093009
    30103010ldap passwd sync (G)
    3011 </h3></div></div></div><a class="indexterm" name="id321178"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3011</h3></div></div></div><a class="indexterm" name="id319293"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30123012        This option is used to define whether or not Samba should sync the LDAP password with the NT
    30133013        and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
     
    30203020                        the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code>
    30213021</em></span>
    3022 </p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321272"></a>
     3022</p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319387"></a>
    30233023
    30243024ldap replication sleep (G)
    3025 </h3></div></div></div><a class="indexterm" name="id321273"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3025</h3></div></div></div><a class="indexterm" name="id319388"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30263026        When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server.
    30273027        This server then replicates our changes back to the 'local' server, however the replication might take some seconds,
     
    30363036        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code>
    30373037</em></span>
    3038 </p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321328"></a>
     3038</p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319442"></a>
    30393039
    30403040ldapsam:editposix (G)
    3041 </h3></div></div></div><a class="indexterm" name="id321329"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3041</h3></div></div></div><a class="indexterm" name="id319443"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    30423042        Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller
    30433043        eliminating the need to set up custom scripts to add and manage the posix users and groups. This option
     
    31173117        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code>
    31183118</em></span>
    3119 </p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321433"></a>
     3119</p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319547"></a>
    31203120
    31213121ldapsam:trusted (G)
    3122 </h3></div></div></div><a class="indexterm" name="id321434"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3122</h3></div></div></div><a class="indexterm" name="id319548"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31233123        By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
    31243124        access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
     
    31383138        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code>
    31393139</em></span>
    3140 </p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321508"></a>
     3140</p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319622"></a>
    31413141
    31423142ldap ssl ads (G)
    3143 </h3></div></div></div><a class="indexterm" name="id321510"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3143</h3></div></div></div><a class="indexterm" name="id319623"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31443144        use SSL when connecting to the ldap server using
    31453145        <span class="emphasis"><em>ads</em></span> methods.
     
    31513151        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl ads</code></em> = <code class="literal">no</code>
    31523152</em></span>
    3153 </p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321590"></a>
     3153</p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319704"></a>
    31543154
    31553155ldap ssl (G)
    3156 </h3></div></div></div><a class="indexterm" name="id321592"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
     3156</h3></div></div></div><a class="indexterm" name="id319705"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should
    31573157        use SSL when connecting to the ldap server
    31583158        This is <span class="emphasis"><em>NOT</em></span> related to
     
    31793179        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start tls</code>
    31803180</em></span>
    3181 </p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321775"></a>
     3181</p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319889"></a>
    31823182
    31833183ldap suffix (G)
    3184 </h3></div></div></div><a class="indexterm" name="id321776"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
     3184</h3></div></div></div><a class="indexterm" name="id319890"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>
    31853185        The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>,
    31863186         <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the
     
    31913191</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code>
    31923192</em></span>
    3193 </p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321891"></a>
     3193</p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320004"></a>
    31943194
    31953195ldap timeout (G)
    3196 </h3></div></div></div><a class="indexterm" name="id321892"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3196</h3></div></div></div><a class="indexterm" name="id320006"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    31973197        This parameter defines the number of seconds that Samba should use as timeout for LDAP operations.
    31983198        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code>
    31993199</em></span>
    3200 </p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321932"></a>
     3200</p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320046"></a>
    32013201
    32023202ldap user suffix (G)
    3203 </h3></div></div></div><a class="indexterm" name="id321933"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3203</h3></div></div></div><a class="indexterm" name="id320047"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>
    32043204        This parameter specifies where users are added to the tree. If this parameter is unset,
    32053205        the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead.  The suffix
     
    32093209</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code>
    32103210</em></span>
    3211 </p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322010"></a>
     3211</p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320125"></a>
    32123212
    32133213level2 oplocks (S)
    3214 </h3></div></div></div><a class="indexterm" name="id322011"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
     3214</h3></div></div></div><a class="indexterm" name="id320126"></a><a name="LEVEL2OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether Samba supports
    32153215        level2 (read-only) oplocks on a share.</p><p>Level2, or read-only oplocks allow Windows NT clients
    32163216        that have an oplock on a file to downgrade from a read-write oplock
     
    32323232        this parameter to have any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>level2 oplocks</code></em> = <code class="literal">yes</code>
    32333233</em></span>
    3234 </p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322105"></a>
     3234</p></dd></dl></div></div><div class="section" title="lm announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320220"></a>
    32353235
    32363236lm announce (G)
    3237 </h3></div></div></div><a class="indexterm" name="id322106"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
     3237</h3></div></div></div><a class="indexterm" name="id320221"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce
    32383238        broadcasts that are needed by OS/2 clients in order for them to see
    32393239        the Samba server in their browse list. This parameter can have three
     
    32513251</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code>
    32523252</em></span>
    3253 </p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322221"></a>
     3253</p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320335"></a>
    32543254
    32553255lm interval (G)
    3256 </h3></div></div></div><a class="indexterm" name="id322222"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
     3256</h3></div></div></div><a class="indexterm" name="id320336"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce
    32573257        broadcasts needed by OS/2 clients (see the
    32583258                <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this
     
    32643264</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code>
    32653265</em></span>
    3266 </p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322302"></a>
     3266</p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320417"></a>
    32673267
    32683268load printers (G)
    3269 </h3></div></div></div><a class="indexterm" name="id322303"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
     3269</h3></div></div></div><a class="indexterm" name="id320418"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all
    32703270    printers in the printcap will be loaded for browsing by default.
    32713271    See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for
    32723272    more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code>
    32733273</em></span>
    3274 </p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322355"></a>
     3274</p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320470"></a>
    32753275
    32763276local master (G)
    3277 </h3></div></div></div><a class="indexterm" name="id322356"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
     3277</h3></div></div></div><a class="indexterm" name="id320471"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser
    32783278        on a subnet. If set to <code class="constant">no</code> then <code class="literal">
    32793279        nmbd</code> will not attempt to become a local master browser
     
    32853285master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code>
    32863286</em></span>
    3287 </p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id322452"></a>
     3287</p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id320567"></a>
    32883288
    32893289<a name="LOCKDIR"></a>lock dir
    3290 </h3></div></div></div><a class="indexterm" name="id322453"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322483"></a>
     3290</h3></div></div></div><a class="indexterm" name="id320568"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320600"></a>
    32913291
    32923292lock directory (G)
    3293 </h3></div></div></div><a class="indexterm" name="id322484"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
     3293</h3></div></div></div><a class="indexterm" name="id320601"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock
    32943294        files will be placed.  The lock files are used to implement the
    32953295        <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option.
     
    33013301</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code>
    33023302</em></span>
    3303 </p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322558"></a>
     3303</p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320674"></a>
    33043304
    33053305locking (S)
    3306 </h3></div></div></div><a class="indexterm" name="id322559"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
     3306</h3></div></div></div><a class="indexterm" name="id320675"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be
    33073307        performed by the server in response to lock requests from the
    33083308        client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock
     
    33143314        is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a
    33153315        specific service, as lack of locking may result in data corruption.
    3316         You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322626"></a>
     3316        You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320742"></a>
    33173317
    33183318lock spin count (G)
    3319 </h3></div></div></div><a class="indexterm" name="id322627"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
     3319</h3></div></div></div><a class="indexterm" name="id320743"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.
    33203320        The functionality it contolled is now controlled by the parameter
    33213321        <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>.
    33223322        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code>
    33233323</em></span>
    3324 </p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322679"></a>
     3324</p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320796"></a>
    33253325
    33263326lock spin time (G)
    3327 </h3></div></div></div><a class="indexterm" name="id322680"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
     3327</h3></div></div></div><a class="indexterm" name="id320797"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should
    33283328        keep waiting to see if a failed lock request can
    33293329        be granted. This parameter has changed in default
     
    33333333        to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code>
    33343334</em></span>
    3335 </p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322733"></a>
     3335</p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320849"></a>
    33363336
    33373337log file (G)
    3338 </h3></div></div></div><a class="indexterm" name="id322734"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3338</h3></div></div></div><a class="indexterm" name="id320850"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33393339    This option allows you to override the name of the Samba log file (also known as the debug file).
    33403340    </p><p>
     
    33423342    </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code>
    33433343</em></span>
    3344 </p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id322784"></a>
     3344</p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id320900"></a>
    33453345
    33463346<a name="DEBUGLEVEL"></a>debuglevel
    3347 </h3></div></div></div><a class="indexterm" name="id322785"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322814"></a>
     3347</h3></div></div></div><a class="indexterm" name="id320901"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320930"></a>
    33483348
    33493349log level (G)
    3350 </h3></div></div></div><a class="indexterm" name="id322815"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3350</h3></div></div></div><a class="indexterm" name="id320932"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33513351    The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
    33523352    <code class="filename">smb.conf</code> file.
     
    33593359</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code>
    33603360</em></span>
    3361 </p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323043"></a>
     3361</p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321160"></a>
    33623362
    33633363logon drive (G)
    3364 </h3></div></div></div><a class="indexterm" name="id323044"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3364</h3></div></div></div><a class="indexterm" name="id321162"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33653365        This parameter specifies the local path to which the home directory will be
    33663366        connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT
     
    33723372</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code>
    33733373</em></span>
    3374 </p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323116"></a>
     3374</p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321233"></a>
    33753375
    33763376logon home (G)
    3377 </h3></div></div></div><a class="indexterm" name="id323117"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3377</h3></div></div></div><a class="indexterm" name="id321234"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    33783378        This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 
    33793379        It allows you to do
     
    34063406</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code>
    34073407</em></span>
    3408 </p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323269"></a>
     3408</p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321387"></a>
    34093409
    34103410logon path (G)
    3411 </h3></div></div></div><a class="indexterm" name="id323270"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3411</h3></div></div></div><a class="indexterm" name="id321388"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34123412        This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are
    34133413        stored.  Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming
     
    34533453        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code>
    34543454</em></span>
    3455 </p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323415"></a>
     3455</p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321533"></a>
    34563456
    34573457logon script (G)
    3458 </h3></div></div></div><a class="indexterm" name="id323416"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3458</h3></div></div></div><a class="indexterm" name="id321534"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    34593459        This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file
    34603460        (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in.  The file
     
    34873487</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code>
    34883488</em></span>
    3489 </p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323573"></a>
     3489</p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id321691"></a>
    34903490
    34913491lppause command (S)
    3492 </h3></div></div></div><a class="indexterm" name="id323574"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3492</h3></div></div></div><a class="indexterm" name="id321692"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    34933493    executed on the server host in order to stop printing or spooling
    34943494    a specific print job.</p><p>This command should be a program or script which takes
     
    35143514</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code>
    35153515</em></span>
    3516 </p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323710"></a>
     3516</p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321827"></a>
    35173517
    35183518lpq cache time (G)
    3519 </h3></div></div></div><a class="indexterm" name="id323711"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
     3519</h3></div></div></div><a class="indexterm" name="id321828"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached
    35203520        for to prevent the <code class="literal">lpq</code> command being called too
    35213521        often. A separate cache is kept for each variation of the <code class="literal">
     
    35303530</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code>
    35313531</em></span>
    3532 </p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323821"></a>
     3532</p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id321938"></a>
    35333533
    35343534lpq command (S)
    3535 </h3></div></div></div><a class="indexterm" name="id323822"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3535</h3></div></div></div><a class="indexterm" name="id321939"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35363536    executed on the server host in order to obtain <code class="literal">lpq
    35373537    </code>-style printer status information.</p><p>This command should be a program or script which
     
    35553555</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code>
    35563556</em></span>
    3557 </p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323937"></a>
     3557</p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322054"></a>
    35583558
    35593559lpresume command (S)
    3560 </h3></div></div></div><a class="indexterm" name="id323938"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3560</h3></div></div></div><a class="indexterm" name="id322056"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35613561    executed on the server host in order to restart or continue
    35623562    printing or spooling a specific print job.</p><p>This command should be a program or script which takes
     
    35713571    is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code>
    35723572</em></span>
    3573 </p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324081"></a>
     3573</p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322198"></a>
    35743574
    35753575lprm command (S)
    3576 </h3></div></div></div><a class="indexterm" name="id324082"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     3576</h3></div></div></div><a class="indexterm" name="id322199"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    35773577    executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes
    35783578    a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name
     
    35913591        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code>
    35923592</em></span>
    3593 </p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324162"></a>
     3593</p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322278"></a>
    35943594
    35953595machine password timeout (G)
    3596 </h3></div></div></div><a class="indexterm" name="id324164"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3596</h3></div></div></div><a class="indexterm" name="id322279"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    35973597        If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change
    35983598        the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb
     
    36043604        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code>
    36053605</em></span>
    3606 </p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324246"></a>
     3606</p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322362"></a>
    36073607
    36083608magic output (S)
    3609 </h3></div></div></div><a class="indexterm" name="id324247"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3609</h3></div></div></div><a class="indexterm" name="id322363"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    36103610        This parameter specifies the name of a file which will contain output created by a magic script (see the
    36113611        <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below).
     
    36163616</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code>
    36173617</em></span>
    3618 </p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324326"></a>
     3618</p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322442"></a>
    36193619
    36203620magic script (S)
    3621 </h3></div></div></div><a class="indexterm" name="id324328"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
     3621</h3></div></div></div><a class="indexterm" name="id322444"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,
    36223622        if opened, will be executed by the server when the file is closed.
    36233623        This allows a UNIX script to be sent to the Samba host and
     
    36353635</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code>
    36363636</em></span>
    3637 </p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324424"></a>
     3637</p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322541"></a>
    36383638
    36393639mangled names (S)
    3640 </h3></div></div></div><a class="indexterm" name="id324425"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
     3640</h3></div></div></div><a class="indexterm" name="id322542"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX
    36413641        should be mapped to DOS-compatible names ("mangled") and made visible,
    36423642        or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for
     
    36633663        do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code>
    36643664</em></span>
    3665 </p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324544"></a>
     3665</p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322659"></a>
    36663666
    36673667mangle prefix (G)
    3668 </h3></div></div></div><a class="indexterm" name="id324545"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
     3668</h3></div></div></div><a class="indexterm" name="id322660"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix
    36693669        characters from the original name used when generating
    36703670        the mangled names. A larger value will give a weaker
     
    36763676</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code>
    36773677</em></span>
    3678 </p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324607"></a>
     3678</p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322723"></a>
    36793679
    36803680mangling char (S)
    3681 </h3></div></div></div><a class="indexterm" name="id324608"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
     3681</h3></div></div></div><a class="indexterm" name="id322724"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as
    36823682        the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The
    36833683        default is a '~' but this may interfere with some software. Use this option to set
     
    36863686</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code>
    36873687</em></span>
    3688 </p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324681"></a>
     3688</p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322797"></a>
    36893689
    36903690mangling method (G)
    3691 </h3></div></div></div><a class="indexterm" name="id324682"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
     3691</h3></div></div></div><a class="indexterm" name="id322798"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating
    36923692        the mangled names. Can take two different values, "hash" and
    36933693        "hash2". "hash" is the algorithm that was used
     
    37003700</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code>
    37013701</em></span>
    3702 </p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324743"></a>
     3702</p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322859"></a>
    37033703
    37043704map acl inherit (S)
    3705 </h3></div></div></div><a class="indexterm" name="id324744"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
     3705</h3></div></div></div><a class="indexterm" name="id322860"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'
    37063706    access control entry flags stored in Windows ACLs into an extended attribute
    37073707    called user.SAMBA_PAI. This parameter only takes effect if Samba is being run
     
    37113711    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code>
    37123712</em></span>
    3713 </p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324796"></a>
     3713</p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322912"></a>
    37143714
    37153715map archive (S)
    3716 </h3></div></div></div><a class="indexterm" name="id324797"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3716</h3></div></div></div><a class="indexterm" name="id322913"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37173717        This controls whether the DOS archive attribute
    37183718        should be mapped to the UNIX owner execute bit.  The DOS archive bit
     
    37273727        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code>
    37283728</em></span>
    3729 </p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324865"></a>
     3729</p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322981"></a>
    37303730
    37313731map hidden (S)
    3732 </h3></div></div></div><a class="indexterm" name="id324866"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3732</h3></div></div></div><a class="indexterm" name="id322982"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37333733        This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
    37343734        </p><p>
     
    37363736        bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>
    37373737        for details.
    3738         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324919"></a>
     3738        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323034"></a>
    37393739
    37403740map readonly (S)
    3741 </h3></div></div></div><a class="indexterm" name="id324920"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3741</h3></div></div></div><a class="indexterm" name="id323036"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37423742        This controls how the DOS read only attribute should be mapped from a UNIX filesystem.
    37433743        </p><p>
     
    37643764                </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map readonly</code></em> = <code class="literal">yes</code>
    37653765</em></span>
    3766 </p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325062"></a>
     3766</p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323177"></a>
    37673767
    37683768map system (S)
    3769 </h3></div></div></div><a class="indexterm" name="id325063"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3769</h3></div></div></div><a class="indexterm" name="id323178"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>
    37703770        This controls whether DOS style system files should be mapped to the UNIX group execute bit.
    37713771        </p><p>
     
    37753775        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code>
    37763776</em></span>
    3777 </p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325128"></a>
     3777</p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323244"></a>
    37783778
    37793779map to guest (G)
    3780 </h3></div></div></div><a class="indexterm" name="id325129"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
     3780</h3></div></div></div><a class="indexterm" name="id323245"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =
    37813781    security</a> modes other than <em class="parameter"><code>security = share</code></em>
    37823782    and <em class="parameter"><code>security = server</code></em>
     
    38203820</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code>
    38213821</em></span>
    3822 </p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325344"></a>
     3822</p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323460"></a>
    38233823
    38243824map untrusted to domain (G)
    3825 </h3></div></div></div><a class="indexterm" name="id325345"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3825</h3></div></div></div><a class="indexterm" name="id323461"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38263826    If a client connects to smbd using an untrusted domain name, such as
    38273827    BOGUS\user, smbd replaces the BOGUS domain with it's SAM name before
     
    38413841    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map untrusted to domain</code></em> = <code class="literal">no</code>
    38423842</em></span>
    3843 </p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325402"></a>
     3843</p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323518"></a>
    38443844
    38453845max connections (S)
    3846 </h3></div></div></div><a class="indexterm" name="id325403"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
     3846</h3></div></div></div><a class="indexterm" name="id323519"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.
    38473847    If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections
    38483848    will be refused if this number of connections to the service are already open. A value
     
    38523852</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code>
    38533853</em></span>
    3854 </p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325483"></a>
     3854</p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323599"></a>
    38553855
    38563856max disk size (G)
    3857 </h3></div></div></div><a class="indexterm" name="id325484"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
     3857</h3></div></div></div><a class="indexterm" name="id323600"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit
    38583858    on the apparent size of disks. If you set this option to 100
    38593859    then all shares will appear to be not larger than 100 MB in
     
    38693869</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code>
    38703870</em></span>
    3871 </p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325569"></a>
     3871</p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323685"></a>
    38723872
    38733873max log size (G)
    3874 </h3></div></div></div><a class="indexterm" name="id325570"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3874</h3></div></div></div><a class="indexterm" name="id323686"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    38753875    This option (an integer in kilobytes) specifies the max size the log file should grow to.
    38763876    Samba periodically checks the size and if it is exceeded it will rename the file, adding
     
    38813881</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code>
    38823882</em></span>
    3883 </p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325637"></a>
     3883</p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323754"></a>
    38843884
    38853885max mux (G)
    3886 </h3></div></div></div><a class="indexterm" name="id325638"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
     3886</h3></div></div></div><a class="indexterm" name="id323755"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of
    38873887    outstanding simultaneous SMB operations that Samba tells the client
    38883888        it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code>
    38893889</em></span>
    3890 </p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325678"></a>
     3890</p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323796"></a>
    38913891
    38923892max open files (G)
    3893 </h3></div></div></div><a class="indexterm" name="id325679"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3893</h3></div></div></div><a class="indexterm" name="id323797"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    38943894    open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file
    38953895    serving process may have open for a client at any one time. The
     
    39023902    this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">16404</code>
    39033903</em></span>
    3904 </p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325736"></a>
     3904</p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323853"></a>
    39053905
    39063906max print jobs (S)
    3907 </h3></div></div></div><a class="indexterm" name="id325737"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
     3907</h3></div></div></div><a class="indexterm" name="id323854"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of
    39083908    jobs allowable in a Samba printer queue at any given moment.
    39093909    If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client.
     
    39123912</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code>
    39133913</em></span>
    3914 </p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325803"></a>
     3914</p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id323920"></a>
    39153915
    39163916<a name="PROTOCOL"></a>protocol
    3917 </h3></div></div></div><a class="indexterm" name="id325804"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325835"></a>
     3917</h3></div></div></div><a class="indexterm" name="id323921"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323952"></a>
    39183918
    39193919max protocol (G)
    3920 </h3></div></div></div><a class="indexterm" name="id325836"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
     3920</h3></div></div></div><a class="indexterm" name="id323953"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest
    39213921    protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">CORE</code>: Earliest version. No
    39223922            concept of user names.</p></li><li class="listitem"><p><code class="constant">COREPLUS</code>: Slight improvements on
     
    39323932</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code>
    39333933</em></span>
    3934 </p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325964"></a>
     3934</p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324081"></a>
    39353935
    39363936max reported print jobs (S)
    3937 </h3></div></div></div><a class="indexterm" name="id325966"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     3937</h3></div></div></div><a class="indexterm" name="id324082"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    39383938    This parameter limits the maximum number of jobs displayed in a port monitor for
    39393939    Samba printer queue at any given moment. If this number is exceeded, the excess
     
    39443944</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code>
    39453945</em></span>
    3946 </p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326024"></a>
     3946</p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324141"></a>
    39473947
    39483948max smbd processes (G)
    3949 </h3></div></div></div><a class="indexterm" name="id326025"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
     3949</h3></div></div></div><a class="indexterm" name="id324142"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended
    39503950    as a stopgap to prevent degrading service to clients in the event that the server has insufficient
    39513951    resources to handle more than this number of connections.  Remember that under normal operating
     
    39553955</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code>
    39563956</em></span>
    3957 </p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326101"></a>
     3957</p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324218"></a>
    39583958
    39593959max stat cache size (G)
    3960 </h3></div></div></div><a class="indexterm" name="id326102"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
     3960</h3></div></div></div><a class="indexterm" name="id324219"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any
    39613961          <em class="parameter"><code>stat cache</code></em> being used
    39623962          to speed up case insensitive name mappings. It represents
     
    39693969</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code>
    39703970</em></span>
    3971 </p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326167"></a>
     3971</p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324284"></a>
    39723972
    39733973max ttl (G)
    3974 </h3></div></div></div><a class="indexterm" name="id326168"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
     3974</h3></div></div></div><a class="indexterm" name="id324285"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'
    39753975    of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is
    39763976    requesting a name using either a broadcast packet or from a WINS server. You should
    39773977        never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code>
    39783978</em></span>
    3979 </p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326223"></a>
     3979</p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324341"></a>
    39803980
    39813981max wins ttl (G)
    3982 </h3></div></div></div><a class="indexterm" name="id326224"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
     3982</h3></div></div></div><a class="indexterm" name="id324342"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server
    39833983        (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum
    39843984    'time to live' of NetBIOS names that <code class="literal">nmbd</code>
     
    39863986        parameter.  The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code>
    39873987</em></span>
    3988 </p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326292"></a>
     3988</p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324410"></a>
    39893989
    39903990max xmit (G)
    3991 </h3></div></div></div><a class="indexterm" name="id326293"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
     3991</h3></div></div></div><a class="indexterm" name="id324411"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size
    39923992    that will be negotiated by Samba. The default is 16644, which
    39933993    matches the behavior of Windows 2000.  A value below 2048 is likely to cause problems.
     
    39973997</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code>
    39983998</em></span>
    3999 </p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326352"></a>
     3999</p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324469"></a>
    40004000
    40014001message command (G)
    4002 </h3></div></div></div><a class="indexterm" name="id326353"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
     4002</h3></div></div></div><a class="indexterm" name="id324470"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the
    40034003        server receives a WinPopup style message.</p><p>This would normally be a command that would
    40044004        deliver the message somehow. How this is to be done is
     
    40394039</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &amp;</code>
    40404040</em></span>
    4041 </p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326544"></a>
     4041</p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324662"></a>
    40424042
    40434043min print space (S)
    4044 </h3></div></div></div><a class="indexterm" name="id326545"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
     4044</h3></div></div></div><a class="indexterm" name="id324663"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk
    40454045    space that must be available before a user will be able to spool
    40464046    a print job. It is specified in kilobytes. The default is 0, which
     
    40494049</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code>
    40504050</em></span>
    4051 </p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326604"></a>
     4051</p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324722"></a>
    40524052
    40534053min protocol (G)
    4054 </h3></div></div></div><a class="indexterm" name="id326605"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
     4054</h3></div></div></div><a class="indexterm" name="id324723"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the
    40554055    lowest SMB protocol dialect than Samba will support.  Please refer
    40564056    to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a>
     
    40644064</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code>
    40654065</em></span>
    4066 </p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326697"></a>
     4066</p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324814"></a>
    40674067
    40684068min receivefile size (G)
    4069 </h3></div></div></div><a class="indexterm" name="id326698"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
     4069</h3></div></div></div><a class="indexterm" name="id324816"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming
    40704070SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will
    40714071be passed to any underlying kernel recvfile or splice system call (if there is no such
     
    40764076nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code>
    40774077</em></span>
    4078 </p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326758"></a>
     4078</p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324877"></a>
    40794079
    40804080min wins ttl (G)
    4081 </h3></div></div></div><a class="indexterm" name="id326759"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
     4081</h3></div></div></div><a class="indexterm" name="id324878"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>
    40824082    when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live'
    40834083    of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in
     
    40854085    is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code>
    40864086</em></span>
    4087 </p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326826"></a>
     4087</p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324945"></a>
    40884088
    40894089msdfs proxy (S)
    4090 </h3></div></div></div><a class="indexterm" name="id326827"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
     4090</h3></div></div></div><a class="indexterm" name="id324946"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a
    40914091        stand-in for another CIFS share whose location is specified by
    40924092        the value of the parameter. When clients attempt to connect to
     
    40964096        options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code>
    40974097</em></span>
    4098 </p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326899"></a>
     4098</p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325018"></a>
    40994099
    41004100msdfs root (S)
    4101 </h3></div></div></div><a class="indexterm" name="id326900"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
     4101</h3></div></div></div><a class="indexterm" name="id325019"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the
    41024102        share as a Dfs root and allows clients to browse the
    41034103        distributed file system tree rooted at the share directory.
     
    41074107        Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code>
    41084108</em></span>
    4109 </p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326952"></a>
     4109</p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325070"></a>
    41104110
    41114111name cache timeout (G)
    4112 </h3></div></div></div><a class="indexterm" name="id326953"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
     4112</h3></div></div></div><a class="indexterm" name="id325071"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before
    41134113    entries in samba's hostname resolve cache time out. If
    41144114    the timeout is set to 0. the caching is disabled.
     
    41174117</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code>
    41184118</em></span>
    4119 </p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327010"></a>
     4119</p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325129"></a>
    41204120
    41214121name resolve order (G)
    4122 </h3></div></div></div><a class="indexterm" name="id327011"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
     4122</h3></div></div></div><a class="indexterm" name="id325130"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba
    41234123    suite to determine what naming services to use and in what order
    41244124    to resolve host names to IP addresses. Its main purpose to is to
     
    41514151</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code>
    41524152</em></span>
    4153 </p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327192"></a>
     4153</p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325310"></a>
    41544154
    41554155netbios aliases (G)
    4156 </h3></div></div></div><a class="indexterm" name="id327193"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
     4156</h3></div></div></div><a class="indexterm" name="id325311"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will
    41574157        advertise as additional names by which the Samba server is known. This allows one machine
    41584158        to appear in browse lists under multiple names. If a machine is acting as a browse server
     
    41644164</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code>
    41654165</em></span>
    4166 </p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327254"></a>
     4166</p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325371"></a>
    41674167
    41684168netbios name (G)
    4169 </h3></div></div></div><a class="indexterm" name="id327255"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4169</h3></div></div></div><a class="indexterm" name="id325372"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    41704170                This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component
    41714171                of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of
     
    41804180</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code>
    41814181</em></span>
    4182 </p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327331"></a>
     4182</p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325448"></a>
    41834183
    41844184netbios scope (G)
    4185 </h3></div></div></div><a class="indexterm" name="id327332"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
     4185</h3></div></div></div><a class="indexterm" name="id325449"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will
    41864186        operate under. This should not be set unless every machine
    41874187        on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code>
    41884188</em></span>
    4189 </p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327371"></a>
     4189</p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325489"></a>
    41904190
    41914191nis homedir (G)
    4192 </h3></div></div></div><a class="indexterm" name="id327372"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
     4192</h3></div></div></div><a class="indexterm" name="id325490"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For
    41934193        UNIX systems that use an automounter, the user's home directory
    41944194        will often be mounted on a workstation on demand from a remote
     
    42094209        be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code>
    42104210</em></span>
    4211 </p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327442"></a>
     4211</p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325559"></a>
    42124212
    42134213nmbd bind explicit broadcast (G)
    4214 </h3></div></div></div><a class="indexterm" name="id327443"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4214</h3></div></div></div><a class="indexterm" name="id325560"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42154215        This option causes <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to explicitly bind to the
    42164216        broadcast address of the local subnets. This is needed to make nmbd
     
    42194219        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nmbd bind explicit broadcast</code></em> = <code class="literal">yes</code>
    42204220</em></span>
    4221 </p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327505"></a>
     4221</p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325621"></a>
    42224222
    42234223nt acl support (S)
    4224 </h3></div></div></div><a class="indexterm" name="id327506"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
     4224</h3></div></div></div><a class="indexterm" name="id325622"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map
    42254225    UNIX permissions into Windows NT access control lists.  The UNIX
    42264226    permissions considered are the the traditional UNIX owner and
     
    42294229    releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code>
    42304230</em></span>
    4231 </p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327556"></a>
     4231</p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325673"></a>
    42324232
    42334233ntlm auth (G)
    4234 </h3></div></div></div><a class="indexterm" name="id327557"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
     4234</h3></div></div></div><a class="indexterm" name="id325674"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to
    42354235    authenticate users using the NTLM encrypted password response.
    42364236    If disabled, either the lanman password hash or an NTLMv2 response
     
    42404240        special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code>
    42414241</em></span>
    4242 </p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327617"></a>
     4242</p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325734"></a>
    42434243
    42444244nt pipe support (G)
    4245 </h3></div></div></div><a class="indexterm" name="id327618"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
     4245</h3></div></div></div><a class="indexterm" name="id325735"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether
    42464246    <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT
    42474247    clients to connect to the NT SMB specific <code class="constant">IPC$</code>
     
    42494249        alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code>
    42504250</em></span>
    4251 </p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327669"></a>
     4251</p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325787"></a>
    42524252
    42534253nt status support (G)
    4254 </h3></div></div></div><a class="indexterm" name="id327670"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
     4254</h3></div></div></div><a class="indexterm" name="id325788"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status
    42554255    support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone.
    42564256    If this option is set to <code class="constant">no</code> then Samba offers
     
    42584258    reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code>
    42594259</em></span>
    4260 </p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327727"></a>
     4260</p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325845"></a>
    42614261
    42624262null passwords (G)
    4263 </h3></div></div></div><a class="indexterm" name="id327728"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
    4264 </em></span>
    4265 </p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327779"></a>
     4263</h3></div></div></div><a class="indexterm" name="id325846"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>
     4264</em></span>
     4265</p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325897"></a>
    42664266
    42674267obey pam restrictions (G)
    4268 </h3></div></div></div><a class="indexterm" name="id327780"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
     4268</h3></div></div></div><a class="indexterm" name="id325898"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support
    42694269    (i.e. --with-pam), this parameter will control whether or not Samba
    42704270    should obey PAM's account and session management directives.  The
     
    42764276</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code>
    42774277</em></span>
    4278 </p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327837"></a>
     4278</p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325954"></a>
    42794279
    42804280only user (S)
    4281 </h3></div></div></div><a class="indexterm" name="id327838"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
     4281</h3></div></div></div><a class="indexterm" name="id325955"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether
    42824282    connections with usernames not in the <em class="parameter"><code>user</code></em>
    42834283    list will be allowed. By default this option is disabled so that a
     
    42924292    name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code>
    42934293</em></span>
    4294 </p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327920"></a>
     4294</p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326038"></a>
    42954295
    42964296oplock break wait time (G)
    4297 </h3></div></div></div><a class="indexterm" name="id327921"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4297</h3></div></div></div><a class="indexterm" name="id326039"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    42984298        This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too
    42994299        quickly when that client issues an SMB that can cause an oplock break request, then the network client can
     
    43044304        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code>
    43054305</em></span>
    4306 </p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327968"></a>
     4306</p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326087"></a>
    43074307
    43084308oplock contention limit (S)
    4309 </h3></div></div></div><a class="indexterm" name="id327970"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4309</h3></div></div></div><a class="indexterm" name="id326088"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43104310        This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the
    43114311        granting of oplocks under multiple client contention for the same file.
     
    43194319        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code>
    43204320</em></span>
    4321 </p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328047"></a>
     4321</p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326164"></a>
    43224322
    43234323oplocks (S)
    4324 </h3></div></div></div><a class="indexterm" name="id328048"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4324</h3></div></div></div><a class="indexterm" name="id326165"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43254325        This boolean option tells <code class="literal">smbd</code> whether to
    43264326        issue oplocks (opportunistic locks) to file open requests on this
     
    43394339        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code>
    43404340</em></span>
    4341 </p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328124"></a>
     4341</p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326242"></a>
    43424342
    43434343os2 driver map (G)
    4344 </h3></div></div></div><a class="indexterm" name="id328125"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
     4344</h3></div></div></div><a class="indexterm" name="id326243"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute
    43454345    path to a file containing a mapping of Windows NT printer driver
    43464346    names to OS/2 printer driver names.  The format is:</p><p>&lt;nt driver name&gt; = &lt;os2 driver name&gt;.&lt;device name&gt;</p><p>For example, a valid entry using the HP LaserJet 5
     
    43524352    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code>
    43534353</em></span>
    4354 </p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328184"></a>
     4354</p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326302"></a>
    43554355
    43564356os level (G)
    4357 </h3></div></div></div><a class="indexterm" name="id328185"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4357</h3></div></div></div><a class="indexterm" name="id326303"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    43584358        This integer value controls what level Samba advertises itself as for browse elections. The value of this
    43594359        parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area.
     
    43714371</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code>
    43724372</em></span>
    4373 </p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328277"></a>
     4373</p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326395"></a>
    43744374
    43754375pam password change (G)
    4376 </h3></div></div></div><a class="indexterm" name="id328278"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
     4376</h3></div></div></div><a class="indexterm" name="id326396"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,
    43774377    this parameter, it is possible to use PAM's password change control
    43784378    flag for Samba.  If enabled, then PAM will be used for password
     
    43824382    <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code>
    43834383</em></span>
    4384 </p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328345"></a>
     4384</p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326461"></a>
    43854385
    43864386panic action (G)
    4387 </h3></div></div></div><a class="indexterm" name="id328346"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
     4387</h3></div></div></div><a class="indexterm" name="id326462"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a
    43884388        system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>      crashes. This is usually used to
    43894389        draw attention to the fact that a problem occurred.
     
    43924392</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code>
    43934393</em></span>
    4394 </p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328419"></a>
     4394</p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326536"></a>
    43954395
    43964396paranoid server security (G)
    4397 </h3></div></div></div><a class="indexterm" name="id328420"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
     4397</h3></div></div></div><a class="indexterm" name="id326537"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest
    43984398    users with a bad passowrd. When this option is enabled, samba will not
    43994399    use a broken NT 4.x server as password server, but instead complain
     
    44034403    bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code>
    44044404</em></span>
    4405 </p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328466"></a>
     4405</p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326583"></a>
    44064406
    44074407passdb backend (G)
    4408 </h3></div></div></div><a class="indexterm" name="id328467"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
     4408</h3></div></div></div><a class="indexterm" name="id326584"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend
    44094409    will be used for storing user and possibly group information.  This allows
    44104410    you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location'
     
    44414441</pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">tdbsam</code>
    44424442</em></span>
    4443 </p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328609"></a>
     4443</p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326727"></a>
    44444444
    44454445passdb expand explicit (G)
    4446 </h3></div></div></div><a class="indexterm" name="id328610"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4446</h3></div></div></div><a class="indexterm" name="id326728"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    44474447        This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We
    44484448        used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable
     
    44504450    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code>
    44514451</em></span>
    4452 </p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328652"></a>
     4452</p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326770"></a>
    44534453
    44544454passwd chat debug (G)
    4455 </h3></div></div></div><a class="indexterm" name="id328653"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
     4455</h3></div></div></div><a class="indexterm" name="id326771"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script
    44564456    parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the
    44574457    strings passed to and received from the passwd chat are printed
     
    44664466        parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code>
    44674467</em></span>
    4468 </p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328749"></a>
     4468</p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326866"></a>
    44694469
    44704470passwd chat timeout (G)
    4471 </h3></div></div></div><a class="indexterm" name="id328750"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
     4471</h3></div></div></div><a class="indexterm" name="id326867"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial
    44724472    answer from a passwd chat script being run. Once the initial answer is received
    44734473    the subsequent answers must be received in one tenth of this time. The default it
    44744474    two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code>
    44754475</em></span>
    4476 </p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328792"></a>
     4476</p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326909"></a>
    44774477
    44784478passwd chat (G)
    4479 </h3></div></div></div><a class="indexterm" name="id328793"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
     4479</h3></div></div></div><a class="indexterm" name="id326910"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>
    44804480    conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing
    44814481    program to change the user's password. The string describes a
     
    45084508</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code>
    45094509</em></span>
    4510 </p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328976"></a>
     4510</p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327093"></a>
    45114511
    45124512passwd program (G)
    4513 </h3></div></div></div><a class="indexterm" name="id328977"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
     4513</h3></div></div></div><a class="indexterm" name="id327094"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set
    45144514    UNIX user passwords.  Any occurrences of <em class="parameter"><code>%u</code></em>
    45154515    will be replaced with the user name. The user name is checked for
     
    45324532</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code>
    45334533</em></span>
    4534 </p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329102"></a>
     4534</p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327219"></a>
    45354535
    45364536password level (G)
    4537 </h3></div></div></div><a class="indexterm" name="id329103"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
     4537</h3></div></div></div><a class="indexterm" name="id327220"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty
    45384538    with mixed-case passwords.  One offending client is Windows for
    45394539    Workgroups, which for some reason forces passwords to upper
     
    45574557</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code>
    45584558</em></span>
    4559 </p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329228"></a>
     4559</p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327345"></a>
    45604560
    45614561password server (G)
    4562 </h3></div></div></div><a class="indexterm" name="id329229"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
     4562</h3></div></div></div><a class="indexterm" name="id327346"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server
    45634563    or Active Directory domain controller with this option,
    45644564    and using <code class="literal">security = [ads|domain|server]</code>
     
    46204620</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code>
    46214621</em></span>
    4622 </p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329493"></a>
     4622</p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id327610"></a>
    46234623
    46244624<a name="DIRECTORY"></a>directory
    4625 </h3></div></div></div><a class="indexterm" name="id329494"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329524"></a>
     4625</h3></div></div></div><a class="indexterm" name="id327611"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327641"></a>
    46264626
    46274627path (S)
    4628 </h3></div></div></div><a class="indexterm" name="id329525"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
     4628</h3></div></div></div><a class="indexterm" name="id327642"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which
    46294629        the user of the service is to be given access. In the case of
    46304630        printable services, this is where print data will spool prior to
     
    46434643</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code>
    46444644</em></span>
    4645 </p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329622"></a>
     4645</p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327738"></a>
    46464646
    46474647perfcount module (G)
    4648 </h3></div></div></div><a class="indexterm" name="id329623"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
     4648</h3></div></div></div><a class="indexterm" name="id327739"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB
    46494649        operations.  Only one perfcount module may be used, and it must implement all of the
    46504650        apis contained in the smb_perfcount_handler structure defined in smb.h.
    4651         </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329652"></a>
     4651        </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327768"></a>
    46524652
    46534653pid directory (G)
    4654 </h3></div></div></div><a class="indexterm" name="id329653"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4654</h3></div></div></div><a class="indexterm" name="id327769"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46554655        This option specifies the directory where pid files will be placed. 
    46564656        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code>
     
    46584658</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code>
    46594659</em></span>
    4660 </p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329710"></a>
     4660</p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327826"></a>
    46614661
    46624662posix locking (S)
    4663 </h3></div></div></div><a class="indexterm" name="id329711"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4663</h3></div></div></div><a class="indexterm" name="id327827"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46644664        The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>
    46654665        daemon maintains an database of file locks obtained by SMB clients. The default behavior is
     
    46694669        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code>
    46704670</em></span>
    4671 </p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329761"></a>
     4671</p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327877"></a>
    46724672
    46734673postexec (S)
    4674 </h3></div></div></div><a class="indexterm" name="id329762"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
     4674</h3></div></div></div><a class="indexterm" name="id327878"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run
    46754675        whenever the service is disconnected. It takes the usual
    46764676        substitutions. The command may be run as the root on some
     
    46804680</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    46814681</em></span>
    4682 </p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329831"></a>
     4682</p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327947"></a>
    46834683
    46844684preexec close (S)
    4685 </h3></div></div></div><a class="indexterm" name="id329832"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4685</h3></div></div></div><a class="indexterm" name="id327948"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    46864686        This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a>
    46874687        should close the service being connected to.
    46884688        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code>
    46894689</em></span>
    4690 </p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329884"></a>
     4690</p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id328001"></a>
    46914691
    46924692<a name="EXEC"></a>exec
    4693 </h3></div></div></div><a class="indexterm" name="id329885"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329915"></a>
     4693</h3></div></div></div><a class="indexterm" name="id328002"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328032"></a>
    46944694
    46954695preexec (S)
    4696 </h3></div></div></div><a class="indexterm" name="id329916"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
     4696</h3></div></div></div><a class="indexterm" name="id328033"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever
    46974697        the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome
    46984698        message every time they log in. Maybe a message of the day? Here
     
    47064706</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" &gt;&gt; /tmp/log</code>
    47074707</em></span>
    4708 </p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id330016"></a>
     4708</p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id328133"></a>
    47094709
    47104710<a name="PREFEREDMASTER"></a>prefered master
    4711 </h3></div></div></div><a class="indexterm" name="id330017"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330048"></a>
     4711</h3></div></div></div><a class="indexterm" name="id328134"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328165"></a>
    47124712
    47134713preferred master (G)
    4714 </h3></div></div></div><a class="indexterm" name="id330049"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4714</h3></div></div></div><a class="indexterm" name="id328166"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47154715        This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser  for its workgroup.
    47164716        </p><p>
     
    47264726        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code>
    47274727</em></span>
    4728 </p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330135"></a>
     4728</p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328251"></a>
    47294729
    47304730preload modules (G)
    4731 </h3></div></div></div><a class="indexterm" name="id330136"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
     4731</h3></div></div></div><a class="indexterm" name="id328252"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should
    47324732        be loaded into smbd before a client connects. This improves
    47334733        the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code>
     
    47354735</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code>
    47364736</em></span>
    4737 </p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330193"></a>
     4737</p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id328310"></a>
    47384738
    47394739<a name="AUTOSERVICES"></a>auto services
    4740 </h3></div></div></div><a class="indexterm" name="id330194"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330225"></a>
     4740</h3></div></div></div><a class="indexterm" name="id328311"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328342"></a>
    47414741
    47424742preload (G)
    4743 </h3></div></div></div><a class="indexterm" name="id330226"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
     4743</h3></div></div></div><a class="indexterm" name="id328343"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be
    47444744        automatically added to the browse lists. This is most useful
    47454745        for homes and printers services that would otherwise not be
     
    47524752</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code>
    47534753</em></span>
    4754 </p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330298"></a>
     4754</p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328414"></a>
    47554755
    47564756preserve case (S)
    4757 </h3></div></div></div><a class="indexterm" name="id330299"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4757</h3></div></div></div><a class="indexterm" name="id328415"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47584758        This controls if new filenames are created with the case that the client passes, or if
    47594759        they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
     
    47624762        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code>
    47634763</em></span>
    4764 </p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330362"></a>
     4764</p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id328478"></a>
    47654765
    47664766<a name="PRINTOK"></a>print ok
    4767 </h3></div></div></div><a class="indexterm" name="id330363"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330393"></a>
     4767</h3></div></div></div><a class="indexterm" name="id328479"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328509"></a>
    47684768
    47694769printable (S)
    4770 </h3></div></div></div><a class="indexterm" name="id330394"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
     4770</h3></div></div></div><a class="indexterm" name="id328510"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then
    47714771    clients may open, write to and submit spool files on the directory
    47724772    specified for the service. </p><p>Note that a printable service will ALWAYS allow writing
     
    47754775    the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code>
    47764776</em></span>
    4777 </p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330453"></a>
     4777</p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328569"></a>
    47784778
    47794779printcap cache time (G)
    4780 </h3></div></div></div><a class="indexterm" name="id330454"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
     4780</h3></div></div></div><a class="indexterm" name="id328570"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing
    47814781    subsystem is again asked for the known printers.  If the value
    47824782    is greater than 60 the initial waiting time is set to 60 seconds
     
    47884788</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code>
    47894789</em></span>
    4790 </p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330518"></a>
     4790</p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id328633"></a>
    47914791
    47924792<a name="PRINTCAP"></a>printcap
    4793 </h3></div></div></div><a class="indexterm" name="id330519"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330550"></a>
     4793</h3></div></div></div><a class="indexterm" name="id328634"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328664"></a>
    47944794
    47954795printcap name (G)
    4796 </h3></div></div></div><a class="indexterm" name="id330551"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4796</h3></div></div></div><a class="indexterm" name="id328665"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    47974797        This parameter may be used to override the compiled-in default printcap name used by the server (usually
    47984798        <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this.
     
    48294829</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code>
    48304830</em></span>
    4831 </p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330722"></a>
     4831</p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328836"></a>
    48324832
    48334833print command (S)
    4834 </h3></div></div></div><a class="indexterm" name="id330723"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
     4834</h3></div></div></div><a class="indexterm" name="id328837"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to
    48354835    a service, this command will be used via a <code class="literal">system()</code>
    48364836    call to process the spool file. Typically the command specified will
     
    48744874        set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code>
    48754875</em></span>
    4876 </p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330968"></a>
     4876</p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329082"></a>
    48774877
    48784878printer admin (S)
    4879 </h3></div></div></div><a class="indexterm" name="id330969"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4879</h3></div></div></div><a class="indexterm" name="id329083"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>
    48804880        This lists users who can do anything to printers
    48814881        via the remote administration interfaces offered
     
    48934893</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code>
    48944894</em></span>
    4895 </p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id331032"></a>
     4895</p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id329146"></a>
    48964896
    48974897<a name="PRINTER"></a>printer
    4898 </h3></div></div></div><a class="indexterm" name="id331033"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331062"></a>
     4898</h3></div></div></div><a class="indexterm" name="id329147"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329177"></a>
    48994899
    49004900printer name (S)
    4901 </h3></div></div></div><a class="indexterm" name="id331063"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4901</h3></div></div></div><a class="indexterm" name="id329178"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49024902        This parameter specifies the name of the printer to which print jobs spooled through a printable service
    49034903        will be sent.
     
    49124912</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code>
    49134913</em></span>
    4914 </p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331146"></a>
     4914</p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329261"></a>
    49154915
    49164916printing (S)
    4917 </h3></div></div></div><a class="indexterm" name="id331147"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
     4917</h3></div></div></div><a class="indexterm" name="id329262"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status  information is
    49184918    interpreted on your system. It also affects the  default values for
    49194919    the <em class="parameter"><code>print command</code></em>,  <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and  <em class="parameter"><code>lprm command</code></em> if specified in the
     
    49324932<code class="literal">testparm -v.</code></code>
    49334933</em></span>
    4934 </p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331292"></a>
     4934</p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329407"></a>
    49354935
    49364936printjob username (S)
    4937 </h3></div></div></div><a class="indexterm" name="id331293"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
     4937</h3></div></div></div><a class="indexterm" name="id329408"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be
    49384938    passed to the printing system. Usually, the username is sent,
    49394939    but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code>
     
    49414941</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code>
    49424942</em></span>
    4943 </p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331351"></a>
     4943</p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329467"></a>
    49444944
    49454945private dir (G)
    4946 </h3></div></div></div><a class="indexterm" name="id331352"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
     4946</h3></div></div></div><a class="indexterm" name="id329468"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory
    49474947    smbd will use for storing such files as <code class="filename">smbpasswd</code>
    49484948    and <code class="filename">secrets.tdb</code>.
    49494949</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code>
    49504950</em></span>
    4951 </p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331404"></a>
     4951</p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329520"></a>
    49524952
    49534953profile acls (S)
    4954 </h3></div></div></div><a class="indexterm" name="id331405"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     4954</h3></div></div></div><a class="indexterm" name="id329521"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    49554955        This boolean parameter was added to fix the problems that people have been
    49564956        having with storing user profiles on Samba shares from Windows 2000 or
     
    49834983        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code>
    49844984</em></span>
    4985 </p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331469"></a>
     4985</p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329584"></a>
    49864986
    49874987queuepause command (S)
    4988 </h3></div></div></div><a class="indexterm" name="id331470"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     4988</h3></div></div></div><a class="indexterm" name="id329585"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    49894989    executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes
    49904990    a printer name as its only parameter and stops the printer queue,
     
    49974997        server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code>
    49984998</em></span>
    4999 </p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331539"></a>
     4999</p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329654"></a>
    50005000
    50015001queueresume command (S)
    5002 </h3></div></div></div><a class="indexterm" name="id331540"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
     5002</h3></div></div></div><a class="indexterm" name="id329655"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be
    50035003    executed on the server host in order to resume the printer queue. It
    50045004    is the command to undo the behavior that is caused by the
     
    50155015</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code>
    50165016</em></span>
    5017 </p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331633"></a>
     5017</p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329748"></a>
    50185018
    50195019read list (S)
    5020 </h3></div></div></div><a class="indexterm" name="id331634"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5020</h3></div></div></div><a class="indexterm" name="id329749"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50215021        This is a list of users that are given read-only access to a service. If the connecting user is in this list
    50225022        then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set
     
    50285028</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code>
    50295029</em></span>
    5030 </p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331728"></a>
     5030</p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329843"></a>
    50315031
    50325032read only (S)
    5033 </h3></div></div></div><a class="indexterm" name="id331729"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
     5033</h3></div></div></div><a class="indexterm" name="id329844"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users
    50345034    of a service may not create or modify files in the service's
    50355035    directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>)
     
    50375037    (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code>
    50385038</em></span>
    5039 </p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331800"></a>
     5039</p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329917"></a>
    50405040
    50415041read raw (G)
    5042 </h3></div></div></div><a class="indexterm" name="id331801"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     5042</h3></div></div></div><a class="indexterm" name="id329918"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    50435043    will support the raw read SMB requests when transferring data
    50445044    to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in
     
    50495049        tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code>
    50505050</em></span>
    5051 </p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331855"></a>
     5051</p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329973"></a>
    50525052
    50535053realm (G)
    5054 </h3></div></div></div><a class="indexterm" name="id331856"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
     5054</h3></div></div></div><a class="indexterm" name="id329974"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is
    50555055        used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It
    50565056        is usually set to the DNS name of the kerberos server.
     
    50595059</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code>
    50605060</em></span>
    5061 </p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331918"></a>
     5061</p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330037"></a>
    50625062
    50635063registry shares (G)
    5064 </h3></div></div></div><a class="indexterm" name="id331920"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5064</h3></div></div></div><a class="indexterm" name="id330038"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50655065        This turns on or off support for share definitions read from
    50665066        registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take
     
    50775077</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code>
    50785078</em></span>
    5079 </p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332001"></a>
     5079</p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330120"></a>
    50805080
    50815081remote announce (G)
    5082 </h3></div></div></div><a class="indexterm" name="id332002"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5082</h3></div></div></div><a class="indexterm" name="id330121"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    50835083        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself
    50845084        to arbitrary IP addresses with an arbitrary workgroup name.
     
    51045104        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code>
    51055105</em></span>
    5106 </p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332097"></a>
     5106</p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330215"></a>
    51075107
    51085108remote browse sync (G)
    5109 </h3></div></div></div><a class="indexterm" name="id332098"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5109</h3></div></div></div><a class="indexterm" name="id330216"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51105110        This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request
    51115111        synchronization of browse lists with the master browser of a Samba
     
    51395139        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code>
    51405140</em></span>
    5141 </p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332198"></a>
     5141</p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330314"></a>
    51425142
    51435143rename user script (G)
    5144 </h3></div></div></div><a class="indexterm" name="id332199"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5144</h3></div></div></div><a class="indexterm" name="id330315"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51455145        This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below.
    51465146        </p><p>
     
    51605160        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code>
    51615161</em></span>
    5162 </p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332284"></a>
     5162</p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330399"></a>
    51635163
    51645164reset on zero vc (G)
    5165 </h3></div></div></div><a class="indexterm" name="id332285"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5165</h3></div></div></div><a class="indexterm" name="id330400"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    51665166        This boolean option controls whether an incoming session setup
    51675167        should kill other connections coming from the same IP. This matches
     
    51825182        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code>
    51835183</em></span>
    5184 </p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332330"></a>
     5184</p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330445"></a>
    51855185
    51865186restrict anonymous (G)
    5187 </h3></div></div></div><a class="indexterm" name="id332331"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
     5187</h3></div></div></div><a class="indexterm" name="id330446"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and
    51885188    group list information is returned for an anonymous connection.
    51895189    and mirrors the effects of the
     
    52085208        </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code>
    52095209</em></span>
    5210 </p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332404"></a>
     5210</p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id330520"></a>
    52115211
    52125212<a name="ROOT"></a>root
    5213 </h3></div></div></div><a class="indexterm" name="id332405"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332436"></a>
     5213</h3></div></div></div><a class="indexterm" name="id330521"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id330552"></a>
    52145214
    52155215<a name="ROOTDIR"></a>root dir
    5216 </h3></div></div></div><a class="indexterm" name="id332437"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332467"></a>
     5216</h3></div></div></div><a class="indexterm" name="id330553"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330582"></a>
    52175217
    52185218root directory (G)
    5219 </h3></div></div></div><a class="indexterm" name="id332468"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
     5219</h3></div></div></div><a class="indexterm" name="id330584"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.
    52205220    Change its root directory) to this directory on startup. This is
    52215221    not strictly necessary for secure operation. Even without it the
     
    52405240</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code>
    52415241</em></span>
    5242 </p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332583"></a>
     5242</p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330699"></a>
    52435243
    52445244root postexec (S)
    5245 </h3></div></div></div><a class="indexterm" name="id332584"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5245</h3></div></div></div><a class="indexterm" name="id330700"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52465246        This is the same as the <em class="parameter"><code>postexec</code></em>
    52475247        parameter except that the command is run as root. This is useful for
     
    52495249        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code>
    52505250</em></span>
    5251 </p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332630"></a>
     5251</p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330745"></a>
    52525252
    52535253root preexec close (S)
    5254 </h3></div></div></div><a class="indexterm" name="id332631"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
     5254</h3></div></div></div><a class="indexterm" name="id330746"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close
    52555255        </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code>
    52565256</em></span>
    5257 </p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332677"></a>
     5257</p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330792"></a>
    52585258
    52595259root preexec (S)
    5260 </h3></div></div></div><a class="indexterm" name="id332678"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5260</h3></div></div></div><a class="indexterm" name="id330793"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52615261        This is the same as the <em class="parameter"><code>preexec</code></em>
    52625262        parameter except that the command is run as root. This is useful for
     
    52645264        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code>
    52655265</em></span>
    5266 </p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332724"></a>
     5266</p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330839"></a>
    52675267
    52685268security mask (S)
    5269 </h3></div></div></div><a class="indexterm" name="id332726"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5269</h3></div></div></div><a class="indexterm" name="id330840"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>
    52705270        This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    52715271        UNIX permission on a file using the native NT security dialog box.
     
    52865286</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code>
    52875287</em></span>
    5288 </p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332820"></a>
     5288</p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330934"></a>
    52895289
    52905290security (G)
    5291 </h3></div></div></div><a class="indexterm" name="id332821"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
     5291</h3></div></div></div><a class="indexterm" name="id330935"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to
    52925292    Samba and is one of the most important settings in the <code class="filename">
    52935293    smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to
     
    54135413</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code>
    54145414</em></span>
    5415 </p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333611"></a>
     5415</p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331729"></a>
    54165416
    54175417server schannel (G)
    5418 </h3></div></div></div><a class="indexterm" name="id333612"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5418</h3></div></div></div><a class="indexterm" name="id331730"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54195419        This controls whether the server offers or even demands the use of the netlogon schannel.
    54205420        <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel.
     
    54275427</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code>
    54285428</em></span>
    5429 </p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333719"></a>
     5429</p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331837"></a>
    54305430
    54315431server signing (G)
    5432 </h3></div></div></div><a class="indexterm" name="id333720"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
     5432</h3></div></div></div><a class="indexterm" name="id331838"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values
    54335433    are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span>
    54345434    and <span class="emphasis"><em>disabled</em></span>.
     
    54375437        to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code>
    54385438</em></span>
    5439 </p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333776"></a>
     5439</p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331895"></a>
    54405440
    54415441server string (G)
    5442 </h3></div></div></div><a class="indexterm" name="id333777"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
     5442</h3></div></div></div><a class="indexterm" name="id331896"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print
    54435443        manager and next to the IPC connection in <code class="literal">net view</code>. It
    54445444        can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next
     
    54495449</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code>
    54505450</em></span>
    5451 </p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333863"></a>
     5451</p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331982"></a>
    54525452
    54535453set directory (S)
    5454 </h3></div></div></div><a class="indexterm" name="id333864"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5454</h3></div></div></div><a class="indexterm" name="id331983"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54555455        If <code class="literal">set directory = no</code>, then        users of the
    54565456        service may not use the setdir command to change directory.
     
    54615461        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code>
    54625462</em></span>
    5463 </p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333920"></a>
     5463</p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332039"></a>
    54645464
    54655465set primary group script (G)
    5466 </h3></div></div></div><a class="indexterm" name="id333921"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
     5466</h3></div></div></div><a class="indexterm" name="id332040"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a
    54675467        primary group in addition to the auxiliary groups.  This script
    54685468        sets the primary group in the unix userdatase when an
     
    54765476</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code>
    54775477</em></span>
    5478 </p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333998"></a>
     5478</p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332117"></a>
    54795479
    54805480set quota command (G)
    5481 </h3></div></div></div><a class="indexterm" name="id333999"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
     5481</h3></div></div></div><a class="indexterm" name="id332118"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used
    54825482        whenever there is no operating system API available from the OS that
    54835483        samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or
     
    54895489</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code>
    54905490</em></span>
    5491 </p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334151"></a>
     5491</p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332270"></a>
    54925492
    54935493share:fake_fscaps (G)
    5494 </h3></div></div></div><a class="indexterm" name="id334152"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5494</h3></div></div></div><a class="indexterm" name="id332272"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    54955495        This is needed to support some special application that makes
    54965496        QFSINFO calls to check whether we set the SPARSE_FILES bit
     
    55025502        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share:fake_fscaps</code></em> = <code class="literal">0</code>
    55035503</em></span>
    5504 </p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334207"></a>
     5504</p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332326"></a>
    55055505
    55065506share modes (S)
    5507 </h3></div></div></div><a class="indexterm" name="id334208"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
     5507</h3></div></div></div><a class="indexterm" name="id332327"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of
    55085508        the <em class="parameter"><code>share modes</code></em> during a file open. These
    55095509        modes are used by clients to gain exclusive read or write access
     
    55175517        off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code>
    55185518</em></span>
    5519 </p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334278"></a>
     5519</p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332397"></a>
    55205520
    55215521short preserve case (S)
    5522 </h3></div></div></div><a class="indexterm" name="id334279"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5522</h3></div></div></div><a class="indexterm" name="id332398"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>
    55235523        This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
    55245524        suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>.
     
    55275527        </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code>
    55285528</em></span>
    5529 </p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334352"></a>
     5529</p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332471"></a>
    55305530
    55315531show add printer wizard (G)
    5532 </h3></div></div></div><a class="indexterm" name="id334353"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
     5532</h3></div></div></div><a class="indexterm" name="id332472"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support
    55335533    for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
    55345534    appear on Samba hosts in the share listing.  Normally this folder will
     
    55485548                administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code>
    55495549</em></span>
    5550 </p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334424"></a>
     5550</p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332543"></a>
    55515551
    55525552shutdown script (G)
    5553 </h3></div></div></div><a class="indexterm" name="id334425"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
     5553</h3></div></div></div><a class="indexterm" name="id332544"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by
    55545554         <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should
    55555555        start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>,
     
    55775577</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code>
    55785578</em></span>
    5579 </p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334570"></a>
     5579</p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332690"></a>
    55805580
    55815581smb encrypt (S)
    5582 </h3></div></div></div><a class="indexterm" name="id334572"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
     5582</h3></div></div></div><a class="indexterm" name="id332691"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an
    55835583    extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
    55845584    SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
     
    56085608    to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code>
    56095609</em></span>
    5610 </p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334661"></a>
     5610</p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332782"></a>
    56115611
    56125612smb passwd file (G)
    5613 </h3></div></div></div><a class="indexterm" name="id334662"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
     5613</h3></div></div></div><a class="indexterm" name="id332783"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By
    56145614    default the path to the smbpasswd file  is compiled into Samba.</p><p>
    56155615    An example of use is:
     
    56195619    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code>
    56205620</em></span>
    5621 </p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334713"></a>
     5621</p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332832"></a>
    56225622
    56235623smb ports (G)
    5624 </h3></div></div></div><a class="indexterm" name="id334714"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
    5625 </em></span>
    5626 </p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334754"></a>
     5624</h3></div></div></div><a class="indexterm" name="id332834"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>
     5625</em></span>
     5626</p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332874"></a>
    56275627
    56285628socket address (G)
    5629 </h3></div></div></div><a class="indexterm" name="id334755"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
     5629</h3></div></div></div><a class="indexterm" name="id332875"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what
    56305630        address Samba will listen for connections on. This is used to
    56315631        support multiple virtual interfaces on the one server, each
     
    56365636</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code>
    56375637</em></span>
    5638 </p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334820"></a>
     5638</p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332940"></a>
    56395639
    56405640socket options (G)
    5641 </h3></div></div></div><a class="indexterm" name="id334821"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
     5641</h3></div></div></div><a class="indexterm" name="id332941"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options
    56425642    to be used when talking with the client.</p><p>Socket options are controls on the networking layer
    56435643    of the operating systems which allow the connection to be
     
    56675667</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code>
    56685668</em></span>
    5669 </p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335012"></a>
     5669</p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333133"></a>
    56705670
    56715671stat cache (G)
    5672 </h3></div></div></div><a class="indexterm" name="id335013"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
     5672</h3></div></div></div><a class="indexterm" name="id333134"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to
    56735673        speed up case insensitive name mappings. You should never need
    56745674        to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code>
    56755675</em></span>
    5676 </p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335062"></a>
     5676</p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333182"></a>
    56775677
    56785678state directory (G)
    5679 </h3></div></div></div><a class="indexterm" name="id335063"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
     5679</h3></div></div></div><a class="indexterm" name="id333183"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the
    56805680        <em class="parameter"><code>lock directory</code></em>. Since
    56815681        Samba 3.4.0, it is possible to differentiate between TDB files
     
    56895689</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>state directory</code></em> = <code class="literal">/var/run/samba/locks/state</code>
    56905690</em></span>
    5691 </p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335144"></a>
     5691</p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333263"></a>
    56925692
    56935693store dos attributes (S)
    5694 </h3></div></div></div><a class="indexterm" name="id335145"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5694</h3></div></div></div><a class="indexterm" name="id333264"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    56955695        If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
    56965696        READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
     
    57115711        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code>
    57125712</em></span>
    5713 </p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335265"></a>
     5713</p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333384"></a>
    57145714
    57155715strict allocate (S)
    5716 </h3></div></div></div><a class="indexterm" name="id335266"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
     5716</h3></div></div></div><a class="indexterm" name="id333385"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of
    57175717    disk space allocation in the server. When this is set to <code class="constant">yes</code>
    57185718    the server will change from UNIX behaviour of not committing real
     
    57375737    activate this setting on those filesystems.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>
    57385738</em></span>
    5739 </p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335332"></a>
     5739</p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333450"></a>
    57405740
    57415741strict locking (S)
    5742 </h3></div></div></div><a class="indexterm" name="id335333"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5742</h3></div></div></div><a class="indexterm" name="id333451"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>
    57435743        This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>,
    57445744        the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
     
    57565756        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code>
    57575757</em></span>
    5758 </p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335404"></a>
     5758</p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333522"></a>
    57595759
    57605760strict sync (S)
    5761 </h3></div></div></div><a class="indexterm" name="id335405"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
     5761</h3></div></div></div><a class="indexterm" name="id333523"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer
    57625762    shell) seem to confuse flushing buffer contents to disk with doing
    57635763    a sync to disk. Under UNIX, a sync call forces the process to be
     
    57735773    reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code>
    57745774</em></span>
    5775 </p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335462"></a>
     5775</p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333581"></a>
    57765776
    57775777svcctl list (G)
    5778 </h3></div></div></div><a class="indexterm" name="id335463"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
     5778</h3></div></div></div><a class="indexterm" name="id333582"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd
    57795779    will use for starting and stopping Unix services via the Win32
    57805780    ServiceControl API.  This allows Windows administrators to
     
    57895789</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code>
    57905790</em></span>
    5791 </p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335542"></a>
     5791</p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id333662"></a>
    57925792
    57935793sync always (S)
    5794 </h3></div></div></div><a class="indexterm" name="id335544"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
     5794</h3></div></div></div><a class="indexterm" name="id333663"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls
    57955795    whether writes will always be written to stable storage before
    57965796    the write call returns. If this is <code class="constant">no</code> then the server will be
     
    58035803    any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code>
    58045804</em></span>
    5805 </p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335609"></a>
     5805</p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333729"></a>
    58065806
    58075807syslog only (G)
    5808 </h3></div></div></div><a class="indexterm" name="id335610"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5808</h3></div></div></div><a class="indexterm" name="id333730"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    58095809    If this parameter is set then Samba debug messages are logged into the system
    58105810    syslog only, and not to the debug log files. There still will be some
     
    58125812    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code>
    58135813</em></span>
    5814 </p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335655"></a>
     5814</p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333774"></a>
    58155815
    58165816syslog (G)
    5817 </h3></div></div></div><a class="indexterm" name="id335656"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5817</h3></div></div></div><a class="indexterm" name="id333775"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>
    58185818    This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
    58195819    Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto
     
    58265826    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code>
    58275827</em></span>
    5828 </p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335721"></a>
     5828</p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333841"></a>
    58295829
    58305830template homedir (G)
    5831 </h3></div></div></div><a class="indexterm" name="id335722"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5831</h3></div></div></div><a class="indexterm" name="id333842"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58325832        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon  uses this
    58335833        parameter to fill in the home directory for that user. If the
     
    58375837        is substituted with the user's Windows  NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code>
    58385838</em></span>
    5839 </p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335784"></a>
     5839</p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333903"></a>
    58405840
    58415841template shell (G)
    5842 </h3></div></div></div><a class="indexterm" name="id335785"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
     5842</h3></div></div></div><a class="indexterm" name="id333904"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT
    58435843        user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this
    5844         parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335821"></a>
     5844        parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333940"></a>
    58455845
    58465846time offset (G)
    5847 </h3></div></div></div><a class="indexterm" name="id335822"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
     5847</h3></div></div></div><a class="indexterm" name="id333941"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add
    58485848        to the normal GMT to local time conversion. This is useful if
    58495849        you are serving a lot of PCs that have incorrect daylight
     
    58525852</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code>
    58535853</em></span>
    5854 </p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335880"></a>
     5854</p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333998"></a>
    58555855
    58565856time server (G)
    5857 </h3></div></div></div><a class="indexterm" name="id335881"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
     5857</h3></div></div></div><a class="indexterm" name="id334000"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows
    58585858clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code>
    58595859</em></span>
    5860 </p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335930"></a>
     5860</p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334048"></a>
    58615861
    58625862unix charset (G)
    5863 </h3></div></div></div><a class="indexterm" name="id335931"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
     5863</h3></div></div></div><a class="indexterm" name="id334049"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine
    58645864                Samba runs on uses. Samba needs to know this in order to be able to
    58655865                convert text to the charsets other SMB clients use.
     
    58705870</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code>
    58715871</em></span>
    5872 </p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335993"></a>
     5872</p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334111"></a>
    58735873
    58745874unix extensions (G)
    5875 </h3></div></div></div><a class="indexterm" name="id335994"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5875</h3></div></div></div><a class="indexterm" name="id334112"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58765876    implements the CIFS UNIX extensions, as defined by HP.
    58775877    These extensions enable Samba to better serve UNIX CIFS clients
     
    58835883    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code>
    58845884</em></span>
    5885 </p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336053"></a>
     5885</p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334170"></a>
    58865886
    58875887unix password sync (G)
    5888 </h3></div></div></div><a class="indexterm" name="id336054"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
     5888</h3></div></div></div><a class="indexterm" name="id334171"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba
    58895889    attempts to synchronize the UNIX password with the SMB password
    58905890    when the encrypted SMB password in the smbpasswd file is changed.
     
    58955895        access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code>
    58965896</em></span>
    5897 </p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336110"></a>
     5897</p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334227"></a>
    58985898
    58995899update encrypted (G)
    5900 </h3></div></div></div><a class="indexterm" name="id336112"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5900</h3></div></div></div><a class="indexterm" name="id334228"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59015901        This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
    59025902        password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
     
    59165916        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code>
    59175917</em></span>
    5918 </p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336216"></a>
     5918</p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334331"></a>
    59195919
    59205920use client driver (S)
    5921 </h3></div></div></div><a class="indexterm" name="id336217"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
     5921</h3></div></div></div><a class="indexterm" name="id334332"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000
    59225922    clients.  It has no effect on Windows 95/98/ME clients.  When
    59235923    serving a printer to Windows NT/2000 clients without first installing
     
    59445944        server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code>
    59455945</em></span>
    5946 </p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336284"></a>
     5946</p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334399"></a>
    59475947
    59485948use mmap (G)
    5949 </h3></div></div></div><a class="indexterm" name="id336285"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
     5949</h3></div></div></div><a class="indexterm" name="id334400"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can
    59505950    depend on mmap working correctly on the running system. Samba requires a coherent
    59515951    mmap/read-write system memory cache. Currently only HPUX does not have such a
     
    59565956    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code>
    59575957</em></span>
    5958 </p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336332"></a>
     5958</p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334446"></a>
    59595959
    59605960username level (G)
    5961 </h3></div></div></div><a class="indexterm" name="id336333"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
     5961</h3></div></div></div><a class="indexterm" name="id334447"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at
    59625962    the real UNIX username, as many DOS clients send an all-uppercase
    59635963    username. By default Samba tries all lowercase, followed by the
     
    59745974</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code>
    59755975</em></span>
    5976 </p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336408"></a>
     5976</p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334523"></a>
    59775977
    59785978username map script (G)
    5979 </h3></div></div></div><a class="indexterm" name="id336410"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
     5979</h3></div></div></div><a class="indexterm" name="id334524"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the
    59805980        <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter.  This parameter
    59815981        specifies and external program or script that must accept a single
     
    59885988</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code>
    59895989</em></span>
    5990 </p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336480"></a>
     5990</p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334594"></a>
    59915991
    59925992username map (G)
    5993 </h3></div></div></div><a class="indexterm" name="id336481"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     5993</h3></div></div></div><a class="indexterm" name="id334596"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    59945994        This option allows you to specify a file containing a mapping of usernames from the clients to the server.
    59955995        This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
     
    60756075# no username map</code>
    60766076</em></span>
    6077 </p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id336722"></a>
     6077</p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id334837"></a>
    60786078
    60796079<a name="USER"></a>user
    6080 </h3></div></div></div><a class="indexterm" name="id336723"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id336754"></a>
     6080</h3></div></div></div><a class="indexterm" name="id334838"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id334868"></a>
    60816081
    60826082<a name="USERS"></a>users
    6083 </h3></div></div></div><a class="indexterm" name="id336755"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336785"></a>
     6083</h3></div></div></div><a class="indexterm" name="id334870"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334900"></a>
    60846084
    60856085username (S)
    6086 </h3></div></div></div><a class="indexterm" name="id336786"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
     6086</h3></div></div></div><a class="indexterm" name="id334901"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited
    60876087    list, in which case the supplied password will be tested against
    60886088    each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when
     
    61226122</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code>
    61236123</em></span>
    6124 </p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336932"></a>
     6124</p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335046"></a>
    61256125
    61266126usershare allow guests (G)
    6127 </h3></div></div></div><a class="indexterm" name="id336933"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
     6127</h3></div></div></div><a class="indexterm" name="id335047"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed
    61286128        to be accessed by non-authenticated users or not. It is the equivalent
    61296129        of allowing people who can create a share the option of setting
     
    61326132        is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code>
    61336133</em></span>
    6134 </p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336981"></a>
     6134</p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335095"></a>
    61356135
    61366136usershare max shares (G)
    6137 </h3></div></div></div><a class="indexterm" name="id336982"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
     6137</h3></div></div></div><a class="indexterm" name="id335096"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares
    61386138        that are allowed to be created by users belonging to the group owning the
    61396139        usershare directory. If set to zero (the default) user defined shares are ignored.
    61406140        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code>
    61416141</em></span>
    6142 </p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337022"></a>
     6142</p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335137"></a>
    61436143
    61446144usershare owner only (G)
    6145 </h3></div></div></div><a class="indexterm" name="id337024"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
     6145</h3></div></div></div><a class="indexterm" name="id335138"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by
    61466146        a user defined shares must be owned by the user creating the
    61476147        user defined share or not. If set to True (the default) then
     
    61536153        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code>
    61546154</em></span>
    6155 </p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337067"></a>
     6155</p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335182"></a>
    61566156
    61576157usershare path (G)
    6158 </h3></div></div></div><a class="indexterm" name="id337068"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
     6158</h3></div></div></div><a class="indexterm" name="id335184"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the
    61596159        filesystem used to store the user defined share definition files.
    61606160        This directory must be owned by root, and have no access for
     
    61776177        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code>
    61786178</em></span>
    6179 </p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337131"></a>
     6179</p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335246"></a>
    61806180
    61816181usershare prefix allow list (G)
    6182 </h3></div></div></div><a class="indexterm" name="id337132"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6182</h3></div></div></div><a class="indexterm" name="id335247"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    61836183        the root of which are allowed to be exported by user defined share definitions.
    61846184        If the pathname to be exported doesn't start with one of the strings in this
     
    61956195</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code>
    61966196</em></span>
    6197 </p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337198"></a>
     6197</p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335313"></a>
    61986198
    61996199usershare prefix deny list (G)
    6200 </h3></div></div></div><a class="indexterm" name="id337199"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
     6200</h3></div></div></div><a class="indexterm" name="id335314"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames
    62016201        the root of which are NOT allowed to be exported by user defined share definitions.
    62026202        If the pathname exported starts with one of the strings in this
     
    62146214</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code>
    62156215</em></span>
    6216 </p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337265"></a>
     6216</p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335381"></a>
    62176217
    62186218usershare template share (G)
    6219 </h3></div></div></div><a class="indexterm" name="id337266"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
     6219</h3></div></div></div><a class="indexterm" name="id335382"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters
    62206220        such as path, guest ok, etc. This parameter allows usershares to
    62216221        "cloned" from an existing share. If "usershare template share"
     
    62326232</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code>
    62336233</em></span>
    6234 </p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337332"></a>
     6234</p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335447"></a>
    62356235
    62366236use sendfile (S)
    6237 </h3></div></div></div><a class="indexterm" name="id337333"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
     6237</h3></div></div></div><a class="indexterm" name="id335448"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>
    62386238    system call is supported by the underlying operating system, then some SMB read calls
    62396239    (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
     
    62446244    </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code>
    62456245</em></span>
    6246 </p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337384"></a>
     6246</p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335500"></a>
    62476247
    62486248use spnego (G)
    6249 </h3></div></div></div><a class="indexterm" name="id337385"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
     6249</h3></div></div></div><a class="indexterm" name="id335501"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try
    62506250    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    62516251    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
     
    62556255        disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code>
    62566256</em></span>
    6257 </p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337431"></a>
     6257</p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335546"></a>
    62586258
    62596259utmp directory (G)
    6260 </h3></div></div></div><a class="indexterm" name="id337432"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
     6260</h3></div></div></div><a class="indexterm" name="id335548"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has
    62616261        been configured and compiled with the option <code class="literal">
    62626262        --with-utmp</code>. It specifies a directory pathname that is
     
    62706270</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code>
    62716271</em></span>
    6272 </p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337504"></a>
     6272</p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335619"></a>
    62736273
    62746274utmp (G)
    6275 </h3></div></div></div><a class="indexterm" name="id337505"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6275</h3></div></div></div><a class="indexterm" name="id335620"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62766276        This boolean parameter is only available if Samba has been configured and compiled 
    62776277        with the option <code class="literal">--with-utmp</code>. If set to
     
    62856285        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code>
    62866286</em></span>
    6287 </p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337562"></a>
     6287</p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335677"></a>
    62886288
    62896289valid users (S)
    6290 </h3></div></div></div><a class="indexterm" name="id337563"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6290</h3></div></div></div><a class="indexterm" name="id335678"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>
    62916291    This is a list of users that should be allowed to login to this service. Names starting with
    62926292    '@', '+' and  '&amp;' are interpreted using the same rules as described in the
     
    63046304</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code>
    63056305</em></span>
    6306 </p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337648"></a>
     6306</p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335764"></a>
    63076307
    63086308-valid (S)
    6309 </h3></div></div></div><a class="indexterm" name="id337649"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
     6309</h3></div></div></div><a class="indexterm" name="id335765"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is
    63106310        valid and thus can be used. When this parameter is set to false,
    63116311        the share will be in no way visible nor accessible.
     
    63166316        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code>
    63176317</em></span>
    6318 </p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337694"></a>
     6318</p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335810"></a>
    63196319
    63206320veto files (S)
    6321 </h3></div></div></div><a class="indexterm" name="id337695"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6321</h3></div></div></div><a class="indexterm" name="id335812"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63226322        This is a list of files and directories that are neither visible nor accessible.  Each entry in
    63236323        the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
     
    63506350        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code>
    63516351</em></span>
    6352 </p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337801"></a>
     6352</p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335917"></a>
    63536353
    63546354veto oplock files (S)
    6355 </h3></div></div></div><a class="indexterm" name="id337802"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6355</h3></div></div></div><a class="indexterm" name="id335918"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>
    63566356        This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>
    63576357        parameter is turned on for a share. It allows the Samba administrator
     
    63746374# No files are vetoed for oplock grants</code>
    63756375</em></span>
    6376 </p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id337887"></a>
     6376</p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id336003"></a>
    63776377
    63786378<a name="VFSOBJECT"></a>vfs object
    6379 </h3></div></div></div><a class="indexterm" name="id337888"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337919"></a>
     6379</h3></div></div></div><a class="indexterm" name="id336004"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336036"></a>
    63806380
    63816381vfs objects (S)
    6382 </h3></div></div></div><a class="indexterm" name="id337920"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
     6382</h3></div></div></div><a class="indexterm" name="id336037"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which
    63836383        are used for Samba VFS I/O operations.  By default, normal
    63846384        disk I/O operations are used but these can be overloaded
     
    63876387</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code>
    63886388</em></span>
    6389 </p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337977"></a>
     6389</p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336094"></a>
    63906390
    63916391volume (S)
    6392 </h3></div></div></div><a class="indexterm" name="id337978"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
     6392</h3></div></div></div><a class="indexterm" name="id336095"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label
    63936393        returned for a share. Useful for CDROMs with installation programs
    63946394        that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal">
    63956395# the name of the share</code>
    63966396</em></span>
    6397 </p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338019"></a>
     6397</p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336136"></a>
    63986398
    63996399wide links (S)
    6400 </h3></div></div></div><a class="indexterm" name="id338020"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
     6400</h3></div></div></div><a class="indexterm" name="id336137"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links
    64016401        in the UNIX file system may be followed by the server. Links
    64026402        that point to areas within the directory tree exported by the
     
    64116411        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">no</code>
    64126412</em></span>
    6413 </p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338079"></a>
     6413</p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336197"></a>
    64146414
    64156415winbind cache time (G)
    6416 </h3></div></div></div><a class="indexterm" name="id338080"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6416</h3></div></div></div><a class="indexterm" name="id336198"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    64176417        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache
    64186418        user and group information before querying a Windows NT server
     
    64226422        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code>
    64236423</em></span>
    6424 </p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338146"></a>
     6424</p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336264"></a>
    64256425
    64266426winbind enum groups (G)
    6427 </h3></div></div></div><a class="indexterm" name="id338147"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
     6427</h3></div></div></div><a class="indexterm" name="id336265"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress
    64286428        the enumeration of groups through the <code class="literal">setgrent()</code>,
    64296429        <code class="literal">getgrent()</code> and
     
    64336433        call will not return any data. </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly.  </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code>
    64346434</em></span>
    6435 </p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338233"></a>
     6435</p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336351"></a>
    64366436
    64376437winbind enum users (G)
    6438 </h3></div></div></div><a class="indexterm" name="id338234"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
     6438</h3></div></div></div><a class="indexterm" name="id336352"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be
    64396439        necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>,
    64406440         <code class="literal">getpwent()</code> and
     
    64486448        usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code>
    64496449</em></span>
    6450 </p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338322"></a>
     6450</p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336440"></a>
    64516451
    64526452winbind expand groups (G)
    6453 </h3></div></div></div><a class="indexterm" name="id338323"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
     6453</h3></div></div></div><a class="indexterm" name="id336441"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd
    64546454              will traverse when flattening nested group memberships
    64556455              of Windows domain groups.  This is different from the
     
    64636463         incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code>
    64646464</em></span>
    6465 </p></dd></dl></div></div><div class="section" title="winbind max clients (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338385"></a>
     6465</p></dd></dl></div></div><div class="section" title="winbind max clients (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336502"></a>
    64666466
    64676467winbind max clients (G)
    6468 </h3></div></div></div><a class="indexterm" name="id338386"></a><a name="WINBINDMAXCLIENTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the maximum number of clients
     6468</h3></div></div></div><a class="indexterm" name="id336503"></a><a name="WINBINDMAXCLIENTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the maximum number of clients
    64696469        the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon can connect with.
    64706470        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind max clients</code></em> = <code class="literal">200</code>
    64716471</em></span>
    6472 </p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338434"></a>
     6472</p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336551"></a>
    64736473
    64746474winbind nested groups (G)
    6475 </h3></div></div></div><a class="indexterm" name="id338435"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
     6475</h3></div></div></div><a class="indexterm" name="id336552"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested
    64766476                 groups. Nested groups are also called local groups or
    64776477                 aliases. They work like their counterparts in Windows: Nested
     
    64816481                 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code>
    64826482</em></span>
    6483 </p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338479"></a>
     6483</p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336596"></a>
    64846484
    64856485winbind normalize names (G)
    6486 </h3></div></div></div><a class="indexterm" name="id338480"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
     6486</h3></div></div></div><a class="indexterm" name="id336597"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace
    64876487          whitespace in user and group names with an underscore (_) character.
    64886488          For example, whether the name "Space Kadet" should be
     
    65046504</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code>
    65056505</em></span>
    6506 </p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338548"></a>
     6506</p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336665"></a>
    65076507
    65086508winbind nss info (G)
    6509 </h3></div></div></div><a class="indexterm" name="id338549"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
     6509</h3></div></div></div><a class="indexterm" name="id336666"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name
    65106510        Service Information to construct a user's home directory and login shell.
    65116511        Currently the following settings are available:
     
    65286528</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">sfu</code>
    65296529</em></span>
    6530 </p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338655"></a>
     6530</p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336772"></a>
    65316531
    65326532winbind offline logon (G)
    6533 </h3></div></div></div><a class="indexterm" name="id338656"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
     6533</h3></div></div></div><a class="indexterm" name="id336773"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should
    65346534        allow to login with the <em class="parameter"><code>pam_winbind</code></em>
    65356535        module using Cached Credentials. If enabled, winbindd will store user credentials
     
    65396539</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code>
    65406540</em></span>
    6541 </p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338720"></a>
     6541</p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336837"></a>
    65426542
    65436543winbind reconnect delay (G)
    6544 </h3></div></div></div><a class="indexterm" name="id338721"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
     6544</h3></div></div></div><a class="indexterm" name="id336838"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of
    65456545        seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will wait between
    65466546        attempts to contact a Domain controller for a domain that is
    65476547        determined to be down or not contactable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind reconnect delay</code></em> = <code class="literal">30</code>
    65486548</em></span>
    6549 </p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338770"></a>
     6549</p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336887"></a>
    65506550
    65516551winbind refresh tickets (G)
    6552 </h3></div></div></div><a class="indexterm" name="id338771"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
     6552</h3></div></div></div><a class="indexterm" name="id336888"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets
    65536553        retrieved using the <em class="parameter"><code>pam_winbind</code></em> module.
    65546554
     
    65576557</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code>
    65586558</em></span>
    6559 </p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338836"></a>
     6559</p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336952"></a>
    65606560
    65616561winbind rpc only (G)
    6562 </h3></div></div></div><a class="indexterm" name="id338837"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6562</h3></div></div></div><a class="indexterm" name="id336953"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65636563        Setting this parameter to <code class="literal">yes</code> forces
    65646564        winbindd to use RPC instead of LDAP to retrieve information from Domain
     
    65666566        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code>
    65676567</em></span>
    6568 </p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338883"></a>
     6568</p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336999"></a>
    65696569
    65706570winbind separator (G)
    6571 </h3></div></div></div><a class="indexterm" name="id338884"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
     6571</h3></div></div></div><a class="indexterm" name="id337000"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character
    65726572        used when listing a username of the form of <em class="replaceable"><code>DOMAIN
    65736573        </code></em>\<em class="replaceable"><code>user</code></em>.  This parameter
     
    65806580</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code>
    65816581</em></span>
    6582 </p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338965"></a>
     6582</p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337082"></a>
    65836583
    65846584winbind trusted domains only (G)
    6585 </h3></div></div></div><a class="indexterm" name="id338966"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6585</h3></div></div></div><a class="indexterm" name="id337083"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    65866586        This parameter is designed to allow Samba servers that are members
    65876587        of a Samba controlled domain to use UNIX accounts distributed via NIS,
     
    65946594        </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code>
    65956595</em></span>
    6596 </p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339027"></a>
     6596</p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337144"></a>
    65976597
    65986598winbind use default domain (G)
    6599 </h3></div></div></div><a class="indexterm" name="id339028"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
     6599</h3></div></div></div><a class="indexterm" name="id337145"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the
    66006600         <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 
    66016601        without domain component in their username. Users without a domain
     
    66076607</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code>
    66086608</em></span>
    6609 </p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339096"></a>
     6609</p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337213"></a>
    66106610
    66116611wins hook (G)
    6612 </h3></div></div></div><a class="indexterm" name="id339097"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
     6612</h3></div></div></div><a class="indexterm" name="id337214"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this
    66136613        allows you to call an external program for all changes to the
    66146614        WINS database. The primary use for this option is to allow the
     
    66316631                        empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update
    66326632        program <code class="literal">nsupdate</code> is provided in the examples
    6633         directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339190"></a>
     6633        directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337308"></a>
    66346634
    66356635wins proxy (G)
    6636 </h3></div></div></div><a class="indexterm" name="id339192"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
     6636</h3></div></div></div><a class="indexterm" name="id337309"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name
    66376637        queries on behalf of  other hosts. You may need to set this
    66386638        to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code>
    66396639</em></span>
    6640 </p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339244"></a>
     6640</p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337360"></a>
    66416641
    66426642wins server (G)
    6643 </h3></div></div></div><a class="indexterm" name="id339245"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
     6643</h3></div></div></div><a class="indexterm" name="id337361"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP
    66446644        address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on
    66456645        your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a
     
    66606660</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code>
    66616661</em></span>
    6662 </p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339346"></a>
     6662</p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337463"></a>
    66636663
    66646664wins support (G)
    6665 </h3></div></div></div><a class="indexterm" name="id339348"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
     6665</h3></div></div></div><a class="indexterm" name="id337464"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should
    66666666        not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and
    66676667        you wish a particular <code class="literal">nmbd</code> to be your WINS server.
     
    66696669        on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code>
    66706670</em></span>
    6671 </p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339413"></a>
     6671</p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337530"></a>
    66726672
    66736673workgroup (G)
    6674 </h3></div></div></div><a class="indexterm" name="id339414"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
     6674</h3></div></div></div><a class="indexterm" name="id337531"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will
    66756675        appear to be in when queried by clients. Note that this parameter
    66766676        also controls the Domain name used with
     
    66806680</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code>
    66816681</em></span>
    6682 </p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id339484"></a>
     6682</p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id337600"></a>
    66836683
    66846684<a name="WRITABLE"></a>writable
    6685 </h3></div></div></div><a class="indexterm" name="id339485"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339515"></a>
     6685</h3></div></div></div><a class="indexterm" name="id337601"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337630"></a>
    66866686
    66876687writeable (S)
    6688 </h3></div></div></div><a class="indexterm" name="id339516"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
    6689 </em></span>
    6690 </p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339566"></a>
     6688</h3></div></div></div><a class="indexterm" name="id337632"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>
     6689</em></span>
     6690</p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337681"></a>
    66916691
    66926692write cache size (S)
    6693 </h3></div></div></div><a class="indexterm" name="id339567"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
     6693</h3></div></div></div><a class="indexterm" name="id337682"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,
    66946694    Samba will create an in-memory cache for each oplocked file
    66956695    (it does <span class="emphasis"><em>not</em></span> do this for
     
    67096709#  for a 256k cache size per file</code>
    67106710</em></span>
    6711 </p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339640"></a>
     6711</p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337755"></a>
    67126712
    67136713write list (S)
    6714 </h3></div></div></div><a class="indexterm" name="id339641"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6714</h3></div></div></div><a class="indexterm" name="id337756"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>
    67156715    This is a list of users that are given read-write access to a service. If the
    67166716    connecting user is in this list then they will be given write access, no matter
     
    67276727</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code>
    67286728</em></span>
    6729 </p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339728"></a>
     6729</p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337844"></a>
    67306730
    67316731write raw (G)
    6732 </h3></div></div></div><a class="indexterm" name="id339730"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
     6732</h3></div></div></div><a class="indexterm" name="id337845"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server
    67336733    will support raw write SMB's when transferring data from clients.
    67346734    You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code>
    67356735</em></span>
    6736 </p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339771"></a>
     6736</p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337886"></a>
    67376737
    67386738wtmp directory (G)
    6739 </h3></div></div></div><a class="indexterm" name="id339772"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
     6739</h3></div></div></div><a class="indexterm" name="id337887"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>
    67406740        This parameter is only available if Samba has been configured and compiled with the option <code class="literal">
    67416741        --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
     
    67496749</p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code>
    67506750</em></span>
    6751 </p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id339848"></a><h2>WARNINGS</h2><p>
     6751</p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id337964"></a><h2>WARNINGS</h2><p>
    67526752        Although the configuration file permits service names to contain spaces, your client software may not.
    67536753        Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
     
    67626762        care when designing these sections. In particular, ensure that the permissions on spool directories are
    67636763        correct.
    6764         </p></div><div class="refsect1" title="VERSION"><a name="id339891"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id339902"></a><h2>SEE ALSO</h2><p>
    6765         <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id339981"></a><h2>AUTHOR</h2><p>
     6764        </p></div><div class="refsect1" title="VERSION"><a name="id338007"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id338018"></a><h2>SEE ALSO</h2><p>
     6765        <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id338098"></a><h2>AUTHOR</h2><p>
    67666766        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
    67676767        by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note: See TracChangeset for help on using the changeset viewer.