Changeset 745 for trunk/server/docs/htmldocs/manpages/smb.conf.5.html
- Timestamp:
- Nov 27, 2012, 4:43:17 PM (13 years ago)
- Location:
- trunk/server
- Files:
-
- 2 edited
-
. (modified) (1 prop)
-
docs/htmldocs/manpages/smb.conf.5.html (modified) (341 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/server
- Property svn:mergeinfo changed
/vendor/current merged: 581,587,591,594,597,600,615,618,740
- Property svn:mergeinfo changed
-
trunk/server/docs/htmldocs/manpages/smb.conf.5.html
r599 r745 1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id2 66327"></a><h2>SYNOPSIS</h2><p>1 <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>smb.conf</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="smb.conf"><a name="smb.conf.5"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>smb.conf — The configuration file for the Samba suite</p></div><div class="refsect1" title="SYNOPSIS"><a name="id298153"></a><h2>SYNOPSIS</h2><p> 2 2 The <code class="filename">smb.conf</code> file is a configuration file for the Samba suite. <code class="filename">smb.conf</code> contains runtime configuration information for the Samba programs. The 3 3 <code class="filename">smb.conf</code> file is designed to be configured and administered by the … … 27 27 which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved 28 28 in string values. Some items such as create masks are numeric. 29 </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id26688 8"></a><h2>SECTION DESCRIPTIONS</h2><p>29 </p></div><div class="refsect1" title="SECTION DESCRIPTIONS"><a name="id266887"></a><h2>SECTION DESCRIPTIONS</h2><p> 30 30 Each section in the configuration file (except for the [global] section) describes a shared resource (known as 31 31 a <span class="quote">“<span class="quote">share</span>”</span>). The section name is the name of the shared resource and the parameters within the … … 70 70 <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok = yes</a> 71 71 </pre><p> 72 </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id26595 7"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id265962"></a><h3>The [global] section</h3><p>72 </p></div><div class="refsect1" title="SPECIAL SECTIONS"><a name="id265955"></a><h2>SPECIAL SECTIONS</h2><div class="refsect2" title="The [global] section"><a name="id265960"></a><h3>The [global] section</h3><p> 73 73 Parameters in this section apply to the server as a whole, or are defaults for sections that do not 74 74 specifically define certain items. See the notes under PARAMETERS for more information. … … 161 161 <code class="literal">printcap name = lpstat</code> to automatically obtain a list of printers. See the 162 162 <code class="literal">printcap name</code> option for more details. 163 </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id30727 3"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete163 </p></div></div></div><div class="refsect1" title="USERSHARES"><a name="id307272"></a><h2>USERSHARES</h2><p>Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete 164 164 their own share definitions has been added. This capability is called <span class="emphasis"><em>usershares</em></span> and 165 165 is controlled by a set of parameters in the [global] section of the smb.conf. … … 185 185 to the global 186 186 section of your <code class="filename">smb.conf</code>. Members of the group foo may then manipulate the user defined shares 187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id30746 6"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p>187 using the following commands.</p><div class="variablelist"><dl><dt><span class="term">net usershare add sharename path [comment] [acl] [guest_ok=[y|n]]</span></dt><dd><p>To create or modify (overwrite) a user defined share.</p></dd><dt><span class="term">net usershare delete sharename</span></dt><dd><p>To delete a user defined share.</p></dd><dt><span class="term">net usershare list wildcard-sharename</span></dt><dd><p>To list user defined shares.</p></dd><dt><span class="term">net usershare info wildcard-sharename</span></dt><dd><p>To print information about user defined shares.</p></dd></dl></div></div><div class="refsect1" title="PARAMETERS"><a name="id307465"></a><h2>PARAMETERS</h2><p>Parameters define the specific attributes of sections.</p><p> 188 188 Some parameters are specific to the [global] section (e.g., <span class="emphasis"><em>security</em></span>). Some parameters 189 189 are usable in all sections (e.g., <span class="emphasis"><em>create mask</em></span>). All others are permissible only in normal … … 197 197 find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred 198 198 synonym. 199 </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id30750 5"></a><h2>VARIABLE SUBSTITUTIONS</h2><p>199 </p></div><div class="refsect1" title="VARIABLE SUBSTITUTIONS"><a name="id307504"></a><h2>VARIABLE SUBSTITUTIONS</h2><p> 200 200 Many of the strings that are settable in the config file can take substitutions. For example the option 201 201 <span class="quote">“<span class="quote">path = /tmp/%u</span>”</span> is interpreted as <span class="quote">“<span class="quote">path = /tmp/john</span>”</span> if the user connected with the … … 219 219 machine. It currently recognizes Samba (<code class="constant">Samba</code>), 220 220 the Linux CIFS file system (<code class="constant">CIFSFS</code>), OS/2, (<code class="constant">OS2</code>), 221 Windows for Workgroups (<code class="constant">WfWg</code>), Windows 9x/ME221 Mac OS X (<code class="constant">OSX</code>), Windows for Workgroups (<code class="constant">WfWg</code>), Windows 9x/ME 222 222 (<code class="constant">Win95</code>), Windows NT (<code class="constant">WinNT</code>), 223 223 Windows 2000 (<code class="constant">Win2K</code>), … … 258 258 </p></dd><dt><span class="term">default case = upper/lower</span></dt><dd><p> 259 259 controls what the default case is for new filenames (ie. files that don't currently exist in the filesystem). 260 Default <span class="emphasis"><em>lower</em></span>. IMPORTANT NOTE: This option will be used to modify the case of 261 <span class="emphasis"><em>all</em></span> incoming client filenames, not just new filenames if the options <a class="link" href="smb.conf.5.html#CASESENSITIVE" target="_top">case sensitive = yes</a>, <a class="link" href="smb.conf.5.html#PRESERVECASE" target="_top">preserve case = No</a>, 262 <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case = No</a> are set. This change is needed as part of the 263 optimisations for directories containing large numbers of files. 260 Default <span class="emphasis"><em>lower</em></span>. IMPORTANT NOTE: As part of the optimizations for directories containing 261 large numbers of files, the following special case applies. If the options 262 <a class="link" href="smb.conf.5.html#CASESENSITIVE" target="_top">case sensitive = yes</a>, <a class="link" href="smb.conf.5.html#PRESERVECASE" target="_top">preserve case = No</a>, and 263 <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case = No</a> are set, then the case of <span class="emphasis"><em>all</em></span> 264 incoming client filenames, not just new filenames, will be modified. See additional notes below. 264 265 </p></dd><dt><span class="term">preserve case = yes/no</span></dt><dd><p> 265 266 controls whether new files (ie. files that don't currently exist in the filesystem) are created with the case … … 306 307 If the service is a guest service, a connection is made as the username given in the <code class="literal">guest account 307 308 =</code> for the service, irrespective of the supplied password. 308 </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id3081 30"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p>309 </p></li></ol></div></div><div class="refsect1" title="REGISTRY-BASED CONFIGURATION"><a name="id308128"></a><h2>REGISTRY-BASED CONFIGURATION</h2><p> 309 310 Starting with Samba version 3.2.0, the capability to 310 311 store Samba configuration in the registry is available. … … 361 362 accessing the database file, circumventing the 362 363 server. 363 </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id30828 4"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308293"></a>364 </p></div><div class="refsect1" title="EXPLANATION OF EACH PARAMETER"><a name="id308281"></a><h2>EXPLANATION OF EACH PARAMETER</h2><div class="section"><div class="titlepage"></div><div class="section" title="abort shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308291"></a> 364 365 365 366 abort shutdown script (G) 366 </h3></div></div></div><a class="indexterm" name="id30829 4"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that367 </h3></div></div></div><a class="indexterm" name="id308292"></a><a name="ABORTSHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that 367 368 should stop a shutdown procedure issued by the <a class="link" href="smb.conf.5.html#SHUTDOWNSCRIPT" target="_top">shutdown script</a>.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, 368 369 right, this command will be run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">""</code> … … 370 371 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>abort shutdown script</code></em> = <code class="literal">/sbin/shutdown -c</code> 371 372 </em></span> 372 </p></dd></dl></div></div><div class="section" title="access based share enum (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id30836 8"></a>373 </p></dd></dl></div></div><div class="section" title="access based share enum (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308365"></a> 373 374 374 375 access based share enum (S) 375 </h3></div></div></div><a class="indexterm" name="id30836 9"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a376 </h3></div></div></div><a class="indexterm" name="id308366"></a><a name="ACCESSBASEDSHAREENUM"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for a 376 377 service, then the share hosted by the service will only be visible 377 378 to users who have read or write access to the share during share … … 382 383 computing enumeration access rights.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>access based share enum</code></em> = <code class="literal">no</code> 383 384 </em></span> 384 </p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3084 12"></a>385 </p></dd></dl></div></div><div class="section" title="acl check permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308409"></a> 385 386 386 387 acl check permissions (S) 387 </h3></div></div></div><a class="indexterm" name="id30841 3"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete"388 </h3></div></div></div><a class="indexterm" name="id308410"></a><a name="ACLCHECKPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls what <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>does on receiving a protocol request of "open for delete" 388 389 from a Windows client. If a Windows client doesn't have permissions to delete a file then they 389 390 expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by … … 405 406 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl check permissions</code></em> = <code class="literal">True</code> 406 407 </em></span> 407 </p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id30848 3"></a>408 </p></dd></dl></div></div><div class="section" title="acl compatibility (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308480"></a> 408 409 409 410 acl compatibility (G) 410 </h3></div></div></div><a class="indexterm" name="id30848 4"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should411 </h3></div></div></div><a class="indexterm" name="id308482"></a><a name="ACLCOMPATIBILITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies what OS ACL semantics should 411 412 be compatible with. Possible values are <span class="emphasis"><em>winnt</em></span> for Windows NT 4, 412 413 <span class="emphasis"><em>win2k</em></span> for Windows 2000 and above and <span class="emphasis"><em>auto</em></span>. … … 417 418 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>acl compatibility</code></em> = <code class="literal">win2k</code> 418 419 </em></span> 419 </p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3085 50"></a>420 </p></dd></dl></div></div><div class="section" title="acl group control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308548"></a> 420 421 421 422 acl group control (S) 422 </h3></div></div></div><a class="indexterm" name="id3085 52"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>423 </h3></div></div></div><a class="indexterm" name="id308549"></a><a name="ACLGROUPCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 423 424 In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions 424 425 and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the … … 447 448 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl group control</code></em> = <code class="literal">no</code> 448 449 </em></span> 449 </p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3086 32"></a>450 </p></dd></dl></div></div><div class="section" title="acl map full control (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id308629"></a> 450 451 451 452 acl map full control (S) 452 </h3></div></div></div><a class="indexterm" name="id30863 3"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p>453 </h3></div></div></div><a class="indexterm" name="id308630"></a><a name="ACLMAPFULLCONTROL"></a><div class="variablelist"><dl><dt></dt><dd><p> 453 454 This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum 454 455 allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX … … 458 459 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>acl map full control</code></em> = <code class="literal">True</code> 459 460 </em></span> 460 </p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3086 80"></a>461 </p></dd></dl></div></div><div class="section" title="add group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308677"></a> 461 462 462 463 add group script (G) 463 </h3></div></div></div><a class="indexterm" name="id3086 81"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>464 </h3></div></div></div><a class="indexterm" name="id308678"></a><a name="ADDGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 464 465 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a new group is requested. It 465 466 will expand any <em class="parameter"><code>%g</code></em> to the group name passed. This script is only useful … … 471 472 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add group script</code></em> = <code class="literal">/usr/sbin/groupadd %g</code> 472 473 </em></span> 473 </p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3087 50"></a>474 </p></dd></dl></div></div><div class="section" title="add machine script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308748"></a> 474 475 475 476 add machine script (G) 476 </h3></div></div></div><a class="indexterm" name="id3087 51"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>477 </h3></div></div></div><a class="indexterm" name="id308749"></a><a name="ADDMACHINESCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 477 478 This is the full pathname to a script that will be run by 478 479 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a machine is … … 485 486 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add machine script</code></em> = <code class="literal">/usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u</code> 486 487 </em></span> 487 </p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id30882 3"></a>488 </p></dd></dl></div></div><div class="section" title="add port command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id308820"></a> 488 489 489 490 add port command (G) 490 </h3></div></div></div><a class="indexterm" name="id30882 4"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports491 </h3></div></div></div><a class="indexterm" name="id308821"></a><a name="ADDPORTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>Samba 3.0.23 introduced support for adding printer ports 491 492 remotely using the Windows "Add Standard TCP/IP Port Wizard". 492 493 This option defines an external program to be executed when 493 494 smbd receives a request to add a new Port to the system. 494 The script is passed two parameters:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the for of socket://<hostname>[:<portnumber>]495 The script is passed two parameters:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><em class="parameter"><code>port name</code></em></p></li><li class="listitem"><p><em class="parameter"><code>device URI</code></em></p></li></ul></div><p>The deviceURI is in the format of socket://<hostname>[:<portnumber>] 495 496 or lpd://<hostname>/<queuename>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal"></code> 496 497 </em></span> 497 498 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add port command</code></em> = <code class="literal">/etc/samba/scripts/addport.sh</code> 498 499 </em></span> 499 </p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id 308901"></a>500 </p></dd></dl></div></div><div class="section" title="addprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id265681"></a> 500 501 501 502 addprinter command (G) 502 </h3></div></div></div><a class="indexterm" name="id 308902"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing503 </h3></div></div></div><a class="indexterm" name="id265682"></a><a name="ADDPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing 503 504 support for Windows NT/2000 clients in Samba 2.2, The MS Add 504 505 Printer Wizard (APW) icon is now also available in the … … 531 532 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>addprinter command</code></em> = <code class="literal">/usr/bin/addprinter</code> 532 533 </em></span> 533 </p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 076"></a>534 </p></dd></dl></div></div><div class="section" title="add share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309147"></a> 534 535 535 536 add share command (G) 536 </h3></div></div></div><a class="indexterm" name="id309 077"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>537 </h3></div></div></div><a class="indexterm" name="id309148"></a><a name="ADDSHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 537 538 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 538 539 Manager. The <em class="parameter"><code>add share command</code></em> is used to define an external program … … 566 567 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add share command</code></em> = <code class="literal">/usr/local/bin/addshare</code> 567 568 </em></span> 568 </p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 253"></a>569 </p></dd></dl></div></div><div class="section" title="add user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309323"></a> 569 570 570 571 add user script (G) 571 </h3></div></div></div><a class="indexterm" name="id309 254"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>572 </h3></div></div></div><a class="indexterm" name="id309324"></a><a name="ADDUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 572 573 This is the full pathname to a script that will be run <span class="emphasis"><em>AS ROOT</em></span> by 573 574 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 604 605 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user script</code></em> = <code class="literal">/usr/local/samba/bin/add_user %u</code> 605 606 </em></span> 606 </p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 441"></a>607 </p></dd></dl></div></div><div class="section" title="add user to group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309511"></a> 607 608 608 609 add user to group script (G) 609 </h3></div></div></div><a class="indexterm" name="id309 442"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>610 </h3></div></div></div><a class="indexterm" name="id309512"></a><a name="ADDUSERTOGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 610 611 Full path to the script that will be called when a user is added to a group using the Windows NT domain administration 611 612 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 619 620 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>add user to group script</code></em> = <code class="literal">/usr/sbin/adduser %u %g</code> 620 621 </em></span> 621 </p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3095 24"></a>622 </p></dd></dl></div></div><div class="section" title="administrative share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309595"></a> 622 623 623 624 administrative share (S) 624 </h3></div></div></div><a class="indexterm" name="id3095 26"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for625 </h3></div></div></div><a class="indexterm" name="id309596"></a><a name="ADMINISTRATIVESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is set to <code class="constant">yes</code> for 625 626 a share, then the share will be an administrative share. The Administrative 626 627 Shares are the default network shares created by all Windows NT-based … … 629 630 information about this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>administrative share</code></em> = <code class="literal">no</code> 630 631 </em></span> 631 </p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 577"></a>632 </p></dd></dl></div></div><div class="section" title="admin users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309648"></a> 632 633 633 634 admin users (S) 634 </h3></div></div></div><a class="indexterm" name="id309 578"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted635 </h3></div></div></div><a class="indexterm" name="id309649"></a><a name="ADMINUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users who will be granted 635 636 administrative privileges on the share. This means that they 636 637 will do all file operations as the super-user (root).</p><p>You should use this option very carefully, as any user in … … 641 642 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>admin users</code></em> = <code class="literal">jason</code> 642 643 </em></span> 643 </p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 646"></a>644 </p></dd></dl></div></div><div class="section" title="afs share (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309716"></a> 644 645 645 646 afs share (S) 646 </h3></div></div></div><a class="indexterm" name="id309 647"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled647 </h3></div></div></div><a class="indexterm" name="id309717"></a><a name="AFSSHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether special AFS features are enabled 647 648 for this share. If enabled, it assumes that the directory exported via 648 649 the <em class="parameter"><code>path</code></em> parameter is a local AFS import. The … … 651 652 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>afs share</code></em> = <code class="literal">no</code> 652 653 </em></span> 653 </p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 690"></a>654 </p></dd></dl></div></div><div class="section" title="afs username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id309760"></a> 654 655 655 656 afs username map (G) 656 </h3></div></div></div><a class="indexterm" name="id309 691"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might657 </h3></div></div></div><a class="indexterm" name="id309762"></a><a name="AFSUSERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>If you are using the fake kaserver AFS feature, you might 657 658 want to hand-craft the usernames you are creating tokens for. 658 659 For example this is necessary if you have users from several domain … … 664 665 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>afs username map</code></em> = <code class="literal">%u@afs.samba.org</code> 665 666 </em></span> 666 </p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 749"></a>667 </p></dd></dl></div></div><div class="section" title="aio read size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309819"></a> 667 668 668 669 aio read size (S) 669 </h3></div></div></div><a class="indexterm" name="id309 750"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this670 </h3></div></div></div><a class="indexterm" name="id309820"></a><a name="AIOREADSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 670 671 integer parameter is set to non-zero value, 671 672 Samba will read from file asynchronously when size of request is bigger … … 678 679 request size</code> 679 680 </em></span> 680 </p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3098 27"></a>681 </p></dd></dl></div></div><div class="section" title="aio write behind (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309897"></a> 681 682 682 683 aio write behind (S) 683 </h3></div></div></div><a class="indexterm" name="id3098 28"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support,684 </h3></div></div></div><a class="indexterm" name="id309898"></a><a name="AIOWRITEBEHIND"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support, 684 685 Samba will not wait until write requests are finished before returning 685 686 the result to the client for files listed in this parameter. … … 696 697 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>aio write behind</code></em> = <code class="literal">/*.tmp/</code> 697 698 </em></span> 698 </p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309 898"></a>699 </p></dd></dl></div></div><div class="section" title="aio write size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id309968"></a> 699 700 700 701 aio write size (S) 701 </h3></div></div></div><a class="indexterm" name="id309 899"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this702 </h3></div></div></div><a class="indexterm" name="id309969"></a><a name="AIOWRITESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba has been built with asynchronous I/O support and this 702 703 integer parameter is set to non-zero value, 703 704 Samba will write to file asynchronously when size of request is bigger … … 710 711 request size</code> 711 712 </em></span> 712 </p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3 09976"></a>713 </p></dd></dl></div></div><div class="section" title="algorithmic rid base (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310046"></a> 713 714 714 715 algorithmic rid base (G) 715 </h3></div></div></div><a class="indexterm" name="id3 09977"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its716 </h3></div></div></div><a class="indexterm" name="id310047"></a><a name="ALGORITHMICRIDBASE"></a><div class="variablelist"><dl><dt></dt><dd><p>This determines how Samba will use its 716 717 algorithmic mapping from uids/gid to the RIDs needed to construct 717 718 NT Security Identifiers. … … 728 729 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>algorithmic rid base</code></em> = <code class="literal">100000</code> 729 730 </em></span> 730 </p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 041"></a>731 </p></dd></dl></div></div><div class="section" title="allocation roundup size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310111"></a> 731 732 732 733 allocation roundup size (S) 733 </h3></div></div></div><a class="indexterm" name="id310 042"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the734 </h3></div></div></div><a class="indexterm" name="id310112"></a><a name="ALLOCATIONROUNDUPSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an administrator to tune the 734 735 allocation size reported to Windows clients. The default 735 736 size of 1Mb generally results in improved Windows client … … 743 744 # (to disable roundups)</code> 744 745 </em></span> 745 </p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3101 01"></a>746 </p></dd></dl></div></div><div class="section" title="allow trusted domains (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310171"></a> 746 747 747 748 allow trusted domains (G) 748 </h3></div></div></div><a class="indexterm" name="id3101 02"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p>749 </h3></div></div></div><a class="indexterm" name="id310172"></a><a name="ALLOWTRUSTEDDOMAINS"></a><div class="variablelist"><dl><dt></dt><dd><p> 749 750 This option only takes effect when the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> option is set to 750 751 <code class="constant">server</code>, <code class="constant">domain</code> or <code class="constant">ads</code>. … … 761 762 can make implementing a security boundary difficult.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>allow trusted domains</code></em> = <code class="literal">yes</code> 762 763 </em></span> 763 </p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 166"></a>764 </p></dd></dl></div></div><div class="section" title="announce as (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310236"></a> 764 765 765 766 announce as (G) 766 </h3></div></div></div><a class="indexterm" name="id310 167"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse767 </h3></div></div></div><a class="indexterm" name="id310237"></a><a name="ANNOUNCEAS"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what type of server <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will announce itself as, to a network neighborhood browse 767 768 list. By default this is set to Windows NT. The valid options 768 769 are : "NT Server" (which can also be written as "NT"), … … 776 777 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce as</code></em> = <code class="literal">Win95</code> 777 778 </em></span> 778 </p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 230"></a>779 </p></dd></dl></div></div><div class="section" title="announce version (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310300"></a> 779 780 780 781 announce version (G) 781 </h3></div></div></div><a class="indexterm" name="id310 231"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers782 </h3></div></div></div><a class="indexterm" name="id310301"></a><a name="ANNOUNCEVERSION"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the major and minor version numbers 782 783 that nmbd will use when announcing itself as a server. The default 783 784 is 4.9. Do not change this parameter unless you have a specific … … 786 787 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>announce version</code></em> = <code class="literal">2.0</code> 787 788 </em></span> 788 </p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 285"></a>789 </p></dd></dl></div></div><div class="section" title="auth methods (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310355"></a> 789 790 790 791 auth methods (G) 791 </h3></div></div></div><a class="indexterm" name="id310 286"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p>792 </h3></div></div></div><a class="indexterm" name="id310356"></a><a name="AUTHMETHODS"></a><div class="variablelist"><dl><dt></dt><dd><p> 792 793 This option allows the administrator to chose what authentication methods <code class="literal">smbd</code> 793 794 will use when authenticating a user. This option defaults to sensible values based on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a>. … … 810 811 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>auth methods</code></em> = <code class="literal">guest sam winbind</code> 811 812 </em></span> 812 </p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 379"></a>813 </p></dd></dl></div></div><div class="section" title="available (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310450"></a> 813 814 814 815 available (S) 815 </h3></div></div></div><a class="indexterm" name="id310 380"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If816 </h3></div></div></div><a class="indexterm" name="id310451"></a><a name="AVAILABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter lets you "turn off" a service. If 816 817 <em class="parameter"><code>available = no</code></em>, then <span class="emphasis"><em>ALL</em></span> 817 818 attempts to connect to the service will fail. Such failures are 818 819 logged.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>available</code></em> = <code class="literal">yes</code> 819 820 </em></span> 820 </p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3104 25"></a>821 </p></dd></dl></div></div><div class="section" title="bind interfaces only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310496"></a> 821 822 822 823 bind interfaces only (G) 823 </h3></div></div></div><a class="indexterm" name="id3104 26"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin824 </h3></div></div></div><a class="indexterm" name="id310497"></a><a name="BINDINTERFACESONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter allows the Samba admin 824 825 to limit what interfaces on a machine will serve SMB requests. It 825 826 affects file service <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and name service <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> in a slightly different ways.</p><p> … … 862 863 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>bind interfaces only</code></em> = <code class="literal">no</code> 863 864 </em></span> 864 </p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3107 22"></a>865 </p></dd></dl></div></div><div class="section" title="blocking locks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310793"></a> 865 866 866 867 blocking locks (S) 867 </h3></div></div></div><a class="indexterm" name="id3107 24"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior868 </h3></div></div></div><a class="indexterm" name="id310794"></a><a name="BLOCKINGLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior 868 869 of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when given a request by a client 869 870 to obtain a byte range lock on a region of an open file, and the … … 876 877 cannot be obtained.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>blocking locks</code></em> = <code class="literal">yes</code> 877 878 </em></span> 878 </p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310 781"></a>879 </p></dd></dl></div></div><div class="section" title="block size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310851"></a> 879 880 880 881 block size (S) 881 </h3></div></div></div><a class="indexterm" name="id310 782"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free882 </h3></div></div></div><a class="indexterm" name="id310852"></a><a name="BLOCKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when reporting disk free 882 883 sizes. By default, this reports a disk block size of 1024 bytes. 883 884 </p><p>Changing this parameter may have some effect on the … … 893 894 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>block size</code></em> = <code class="literal">4096</code> 894 895 </em></span> 895 </p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id310 853"></a>896 </p></dd></dl></div></div><div class="section" title="browsable"><div class="titlepage"><div><div><h3 class="title"><a name="id310923"></a> 896 897 897 898 <a name="BROWSABLE"></a>browsable 898 </h3></div></div></div><a class="indexterm" name="id310 854"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310879"></a>899 </h3></div></div></div><a class="indexterm" name="id310924"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#BROWSEABLE">browseable</a>.</p></dd></dl></div></div><div class="section" title="browseable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id310949"></a> 899 900 900 901 browseable (S) 901 </h3></div></div></div><a class="indexterm" name="id310 880"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in902 </h3></div></div></div><a class="indexterm" name="id310950"></a><a name="BROWSEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether this share is seen in 902 903 the list of available shares in a net view and in the browse list.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browseable</code></em> = <code class="literal">yes</code> 903 904 </em></span> 904 </p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3109 17"></a>905 </p></dd></dl></div></div><div class="section" title="browse list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id310987"></a> 905 906 906 907 browse list (G) 907 </h3></div></div></div><a class="indexterm" name="id3109 18"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to908 </h3></div></div></div><a class="indexterm" name="id310988"></a><a name="BROWSELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will serve a browse list to 908 909 a client doing a <code class="literal">NetServerEnum</code> call. Normally 909 910 set to <code class="constant">yes</code>. You should never need to change 910 911 this.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>browse list</code></em> = <code class="literal">yes</code> 911 912 </em></span> 912 </p></dd></dl></div></div><div class="section" title="cache directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 0970"></a>913 </p></dd></dl></div></div><div class="section" title="cache directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311040"></a> 913 914 914 915 cache directory (G) 915 </h3></div></div></div><a class="indexterm" name="id31 0971"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is916 </h3></div></div></div><a class="indexterm" name="id311041"></a><a name="CACHEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the <em class="parameter"><code>lock directory</code></em>. Since Samba 3.4.0, it is 916 917 possible to differentiate between TDB files with persistent data and 917 918 TDB files with non-persistent data using the … … 924 925 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cache directory</code></em> = <code class="literal">/var/run/samba/locks/cache</code> 925 926 </em></span> 926 </p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id311 043"></a>927 </p></dd></dl></div></div><div class="section" title="casesignames"><div class="titlepage"><div><div><h3 class="title"><a name="id311114"></a> 927 928 928 929 <a name="CASESIGNAMES"></a>casesignames 929 </h3></div></div></div><a class="indexterm" name="id311 044"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311070"></a>930 </h3></div></div></div><a class="indexterm" name="id311115"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CASESENSITIVE">case sensitive</a>.</p></dd></dl></div></div><div class="section" title="case sensitive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311140"></a> 930 931 931 932 case sensitive (S) 932 </h3></div></div></div><a class="indexterm" name="id311 071"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code>933 </em></span> 934 </p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3111 14"></a>933 </h3></div></div></div><a class="indexterm" name="id311141"></a><a name="CASESENSITIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the discussion in the section <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>case sensitive</code></em> = <code class="literal">no</code> 934 </em></span> 935 </p></dd></dl></div></div><div class="section" title="change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id311185"></a> 935 936 936 937 change notify (S) 937 </h3></div></div></div><a class="indexterm" name="id3111 15"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply938 </h3></div></div></div><a class="indexterm" name="id311186"></a><a name="CHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should reply 938 939 to a client's file change notify requests. 939 940 </p><p>You should never need to change this parameter</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>change notify</code></em> = <code class="literal">yes</code> 940 941 </em></span> 941 </p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 155"></a>942 </p></dd></dl></div></div><div class="section" title="change share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311226"></a> 942 943 943 944 change share command (G) 944 </h3></div></div></div><a class="indexterm" name="id311 156"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>945 </h3></div></div></div><a class="indexterm" name="id311227"></a><a name="CHANGESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 945 946 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 946 947 Manager. The <em class="parameter"><code>change share command</code></em> is used to define an external … … 977 978 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>change share command</code></em> = <code class="literal">/usr/local/bin/changeshare</code> 978 979 </em></span> 979 </p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3113 25"></a>980 </p></dd></dl></div></div><div class="section" title="check password script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311395"></a> 980 981 981 982 check password script (G) 982 </h3></div></div></div><a class="indexterm" name="id3113 26"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password983 </h3></div></div></div><a class="indexterm" name="id311396"></a><a name="CHECKPASSWORDSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to check password 983 984 complexity. The password is sent to the program's standard input.</p><p>The program must return 0 on a good password, or any other value 984 985 if the password is bad. … … 989 990 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>check password script</code></em> = <code class="literal">/usr/local/sbin/crackcheck</code> 990 991 </em></span> 991 </p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 393"></a>992 </p></dd></dl></div></div><div class="section" title="client lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311463"></a> 992 993 993 994 client lanman auth (G) 994 </h3></div></div></div><a class="indexterm" name="id311 394"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client995 </h3></div></div></div><a class="indexterm" name="id311464"></a><a name="CLIENTLANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba client 995 996 tools will attempt to authenticate itself to servers using the 996 997 weaker LANMAN password hash. If disabled, only server which support NT … … 1003 1004 attempted.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client lanman auth</code></em> = <code class="literal">no</code> 1004 1005 </em></span> 1005 </p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 462"></a>1006 </p></dd></dl></div></div><div class="section" title="client ldap sasl wrapping (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311533"></a> 1006 1007 1007 1008 client ldap sasl wrapping (G) 1008 </h3></div></div></div><a class="indexterm" name="id311 464"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p>1009 </h3></div></div></div><a class="indexterm" name="id311534"></a><a name="CLIENTLDAPSASLWRAPPING"></a><div class="variablelist"><dl><dt></dt><dd><p> 1009 1010 The <a class="link" href="smb.conf.5.html#CLIENTLDAPSASLWRAPPING" target="_top">client ldap sasl wrapping</a> defines whether 1010 1011 ldap traffic will be signed or signed and encrypted (sealed). … … 1034 1035 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ldap sasl wrapping</code></em> = <code class="literal">plain</code> 1035 1036 </em></span> 1036 </p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 568"></a>1037 </p></dd></dl></div></div><div class="section" title="client ntlmv2 auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311638"></a> 1037 1038 1038 1039 client ntlmv2 auth (G) 1039 </h3></div></div></div><a class="indexterm" name="id311 569"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to1040 </h3></div></div></div><a class="indexterm" name="id311640"></a><a name="CLIENTNTLMV2AUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> will attempt to 1040 1041 authenticate itself to servers using the NTLMv2 encrypted password 1041 1042 response.</p><p>If enabled, only an NTLMv2 and LMv2 response (both much more 1042 secure than earlier versions) will be sent. Manyservers1043 secure than earlier versions) will be sent. Older servers 1043 1044 (including NT4 < SP4, Win9x and Samba 2.2) are not compatible with 1044 NTLMv2 .</p><p>Similarly, if enabled, NTLMv1, <code class="literal">client lanman auth</code> and <code class="literal">client plaintext auth</code>1045 NTLMv2 when not in an NTLMv2 supporting domain</p><p>Similarly, if enabled, NTLMv1, <code class="literal">client lanman auth</code> and <code class="literal">client plaintext auth</code> 1045 1046 authentication will be disabled. This also disables share-level 1046 1047 authentication. </p><p>If disabled, an NTLM response (and possibly a LANMAN response) 1047 will be sent by the client, depending on the value of <code class="literal">client lanman auth</code>. </p><p>Note that some sites (particularly 1048 those following 'best practice' security polices) only allow NTLMv2 1049 responses, and not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">no</code> 1050 </em></span> 1051 </p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311648"></a> 1048 will be sent by the client, depending on the value of <code class="literal">client lanman auth</code>. </p><p>Note that Windows Vista and later versions already use 1049 NTLMv2 by default, and some sites (particularly those following 1050 'best practice' security polices) only allow NTLMv2 responses, and 1051 not the weaker LM or NTLM.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client ntlmv2 auth</code></em> = <code class="literal">yes</code> 1052 </em></span> 1053 </p></dd></dl></div></div><div class="section" title="client plaintext auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311719"></a> 1052 1054 1053 1055 client plaintext auth (G) 1054 </h3></div></div></div><a class="indexterm" name="id311 649"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext1056 </h3></div></div></div><a class="indexterm" name="id311720"></a><a name="CLIENTPLAINTEXTAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether a client should send a plaintext 1055 1057 password if the server does not support encrypted passwords.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client plaintext auth</code></em> = <code class="literal">no</code> 1056 1058 </em></span> 1057 </p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 686"></a>1059 </p></dd></dl></div></div><div class="section" title="client schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311757"></a> 1058 1060 1059 1061 client schannel (G) 1060 </h3></div></div></div><a class="indexterm" name="id311 687"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>1062 </h3></div></div></div><a class="indexterm" name="id311758"></a><a name="CLIENTSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 1061 1063 This controls whether the client offers or even demands the use of the netlogon schannel. 1062 1064 <a class="link" href="smb.conf.5.html#CLIENTSCHANNEL" target="_top">client schannel = no</a> does not offer the schannel, … … 1068 1070 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>client schannel</code></em> = <code class="literal">yes</code> 1069 1071 </em></span> 1070 </p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 761"></a>1072 </p></dd></dl></div></div><div class="section" title="client signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311832"></a> 1071 1073 1072 1074 client signing (G) 1073 </h3></div></div></div><a class="indexterm" name="id311 762"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values1075 </h3></div></div></div><a class="indexterm" name="id311833"></a><a name="CLIENTSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 1074 1076 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 1075 1077 and <span class="emphasis"><em>disabled</em></span>. … … 1079 1081 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client signing</code></em> = <code class="literal">auto</code> 1080 1082 </em></span> 1081 </p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311813"></a> 1083 </p></dd></dl></div></div><div class="section" title="client use spnego principal (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311884"></a> 1084 1085 client use spnego principal (G) 1086 </h3></div></div></div><a class="indexterm" name="id311885"></a><a name="CLIENTUSESPNEGOPRINCIPAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 1087 <a class="citerefentry" href="smbclient.8.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(8)</span></a> and other samba components 1088 acting as a client will attempt to use the server-supplied 1089 principal sometimes given in the SPNEGO exchange.</p><p>If enabled, Samba can attempt to use Kerberos to contact 1090 servers known only by IP address. Kerberos relies on names, so 1091 ordinarily cannot function in this situation. </p><p>If disabled, Samba will use the name used to look up the 1092 server when asking the KDC for a ticket. This avoids situations 1093 where a server may impersonate another, soliciting authentication 1094 as one principal while being known on the network as another. 1095 </p><p>Note that Windows XP SP2 and later versions already follow 1096 this behaviour, and Windows Vista and later servers no longer 1097 supply this 'rfc4178 hint' principal on the server side.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego principal</code></em> = <code class="literal">no</code> 1098 </em></span> 1099 </p></dd></dl></div></div><div class="section" title="client use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311945"></a> 1082 1100 1083 1101 client use spnego (G) 1084 </h3></div></div></div><a class="indexterm" name="id311 814"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try1102 </h3></div></div></div><a class="indexterm" name="id311946"></a><a name="CLIENTUSESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p> This variable controls whether Samba clients will try 1085 1103 to use Simple and Protected NEGOciation (as specified by rfc2478) with 1086 1104 supporting servers (including WindowsXP, Windows2000 and Samba … … 1088 1106 mechanism. This enables Kerberos authentication in particular.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>client use spnego</code></em> = <code class="literal">yes</code> 1089 1107 </em></span> 1090 </p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311 852"></a>1108 </p></dd></dl></div></div><div class="section" title="cluster addresses (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id311984"></a> 1091 1109 1092 1110 cluster addresses (G) 1093 </h3></div></div></div><a class="indexterm" name="id311 853"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses1111 </h3></div></div></div><a class="indexterm" name="id311985"></a><a name="CLUSTERADDRESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>With this parameter you can add additional addresses 1094 1112 nmbd will register with a WINS server. These addresses are not 1095 1113 necessarily present on all nodes simultaneously, but they will … … 1100 1118 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cluster addresses</code></em> = <code class="literal">10.0.0.1 10.0.0.2 10.0.0.3</code> 1101 1119 </em></span> 1102 </p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 1906"></a>1120 </p></dd></dl></div></div><div class="section" title="clustering (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312038"></a> 1103 1121 1104 1122 clustering (G) 1105 </h3></div></div></div><a class="indexterm" name="id31 1907"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact1123 </h3></div></div></div><a class="indexterm" name="id312039"></a><a name="CLUSTERING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should contact 1106 1124 ctdb for accessing its tdb files and use ctdb as a backend 1107 1125 for its messaging backend. … … 1110 1128 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>clustering</code></em> = <code class="literal">no</code> 1111 1129 </em></span> 1112 </p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 1953"></a>1130 </p></dd></dl></div></div><div class="section" title="comment (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312085"></a> 1113 1131 1114 1132 comment (S) 1115 </h3></div></div></div><a class="indexterm" name="id31 1954"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share1133 </h3></div></div></div><a class="indexterm" name="id312086"></a><a name="COMMENT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a text field that is seen next to a share 1116 1134 when a client does a queries the server, either via the network 1117 1135 neighborhood or via <code class="literal">net view</code> to list what shares … … 1122 1140 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>comment</code></em> = <code class="literal">Fred's Files</code> 1123 1141 </em></span> 1124 </p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 024"></a>1142 </p></dd></dl></div></div><div class="section" title="config backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312156"></a> 1125 1143 1126 1144 config backend (G) 1127 </h3></div></div></div><a class="indexterm" name="id312 025"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>1145 </h3></div></div></div><a class="indexterm" name="id312157"></a><a name="CONFIGBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1128 1146 This controls the backend for storing the configuration. 1129 1147 Possible values are <span class="emphasis"><em>file</em></span> (the default) … … 1143 1161 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config backend</code></em> = <code class="literal">registry</code> 1144 1162 </em></span> 1145 </p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 108"></a>1163 </p></dd></dl></div></div><div class="section" title="config file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312239"></a> 1146 1164 1147 1165 config file (G) 1148 </h3></div></div></div><a class="indexterm" name="id312 109"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file1166 </h3></div></div></div><a class="indexterm" name="id312240"></a><a name="CONFIGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the config file 1149 1167 to use, instead of the default (usually <code class="filename">smb.conf</code>). 1150 1168 There is a chicken and egg problem here as this option is set … … 1156 1174 clients).</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>config file</code></em> = <code class="literal">/usr/local/samba/lib/smb.conf.%m</code> 1157 1175 </em></span> 1158 </p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 168"></a>1176 </p></dd></dl></div></div><div class="section" title="copy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312300"></a> 1159 1177 1160 1178 copy (S) 1161 </h3></div></div></div><a class="indexterm" name="id312 169"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service1179 </h3></div></div></div><a class="indexterm" name="id312301"></a><a name="COPY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows you to "clone" service 1162 1180 entries. The specified service is simply duplicated under the 1163 1181 current service's name. Any parameters specified in the current … … 1169 1187 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>copy</code></em> = <code class="literal">otherservice</code> 1170 1188 </em></span> 1171 </p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 227"></a>1189 </p></dd></dl></div></div><div class="section" title="create krb5 conf (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312359"></a> 1172 1190 1173 1191 create krb5 conf (G) 1174 </h3></div></div></div><a class="indexterm" name="id312 228"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p>1192 </h3></div></div></div><a class="indexterm" name="id312360"></a><a name="CREATEKRB5CONF"></a><div class="variablelist"><dl><dt></dt><dd><p> 1175 1193 Setting this paramter to <code class="literal">no</code> prevents 1176 1194 winbind from creating custom krb5.conf files. Winbind normally does … … 1185 1203 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>create krb5 conf</code></em> = <code class="literal">yes</code> 1186 1204 </em></span> 1187 </p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312 276"></a>1205 </p></dd></dl></div></div><div class="section" title="create mode"><div class="titlepage"><div><div><h3 class="title"><a name="id312408"></a> 1188 1206 1189 1207 <a name="CREATEMODE"></a>create mode 1190 </h3></div></div></div><a class="indexterm" name="id312 278"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312303"></a>1208 </h3></div></div></div><a class="indexterm" name="id312409"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#CREATEMASK">create mask</a>.</p></dd></dl></div></div><div class="section" title="create mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312435"></a> 1191 1209 1192 1210 create mask (S) 1193 </h3></div></div></div><a class="indexterm" name="id312 304"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>1211 </h3></div></div></div><a class="indexterm" name="id312436"></a><a name="CREATEMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 1194 1212 When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to 1195 1213 UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may … … 1212 1230 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>create mask</code></em> = <code class="literal">0775</code> 1213 1231 </em></span> 1214 </p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 411"></a>1232 </p></dd></dl></div></div><div class="section" title="csc policy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312543"></a> 1215 1233 1216 1234 csc policy (S) 1217 </h3></div></div></div><a class="indexterm" name="id312 412"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p>1235 </h3></div></div></div><a class="indexterm" name="id312544"></a><a name="CSCPOLICY"></a><div class="variablelist"><dl><dt></dt><dd><p> 1218 1236 This stands for <span class="emphasis"><em>client-side caching policy</em></span>, and specifies how clients capable of offline 1219 1237 caching will cache the files in the share. The valid values are: manual, documents, programs, disable. … … 1227 1245 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>csc policy</code></em> = <code class="literal">programs</code> 1228 1246 </em></span> 1229 </p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 483"></a>1247 </p></dd></dl></div></div><div class="section" title="ctdbd socket (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312615"></a> 1230 1248 1231 1249 ctdbd socket (G) 1232 </h3></div></div></div><a class="indexterm" name="id312 484"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>,1250 </h3></div></div></div><a class="indexterm" name="id312616"></a><a name="CTDBDSOCKET"></a><div class="variablelist"><dl><dt></dt><dd><p>If you set <code class="literal">clustering=yes</code>, 1233 1251 you need to tell Samba where ctdbd listens on its unix domain 1234 1252 socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which … … 1238 1256 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ctdbd socket</code></em> = <code class="literal">/tmp/ctdb.socket</code> 1239 1257 </em></span> 1240 </p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312542"></a> 1258 </p></dd></dl></div></div><div class="section" title="ctdb locktime warn threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312674"></a> 1259 1260 ctdb locktime warn threshold (G) 1261 </h3></div></div></div><a class="indexterm" name="id312675"></a><a name="CTDBLOCKTIMEWARNTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 1262 In a cluster environment using Samba and ctdb it is critical 1263 that locks on central ctdb-hosted databases like locking.tdb 1264 are not held for long. With the current Samba architecture 1265 it happens that Samba takes a lock and while holding that 1266 lock makes file system calls into the shared cluster file 1267 system. This option makes Samba warn if it detects that it 1268 has held locks for the specified number of milliseconds. If 1269 this happens, <span class="emphasis"><em>smbd</em></span> will emit a debug level 0 1270 message into its logs and potentially into syslog. The most likely 1271 reason for such a log message is that an operation of the cluster 1272 file system Samba exports is taking longer than expected. 1273 The messages are meant as a debugging aid for potential 1274 cluster problems. 1275 </p><p>The default value of 0 disables this logging.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ctdb locktime warn threshold</code></em> = <code class="literal">0</code> 1276 </em></span> 1277 </p></dd></dl></div></div><div class="section" title="ctdb timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312723"></a> 1241 1278 1242 1279 ctdb timeout (G) 1243 </h3></div></div></div><a class="indexterm" name="id312 543"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the1280 </h3></div></div></div><a class="indexterm" name="id312724"></a><a name="CTDBTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a timeout in seconds for the 1244 1281 connection between Samba and ctdb. It is only valid if you 1245 1282 have compiled Samba with clustering and if you have … … 1267 1304 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ctdb timeout</code></em> = <code class="literal">0</code> 1268 1305 </em></span> 1269 </p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 614"></a>1306 </p></dd></dl></div></div><div class="section" title="cups connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312791"></a> 1270 1307 1271 1308 cups connection timeout (G) 1272 </h3></div></div></div><a class="indexterm" name="id312 616"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>1309 </h3></div></div></div><a class="indexterm" name="id312792"></a><a name="CUPSCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 1273 1310 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>. 1274 1311 </p><p> … … 1280 1317 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups connection timeout</code></em> = <code class="literal">60</code> 1281 1318 </em></span> 1282 </p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 682"></a>1319 </p></dd></dl></div></div><div class="section" title="cups encrypt (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id312859"></a> 1283 1320 1284 1321 cups encrypt (G) 1285 </h3></div></div></div><a class="indexterm" name="id312 684"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>1322 </h3></div></div></div><a class="indexterm" name="id312860"></a><a name="CUPSENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 1286 1323 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> 1287 1324 is set to <code class="constant">cups</code> and if you use CUPS newer than … … 1296 1333 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>cups encrypt</code></em> = <code class="literal">"no"</code> 1297 1334 </em></span> 1298 </p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312 745"></a>1335 </p></dd></dl></div></div><div class="section" title="cups options (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id312922"></a> 1299 1336 1300 1337 cups options (S) 1301 </h3></div></div></div><a class="indexterm" name="id312 746"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1338 </h3></div></div></div><a class="indexterm" name="id312923"></a><a name="CUPSOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1302 1339 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is 1303 1340 set to <code class="constant">cups</code>. Its value is a free form string of options … … 1321 1358 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups options</code></em> = <code class="literal">"raw media=a4"</code> 1322 1359 </em></span> 1323 </p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 2835"></a>1360 </p></dd></dl></div></div><div class="section" title="cups server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313011"></a> 1324 1361 1325 1362 cups server (G) 1326 </h3></div></div></div><a class="indexterm" name="id31 2836"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>1363 </h3></div></div></div><a class="indexterm" name="id313012"></a><a name="CUPSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1327 1364 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">cups</code>. 1328 1365 </p><p> … … 1338 1375 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>cups server</code></em> = <code class="literal">mycupsserver:1631</code> 1339 1376 </em></span> 1340 </p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 2927"></a>1377 </p></dd></dl></div></div><div class="section" title="deadtime (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313104"></a> 1341 1378 1342 1379 deadtime (G) 1343 </h3></div></div></div><a class="indexterm" name="id31 2928"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer)1380 </h3></div></div></div><a class="indexterm" name="id313105"></a><a name="DEADTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a decimal integer) 1344 1381 represents the number of minutes of inactivity before a connection 1345 1382 is considered dead, and it is disconnected. The deadtime only takes … … 1353 1390 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deadtime</code></em> = <code class="literal">15</code> 1354 1391 </em></span> 1355 </p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 2998"></a>1392 </p></dd></dl></div></div><div class="section" title="debug class (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313174"></a> 1356 1393 1357 1394 debug class (G) 1358 </h3></div></div></div><a class="indexterm" name="id31 2999"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p>1395 </h3></div></div></div><a class="indexterm" name="id313175"></a><a name="DEBUGCLASS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1359 1396 With this boolean parameter enabled, the debug class (DBGC_CLASS) 1360 1397 will be displayed in the debug header. … … 1364 1401 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug class</code></em> = <code class="literal">no</code> 1365 1402 </em></span> 1366 </p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 048"></a>1403 </p></dd></dl></div></div><div class="section" title="debug hires timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313224"></a> 1367 1404 1368 1405 debug hires timestamp (G) 1369 </h3></div></div></div><a class="indexterm" name="id313 049"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1406 </h3></div></div></div><a class="indexterm" name="id313225"></a><a name="DEBUGHIRESTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1370 1407 Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this 1371 1408 boolean parameter adds microsecond resolution to the timestamp message header when turned on. … … 1374 1411 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug hires timestamp</code></em> = <code class="literal">yes</code> 1375 1412 </em></span> 1376 </p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 097"></a>1413 </p></dd></dl></div></div><div class="section" title="debug pid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313273"></a> 1377 1414 1378 1415 debug pid (G) 1379 </h3></div></div></div><a class="indexterm" name="id313 098"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p>1416 </h3></div></div></div><a class="indexterm" name="id313274"></a><a name="DEBUGPID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1380 1417 When using only one log file for more then one forked <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>-process there may be hard to follow which process outputs which 1381 1418 message. This boolean parameter is adds the process-id to the timestamp message headers in the … … 1385 1422 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug pid</code></em> = <code class="literal">no</code> 1386 1423 </em></span> 1387 </p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 154"></a>1424 </p></dd></dl></div></div><div class="section" title="debug prefix timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313330"></a> 1388 1425 1389 1426 debug prefix timestamp (G) 1390 </h3></div></div></div><a class="indexterm" name="id313 155"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1427 </h3></div></div></div><a class="indexterm" name="id313332"></a><a name="DEBUGPREFIXTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1391 1428 With this option enabled, the timestamp message header is prefixed to the debug message without the 1392 1429 filename and function information that is included with the <a class="link" href="smb.conf.5.html#DEBUGTIMESTAMP" target="_top">debug timestamp</a> … … 1396 1433 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug prefix timestamp</code></em> = <code class="literal">no</code> 1397 1434 </em></span> 1398 </p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313 211"></a>1435 </p></dd></dl></div></div><div class="section" title="timestamp logs"><div class="titlepage"><div><div><h3 class="title"><a name="id313387"></a> 1399 1436 1400 1437 <a name="TIMESTAMPLOGS"></a>timestamp logs 1401 </h3></div></div></div><a class="indexterm" name="id313 212"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313237"></a>1438 </h3></div></div></div><a class="indexterm" name="id313388"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEBUGTIMESTAMP">debug timestamp</a>.</p></dd></dl></div></div><div class="section" title="debug timestamp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313414"></a> 1402 1439 1403 1440 debug timestamp (G) 1404 </h3></div></div></div><a class="indexterm" name="id313 238"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p>1441 </h3></div></div></div><a class="indexterm" name="id313415"></a><a name="DEBUGTIMESTAMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 1405 1442 Samba debug log messages are timestamped by default. If you are running at a high 1406 1443 <a class="link" href="smb.conf.5.html#DEBUGLEVEL" target="_top">debug level</a> these timestamps can be distracting. This … … 1408 1445 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug timestamp</code></em> = <code class="literal">yes</code> 1409 1446 </em></span> 1410 </p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 283"></a>1447 </p></dd></dl></div></div><div class="section" title="debug uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313460"></a> 1411 1448 1412 1449 debug uid (G) 1413 </h3></div></div></div><a class="indexterm" name="id313 284"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p>1450 </h3></div></div></div><a class="indexterm" name="id313461"></a><a name="DEBUGUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 1414 1451 Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the 1415 1452 current euid, egid, uid and gid to the timestamp message headers in the log file if turned on. … … 1418 1455 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>debug uid</code></em> = <code class="literal">no</code> 1419 1456 </em></span> 1420 </p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 332"></a>1457 </p></dd></dl></div></div><div class="section" title="dedicated keytab file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313509"></a> 1421 1458 1422 1459 dedicated keytab file (G) 1423 </h3></div></div></div><a class="indexterm" name="id313 334"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>1460 </h3></div></div></div><a class="indexterm" name="id313510"></a><a name="DEDICATEDKEYTABFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1424 1461 Specifies the path to the kerberos keytab file when 1425 1462 <a class="link" href="smb.conf.5.html#KERBEROSMETHOD" target="_top">kerberos method</a> is set to "dedicated … … 1429 1466 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dedicated keytab file</code></em> = <code class="literal">/usr/local/etc/krb5.keytab</code> 1430 1467 </em></span> 1431 </p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 392"></a>1468 </p></dd></dl></div></div><div class="section" title="default case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313568"></a> 1432 1469 1433 1470 default case (S) 1434 </h3></div></div></div><a class="indexterm" name="id313 393"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>.1471 </h3></div></div></div><a class="indexterm" name="id313569"></a><a name="DEFAULTCASE"></a><div class="variablelist"><dl><dt></dt><dd><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. 1435 1472 Also note the <a class="link" href="smb.conf.5.html#SHORTPRESERVECASE" target="_top">short preserve case</a> parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default case</code></em> = <code class="literal">lower</code> 1436 1473 </em></span> 1437 </p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 443"></a>1474 </p></dd></dl></div></div><div class="section" title="default devmode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id313619"></a> 1438 1475 1439 1476 default devmode (S) 1440 </h3></div></div></div><a class="indexterm" name="id313 444"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services.1477 </h3></div></div></div><a class="indexterm" name="id313620"></a><a name="DEFAULTDEVMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only applicable to <a class="link" href="smb.conf.5.html#PRINTABLE" target="_top">printable</a> services. 1441 1478 When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba 1442 1479 server has a Device Mode which defines things such as paper size and … … 1461 1498 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>default devmode</code></em> = <code class="literal">yes</code> 1462 1499 </em></span> 1463 </p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313 517"></a>1500 </p></dd></dl></div></div><div class="section" title="default"><div class="titlepage"><div><div><h3 class="title"><a name="id313694"></a> 1464 1501 1465 1502 <a name="DEFAULT"></a>default 1466 </h3></div></div></div><a class="indexterm" name="id313 518"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313544"></a>1503 </h3></div></div></div><a class="indexterm" name="id313695"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DEFAULTSERVICE">default service</a>.</p></dd></dl></div></div><div class="section" title="default service (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313720"></a> 1467 1504 1468 1505 default service (G) 1469 </h3></div></div></div><a class="indexterm" name="id313 545"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service1506 </h3></div></div></div><a class="indexterm" name="id313721"></a><a name="DEFAULTSERVICE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a service 1470 1507 which will be connected to if the service actually requested cannot 1471 1508 be found. Note that the square brackets are <span class="emphasis"><em>NOT</em></span> … … 1481 1518 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>default service</code></em> = <code class="literal">pub</code> 1482 1519 </em></span> 1483 </p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 637"></a>1520 </p></dd></dl></div></div><div class="section" title="defer sharing violations (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313813"></a> 1484 1521 1485 1522 defer sharing violations (G) 1486 </h3></div></div></div><a class="indexterm" name="id313 638"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1523 </h3></div></div></div><a class="indexterm" name="id313814"></a><a name="DEFERSHARINGVIOLATIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1487 1524 Windows allows specifying how a file will be shared with 1488 1525 other processes when it is opened. Sharing violations occur when … … 1497 1534 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>defer sharing violations</code></em> = <code class="literal">True</code> 1498 1535 </em></span> 1499 </p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 686"></a>1536 </p></dd></dl></div></div><div class="section" title="delete group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313862"></a> 1500 1537 1501 1538 delete group script (G) 1502 </h3></div></div></div><a class="indexterm" name="id313 687"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1539 </h3></div></div></div><a class="indexterm" name="id313863"></a><a name="DELETEGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1503 1540 be run <span class="emphasis"><em>AS ROOT</em></span> <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when a group is requested to be deleted. 1504 1541 It will expand any <em class="parameter"><code>%g</code></em> to the group name passed. … … 1506 1543 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete group script</code></em> = <code class="literal"></code> 1507 1544 </em></span> 1508 </p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313 740"></a>1545 </p></dd></dl></div></div><div class="section" title="deleteprinter command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id313916"></a> 1509 1546 1510 1547 deleteprinter command (G) 1511 </h3></div></div></div><a class="indexterm" name="id313 741"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer1548 </h3></div></div></div><a class="indexterm" name="id313917"></a><a name="DELETEPRINTERCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printer 1512 1549 support for Windows NT/2000 clients in Samba 2.2, it is now 1513 1550 possible to delete a printer at run time by issuing the … … 1527 1564 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>deleteprinter command</code></em> = <code class="literal">/usr/bin/removeprinter</code> 1528 1565 </em></span> 1529 </p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 3856"></a>1566 </p></dd></dl></div></div><div class="section" title="delete readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314032"></a> 1530 1567 1531 1568 delete readonly (S) 1532 </h3></div></div></div><a class="indexterm" name="id31 3857"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted.1569 </h3></div></div></div><a class="indexterm" name="id314033"></a><a name="DELETEREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows readonly files to be deleted. 1533 1570 This is not normal DOS semantics, but is allowed by UNIX.</p><p>This option may be useful for running applications such 1534 1571 as rcs, where UNIX file ownership prevents changing file 1535 1572 permissions, and DOS semantics prevent deletion of a read only file.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete readonly</code></em> = <code class="literal">no</code> 1536 1573 </em></span> 1537 </p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 3898"></a>1574 </p></dd></dl></div></div><div class="section" title="delete share command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314075"></a> 1538 1575 1539 1576 delete share command (G) 1540 </h3></div></div></div><a class="indexterm" name="id31 3900"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1577 </h3></div></div></div><a class="indexterm" name="id314076"></a><a name="DELETESHARECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1541 1578 Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server 1542 1579 Manager. The <em class="parameter"><code>delete share command</code></em> is used to define an external … … 1564 1601 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete share command</code></em> = <code class="literal">/usr/local/bin/delshare</code> 1565 1602 </em></span> 1566 </p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 042"></a>1603 </p></dd></dl></div></div><div class="section" title="delete user from group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314218"></a> 1567 1604 1568 1605 delete user from group script (G) 1569 </h3></div></div></div><a class="indexterm" name="id314 043"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when1606 </h3></div></div></div><a class="indexterm" name="id314219"></a><a name="DELETEUSERFROMGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Full path to the script that will be called when 1570 1607 a user is removed from a group using the Windows NT domain administration 1571 1608 tools. It will be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> <span class="emphasis"><em>AS ROOT</em></span>. … … 1576 1613 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user from group script</code></em> = <code class="literal">/usr/sbin/deluser %u %g</code> 1577 1614 </em></span> 1578 </p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 116"></a>1615 </p></dd></dl></div></div><div class="section" title="delete user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314292"></a> 1579 1616 1580 1617 delete user script (G) 1581 </h3></div></div></div><a class="indexterm" name="id314 117"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will1618 </h3></div></div></div><a class="indexterm" name="id314293"></a><a name="DELETEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the full pathname to a script that will 1582 1619 be run by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when managing users 1583 1620 with remote RPC (NT) tools. … … 1588 1625 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>delete user script</code></em> = <code class="literal">/usr/local/samba/bin/del_user %u</code> 1589 1626 </em></span> 1590 </p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 188"></a>1627 </p></dd></dl></div></div><div class="section" title="delete veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314364"></a> 1591 1628 1592 1629 delete veto files (S) 1593 </h3></div></div></div><a class="indexterm" name="id314 189"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to1630 </h3></div></div></div><a class="indexterm" name="id314366"></a><a name="DELETEVETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used when Samba is attempting to 1594 1631 delete a directory that contains one or more vetoed directories 1595 1632 (see the <a class="link" href="smb.conf.5.html#VETOFILES" target="_top">veto files</a> … … 1605 1642 is deleted (so long as the user has permissions to do so).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>delete veto files</code></em> = <code class="literal">no</code> 1606 1643 </em></span> 1607 </p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 264"></a>1644 </p></dd></dl></div></div><div class="section" title="dfree cache time (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314440"></a> 1608 1645 1609 1646 dfree cache time (S) 1610 </h3></div></div></div><a class="indexterm" name="id314 265"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>1647 </h3></div></div></div><a class="indexterm" name="id314441"></a><a name="DFREECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 1611 1648 The <em class="parameter"><code>dfree cache time</code></em> should only be used on systems where a problem 1612 1649 occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur … … 1621 1658 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree cache time</code></em> = <code class="literal">dfree cache time = 60</code> 1622 1659 </em></span> 1623 </p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 329"></a>1660 </p></dd></dl></div></div><div class="section" title="dfree command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314506"></a> 1624 1661 1625 1662 dfree command (S) 1626 </h3></div></div></div><a class="indexterm" name="id314 330"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>1663 </h3></div></div></div><a class="indexterm" name="id314507"></a><a name="DFREECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p> 1627 1664 The <em class="parameter"><code>dfree command</code></em> setting should only be used on systems where a 1628 1665 problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may … … 1662 1699 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dfree command</code></em> = <code class="literal">/usr/local/samba/bin/dfree</code> 1663 1700 </em></span> 1664 </p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314 435"></a>1701 </p></dd></dl></div></div><div class="section" title="directory mode"><div class="titlepage"><div><div><h3 class="title"><a name="id314612"></a> 1665 1702 1666 1703 <a name="DIRECTORYMODE"></a>directory mode 1667 </h3></div></div></div><a class="indexterm" name="id314 436"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314462"></a>1704 </h3></div></div></div><a class="indexterm" name="id314613"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#DIRECTORYMASK">directory mask</a>.</p></dd></dl></div></div><div class="section" title="directory mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314638"></a> 1668 1705 1669 1706 directory mask (S) 1670 </h3></div></div></div><a class="indexterm" name="id314 463"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are1707 </h3></div></div></div><a class="indexterm" name="id314639"></a><a name="DIRECTORYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is the octal modes which are 1671 1708 used when converting DOS modes to UNIX modes when creating UNIX 1672 1709 directories.</p><p>When a directory is created, the necessary permissions are … … 1686 1723 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory mask</code></em> = <code class="literal">0775</code> 1687 1724 </em></span> 1688 </p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 556"></a>1725 </p></dd></dl></div></div><div class="section" title="directory name cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314732"></a> 1689 1726 1690 1727 directory name cache size (S) 1691 </h3></div></div></div><a class="indexterm" name="id314 557"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>1728 </h3></div></div></div><a class="indexterm" name="id314733"></a><a name="DIRECTORYNAMECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 1692 1729 This parameter specifies the the size of the directory name cache. 1693 1730 It will be needed to turn this off for *BSD systems. 1694 1731 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>directory name cache size</code></em> = <code class="literal">100</code> 1695 1732 </em></span> 1696 </p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 594"></a>1733 </p></dd></dl></div></div><div class="section" title="directory security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id314770"></a> 1697 1734 1698 1735 directory security mask (S) 1699 </h3></div></div></div><a class="indexterm" name="id314 595"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits1736 </h3></div></div></div><a class="indexterm" name="id314771"></a><a name="DIRECTORYSECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls what UNIX permission bits 1700 1737 will be set when a Windows NT client is manipulating the UNIX 1701 1738 permission on a directory using the native NT security dialog … … 1717 1754 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>directory security mask</code></em> = <code class="literal">0700</code> 1718 1755 </em></span> 1719 </p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 682"></a>1756 </p></dd></dl></div></div><div class="section" title="disable netbios (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314858"></a> 1720 1757 1721 1758 disable netbios (G) 1722 </h3></div></div></div><a class="indexterm" name="id314 683"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support1759 </h3></div></div></div><a class="indexterm" name="id314859"></a><a name="DISABLENETBIOS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable netbios support 1723 1760 in Samba. Netbios is the only available form of browsing in 1724 1761 all windows versions except for 2000 and XP. </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>Clients that only support netbios won't be able to … … 1726 1763 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable netbios</code></em> = <code class="literal">no</code> 1727 1764 </em></span> 1728 </p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 725"></a>1765 </p></dd></dl></div></div><div class="section" title="disable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314902"></a> 1729 1766 1730 1767 disable spoolss (G) 1731 </h3></div></div></div><a class="indexterm" name="id314 726"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support1768 </h3></div></div></div><a class="indexterm" name="id314903"></a><a name="DISABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Enabling this parameter will disable Samba's support 1732 1769 for the SPOOLSS set of MS-RPC's and will yield identical behavior 1733 1770 as Samba 2.0.x. Windows NT/2000 clients will downgrade to using … … 1741 1778 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>disable spoolss</code></em> = <code class="literal">no</code> 1742 1779 </em></span> 1743 </p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314 770"></a>1780 </p></dd></dl></div></div><div class="section" title="display charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id314947"></a> 1744 1781 1745 1782 display charset (G) 1746 </h3></div></div></div><a class="indexterm" name="id314 772"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>1783 </h3></div></div></div><a class="indexterm" name="id314948"></a><a name="DISPLAYCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p> 1747 1784 Specifies the charset that samba will use to print messages to stdout and stderr. 1748 1785 The default value is "LOCALE", which means automatically set, depending on the … … 1753 1790 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>display charset</code></em> = <code class="literal">UTF8</code> 1754 1791 </em></span> 1755 </p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 4832"></a>1792 </p></dd></dl></div></div><div class="section" title="dmapi support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315009"></a> 1756 1793 1757 1794 dmapi support (S) 1758 </h3></div></div></div><a class="indexterm" name="id31 4834"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to1795 </h3></div></div></div><a class="indexterm" name="id315010"></a><a name="DMAPISUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should use DMAPI to 1759 1796 determine whether a file is offline or not. This would typically 1760 1797 be used in conjunction with a hierarchical storage system that … … 1771 1808 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dmapi support</code></em> = <code class="literal">no</code> 1772 1809 </em></span> 1773 </p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 4885"></a>1810 </p></dd></dl></div></div><div class="section" title="dns proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315062"></a> 1774 1811 1775 1812 dns proxy (G) 1776 </h3></div></div></div><a class="indexterm" name="id31 4886"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and1813 </h3></div></div></div><a class="indexterm" name="id315063"></a><a name="DNSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> when acting as a WINS server and 1777 1814 finding that a NetBIOS name has not been registered, should treat the 1778 1815 NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server … … 1783 1820 action.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dns proxy</code></em> = <code class="literal">yes</code> 1784 1821 </em></span> 1785 </p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 4945"></a>1822 </p></dd></dl></div></div><div class="section" title="domain logons (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315121"></a> 1786 1823 1787 1824 domain logons (G) 1788 </h3></div></div></div><a class="indexterm" name="id31 4946"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p>1825 </h3></div></div></div><a class="indexterm" name="id315122"></a><a name="DOMAINLOGONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 1789 1826 If set to <code class="constant">yes</code>, the Samba server will 1790 1827 provide the netlogon service for Windows 9X network logons for the … … 1796 1833 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain logons</code></em> = <code class="literal">no</code> 1797 1834 </em></span> 1798 </p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 4995"></a>1835 </p></dd></dl></div></div><div class="section" title="domain master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315171"></a> 1799 1836 1800 1837 domain master (G) 1801 </h3></div></div></div><a class="indexterm" name="id31 4996"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>1838 </h3></div></div></div><a class="indexterm" name="id315172"></a><a name="DOMAINMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 1802 1839 Tell <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> to enable 1803 1840 WAN-wide browse list collation. Setting this option causes <code class="literal">nmbd</code> to claim a … … 1825 1862 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>domain master</code></em> = <code class="literal">auto</code> 1826 1863 </em></span> 1827 </p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 162"></a>1864 </p></dd></dl></div></div><div class="section" title="dont descend (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315338"></a> 1828 1865 1829 1866 dont descend (S) 1830 </h3></div></div></div><a class="indexterm" name="id315 163"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems1867 </h3></div></div></div><a class="indexterm" name="id315339"></a><a name="DONTDESCEND"></a><div class="variablelist"><dl><dt></dt><dd><p>There are certain directories on some systems 1831 1868 (e.g., the <code class="filename">/proc</code> tree under Linux) that are either not 1832 1869 of interest to clients or are infinitely deep (recursive). This … … 1839 1876 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>dont descend</code></em> = <code class="literal">/proc,/dev</code> 1840 1877 </em></span> 1841 </p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 236"></a>1878 </p></dd></dl></div></div><div class="section" title="dos charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315412"></a> 1842 1879 1843 1880 dos charset (G) 1844 </h3></div></div></div><a class="indexterm" name="id315 237"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has1881 </h3></div></div></div><a class="indexterm" name="id315413"></a><a name="DOSCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>DOS SMB clients assume the server has 1845 1882 the same charset as they do. This option specifies which 1846 1883 charset Samba should talk to DOS clients. 1847 1884 </p><p>The default depends on which charsets you have installed. 1848 1885 Samba tries to use charset 850 but falls back to ASCII in 1849 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 274"></a>1886 case it is not available. Run <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a> to check the default on your system.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="dos filemode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315450"></a> 1850 1887 1851 1888 dos filemode (S) 1852 </h3></div></div></div><a class="indexterm" name="id315 275"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide1889 </h3></div></div></div><a class="indexterm" name="id315452"></a><a name="DOSFILEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> The default behavior in Samba is to provide 1853 1890 UNIX-like behavior where only the owner of a file/directory is 1854 1891 able to change the permissions on it. However, this behavior … … 1867 1904 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filemode</code></em> = <code class="literal">no</code> 1868 1905 </em></span> 1869 </p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 325"></a>1906 </p></dd></dl></div></div><div class="section" title="dos filetime resolution (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315494"></a> 1870 1907 1871 1908 dos filetime resolution (S) 1872 </h3></div></div></div><a class="indexterm" name="id315 326"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest1909 </h3></div></div></div><a class="indexterm" name="id315495"></a><a name="DOSFILETIMERESOLUTION"></a><div class="variablelist"><dl><dt></dt><dd><p>Under the DOS and Windows FAT filesystem, the finest 1873 1910 granularity on time resolution is two seconds. Setting this parameter 1874 1911 for a share causes Samba to round the reported time down to the … … 1885 1922 happy.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetime resolution</code></em> = <code class="literal">no</code> 1886 1923 </em></span> 1887 </p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 380"></a>1924 </p></dd></dl></div></div><div class="section" title="dos filetimes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315550"></a> 1888 1925 1889 1926 dos filetimes (S) 1890 </h3></div></div></div><a class="indexterm" name="id315 381"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a1927 </h3></div></div></div><a class="indexterm" name="id315551"></a><a name="DOSFILETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>Under DOS and Windows, if a user can write to a 1891 1928 file they can change the timestamp on it. Under POSIX semantics, 1892 1929 only the owner of the file or root may change the timestamp. By … … 1901 1938 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>dos filetimes</code></em> = <code class="literal">yes</code> 1902 1939 </em></span> 1903 </p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 428"></a>1940 </p></dd></dl></div></div><div class="section" title="ea support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id315597"></a> 1904 1941 1905 1942 ea support (S) 1906 </h3></div></div></div><a class="indexterm" name="id315 429"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended1943 </h3></div></div></div><a class="indexterm" name="id315598"></a><a name="EASUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow clients to attempt to store OS/2 style Extended 1907 1944 attributes on a share. In order to enable this parameter the underlying filesystem exported by 1908 1945 the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the … … 1911 1948 extended attributes must be compiled into the Linux kernel.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ea support</code></em> = <code class="literal">no</code> 1912 1949 </em></span> 1913 </p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 476"></a>1950 </p></dd></dl></div></div><div class="section" title="enable asu support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315646"></a> 1914 1951 1915 1952 enable asu support (G) 1916 </h3></div></div></div><a class="indexterm" name="id315 477"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product1953 </h3></div></div></div><a class="indexterm" name="id315647"></a><a name="ENABLEASUSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>Hosts running the "Advanced Server for Unix (ASU)" product 1917 1954 require some special accomodations such as creating a builtin [ADMIN$] 1918 1955 share that only supports IPC connections. The has been the default … … 1922 1959 an [ADMIN$] file share in smb.conf.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable asu support</code></em> = <code class="literal">no</code> 1923 1960 </em></span> 1924 </p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 517"></a>1961 </p></dd></dl></div></div><div class="section" title="enable core files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315687"></a> 1925 1962 1926 1963 enable core files (G) 1927 </h3></div></div></div><a class="indexterm" name="id315 518"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written1964 </h3></div></div></div><a class="indexterm" name="id315688"></a><a name="ENABLECOREFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether core dumps should be written 1928 1965 on internal exits. Normally set to <code class="constant">yes</code>. 1929 1966 You should never need to change this. … … 1932 1969 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enable core files</code></em> = <code class="literal">no</code> 1933 1970 </em></span> 1934 </p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 574"></a>1971 </p></dd></dl></div></div><div class="section" title="enable privileges (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315743"></a> 1935 1972 1936 1973 enable privileges (G) 1937 </h3></div></div></div><a class="indexterm" name="id315 575"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p>1974 </h3></div></div></div><a class="indexterm" name="id315744"></a><a name="ENABLEPRIVILEGES"></a><div class="variablelist"><dl><dt></dt><dd><p> 1938 1975 This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either 1939 1976 <code class="literal">net rpc rights</code> or one of the Windows user and group manager tools. This parameter is … … 1948 1985 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable privileges</code></em> = <code class="literal">yes</code> 1949 1986 </em></span> 1950 </p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 628"></a>1987 </p></dd></dl></div></div><div class="section" title="enable spoolss (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315797"></a> 1951 1988 1952 1989 enable spoolss (G) 1953 </h3></div></div></div><a class="indexterm" name="id315 629"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code>1954 </em></span> 1955 </p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 673"></a>1990 </h3></div></div></div><a class="indexterm" name="id315798"></a><a name="ENABLESPOOLSS"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#DISABLESPOOLSS" target="_top">disable spoolss</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enable spoolss</code></em> = <code class="literal">yes</code> 1991 </em></span> 1992 </p></dd></dl></div></div><div class="section" title="encrypt passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315842"></a> 1956 1993 1957 1994 encrypt passwords (G) 1958 </h3></div></div></div><a class="indexterm" name="id315 674"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords1995 </h3></div></div></div><a class="indexterm" name="id315843"></a><a name="ENCRYPTPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls whether encrypted passwords 1959 1996 will be negotiated with the client. Note that Windows NT 4.0 SP3 and 1960 1997 above and also Windows 98 will by default expect encrypted passwords … … 1979 2016 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>encrypt passwords</code></em> = <code class="literal">yes</code> 1980 2017 </em></span> 1981 </p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 837"></a>2018 </p></dd></dl></div></div><div class="section" title="enhanced browsing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315940"></a> 1982 2019 1983 2020 enhanced browsing (G) 1984 </h3></div></div></div><a class="indexterm" name="id315 838"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to2021 </h3></div></div></div><a class="indexterm" name="id315941"></a><a name="ENHANCEDBROWSING"></a><div class="variablelist"><dl><dt></dt><dd><p>This option enables a couple of enhancements to 1985 2022 cross-subnet browse propagation that have been added in Samba 1986 2023 but which are not standard in Microsoft implementations. … … 1995 2032 cross-subnet browse propagation much more reliable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>enhanced browsing</code></em> = <code class="literal">yes</code> 1996 2033 </em></span> 1997 </p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315 891"></a>2034 </p></dd></dl></div></div><div class="section" title="enumports command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id315998"></a> 1998 2035 1999 2036 enumports command (G) 2000 </h3></div></div></div><a class="indexterm" name="id315 892"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign2037 </h3></div></div></div><a class="indexterm" name="id315999"></a><a name="ENUMPORTSCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The concept of a "port" is fairly foreign 2001 2038 to UNIX hosts. Under Windows NT/2000 print servers, a port 2002 2039 is associated with a port monitor and generally takes the form of … … 2015 2052 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>enumports command</code></em> = <code class="literal">/usr/bin/listports</code> 2016 2053 </em></span> 2017 </p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 5971"></a>2054 </p></dd></dl></div></div><div class="section" title="eventlog list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id316079"></a> 2018 2055 2019 2056 eventlog list (G) 2020 </h3></div></div></div><a class="indexterm" name="id31 5972"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will2057 </h3></div></div></div><a class="indexterm" name="id316080"></a><a name="EVENTLOGLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of log names that Samba will 2021 2058 report to the Microsoft EventViewer utility. The listed 2022 2059 eventlogs will be associated with tdb file on disk in the … … 2031 2068 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>eventlog list</code></em> = <code class="literal">Security Application Syslog Apache</code> 2032 2069 </em></span> 2033 </p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 046"></a>2070 </p></dd></dl></div></div><div class="section" title="fake directory create times (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316154"></a> 2034 2071 2035 2072 fake directory create times (S) 2036 </h3></div></div></div><a class="indexterm" name="id316 047"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create2073 </h3></div></div></div><a class="indexterm" name="id316155"></a><a name="FAKEDIRECTORYCREATETIMES"></a><div class="variablelist"><dl><dt></dt><dd><p>NTFS and Windows VFAT file systems keep a create 2037 2074 time for all files and directories. This is not the same as the 2038 2075 ctime - status change time - that Unix keeps, so Samba by default … … 2056 2093 will proceed as expected.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake directory create times</code></em> = <code class="literal">no</code> 2057 2094 </em></span> 2058 </p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 106"></a>2095 </p></dd></dl></div></div><div class="section" title="fake oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316213"></a> 2059 2096 2060 2097 fake oplocks (S) 2061 </h3></div></div></div><a class="indexterm" name="id316 107"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission2098 </h3></div></div></div><a class="indexterm" name="id316214"></a><a name="FAKEOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>Oplocks are the way that SMB clients get permission 2062 2099 from a server to locally cache file operations. If a server grants 2063 2100 an oplock (opportunistic lock) then the client is free to assume … … 2075 2112 this option carefully!</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>fake oplocks</code></em> = <code class="literal">no</code> 2076 2113 </em></span> 2077 </p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 188"></a>2114 </p></dd></dl></div></div><div class="section" title="follow symlinks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316296"></a> 2078 2115 2079 2116 follow symlinks (S) 2080 </h3></div></div></div><a class="indexterm" name="id316 189"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>2117 </h3></div></div></div><a class="indexterm" name="id316297"></a><a name="FOLLOWSYMLINKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2081 2118 This parameter allows the Samba administrator to stop <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> from following symbolic links in a particular share. Setting this 2082 2119 parameter to <code class="constant">no</code> prevents any file or directory that is a symbolic link from being … … 2088 2125 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>follow symlinks</code></em> = <code class="literal">yes</code> 2089 2126 </em></span> 2090 </p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 258"></a>2127 </p></dd></dl></div></div><div class="section" title="force create mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316366"></a> 2091 2128 2092 2129 force create mode (S) 2093 </h3></div></div></div><a class="indexterm" name="id316 259"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit2130 </h3></div></div></div><a class="indexterm" name="id316367"></a><a name="FORCECREATEMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 2094 2131 permissions that will <span class="emphasis"><em>always</em></span> be set on a 2095 2132 file created by Samba. This is done by bitwise 'OR'ing these bits onto … … 2103 2140 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force create mode</code></em> = <code class="literal">0755</code> 2104 2141 </em></span> 2105 </p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 334"></a>2142 </p></dd></dl></div></div><div class="section" title="force directory mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316442"></a> 2106 2143 2107 2144 force directory mode (S) 2108 </h3></div></div></div><a class="indexterm" name="id316 335"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit2145 </h3></div></div></div><a class="indexterm" name="id316443"></a><a name="FORCEDIRECTORYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a set of UNIX mode bit 2109 2146 permissions that will <span class="emphasis"><em>always</em></span> be set on a directory 2110 2147 created by Samba. This is done by bitwise 'OR'ing these bits onto the … … 2119 2156 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory mode</code></em> = <code class="literal">0755</code> 2120 2157 </em></span> 2121 </p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 409"></a>2158 </p></dd></dl></div></div><div class="section" title="force directory security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316517"></a> 2122 2159 2123 2160 force directory security mode (S) 2124 </h3></div></div></div><a class="indexterm" name="id316 410"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2161 </h3></div></div></div><a class="indexterm" name="id316518"></a><a name="FORCEDIRECTORYSECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2125 2162 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2126 2163 the UNIX permission on a directory using the native NT security dialog box. … … 2143 2180 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force directory security mode</code></em> = <code class="literal">700</code> 2144 2181 </em></span> 2145 </p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316 502"></a>2182 </p></dd></dl></div></div><div class="section" title="group"><div class="titlepage"><div><div><h3 class="title"><a name="id316610"></a> 2146 2183 2147 2184 <a name="GROUP"></a>group 2148 </h3></div></div></div><a class="indexterm" name="id316 503"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316534"></a>2185 </h3></div></div></div><a class="indexterm" name="id316611"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#FORCEGROUP">force group</a>.</p></dd></dl></div></div><div class="section" title="force group (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316642"></a> 2149 2186 2150 2187 force group (S) 2151 </h3></div></div></div><a class="indexterm" name="id316 535"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be2188 </h3></div></div></div><a class="indexterm" name="id316643"></a><a name="FORCEGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX group name that will be 2152 2189 assigned as the default primary group for all users connecting 2153 2190 to this service. This is useful for sharing files by ensuring … … 2173 2210 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force group</code></em> = <code class="literal">agroup</code> 2174 2211 </em></span> 2175 </p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 636"></a>2212 </p></dd></dl></div></div><div class="section" title="force printername (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316744"></a> 2176 2213 2177 2214 force printername (S) 2178 </h3></div></div></div><a class="indexterm" name="id316 637"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later),2215 </h3></div></div></div><a class="indexterm" name="id316746"></a><a name="FORCEPRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>When printing from Windows NT (or later), 2179 2216 each printer in <code class="filename">smb.conf</code> has two 2180 2217 associated names which can be used by the client. The first … … 2199 2236 folder.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force printername</code></em> = <code class="literal">no</code> 2200 2237 </em></span> 2201 </p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 716"></a>2238 </p></dd></dl></div></div><div class="section" title="force security mode (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316824"></a> 2202 2239 2203 2240 force security mode (S) 2204 </h3></div></div></div><a class="indexterm" name="id316 717"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p>2241 </h3></div></div></div><a class="indexterm" name="id316825"></a><a name="FORCESECURITYMODE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2205 2242 This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating 2206 2243 the UNIX permission on a file using the native NT security dialog box. … … 2222 2259 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force security mode</code></em> = <code class="literal">700</code> 2223 2260 </em></span> 2224 </p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 807"></a>2261 </p></dd></dl></div></div><div class="section" title="force unknown acl user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316915"></a> 2225 2262 2226 2263 force unknown acl user (S) 2227 </h3></div></div></div><a class="indexterm" name="id316 808"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>2264 </h3></div></div></div><a class="indexterm" name="id316916"></a><a name="FORCEUNKNOWNACLUSER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2228 2265 If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or 2229 2266 representation of a user or group id) as the owner or group owner of the file will be silently … … 2239 2276 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>force unknown acl user</code></em> = <code class="literal">no</code> 2240 2277 </em></span> 2241 </p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316 861"></a>2278 </p></dd></dl></div></div><div class="section" title="force user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id316969"></a> 2242 2279 2243 2280 force user (S) 2244 </h3></div></div></div><a class="indexterm" name="id316 862"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be2281 </h3></div></div></div><a class="indexterm" name="id316970"></a><a name="FORCEUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies a UNIX user name that will be 2245 2282 assigned as the default user for all users connecting to this service. 2246 2283 This is useful for sharing files. You should also use it carefully … … 2256 2293 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>force user</code></em> = <code class="literal">auser</code> 2257 2294 </em></span> 2258 </p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 6931"></a>2295 </p></dd></dl></div></div><div class="section" title="fstype (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317039"></a> 2259 2296 2260 2297 fstype (S) 2261 </h3></div></div></div><a class="indexterm" name="id31 6932"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p>2298 </h3></div></div></div><a class="indexterm" name="id317040"></a><a name="FSTYPE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2262 2299 This parameter allows the administrator to configure the string that specifies the type of filesystem a share 2263 2300 is using that is reported by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> … … 2269 2306 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>fstype</code></em> = <code class="literal">Samba</code> 2270 2307 </em></span> 2271 </p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 010"></a>2308 </p></dd></dl></div></div><div class="section" title="get quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317118"></a> 2272 2309 2273 2310 get quota command (G) 2274 </h3></div></div></div><a class="indexterm" name="id317 011"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used2311 </h3></div></div></div><a class="indexterm" name="id317119"></a><a name="GETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">get quota command</code> should only be used 2275 2312 whenever there is no operating system API available from the OS that 2276 2313 samba can use.</p><p>This option is only available you have compiled Samba with the … … 2285 2322 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>get quota command</code></em> = <code class="literal">/usr/local/sbin/query_quota</code> 2286 2323 </em></span> 2287 </p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 186"></a>2324 </p></dd></dl></div></div><div class="section" title="getwd cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317294"></a> 2288 2325 2289 2326 getwd cache (G) 2290 </h3></div></div></div><a class="indexterm" name="id317 187"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a2327 </h3></div></div></div><a class="indexterm" name="id317295"></a><a name="GETWDCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a tuning option. When this is enabled a 2291 2328 caching algorithm will be used to reduce the time taken for getwd() 2292 2329 calls. This can have a significant impact on performance, especially 2293 2330 when the <a class="link" href="smb.conf.5.html#WIDESMBCONFOPTIONS" target="_top">wide smbconfoptions</a> parameter is set to <code class="constant">no</code>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>getwd cache</code></em> = <code class="literal">yes</code> 2294 2331 </em></span> 2295 </p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 244"></a>2332 </p></dd></dl></div></div><div class="section" title="guest account (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317352"></a> 2296 2333 2297 2334 guest account (G) 2298 </h3></div></div></div><a class="indexterm" name="id317 245"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access2335 </h3></div></div></div><a class="indexterm" name="id317353"></a><a name="GUESTACCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a username which will be used for access 2299 2336 to services which are specified as <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> (see below). Whatever privileges this 2300 2337 user has will be available to any client connecting to the guest service. … … 2314 2351 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>guest account</code></em> = <code class="literal">ftp</code> 2315 2352 </em></span> 2316 </p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317 343"></a>2353 </p></dd></dl></div></div><div class="section" title="public"><div class="titlepage"><div><div><h3 class="title"><a name="id317451"></a> 2317 2354 2318 2355 <a name="PUBLIC"></a>public 2319 </h3></div></div></div><a class="indexterm" name="id317 344"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317374"></a>2356 </h3></div></div></div><a class="indexterm" name="id317452"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTOK">guest ok</a>.</p></dd></dl></div></div><div class="section" title="guest ok (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317482"></a> 2320 2357 2321 2358 guest ok (S) 2322 </h3></div></div></div><a class="indexterm" name="id317 375"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2359 </h3></div></div></div><a class="indexterm" name="id317483"></a><a name="GUESTOK"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2323 2360 a service, then no password is required to connect to the service. 2324 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This param ater nullifies the benifits of setting2361 Privileges will be those of the <a class="link" href="smb.conf.5.html#GUESTACCOUNT" target="_top">guest account</a>.</p><p>This parameter nullifies the benefits of setting 2325 2362 <a class="link" href="smb.conf.5.html#RESTRICTANONYMOUS" target="_top">restrict anonymous = 2</a> 2326 2363 </p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option. 2327 2364 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest ok</code></em> = <code class="literal">no</code> 2328 2365 </em></span> 2329 </p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317 459"></a>2366 </p></dd></dl></div></div><div class="section" title="only guest"><div class="titlepage"><div><div><h3 class="title"><a name="id317567"></a> 2330 2367 2331 2368 <a name="ONLYGUEST"></a>only guest 2332 </h3></div></div></div><a class="indexterm" name="id317 460"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317492"></a>2369 </h3></div></div></div><a class="indexterm" name="id317568"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#GUESTONLY">guest only</a>.</p></dd></dl></div></div><div class="section" title="guest only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317600"></a> 2333 2370 2334 2371 guest only (S) 2335 </h3></div></div></div><a class="indexterm" name="id317 493"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for2372 </h3></div></div></div><a class="indexterm" name="id317601"></a><a name="GUESTONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code> for 2336 2373 a service, then only guest connections to the service are permitted. 2337 2374 This parameter will have no effect if <a class="link" href="smb.conf.5.html#GUESTOK" target="_top">guest ok</a> is not set for the service.</p><p>See the section below on <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security</a> for more information about this option. 2338 2375 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>guest only</code></em> = <code class="literal">no</code> 2339 2376 </em></span> 2340 </p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 561"></a>2377 </p></dd></dl></div></div><div class="section" title="hide dot files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317669"></a> 2341 2378 2342 2379 hide dot files (S) 2343 </h3></div></div></div><a class="indexterm" name="id317 562"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether2380 </h3></div></div></div><a class="indexterm" name="id317670"></a><a name="HIDEDOTFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls whether 2344 2381 files starting with a dot appear as hidden files.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide dot files</code></em> = <code class="literal">yes</code> 2345 2382 </em></span> 2346 </p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 602"></a>2383 </p></dd></dl></div></div><div class="section" title="hide files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317710"></a> 2347 2384 2348 2385 hide files (S) 2349 </h3></div></div></div><a class="indexterm" name="id317 603"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not2386 </h3></div></div></div><a class="indexterm" name="id317711"></a><a name="HIDEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of files or directories that are not 2350 2387 visible but are accessible. The DOS 'hidden' attribute is applied 2351 2388 to any files or directories that match.</p><p>Each entry in the list must be separated by a '/', … … 2369 2406 # no file are hidden</code> 2370 2407 </em></span> 2371 </p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 681"></a>2408 </p></dd></dl></div></div><div class="section" title="hide special files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317789"></a> 2372 2409 2373 2410 hide special files (S) 2374 </h3></div></div></div><a class="indexterm" name="id317 682"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2411 </h3></div></div></div><a class="indexterm" name="id317790"></a><a name="HIDESPECIALFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2375 2412 This parameter prevents clients from seeing special files such as sockets, devices and 2376 2413 fifo's in directory listings. 2377 2414 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide special files</code></em> = <code class="literal">no</code> 2378 2415 </em></span> 2379 </p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 722"></a>2416 </p></dd></dl></div></div><div class="section" title="hide unreadable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317830"></a> 2380 2417 2381 2418 hide unreadable (S) 2382 </h3></div></div></div><a class="indexterm" name="id317 723"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the2419 </h3></div></div></div><a class="indexterm" name="id317831"></a><a name="HIDEUNREADABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter prevents clients from seeing the 2383 2420 existance of files that cannot be read. Defaults to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unreadable</code></em> = <code class="literal">no</code> 2384 2421 </em></span> 2385 </p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 764"></a>2422 </p></dd></dl></div></div><div class="section" title="hide unwriteable files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id317872"></a> 2386 2423 2387 2424 hide unwriteable files (S) 2388 </h3></div></div></div><a class="indexterm" name="id317 765"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>2425 </h3></div></div></div><a class="indexterm" name="id317873"></a><a name="HIDEUNWRITEABLEFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 2389 2426 This parameter prevents clients from seeing the existance of files that cannot be written to. 2390 2427 Defaults to off. Note that unwriteable directories are shown as usual. 2391 2428 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>hide unwriteable files</code></em> = <code class="literal">no</code> 2392 2429 </em></span> 2393 </p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317 805"></a>2430 </p></dd></dl></div></div><div class="section" title="homedir map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id317914"></a> 2394 2431 2395 2432 homedir map (G) 2396 </h3></div></div></div><a class="indexterm" name="id317 806"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>2433 </h3></div></div></div><a class="indexterm" name="id317915"></a><a name="HOMEDIRMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 2397 2434 If <a class="link" href="smb.conf.5.html#NISHOMEDIR" target="_top">nis homedir</a> is <code class="constant">yes</code>, and <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> is also acting as a Win95/98 <em class="parameter"><code>logon server</code></em> 2398 2435 then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. … … 2409 2446 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>homedir map</code></em> = <code class="literal">amd.homedir</code> 2410 2447 </em></span> 2411 </p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 7912"></a>2448 </p></dd></dl></div></div><div class="section" title="host msdfs (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318020"></a> 2412 2449 2413 2450 host msdfs (G) 2414 </h3></div></div></div><a class="indexterm" name="id31 7913"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p>2451 </h3></div></div></div><a class="indexterm" name="id318021"></a><a name="HOSTMSDFS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2415 2452 If set to <code class="constant">yes</code>, Samba will act as a Dfs server, and allow Dfs-aware clients to browse 2416 2453 Dfs trees hosted on the server. … … 2420 2457 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>host msdfs</code></em> = <code class="literal">yes</code> 2421 2458 </em></span> 2422 </p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id31 7974"></a>2459 </p></dd></dl></div></div><div class="section" title="hostname lookups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318082"></a> 2423 2460 2424 2461 hostname lookups (G) 2425 </h3></div></div></div><a class="indexterm" name="id31 7975"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive)2462 </h3></div></div></div><a class="indexterm" name="id318083"></a><a name="HOSTNAMELOOKUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies whether samba should use (expensive) 2426 2463 hostname lookups or use the ip addresses instead. An example place 2427 2464 where hostname lookups are currently used is when checking … … 2431 2468 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hostname lookups</code></em> = <code class="literal">yes</code> 2432 2469 </em></span> 2433 </p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318 045"></a>2470 </p></dd></dl></div></div><div class="section" title="allow hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318153"></a> 2434 2471 2435 2472 <a name="ALLOWHOSTS"></a>allow hosts 2436 </h3></div></div></div><a class="indexterm" name="id318 046"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318077"></a>2473 </h3></div></div></div><a class="indexterm" name="id318154"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSALLOW">hosts allow</a>.</p></dd></dl></div></div><div class="section" title="hosts allow (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318185"></a> 2437 2474 2438 2475 hosts allow (S) 2439 </h3></div></div></div><a class="indexterm" name="id318 078"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited2476 </h3></div></div></div><a class="indexterm" name="id318186"></a><a name="HOSTSALLOW"></a><div class="variablelist"><dl><dt></dt><dd><p>A synonym for this parameter is <a class="link" href="smb.conf.5.html#ALLOWHOSTS" target="_top">allow hosts</a>.</p><p>This parameter is a comma, space, or tab delimited 2440 2477 set of hosts which are permitted to access a service.</p><p>If specified in the [global] section then it will 2441 2478 apply to all services, regardless of whether the individual … … 2457 2494 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts allow</code></em> = <code class="literal">150.203.5. myhost.mynet.edu.au</code> 2458 2495 </em></span> 2459 </p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318 265"></a>2496 </p></dd></dl></div></div><div class="section" title="deny hosts"><div class="titlepage"><div><div><h3 class="title"><a name="id318373"></a> 2460 2497 2461 2498 <a name="DENYHOSTS"></a>deny hosts 2462 </h3></div></div></div><a class="indexterm" name="id318 266"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318296"></a>2499 </h3></div></div></div><a class="indexterm" name="id318374"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#HOSTSDENY">hosts deny</a>.</p></dd></dl></div></div><div class="section" title="hosts deny (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id318404"></a> 2463 2500 2464 2501 hosts deny (S) 2465 </h3></div></div></div><a class="indexterm" name="id318 297"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em>2502 </h3></div></div></div><a class="indexterm" name="id318405"></a><a name="HOSTSDENY"></a><div class="variablelist"><dl><dt></dt><dd><p>The opposite of <em class="parameter"><code>hosts allow</code></em> 2466 2503 - hosts listed here are <span class="emphasis"><em>NOT</em></span> permitted access to 2467 2504 services unless the specific services have their own lists to override … … 2477 2514 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>hosts deny</code></em> = <code class="literal">150.203.4. badhost.mynet.edu.au</code> 2478 2515 </em></span> 2479 </p></dd></dl></div></div><div class="section" title="idmap alloc backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318393"></a> 2480 2481 idmap alloc backend (G) 2482 </h3></div></div></div><a class="indexterm" name="id318394"></a><a name="IDMAPALLOCBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2483 The idmap alloc backend provides a plugin interface for Winbind to use 2484 when allocating Unix uids/gids for Windows SIDs. This option refers 2485 to the name of the idmap module which will provide the id allocation 2486 functionality. Please refer to the man page for each idmap plugin to 2487 determine whether or not the module implements the allocation feature. 2488 The most common plugins are the tdb (<a class="citerefentry" href="idmap_tdb.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_tdb</span>(8)</span></a>) 2489 and ldap (<a class="citerefentry" href="idmap_ldap.8.html"><span class="citerefentry"><span class="refentrytitle">idmap_ldap</span>(8)</span></a>) libraries. 2490 </p><p> 2491 This parameter defaults to the value <a class="link" href="smb.conf.5.html#IDMAPBACKEND" target="_top">idmap backend</a> was set to, so by default winbind will allocate Unix IDs 2492 from the default backend. You will only need to set this parameter 2493 explicitly if you have an external source for Unix IDs, like a central 2494 database service somewhere in your company. 2495 </p><p> 2496 Also refer to the <a class="link" href="smb.conf.5.html#IDMAPALLOCCONFIG" target="_top">idmap alloc config</a> option. 2497 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap alloc backend</code></em> = <code class="literal">tdb</code> 2498 </em></span> 2499 </p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318490"></a> 2516 </p></dd></dl></div></div><div class="section" title="idmap alloc config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318502"></a> 2500 2517 2501 2518 idmap alloc config (G) 2502 </h3></div></div></div><a class="indexterm" name="id318 491"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2519 </h3></div></div></div><a class="indexterm" name="id318503"></a><a name="IDMAPALLOCCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2503 2520 The idmap alloc config prefix provides a means of managing settings 2504 2521 for the backend defined by the <a class="link" href="smb.conf.5.html#IDMAPALLOCBACKEND" target="_top">idmap alloc backend</a> 2505 2522 parameter. Refer to the man page for each idmap plugin regarding 2506 2523 specific configuration details. 2507 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3185 30"></a>2524 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="idmap backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318542"></a> 2508 2525 2509 2526 idmap backend (G) 2510 </h3></div></div></div><a class="indexterm" name="id3185 32"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>2527 </h3></div></div></div><a class="indexterm" name="id318543"></a><a name="IDMAPBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p> 2511 2528 The idmap backend provides a plugin interface for Winbind to use 2512 2529 varying backends to store SID/uid/gid mapping tables. … … 2529 2546 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap backend</code></em> = <code class="literal">tdb</code> 2530 2547 </em></span> 2531 </p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318 694"></a>2548 </p></dd></dl></div></div><div class="section" title="idmap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318707"></a> 2532 2549 2533 2550 idmap cache time (G) 2534 </h3></div></div></div><a class="indexterm" name="id318 695"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2551 </h3></div></div></div><a class="indexterm" name="id318708"></a><a name="IDMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2535 2552 idmap interface will cache positive SID/uid/gid query results. 2536 2553 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap cache time</code></em> = <code class="literal">604800 (one week)</code> 2537 2554 </em></span> 2538 </p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3187 36"></a>2555 </p></dd></dl></div></div><div class="section" title="idmap config (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318748"></a> 2539 2556 2540 2557 idmap config (G) 2541 </h3></div></div></div><a class="indexterm" name="id3187 37"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p>2558 </h3></div></div></div><a class="indexterm" name="id318749"></a><a name="IDMAPCONFIG"></a><div class="variablelist"><dl><dt></dt><dd><p> 2542 2559 The idmap config prefix provides a means of managing each trusted 2543 2560 domain separately. The idmap config prefix should be followed by the … … 2571 2588 idmap config CORP : backend = ad 2572 2589 idmap config CORP : range = 1000-999999 2573 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id3188 58"></a>2590 </pre><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="winbind gid"><div class="titlepage"><div><div><h3 class="title"><a name="id318868"></a> 2574 2591 2575 2592 <a name="WINBINDGID"></a>winbind gid 2576 </h3></div></div></div><a class="indexterm" name="id3188 59"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318889"></a>2593 </h3></div></div></div><a class="indexterm" name="id318869"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPGID">idmap gid</a>.</p></dd></dl></div></div><div class="section" title="idmap gid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318899"></a> 2577 2594 2578 2595 idmap gid (G) 2579 </h3></div></div></div><a class="indexterm" name="id318 890"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids2596 </h3></div></div></div><a class="indexterm" name="id318900"></a><a name="IDMAPGID"></a><div class="variablelist"><dl><dt></dt><dd><p>The idmap gid parameter specifies the range of group ids 2580 2597 that are allocated for the purpose of mapping UNX groups to NT group 2581 2598 SIDs. This range of group ids should have no … … 2587 2604 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap gid</code></em> = <code class="literal">10000-20000</code> 2588 2605 </em></span> 2589 </p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3189 72"></a>2606 </p></dd></dl></div></div><div class="section" title="idmap negative cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id318983"></a> 2590 2607 2591 2608 idmap negative cache time (G) 2592 </h3></div></div></div><a class="indexterm" name="id3189 73"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's2609 </h3></div></div></div><a class="indexterm" name="id318984"></a><a name="IDMAPNEGATIVECACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of seconds that Winbind's 2593 2610 idmap interface will cache negative SID/uid/gid query results. 2594 2611 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>idmap negative cache time</code></em> = <code class="literal">120</code> 2595 2612 </em></span> 2596 </p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id3190 15"></a>2613 </p></dd></dl></div></div><div class="section" title="winbind uid"><div class="titlepage"><div><div><h3 class="title"><a name="id319026"></a> 2597 2614 2598 2615 <a name="WINBINDUID"></a>winbind uid 2599 </h3></div></div></div><a class="indexterm" name="id3190 16"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319046"></a>2616 </h3></div></div></div><a class="indexterm" name="id319027"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#IDMAPUID">idmap uid</a>.</p></dd></dl></div></div><div class="section" title="idmap uid (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319057"></a> 2600 2617 2601 2618 idmap uid (G) 2602 </h3></div></div></div><a class="indexterm" name="id3190 47"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p>2619 </h3></div></div></div><a class="indexterm" name="id319058"></a><a name="IDMAPUID"></a><div class="variablelist"><dl><dt></dt><dd><p> 2603 2620 The idmap uid parameter specifies the range of user ids that are 2604 2621 allocated for use in mapping UNIX users to NT user SIDs. This … … 2610 2627 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>idmap uid</code></em> = <code class="literal">10000-20000</code> 2611 2628 </em></span> 2612 </p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3191 29"></a>2629 </p></dd></dl></div></div><div class="section" title="include (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319139"></a> 2613 2630 2614 2631 include (G) 2615 </h3></div></div></div><a class="indexterm" name="id3191 30"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p>2632 </h3></div></div></div><a class="indexterm" name="id319140"></a><a name="INCLUDE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2616 2633 This allows you to include one config file inside another. The file is included literally, as though typed 2617 2634 in place. … … 2631 2648 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>include</code></em> = <code class="literal">/usr/local/samba/lib/admin_smb.conf</code> 2632 2649 </em></span> 2633 </p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3192 25"></a>2650 </p></dd></dl></div></div><div class="section" title="inherit acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319236"></a> 2634 2651 2635 2652 inherit acls (S) 2636 </h3></div></div></div><a class="indexterm" name="id3192 26"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls2653 </h3></div></div></div><a class="indexterm" name="id319237"></a><a name="INHERITACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter can be used to ensure that if default acls 2637 2654 exist on parent directories, they are always honored when creating a 2638 2655 new file or subdirectory in these parent directories. The default … … 2647 2664 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit acls</code></em> = <code class="literal">no</code> 2648 2665 </em></span> 2649 </p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3192 71"></a>2666 </p></dd></dl></div></div><div class="section" title="inherit owner (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319282"></a> 2650 2667 2651 2668 inherit owner (S) 2652 </h3></div></div></div><a class="indexterm" name="id3192 72"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories2669 </h3></div></div></div><a class="indexterm" name="id319283"></a><a name="INHERITOWNER"></a><div class="variablelist"><dl><dt></dt><dd><p>The ownership of new files and directories 2653 2670 is normally governed by effective uid of the connected user. 2654 2671 This option allows the Samba administrator to specify that … … 2659 2676 roaming profile directory are actually owner by the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit owner</code></em> = <code class="literal">no</code> 2660 2677 </em></span> 2661 </p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3193 19"></a>2678 </p></dd></dl></div></div><div class="section" title="inherit permissions (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319330"></a> 2662 2679 2663 2680 inherit permissions (S) 2664 </h3></div></div></div><a class="indexterm" name="id3193 20"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>2681 </h3></div></div></div><a class="indexterm" name="id319331"></a><a name="INHERITPERMISSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2665 2682 The permissions on new files and directories are normally governed by <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a>, 2666 2683 <a class="link" href="smb.conf.5.html#DIRECTORYMASK" target="_top">directory mask</a>, <a class="link" href="smb.conf.5.html#FORCECREATEMODE" target="_top">force create mode</a> and <a class="link" href="smb.conf.5.html#FORCEDIRECTORYMODE" target="_top">force directory mode</a> but the boolean inherit permissions parameter overrides this. … … 2674 2691 share to be used flexibly by each user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>inherit permissions</code></em> = <code class="literal">no</code> 2675 2692 </em></span> 2676 </p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3194 57"></a>2693 </p></dd></dl></div></div><div class="section" title="init logon delayed hosts (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319468"></a> 2677 2694 2678 2695 init logon delayed hosts (G) 2679 </h3></div></div></div><a class="indexterm" name="id3194 58"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p>2696 </h3></div></div></div><a class="indexterm" name="id319469"></a><a name="INITLOGONDELAYEDHOSTS"></a><div class="variablelist"><dl><dt></dt><dd><p> 2680 2697 This parameter takes a list of host names, addresses or networks for 2681 2698 which the initial samlogon reply should be delayed (so other DCs get … … 2688 2705 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>init logon delayed hosts</code></em> = <code class="literal">150.203.5. myhost.mynet.de</code> 2689 2706 </em></span> 2690 </p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3195 31"></a>2707 </p></dd></dl></div></div><div class="section" title="init logon delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319541"></a> 2691 2708 2692 2709 init logon delay (G) 2693 </h3></div></div></div><a class="indexterm" name="id3195 32"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>2710 </h3></div></div></div><a class="indexterm" name="id319542"></a><a name="INITLOGONDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p> 2694 2711 This parameter specifies a delay in milliseconds for the hosts configured 2695 2712 for delayed initial samlogon with … … 2697 2714 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>init logon delay</code></em> = <code class="literal">100</code> 2698 2715 </em></span> 2699 </p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3195 82"></a>2716 </p></dd></dl></div></div><div class="section" title="interfaces (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319594"></a> 2700 2717 2701 2718 interfaces (G) 2702 </h3></div></div></div><a class="indexterm" name="id3195 83"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default2719 </h3></div></div></div><a class="indexterm" name="id319595"></a><a name="INTERFACES"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to override the default 2703 2720 network interfaces list that Samba will use for browsing, name 2704 2721 registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query … … 2724 2741 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>interfaces</code></em> = <code class="literal">eth0 192.168.2.10/24 192.168.3.10/255.255.255.0</code> 2725 2742 </em></span> 2726 </p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3196 88"></a>2743 </p></dd></dl></div></div><div class="section" title="invalid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id319699"></a> 2727 2744 2728 2745 invalid users (S) 2729 </h3></div></div></div><a class="indexterm" name="id319 689"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed2746 </h3></div></div></div><a class="indexterm" name="id319700"></a><a name="INVALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of users that should not be allowed 2730 2747 to login to this service. This is really a <span class="emphasis"><em>paranoid</em></span> 2731 2748 check to absolutely ensure an improper setting does not breach … … 2747 2764 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>invalid users</code></em> = <code class="literal">root fred admin @wheel</code> 2748 2765 </em></span> 2749 </p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319 789"></a>2766 </p></dd></dl></div></div><div class="section" title="iprint server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319800"></a> 2750 2767 2751 2768 iprint server (G) 2752 </h3></div></div></div><a class="indexterm" name="id319 790"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>2769 </h3></div></div></div><a class="indexterm" name="id319801"></a><a name="IPRINTSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 2753 2770 This parameter is only applicable if <a class="link" href="smb.conf.5.html#PRINTING" target="_top">printing</a> is set to <code class="constant">iprint</code>. 2754 2771 </p><p> … … 2759 2776 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>iprint server</code></em> = <code class="literal">MYCUPSSERVER</code> 2760 2777 </em></span> 2761 </p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3198 72"></a>2778 </p></dd></dl></div></div><div class="section" title="keepalive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319882"></a> 2762 2779 2763 2780 keepalive (G) 2764 </h3></div></div></div><a class="indexterm" name="id3198 73"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents2781 </h3></div></div></div><a class="indexterm" name="id319884"></a><a name="KEEPALIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (an integer) represents 2765 2782 the number of seconds between <em class="parameter"><code>keepalive</code></em> 2766 2783 packets. If this parameter is zero, no keepalive packets will be … … 2772 2789 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>keepalive</code></em> = <code class="literal">600</code> 2773 2790 </em></span> 2774 </p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3199 53"></a>2791 </p></dd></dl></div></div><div class="section" title="kerberos method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id319964"></a> 2775 2792 2776 2793 kerberos method (G) 2777 </h3></div></div></div><a class="indexterm" name="id3199 54"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p>2794 </h3></div></div></div><a class="indexterm" name="id319965"></a><a name="KERBEROSMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2778 2795 Controls how kerberos tickets are verified. 2779 2796 </p><p>Valid options are:</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>secrets only - use only the secrets.tdb for … … 2792 2809 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kerberos method</code></em> = <code class="literal">secrets only</code> 2793 2810 </em></span> 2794 </p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3200 42"></a>2811 </p></dd></dl></div></div><div class="section" title="kernel change notify (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id320053"></a> 2795 2812 2796 2813 kernel change notify (S) 2797 </h3></div></div></div><a class="indexterm" name="id3200 44"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the2814 </h3></div></div></div><a class="indexterm" name="id320054"></a><a name="KERNELCHANGENOTIFY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether Samba should ask the 2798 2815 kernel for change notifications in directories so that 2799 2816 SMB clients can refresh whenever the data on the server changes. … … 2802 2819 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel change notify</code></em> = <code class="literal">yes</code> 2803 2820 </em></span> 2804 </p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3200 89"></a>2821 </p></dd></dl></div></div><div class="section" title="kernel oplocks (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320099"></a> 2805 2822 2806 2823 kernel oplocks (G) 2807 </h3></div></div></div><a class="indexterm" name="id320 090"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a>2824 </h3></div></div></div><a class="indexterm" name="id320100"></a><a name="KERNELOPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>For UNIXes that support kernel based <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 2808 2825 (currently only IRIX and the Linux 2.4 kernel), this parameter 2809 2826 allows the use of them to be turned on or off.</p><p>Kernel oplocks support allows Samba <em class="parameter"><code>oplocks … … 2815 2832 You should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>kernel oplocks</code></em> = <code class="literal">yes</code> 2816 2833 </em></span> 2817 </p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3201 71"></a>2834 </p></dd></dl></div></div><div class="section" title="lanman auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320181"></a> 2818 2835 2819 2836 lanman auth (G) 2820 </h3></div></div></div><a class="indexterm" name="id3201 72"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to2837 </h3></div></div></div><a class="indexterm" name="id320182"></a><a name="LANMANAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 2821 2838 authenticate users or permit password changes 2822 2839 using the LANMAN password hash. If disabled, only clients which support NT … … 2840 2857 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lanman auth</code></em> = <code class="literal">no</code> 2841 2858 </em></span> 2842 </p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3202 65"></a>2859 </p></dd></dl></div></div><div class="section" title="large readwrite (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320276"></a> 2843 2860 2844 2861 large readwrite (G) 2845 </h3></div></div></div><a class="indexterm" name="id3202 66"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not2862 </h3></div></div></div><a class="indexterm" name="id320277"></a><a name="LARGEREADWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 2846 2863 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> supports the new 64k 2847 2864 streaming read and write variant SMB requests introduced with … … 2852 2869 tested as some other Samba code paths.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>large readwrite</code></em> = <code class="literal">yes</code> 2853 2870 </em></span> 2854 </p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32032 1"></a>2871 </p></dd></dl></div></div><div class="section" title="ldap admin dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320328"></a> 2855 2872 2856 2873 ldap admin dn (G) 2857 </h3></div></div></div><a class="indexterm" name="id32032 2"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p>2874 </h3></div></div></div><a class="indexterm" name="id320329"></a><a name="LDAPADMINDN"></a><div class="variablelist"><dl><dt></dt><dd><p> 2858 2875 The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> defines the Distinguished Name (DN) name used by Samba to contact 2859 2876 the ldap server when retreiving user account information. The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> is used … … 2863 2880 </p><p> 2864 2881 The <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a> requires a fully specified DN. The <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> is not appended to the <a class="link" href="smb.conf.5.html#LDAPADMINDN" target="_top">ldap admin dn</a>. 2865 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3204 24"></a>2882 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="ldap connection timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320431"></a> 2866 2883 2867 2884 ldap connection timeout (G) 2868 </h3></div></div></div><a class="indexterm" name="id3204 25"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>2885 </h3></div></div></div><a class="indexterm" name="id320432"></a><a name="LDAPCONNECTIONTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 2869 2886 This parameter tells the LDAP library calls which timeout in seconds 2870 2887 they should honor during initial connection establishments to LDAP servers. … … 2878 2895 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap connection timeout</code></em> = <code class="literal">2</code> 2879 2896 </em></span> 2880 </p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32048 2"></a>2897 </p></dd></dl></div></div><div class="section" title="ldap debug level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320489"></a> 2881 2898 2882 2899 ldap debug level (G) 2883 </h3></div></div></div><a class="indexterm" name="id3204 83"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>2900 </h3></div></div></div><a class="indexterm" name="id320490"></a><a name="LDAPDEBUGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 2884 2901 This parameter controls the debug level of the LDAP library 2885 2902 calls. In the case of OpenLDAP, it is the same … … 2898 2915 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug level</code></em> = <code class="literal">1</code> 2899 2916 </em></span> 2900 </p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3205 66"></a>2917 </p></dd></dl></div></div><div class="section" title="ldap debug threshold (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320573"></a> 2901 2918 2902 2919 ldap debug threshold (G) 2903 </h3></div></div></div><a class="indexterm" name="id3205 67"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p>2920 </h3></div></div></div><a class="indexterm" name="id320574"></a><a name="LDAPDEBUGTHRESHOLD"></a><div class="variablelist"><dl><dt></dt><dd><p> 2904 2921 This parameter controls the Samba debug level at which 2905 2922 the ldap library debug output is … … 2910 2927 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap debug threshold</code></em> = <code class="literal">5</code> 2911 2928 </em></span> 2912 </p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32063 0"></a>2929 </p></dd></dl></div></div><div class="section" title="ldap delete dn (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320638"></a> 2913 2930 2914 2931 ldap delete dn (G) 2915 </h3></div></div></div><a class="indexterm" name="id32063 2"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete2932 </h3></div></div></div><a class="indexterm" name="id320639"></a><a name="LDAPDELETEDN"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter specifies whether a delete 2916 2933 operation in the ldapsam deletes the complete entry or only the attributes 2917 2934 specific to Samba. 2918 2935 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap delete dn</code></em> = <code class="literal">no</code> 2919 2936 </em></span> 2920 </p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3206 72"></a>2937 </p></dd></dl></div></div><div class="section" title="ldap deref (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320680"></a> 2921 2938 2922 2939 ldap deref (G) 2923 </h3></div></div></div><a class="indexterm" name="id3206 74"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library2940 </h3></div></div></div><a class="indexterm" name="id320681"></a><a name="LDAPDEREF"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether Samba should tell the LDAP library 2924 2941 to use a certain alias dereferencing method. The default is 2925 2942 <span class="emphasis"><em>auto</em></span>, which means that the default setting of the … … 2932 2949 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap deref</code></em> = <code class="literal">searching</code> 2933 2950 </em></span> 2934 </p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32075 0"></a>2951 </p></dd></dl></div></div><div class="section" title="ldap follow referral (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320757"></a> 2935 2952 2936 2953 ldap follow referral (G) 2937 </h3></div></div></div><a class="indexterm" name="id32075 1"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when2954 </h3></div></div></div><a class="indexterm" name="id320758"></a><a name="LDAPFOLLOWREFERRAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls whether to follow LDAP referrals or not when 2938 2955 searching for entries in the LDAP database. Possible values are 2939 2956 <span class="emphasis"><em>on</em></span> to enable following referrals, … … 2946 2963 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap follow referral</code></em> = <code class="literal">off</code> 2947 2964 </em></span> 2948 </p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32082 1"></a>2965 </p></dd></dl></div></div><div class="section" title="ldap group suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320828"></a> 2949 2966 2950 2967 ldap group suffix (G) 2951 </h3></div></div></div><a class="indexterm" name="id32082 2"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is2968 </h3></div></div></div><a class="indexterm" name="id320829"></a><a name="LDAPGROUPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the suffix that is 2952 2969 used for groups when these are added to the LDAP directory. 2953 2970 If this parameter is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2956 2973 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap group suffix</code></em> = <code class="literal">ou=Groups</code> 2957 2974 </em></span> 2958 </p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32090 1"></a>2975 </p></dd></dl></div></div><div class="section" title="ldap idmap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320908"></a> 2959 2976 2960 2977 ldap idmap suffix (G) 2961 </h3></div></div></div><a class="indexterm" name="id32090 2"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2978 </h3></div></div></div><a class="indexterm" name="id320909"></a><a name="LDAPIDMAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2962 2979 This parameters specifies the suffix that is used when storing idmap mappings. If this parameter 2963 2980 is unset, the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix … … 2967 2984 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap idmap suffix</code></em> = <code class="literal">ou=Idmap</code> 2968 2985 </em></span> 2969 </p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32098 0"></a>2986 </p></dd></dl></div></div><div class="section" title="ldap machine suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id320987"></a> 2970 2987 2971 2988 ldap machine suffix (G) 2972 </h3></div></div></div><a class="indexterm" name="id32098 1"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>2989 </h3></div></div></div><a class="indexterm" name="id320988"></a><a name="LDAPMACHINESUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 2973 2990 It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of 2974 2991 <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix string is pre-pended to the … … 2978 2995 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap machine suffix</code></em> = <code class="literal">ou=Computers</code> 2979 2996 </em></span> 2980 </p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3210 59"></a>2997 </p></dd></dl></div></div><div class="section" title="ldap page size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321066"></a> 2981 2998 2982 2999 ldap page size (G) 2983 </h3></div></div></div><a class="indexterm" name="id32106 0"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3000 </h3></div></div></div><a class="indexterm" name="id321067"></a><a name="LDAPPAGESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 2984 3001 This parameter specifies the number of entries per page. 2985 3002 </p><p>If the LDAP server supports paged results, clients can … … 2990 3007 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap page size</code></em> = <code class="literal">512</code> 2991 3008 </em></span> 2992 </p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32112 2"></a>3009 </p></dd></dl></div></div><div class="section" title="ldap passwd sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321129"></a> 2993 3010 2994 3011 ldap passwd sync (G) 2995 </h3></div></div></div><a class="indexterm" name="id3211 23"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>3012 </h3></div></div></div><a class="indexterm" name="id321130"></a><a name="LDAPPASSWDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 2996 3013 This option is used to define whether or not Samba should sync the LDAP password with the NT 2997 3014 and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password … … 3004 3021 the LDAP password and let the LDAP server do the rest.</p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap passwd sync</code></em> = <code class="literal">no</code> 3005 3022 </em></span> 3006 </p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3212 17"></a>3023 </p></dd></dl></div></div><div class="section" title="ldap replication sleep (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321224"></a> 3007 3024 3008 3025 ldap replication sleep (G) 3009 </h3></div></div></div><a class="indexterm" name="id3212 18"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p>3026 </h3></div></div></div><a class="indexterm" name="id321226"></a><a name="LDAPREPLICATIONSLEEP"></a><div class="variablelist"><dl><dt></dt><dd><p> 3010 3027 When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server. 3011 3028 This server then replicates our changes back to the 'local' server, however the replication might take some seconds, … … 3020 3037 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap replication sleep</code></em> = <code class="literal">1000</code> 3021 3038 </em></span> 3022 </p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3212 73"></a>3039 </p></dd></dl></div></div><div class="section" title="ldapsam:editposix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321280"></a> 3023 3040 3024 3041 ldapsam:editposix (G) 3025 </h3></div></div></div><a class="indexterm" name="id3212 74"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p>3042 </h3></div></div></div><a class="indexterm" name="id321281"></a><a name="LDAPSAM:EDITPOSIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 3026 3043 Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller 3027 3044 eliminating the need to set up custom scripts to add and manage the posix users and groups. This option … … 3101 3118 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:editposix</code></em> = <code class="literal">no</code> 3102 3119 </em></span> 3103 </p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32138 4"></a>3120 </p></dd></dl></div></div><div class="section" title="ldapsam:trusted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321385"></a> 3104 3121 3105 3122 ldapsam:trusted (G) 3106 </h3></div></div></div><a class="indexterm" name="id32138 5"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p>3123 </h3></div></div></div><a class="indexterm" name="id321386"></a><a name="LDAPSAM:TRUSTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 3107 3124 By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to 3108 3125 access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group … … 3122 3139 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldapsam:trusted</code></em> = <code class="literal">no</code> 3123 3140 </em></span> 3124 </p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3214 59"></a>3141 </p></dd></dl></div></div><div class="section" title="ldap ssl ads (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321460"></a> 3125 3142 3126 3143 ldap ssl ads (G) 3127 </h3></div></div></div><a class="indexterm" name="id32146 0"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should3144 </h3></div></div></div><a class="indexterm" name="id321461"></a><a name="LDAPSSLADS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 3128 3145 use SSL when connecting to the ldap server using 3129 3146 <span class="emphasis"><em>ads</em></span> methods. … … 3135 3152 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl ads</code></em> = <code class="literal">no</code> 3136 3153 </em></span> 3137 </p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32154 1"></a>3154 </p></dd></dl></div></div><div class="section" title="ldap ssl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321542"></a> 3138 3155 3139 3156 ldap ssl (G) 3140 </h3></div></div></div><a class="indexterm" name="id32154 2"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should3157 </h3></div></div></div><a class="indexterm" name="id321543"></a><a name="LDAPSSL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used to define whether or not Samba should 3141 3158 use SSL when connecting to the ldap server 3142 3159 This is <span class="emphasis"><em>NOT</em></span> related to … … 3163 3180 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap ssl</code></em> = <code class="literal">start tls</code> 3164 3181 </em></span> 3165 </p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32172 5"></a>3182 </p></dd></dl></div></div><div class="section" title="ldap suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321726"></a> 3166 3183 3167 3184 ldap suffix (G) 3168 </h3></div></div></div><a class="indexterm" name="id32172 6"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p>3185 </h3></div></div></div><a class="indexterm" name="id321727"></a><a name="LDAPSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the base for all ldap suffixes and for storing the sambaDomain object.</p><p> 3169 3186 The ldap suffix will be appended to the values specified for the <a class="link" href="smb.conf.5.html#LDAPUSERSUFFIX" target="_top">ldap user suffix</a>, 3170 3187 <a class="link" href="smb.conf.5.html#LDAPGROUPSUFFIX" target="_top">ldap group suffix</a>, <a class="link" href="smb.conf.5.html#LDAPMACHINESUFFIX" target="_top">ldap machine suffix</a>, and the … … 3175 3192 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap suffix</code></em> = <code class="literal">dc=samba,dc=org</code> 3176 3193 </em></span> 3177 </p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32184 1"></a>3194 </p></dd></dl></div></div><div class="section" title="ldap timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321842"></a> 3178 3195 3179 3196 ldap timeout (G) 3180 </h3></div></div></div><a class="indexterm" name="id32184 2"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3197 </h3></div></div></div><a class="indexterm" name="id321843"></a><a name="LDAPTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3181 3198 This parameter defines the number of seconds that Samba should use as timeout for LDAP operations. 3182 3199 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ldap timeout</code></em> = <code class="literal">15</code> 3183 3200 </em></span> 3184 </p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32188 1"></a>3201 </p></dd></dl></div></div><div class="section" title="ldap user suffix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id321882"></a> 3185 3202 3186 3203 ldap user suffix (G) 3187 </h3></div></div></div><a class="indexterm" name="id32188 2"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p>3204 </h3></div></div></div><a class="indexterm" name="id321883"></a><a name="LDAPUSERSUFFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> 3188 3205 This parameter specifies where users are added to the tree. If this parameter is unset, 3189 3206 the value of <a class="link" href="smb.conf.5.html#LDAPSUFFIX" target="_top">ldap suffix</a> will be used instead. The suffix … … 3193 3210 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>ldap user suffix</code></em> = <code class="literal">ou=people</code> 3194 3211 </em></span> 3195 </p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id32196 0"></a>3212 </p></dd></dl></div></div><div class="section" title="level2 oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id321961"></a> 3196 3213 3197 3214 level2 oplocks (S) … … 3219 3236 3220 3237 lm announce (G) 3221 </h3></div></div></div><a class="indexterm" name="id32205 7"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce3238 </h3></div></div></div><a class="indexterm" name="id322058"></a><a name="LMANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will produce Lanman announce 3222 3239 broadcasts that are needed by OS/2 clients in order for them to see 3223 3240 the Samba server in their browse list. This parameter can have three … … 3235 3252 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm announce</code></em> = <code class="literal">yes</code> 3236 3253 </em></span> 3237 </p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32217 1"></a>3254 </p></dd></dl></div></div><div class="section" title="lm interval (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322172"></a> 3238 3255 3239 3256 lm interval (G) 3240 </h3></div></div></div><a class="indexterm" name="id32217 2"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce3257 </h3></div></div></div><a class="indexterm" name="id322173"></a><a name="LMINTERVAL"></a><div class="variablelist"><dl><dt></dt><dd><p>If Samba is set to produce Lanman announce 3241 3258 broadcasts needed by OS/2 clients (see the 3242 3259 <a class="link" href="smb.conf.5.html#LMANNOUNCE" target="_top">lm announce</a> parameter) then this … … 3248 3265 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lm interval</code></em> = <code class="literal">120</code> 3249 3266 </em></span> 3250 </p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32225 2"></a>3267 </p></dd></dl></div></div><div class="section" title="load printers (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322253"></a> 3251 3268 3252 3269 load printers (G) 3253 </h3></div></div></div><a class="indexterm" name="id32225 3"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all3270 </h3></div></div></div><a class="indexterm" name="id322254"></a><a name="LOADPRINTERS"></a><div class="variablelist"><dl><dt></dt><dd><p>A boolean variable that controls whether all 3254 3271 printers in the printcap will be loaded for browsing by default. 3255 3272 See the <a class="link" href="smb.conf.5.html#PRINTERS" target="_top">printers</a> section for 3256 3273 more details.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>load printers</code></em> = <code class="literal">yes</code> 3257 3274 </em></span> 3258 </p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32230 6"></a>3275 </p></dd></dl></div></div><div class="section" title="local master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322307"></a> 3259 3276 3260 3277 local master (G) 3261 </h3></div></div></div><a class="indexterm" name="id32230 7"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser3278 </h3></div></div></div><a class="indexterm" name="id322308"></a><a name="LOCALMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to try and become a local master browser 3262 3279 on a subnet. If set to <code class="constant">no</code> then <code class="literal"> 3263 3280 nmbd</code> will not attempt to become a local master browser … … 3269 3286 master browser.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>local master</code></em> = <code class="literal">yes</code> 3270 3287 </em></span> 3271 </p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id32240 2"></a>3288 </p></dd></dl></div></div><div class="section" title="lock dir"><div class="titlepage"><div><div><h3 class="title"><a name="id322403"></a> 3272 3289 3273 3290 <a name="LOCKDIR"></a>lock dir 3274 </h3></div></div></div><a class="indexterm" name="id32240 3"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322434"></a>3291 </h3></div></div></div><a class="indexterm" name="id322404"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOCKDIRECTORY">lock directory</a>.</p></dd></dl></div></div><div class="section" title="lock directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322434"></a> 3275 3292 3276 3293 lock directory (G) 3277 </h3></div></div></div><a class="indexterm" name="id32243 5"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock3294 </h3></div></div></div><a class="indexterm" name="id322436"></a><a name="LOCKDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the directory where lock 3278 3295 files will be placed. The lock files are used to implement the 3279 3296 <a class="link" href="smb.conf.5.html#MAXCONNECTIONS" target="_top">max connections</a> option. … … 3285 3302 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lock directory</code></em> = <code class="literal">/var/run/samba/locks</code> 3286 3303 </em></span> 3287 </p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id32250 8"></a>3304 </p></dd></dl></div></div><div class="section" title="locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id322509"></a> 3288 3305 3289 3306 locking (S) 3290 </h3></div></div></div><a class="indexterm" name="id3225 09"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be3307 </h3></div></div></div><a class="indexterm" name="id322510"></a><a name="LOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether or not locking will be 3291 3308 performed by the server in response to lock requests from the 3292 3309 client.</p><p>If <code class="literal">locking = no</code>, all lock and unlock … … 3298 3315 is not really recommended even in this case.</p><p>Be careful about disabling locking either globally or in a 3299 3316 specific service, as lack of locking may result in data corruption. 3300 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32257 7"></a>3317 You should never need to set this parameter.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="lock spin count (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322578"></a> 3301 3318 3302 3319 lock spin count (G) 3303 </h3></div></div></div><a class="indexterm" name="id32257 8"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24.3320 </h3></div></div></div><a class="indexterm" name="id322579"></a><a name="LOCKSPINCOUNT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter has been made inoperative in Samba 3.0.24. 3304 3321 The functionality it contolled is now controlled by the parameter 3305 3322 <a class="link" href="smb.conf.5.html#LOCKSPINTIME" target="_top">lock spin time</a>. 3306 3323 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin count</code></em> = <code class="literal">0</code> 3307 3324 </em></span> 3308 </p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32263 0"></a>3325 </p></dd></dl></div></div><div class="section" title="lock spin time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322631"></a> 3309 3326 3310 3327 lock spin time (G) 3311 </h3></div></div></div><a class="indexterm" name="id32263 1"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should3328 </h3></div></div></div><a class="indexterm" name="id322632"></a><a name="LOCKSPINTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>The time in milliseconds that smbd should 3312 3329 keep waiting to see if a failed lock request can 3313 3330 be granted. This parameter has changed in default … … 3317 3334 to change the value of this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lock spin time</code></em> = <code class="literal">200</code> 3318 3335 </em></span> 3319 </p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32268 4"></a>3336 </p></dd></dl></div></div><div class="section" title="log file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322685"></a> 3320 3337 3321 3338 log file (G) 3322 </h3></div></div></div><a class="indexterm" name="id32268 5"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>3339 </h3></div></div></div><a class="indexterm" name="id322686"></a><a name="LOGFILE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3323 3340 This option allows you to override the name of the Samba log file (also known as the debug file). 3324 3341 </p><p> … … 3326 3343 </p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log file</code></em> = <code class="literal">/usr/local/samba/var/log.%m</code> 3327 3344 </em></span> 3328 </p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id32273 4"></a>3345 </p></dd></dl></div></div><div class="section" title="debuglevel"><div class="titlepage"><div><div><h3 class="title"><a name="id322735"></a> 3329 3346 3330 3347 <a name="DEBUGLEVEL"></a>debuglevel 3331 </h3></div></div></div><a class="indexterm" name="id32273 5"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322764"></a>3348 </h3></div></div></div><a class="indexterm" name="id322736"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#LOGLEVEL">log level</a>.</p></dd></dl></div></div><div class="section" title="log level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322766"></a> 3332 3349 3333 3350 log level (G) 3334 </h3></div></div></div><a class="indexterm" name="id32276 6"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>3351 </h3></div></div></div><a class="indexterm" name="id322767"></a><a name="LOGLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 3335 3352 The value of the parameter (a astring) allows the debug level (logging level) to be specified in the 3336 3353 <code class="filename">smb.conf</code> file. … … 3343 3360 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>log level</code></em> = <code class="literal">3 passdb:5 auth:10 winbind:2</code> 3344 3361 </em></span> 3345 </p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32299 3"></a>3362 </p></dd></dl></div></div><div class="section" title="logon drive (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id322995"></a> 3346 3363 3347 3364 logon drive (G) 3348 </h3></div></div></div><a class="indexterm" name="id32299 4"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3365 </h3></div></div></div><a class="indexterm" name="id322996"></a><a name="LOGONDRIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3349 3366 This parameter specifies the local path to which the home directory will be 3350 3367 connected (see <a class="link" href="smb.conf.5.html#LOGONHOME" target="_top">logon home</a>) and is only used by NT … … 3356 3373 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon drive</code></em> = <code class="literal">h:</code> 3357 3374 </em></span> 3358 </p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32306 6"></a>3375 </p></dd></dl></div></div><div class="section" title="logon home (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323068"></a> 3359 3376 3360 3377 logon home (G) 3361 </h3></div></div></div><a class="indexterm" name="id32306 7"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p>3378 </h3></div></div></div><a class="indexterm" name="id323069"></a><a name="LOGONHOME"></a><div class="variablelist"><dl><dt></dt><dd><p> 3362 3379 This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC. 3363 3380 It allows you to do … … 3390 3407 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon home</code></em> = <code class="literal">\\remote_smb_server\%U</code> 3391 3408 </em></span> 3392 </p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32322 0"></a>3409 </p></dd></dl></div></div><div class="section" title="logon path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323221"></a> 3393 3410 3394 3411 logon path (G) 3395 </h3></div></div></div><a class="indexterm" name="id32322 1"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>3412 </h3></div></div></div><a class="indexterm" name="id323222"></a><a name="LOGONPATH"></a><div class="variablelist"><dl><dt></dt><dd><p> 3396 3413 This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are 3397 3414 stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming … … 3437 3454 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>logon path</code></em> = <code class="literal">\\%N\%U\profile</code> 3438 3455 </em></span> 3439 </p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3233 66"></a>3456 </p></dd></dl></div></div><div class="section" title="logon script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323372"></a> 3440 3457 3441 3458 logon script (G) 3442 </h3></div></div></div><a class="indexterm" name="id3233 67"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>3459 </h3></div></div></div><a class="indexterm" name="id323373"></a><a name="LOGONSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3443 3460 This parameter specifies the batch file (<code class="filename">.bat</code>) or NT command file 3444 3461 (<code class="filename">.cmd</code>) to be downloaded and run on a machine when a user successfully logs in. The file … … 3471 3488 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>logon script</code></em> = <code class="literal">scripts\%U.bat</code> 3472 3489 </em></span> 3473 </p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323524"></a> 3490 </p></dd></dl></div></div><div class="section" title="log writeable files on exit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323529"></a> 3491 3492 log writeable files on exit (G) 3493 </h3></div></div></div><a class="indexterm" name="id323530"></a><a name="LOGWRITEABLEFILESONEXIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3494 When the network connection between a CIFS client and Samba 3495 dies, Samba has no option but to simply shut down the server 3496 side of the network connection. If this happens, there is a 3497 risk of data corruption because the Windows client did not 3498 complete all write operations that the Windows application 3499 requested. Setting this option to "yes" makes smbd log with 3500 a level 0 message a list of all files that have been opened 3501 for writing when the network connection died. Those are the 3502 files that are potentially corrupted. It is meant as an aid 3503 for the administrator to give him a list of files to do 3504 consistency checks on. 3505 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>log writeable files on exit</code></em> = <code class="literal">no</code> 3506 </em></span> 3507 </p></dd></dl></div></div><div class="section" title="lppause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323576"></a> 3474 3508 3475 3509 lppause command (S) 3476 </h3></div></div></div><a class="indexterm" name="id3235 25"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3510 </h3></div></div></div><a class="indexterm" name="id323577"></a><a name="LPPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3477 3511 executed on the server host in order to stop printing or spooling 3478 3512 a specific print job.</p><p>This command should be a program or script which takes … … 3498 3532 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lppause command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p0</code> 3499 3533 </em></span> 3500 </p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323 660"></a>3534 </p></dd></dl></div></div><div class="section" title="lpq cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id323712"></a> 3501 3535 3502 3536 lpq cache time (G) 3503 </h3></div></div></div><a class="indexterm" name="id323 661"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached3537 </h3></div></div></div><a class="indexterm" name="id323713"></a><a name="LPQCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls how long lpq info will be cached 3504 3538 for to prevent the <code class="literal">lpq</code> command being called too 3505 3539 often. A separate cache is kept for each variation of the <code class="literal"> … … 3514 3548 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq cache time</code></em> = <code class="literal">10</code> 3515 3549 </em></span> 3516 </p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323 771"></a>3550 </p></dd></dl></div></div><div class="section" title="lpq command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323823"></a> 3517 3551 3518 3552 lpq command (S) 3519 </h3></div></div></div><a class="indexterm" name="id323 772"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3553 </h3></div></div></div><a class="indexterm" name="id323824"></a><a name="LPQCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3520 3554 executed on the server host in order to obtain <code class="literal">lpq 3521 3555 </code>-style printer status information.</p><p>This command should be a program or script which … … 3539 3573 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpq command</code></em> = <code class="literal">/usr/bin/lpq -P%p</code> 3540 3574 </em></span> 3541 </p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323 888"></a>3575 </p></dd></dl></div></div><div class="section" title="lpresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id323940"></a> 3542 3576 3543 3577 lpresume command (S) 3544 </h3></div></div></div><a class="indexterm" name="id323 889"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3578 </h3></div></div></div><a class="indexterm" name="id323941"></a><a name="LPRESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3545 3579 executed on the server host in order to restart or continue 3546 3580 printing or spooling a specific print job.</p><p>This command should be a program or script which takes … … 3555 3589 is <code class="constant">SOFTQ</code>, then the default is:</p><p><code class="literal">qstat -s -j%j -r</code></p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>lpresume command</code></em> = <code class="literal">/usr/bin/lpalt %p-%j -p2</code> 3556 3590 </em></span> 3557 </p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3240 32"></a>3591 </p></dd></dl></div></div><div class="section" title="lprm command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324083"></a> 3558 3592 3559 3593 lprm command (S) 3560 </h3></div></div></div><a class="indexterm" name="id3240 33"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be3594 </h3></div></div></div><a class="indexterm" name="id324084"></a><a name="LPRMCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 3561 3595 executed on the server host in order to delete a print job.</p><p>This command should be a program or script which takes 3562 3596 a printer name and job number, and deletes the print job.</p><p>If a <em class="parameter"><code>%p</code></em> is given then the printer name … … 3575 3609 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>lprm command</code></em> = <code class="literal"> determined by printing parameter</code> 3576 3610 </em></span> 3577 </p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3241 13"></a>3611 </p></dd></dl></div></div><div class="section" title="machine password timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324165"></a> 3578 3612 3579 3613 machine password timeout (G) 3580 </h3></div></div></div><a class="indexterm" name="id3241 14"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3614 </h3></div></div></div><a class="indexterm" name="id324166"></a><a name="MACHINEPASSWORDTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3581 3615 If a Samba server is a member of a Windows NT Domain (see the <a class="link" href="smb.conf.5.html#SECURITY" target="_top">security = domain</a> parameter) then periodically a running smbd process will try and change 3582 3616 the MACHINE ACCOUNT PASSWORD stored in the TDB called <code class="filename">private/secrets.tdb … … 3588 3622 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>machine password timeout</code></em> = <code class="literal">604800</code> 3589 3623 </em></span> 3590 </p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 197"></a>3624 </p></dd></dl></div></div><div class="section" title="magic output (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324249"></a> 3591 3625 3592 3626 magic output (S) 3593 </h3></div></div></div><a class="indexterm" name="id324 198"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p>3627 </h3></div></div></div><a class="indexterm" name="id324250"></a><a name="MAGICOUTPUT"></a><div class="variablelist"><dl><dt></dt><dd><p> 3594 3628 This parameter specifies the name of a file which will contain output created by a magic script (see the 3595 3629 <a class="link" href="smb.conf.5.html#MAGICSCRIPT" target="_top">magic script</a> parameter below). … … 3600 3634 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic output</code></em> = <code class="literal">myfile.txt</code> 3601 3635 </em></span> 3602 </p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 277"></a>3636 </p></dd></dl></div></div><div class="section" title="magic script (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324329"></a> 3603 3637 3604 3638 magic script (S) 3605 </h3></div></div></div><a class="indexterm" name="id324 278"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which,3639 </h3></div></div></div><a class="indexterm" name="id324330"></a><a name="MAGICSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the name of a file which, 3606 3640 if opened, will be executed by the server when the file is closed. 3607 3641 This allows a UNIX script to be sent to the Samba host and … … 3619 3653 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>magic script</code></em> = <code class="literal">user.csh</code> 3620 3654 </em></span> 3621 </p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 375"></a>3655 </p></dd></dl></div></div><div class="section" title="mangled names (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324427"></a> 3622 3656 3623 3657 mangled names (S) 3624 </h3></div></div></div><a class="indexterm" name="id324 376"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX3658 </h3></div></div></div><a class="indexterm" name="id324428"></a><a name="MANGLEDNAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether non-DOS names under UNIX 3625 3659 should be mapped to DOS-compatible names ("mangled") and made visible, 3626 3660 or whether non-DOS names should simply be ignored.</p><p>See the section on <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a> for … … 3647 3681 do not change between sessions.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>mangled names</code></em> = <code class="literal">yes</code> 3648 3682 </em></span> 3649 </p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 494"></a>3683 </p></dd></dl></div></div><div class="section" title="mangle prefix (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324546"></a> 3650 3684 3651 3685 mangle prefix (G) 3652 </h3></div></div></div><a class="indexterm" name="id324 495"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix3686 </h3></div></div></div><a class="indexterm" name="id324547"></a><a name="MANGLEPREFIX"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the number of prefix 3653 3687 characters from the original name used when generating 3654 3688 the mangled names. A larger value will give a weaker … … 3660 3694 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangle prefix</code></em> = <code class="literal">4</code> 3661 3695 </em></span> 3662 </p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 558"></a>3696 </p></dd></dl></div></div><div class="section" title="mangling char (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324610"></a> 3663 3697 3664 3698 mangling char (S) 3665 </h3></div></div></div><a class="indexterm" name="id324 559"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as3699 </h3></div></div></div><a class="indexterm" name="id324611"></a><a name="MANGLINGCHAR"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what character is used as 3666 3700 the <span class="emphasis"><em>magic</em></span> character in <a class="link" href="smb.conf.5.html#NAMEMANGLING" target="_top">name mangling</a>. The 3667 3701 default is a '~' but this may interfere with some software. Use this option to set … … 3670 3704 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling char</code></em> = <code class="literal">^</code> 3671 3705 </em></span> 3672 </p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3246 32"></a>3706 </p></dd></dl></div></div><div class="section" title="mangling method (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id324684"></a> 3673 3707 3674 3708 mangling method (G) 3675 </h3></div></div></div><a class="indexterm" name="id3246 33"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating3709 </h3></div></div></div><a class="indexterm" name="id324685"></a><a name="MANGLINGMETHOD"></a><div class="variablelist"><dl><dt></dt><dd><p> controls the algorithm used for the generating 3676 3710 the mangled names. Can take two different values, "hash" and 3677 3711 "hash2". "hash" is the algorithm that was used … … 3684 3718 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>mangling method</code></em> = <code class="literal">hash</code> 3685 3719 </em></span> 3686 </p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 694"></a>3720 </p></dd></dl></div></div><div class="section" title="map acl inherit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324746"></a> 3687 3721 3688 3722 map acl inherit (S) 3689 </h3></div></div></div><a class="indexterm" name="id324 695"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected'3723 </h3></div></div></div><a class="indexterm" name="id324747"></a><a name="MAPACLINHERIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map the 'inherit' and 'protected' 3690 3724 access control entry flags stored in Windows ACLs into an extended attribute 3691 3725 called user.SAMBA_PAI. This parameter only takes effect if Samba is being run … … 3695 3729 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map acl inherit</code></em> = <code class="literal">no</code> 3696 3730 </em></span> 3697 </p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3247 46"></a>3731 </p></dd></dl></div></div><div class="section" title="map archive (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324798"></a> 3698 3732 3699 3733 map archive (S) 3700 </h3></div></div></div><a class="indexterm" name="id3247 47"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p>3734 </h3></div></div></div><a class="indexterm" name="id324799"></a><a name="MAPARCHIVE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3701 3735 This controls whether the DOS archive attribute 3702 3736 should be mapped to the UNIX owner execute bit. The DOS archive bit … … 3711 3745 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map archive</code></em> = <code class="literal">yes</code> 3712 3746 </em></span> 3713 </p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3248 15"></a>3747 </p></dd></dl></div></div><div class="section" title="map hidden (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324867"></a> 3714 3748 3715 3749 map hidden (S) 3716 </h3></div></div></div><a class="indexterm" name="id3248 16"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p>3750 </h3></div></div></div><a class="indexterm" name="id324868"></a><a name="MAPHIDDEN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3717 3751 This controls whether DOS style hidden files should be mapped to the UNIX world execute bit. 3718 3752 </p><p> … … 3720 3754 bit is not masked out (i.e. it must include 001). See the parameter <a class="link" href="smb.conf.5.html#CREATEMASK" target="_top">create mask</a> 3721 3755 for details. 3722 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324 870"></a>3756 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="map readonly (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id324922"></a> 3723 3757 3724 3758 map readonly (S) 3725 </h3></div></div></div><a class="indexterm" name="id324 871"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>3759 </h3></div></div></div><a class="indexterm" name="id324923"></a><a name="MAPREADONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 3726 3760 This controls how the DOS read only attribute should be mapped from a UNIX filesystem. 3727 3761 </p><p> … … 3748 3782 </p></li></ul></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>map readonly</code></em> = <code class="literal">yes</code> 3749 3783 </em></span> 3750 </p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3250 12"></a>3784 </p></dd></dl></div></div><div class="section" title="map system (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325064"></a> 3751 3785 3752 3786 map system (S) 3753 </h3></div></div></div><a class="indexterm" name="id3250 13"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p>3787 </h3></div></div></div><a class="indexterm" name="id325065"></a><a name="MAPSYSTEM"></a><div class="variablelist"><dl><dt></dt><dd><p> 3754 3788 This controls whether DOS style system files should be mapped to the UNIX group execute bit. 3755 3789 </p><p> … … 3759 3793 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map system</code></em> = <code class="literal">no</code> 3760 3794 </em></span> 3761 </p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325 078"></a>3795 </p></dd></dl></div></div><div class="section" title="map to guest (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325130"></a> 3762 3796 3763 3797 map to guest (G) 3764 </h3></div></div></div><a class="indexterm" name="id325 079"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY =3798 </h3></div></div></div><a class="indexterm" name="id325131"></a><a name="MAPTOGUEST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only useful in <a class="link" href="smb.conf.5.html#SECURITY" target="_top">SECURITY = 3765 3799 security</a> modes other than <em class="parameter"><code>security = share</code></em> 3766 3800 and <em class="parameter"><code>security = server</code></em> … … 3804 3838 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>map to guest</code></em> = <code class="literal">Bad User</code> 3805 3839 </em></span> 3806 </p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325 294"></a>3840 </p></dd></dl></div></div><div class="section" title="map untrusted to domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325346"></a> 3807 3841 3808 3842 map untrusted to domain (G) 3809 </h3></div></div></div><a class="indexterm" name="id325 295"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>3843 </h3></div></div></div><a class="indexterm" name="id325347"></a><a name="MAPUNTRUSTEDTODOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 3810 3844 If a client connects to smbd using an untrusted domain name, such as 3811 3845 BOGUS\user, smbd replaces the BOGUS domain with it's SAM name before … … 3825 3859 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>map untrusted to domain</code></em> = <code class="literal">no</code> 3826 3860 </em></span> 3827 </p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325 352"></a>3861 </p></dd></dl></div></div><div class="section" title="max connections (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325404"></a> 3828 3862 3829 3863 max connections (S) 3830 </h3></div></div></div><a class="indexterm" name="id325 353"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited.3864 </h3></div></div></div><a class="indexterm" name="id325405"></a><a name="MAXCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the number of simultaneous connections to a service to be limited. 3831 3865 If <em class="parameter"><code>max connections</code></em> is greater than 0 then connections 3832 3866 will be refused if this number of connections to the service are already open. A value … … 3836 3870 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max connections</code></em> = <code class="literal">10</code> 3837 3871 </em></span> 3838 </p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3254 34"></a>3872 </p></dd></dl></div></div><div class="section" title="max disk size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325486"></a> 3839 3873 3840 3874 max disk size (G) 3841 </h3></div></div></div><a class="indexterm" name="id3254 35"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit3875 </h3></div></div></div><a class="indexterm" name="id325487"></a><a name="MAXDISKSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to put an upper limit 3842 3876 on the apparent size of disks. If you set this option to 100 3843 3877 then all shares will appear to be not larger than 100 MB in … … 3853 3887 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max disk size</code></em> = <code class="literal">1000</code> 3854 3888 </em></span> 3855 </p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3255 19"></a>3889 </p></dd></dl></div></div><div class="section" title="max log size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325571"></a> 3856 3890 3857 3891 max log size (G) 3858 </h3></div></div></div><a class="indexterm" name="id3255 20"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>3892 </h3></div></div></div><a class="indexterm" name="id325572"></a><a name="MAXLOGSIZE"></a><div class="variablelist"><dl><dt></dt><dd><p> 3859 3893 This option (an integer in kilobytes) specifies the max size the log file should grow to. 3860 3894 Samba periodically checks the size and if it is exceeded it will rename the file, adding … … 3865 3899 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max log size</code></em> = <code class="literal">1000</code> 3866 3900 </em></span> 3867 </p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325 587"></a>3901 </p></dd></dl></div></div><div class="section" title="max mux (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325639"></a> 3868 3902 3869 3903 max mux (G) 3870 </h3></div></div></div><a class="indexterm" name="id325 588"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of3904 </h3></div></div></div><a class="indexterm" name="id325640"></a><a name="MAXMUX"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of 3871 3905 outstanding simultaneous SMB operations that Samba tells the client 3872 3906 it will allow. You should never need to set this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max mux</code></em> = <code class="literal">50</code> 3873 3907 </em></span> 3874 </p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3256 29"></a>3908 </p></dd></dl></div></div><div class="section" title="max open files (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325681"></a> 3875 3909 3876 3910 max open files (G) 3877 </h3></div></div></div><a class="indexterm" name="id3256 30"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3911 </h3></div></div></div><a class="indexterm" name="id325682"></a><a name="MAXOPENFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3878 3912 open files that one <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> file 3879 3913 serving process may have open for a client at any one time. The … … 3886 3920 this parameter so you should never need to touch this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max open files</code></em> = <code class="literal">16404</code> 3887 3921 </em></span> 3888 </p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325 686"></a>3922 </p></dd></dl></div></div><div class="section" title="max print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325738"></a> 3889 3923 3890 3924 max print jobs (S) 3891 </h3></div></div></div><a class="indexterm" name="id325 687"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of3925 </h3></div></div></div><a class="indexterm" name="id325739"></a><a name="MAXPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of 3892 3926 jobs allowable in a Samba printer queue at any given moment. 3893 3927 If this number is exceeded, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will remote "Out of Space" to the client. … … 3896 3930 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max print jobs</code></em> = <code class="literal">5000</code> 3897 3931 </em></span> 3898 </p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325 754"></a>3932 </p></dd></dl></div></div><div class="section" title="protocol"><div class="titlepage"><div><div><h3 class="title"><a name="id325806"></a> 3899 3933 3900 3934 <a name="PROTOCOL"></a>protocol 3901 </h3></div></div></div><a class="indexterm" name="id325 755"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325786"></a>3935 </h3></div></div></div><a class="indexterm" name="id325807"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#MAXPROTOCOL">max protocol</a>.</p></dd></dl></div></div><div class="section" title="max protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id325838"></a> 3902 3936 3903 3937 max protocol (G) 3904 </h3></div></div></div><a class="indexterm" name="id325 787"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest3938 </h3></div></div></div><a class="indexterm" name="id325839"></a><a name="MAXPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the highest 3905 3939 protocol level that will be supported by the server.</p><p>Possible values are :</p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p><code class="constant">CORE</code>: Earliest version. No 3906 3940 concept of user names.</p></li><li class="listitem"><p><code class="constant">COREPLUS</code>: Slight improvements on … … 3916 3950 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max protocol</code></em> = <code class="literal">LANMAN1</code> 3917 3951 </em></span> 3918 </p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3259 15"></a>3952 </p></dd></dl></div></div><div class="section" title="max reported print jobs (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id325967"></a> 3919 3953 3920 3954 max reported print jobs (S) 3921 </h3></div></div></div><a class="indexterm" name="id3259 16"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p>3955 </h3></div></div></div><a class="indexterm" name="id325968"></a><a name="MAXREPORTEDPRINTJOBS"></a><div class="variablelist"><dl><dt></dt><dd><p> 3922 3956 This parameter limits the maximum number of jobs displayed in a port monitor for 3923 3957 Samba printer queue at any given moment. If this number is exceeded, the excess … … 3928 3962 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max reported print jobs</code></em> = <code class="literal">1000</code> 3929 3963 </em></span> 3930 </p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32 5974"></a>3964 </p></dd></dl></div></div><div class="section" title="max smbd processes (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326026"></a> 3931 3965 3932 3966 max smbd processes (G) 3933 </h3></div></div></div><a class="indexterm" name="id32 5975"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended3967 </h3></div></div></div><a class="indexterm" name="id326027"></a><a name="MAXSMBDPROCESSES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the maximum number of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> processes concurrently running on a system and is intended 3934 3968 as a stopgap to prevent degrading service to clients in the event that the server has insufficient 3935 3969 resources to handle more than this number of connections. Remember that under normal operating … … 3939 3973 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max smbd processes</code></em> = <code class="literal">1000</code> 3940 3974 </em></span> 3941 </p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 051"></a>3975 </p></dd></dl></div></div><div class="section" title="max stat cache size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326103"></a> 3942 3976 3943 3977 max stat cache size (G) 3944 </h3></div></div></div><a class="indexterm" name="id326 052"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any3978 </h3></div></div></div><a class="indexterm" name="id326104"></a><a name="MAXSTATCACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter limits the size in memory of any 3945 3979 <em class="parameter"><code>stat cache</code></em> being used 3946 3980 to speed up case insensitive name mappings. It represents … … 3953 3987 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max stat cache size</code></em> = <code class="literal">100</code> 3954 3988 </em></span> 3955 </p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3261 17"></a>3989 </p></dd></dl></div></div><div class="section" title="max ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326169"></a> 3956 3990 3957 3991 max ttl (G) 3958 </h3></div></div></div><a class="indexterm" name="id3261 18"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live'3992 </h3></div></div></div><a class="indexterm" name="id326170"></a><a name="MAXTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> what the default 'time to live' 3959 3993 of NetBIOS names should be (in seconds) when <code class="literal">nmbd</code> is 3960 3994 requesting a name using either a broadcast packet or from a WINS server. You should 3961 3995 never need to change this parameter. The default is 3 days.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max ttl</code></em> = <code class="literal">259200</code> 3962 3996 </em></span> 3963 </p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 174"></a>3997 </p></dd></dl></div></div><div class="section" title="max wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326226"></a> 3964 3998 3965 3999 max wins ttl (G) 3966 </h3></div></div></div><a class="indexterm" name="id326 175"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server4000 </h3></div></div></div><a class="indexterm" name="id326227"></a><a name="MAXWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when acting as a WINS server 3967 4001 (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the maximum 3968 4002 'time to live' of NetBIOS names that <code class="literal">nmbd</code> … … 3970 4004 parameter. The default is 6 days (518400 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>max wins ttl</code></em> = <code class="literal">518400</code> 3971 4005 </em></span> 3972 </p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3262 43"></a>4006 </p></dd></dl></div></div><div class="section" title="max xmit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326295"></a> 3973 4007 3974 4008 max xmit (G) 3975 </h3></div></div></div><a class="indexterm" name="id3262 44"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size4009 </h3></div></div></div><a class="indexterm" name="id326296"></a><a name="MAXXMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum packet size 3976 4010 that will be negotiated by Samba. The default is 16644, which 3977 4011 matches the behavior of Windows 2000. A value below 2048 is likely to cause problems. … … 3981 4015 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>max xmit</code></em> = <code class="literal">8192</code> 3982 4016 </em></span> 3983 </p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3263 03"></a>4017 </p></dd></dl></div></div><div class="section" title="message command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326354"></a> 3984 4018 3985 4019 message command (G) 3986 </h3></div></div></div><a class="indexterm" name="id3263 04"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the4020 </h3></div></div></div><a class="indexterm" name="id326355"></a><a name="MESSAGECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies what command to run when the 3987 4021 server receives a WinPopup style message.</p><p>This would normally be a command that would 3988 4022 deliver the message somehow. How this is to be done is … … 4023 4057 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>message command</code></em> = <code class="literal">csh -c 'xedit %s; rm %s' &</code> 4024 4058 </em></span> 4025 </p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 495"></a>4059 </p></dd></dl></div></div><div class="section" title="min print space (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326547"></a> 4026 4060 4027 4061 min print space (S) 4028 </h3></div></div></div><a class="indexterm" name="id326 496"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk4062 </h3></div></div></div><a class="indexterm" name="id326548"></a><a name="MINPRINTSPACE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the minimum amount of free disk 4029 4063 space that must be available before a user will be able to spool 4030 4064 a print job. It is specified in kilobytes. The default is 0, which … … 4033 4067 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min print space</code></em> = <code class="literal">2000</code> 4034 4068 </em></span> 4035 </p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 554"></a>4069 </p></dd></dl></div></div><div class="section" title="min protocol (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326606"></a> 4036 4070 4037 4071 min protocol (G) 4038 </h3></div></div></div><a class="indexterm" name="id326 556"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the4072 </h3></div></div></div><a class="indexterm" name="id326607"></a><a name="MINPROTOCOL"></a><div class="variablelist"><dl><dt></dt><dd><p>The value of the parameter (a string) is the 4039 4073 lowest SMB protocol dialect than Samba will support. Please refer 4040 4074 to the <a class="link" href="smb.conf.5.html#MAXPROTOCOL" target="_top">max protocol</a> … … 4048 4082 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>min protocol</code></em> = <code class="literal">NT1</code> 4049 4083 </em></span> 4050 </p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3266 47"></a>4084 </p></dd></dl></div></div><div class="section" title="min receivefile size (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326699"></a> 4051 4085 4052 4086 min receivefile size (G) 4053 </h3></div></div></div><a class="indexterm" name="id326 648"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming4087 </h3></div></div></div><a class="indexterm" name="id326700"></a><a name="MINRECEIVEFILESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option changes the behavior of <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> when processing SMBwriteX calls. Any incoming 4054 4088 SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will 4055 4089 be passed to any underlying kernel recvfile or splice system call (if there is no such … … 4060 4094 nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</p><p>Note this option will have NO EFFECT if set on a SMB signed connection.</p><p>The default is zero, which diables this option.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min receivefile size</code></em> = <code class="literal">0</code> 4061 4095 </em></span> 4062 </p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3267 09"></a>4096 </p></dd></dl></div></div><div class="section" title="min wins ttl (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326761"></a> 4063 4097 4064 4098 min wins ttl (G) 4065 </h3></div></div></div><a class="indexterm" name="id3267 10"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>4099 </h3></div></div></div><a class="indexterm" name="id326762"></a><a name="MINWINSTTL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option tells <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> 4066 4100 when acting as a WINS server (<a class="link" href="smb.conf.5.html#WINSSUPPORT" target="_top">wins support = yes</a>) what the minimum 'time to live' 4067 4101 of NetBIOS names that <code class="literal">nmbd</code> will grant will be (in … … 4069 4103 is 6 hours (21600 seconds).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>min wins ttl</code></em> = <code class="literal">21600</code> 4070 4104 </em></span> 4071 </p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 776"></a>4105 </p></dd></dl></div></div><div class="section" title="msdfs proxy (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326828"></a> 4072 4106 4073 4107 msdfs proxy (S) 4074 </h3></div></div></div><a class="indexterm" name="id326 777"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a4108 </h3></div></div></div><a class="indexterm" name="id326829"></a><a name="MSDFSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter indicates that the share is a 4075 4109 stand-in for another CIFS share whose location is specified by 4076 4110 the value of the parameter. When clients attempt to connect to … … 4080 4114 options to find out how to set up a Dfs root share.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>msdfs proxy</code></em> = <code class="literal">\otherserver\someshare</code> 4081 4115 </em></span> 4082 </p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326 849"></a>4116 </p></dd></dl></div></div><div class="section" title="msdfs root (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id326901"></a> 4083 4117 4084 4118 msdfs root (S) 4085 </h3></div></div></div><a class="indexterm" name="id326 850"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the4119 </h3></div></div></div><a class="indexterm" name="id326902"></a><a name="MSDFSROOT"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to <code class="constant">yes</code>, Samba treats the 4086 4120 share as a Dfs root and allows clients to browse the 4087 4121 distributed file system tree rooted at the share directory. … … 4091 4125 Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>msdfs root</code></em> = <code class="literal">no</code> 4092 4126 </em></span> 4093 </p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326902"></a> 4127 </p></dd></dl></div></div><div class="section" title="multicast dns register (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id326954"></a> 4128 4129 multicast dns register (G) 4130 </h3></div></div></div><a class="indexterm" name="id326955"></a><a name="MULTICASTDNSREGISTER"></a><div class="variablelist"><dl><dt></dt><dd><p>If compiled with proper support for it, Samba will 4131 announce itself with multicast DNS services like for example 4132 provided by the Avahi daemon.</p><p>This parameter allows disabling Samba to register 4133 itself.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>multicast dns register</code></em> = <code class="literal">yes</code> 4134 </em></span> 4135 </p></dd></dl></div></div><div class="section" title="name cache timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327000"></a> 4094 4136 4095 4137 name cache timeout (G) 4096 </h3></div></div></div><a class="indexterm" name="id32 6903"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before4138 </h3></div></div></div><a class="indexterm" name="id327001"></a><a name="NAMECACHETIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the number of seconds it takes before 4097 4139 entries in samba's hostname resolve cache time out. If 4098 4140 the timeout is set to 0. the caching is disabled. … … 4101 4143 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name cache timeout</code></em> = <code class="literal">0</code> 4102 4144 </em></span> 4103 </p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32 6961"></a>4145 </p></dd></dl></div></div><div class="section" title="name resolve order (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327059"></a> 4104 4146 4105 4147 name resolve order (G) 4106 </h3></div></div></div><a class="indexterm" name="id32 6962"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba4148 </h3></div></div></div><a class="indexterm" name="id327060"></a><a name="NAMERESOLVEORDER"></a><div class="variablelist"><dl><dt></dt><dd><p>This option is used by the programs in the Samba 4107 4149 suite to determine what naming services to use and in what order 4108 4150 to resolve host names to IP addresses. Its main purpose to is to … … 4135 4177 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>name resolve order</code></em> = <code class="literal">lmhosts bcast host</code> 4136 4178 </em></span> 4137 </p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 146"></a>4179 </p></dd></dl></div></div><div class="section" title="netbios aliases (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327241"></a> 4138 4180 4139 4181 netbios aliases (G) 4140 </h3></div></div></div><a class="indexterm" name="id327 147"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will4182 </h3></div></div></div><a class="indexterm" name="id327242"></a><a name="NETBIOSALIASES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of NetBIOS names that nmbd will 4141 4183 advertise as additional names by which the Samba server is known. This allows one machine 4142 4184 to appear in browse lists under multiple names. If a machine is acting as a browse server … … 4148 4190 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios aliases</code></em> = <code class="literal">TEST TEST1 TEST2</code> 4149 4191 </em></span> 4150 </p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 207"></a>4192 </p></dd></dl></div></div><div class="section" title="netbios name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327303"></a> 4151 4193 4152 4194 netbios name (G) 4153 </h3></div></div></div><a class="indexterm" name="id327 208"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4195 </h3></div></div></div><a class="indexterm" name="id327304"></a><a name="NETBIOSNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4154 4196 This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component 4155 4197 of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of … … 4164 4206 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>netbios name</code></em> = <code class="literal">MYNAME</code> 4165 4207 </em></span> 4166 </p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 284"></a>4208 </p></dd></dl></div></div><div class="section" title="netbios scope (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327379"></a> 4167 4209 4168 4210 netbios scope (G) 4169 </h3></div></div></div><a class="indexterm" name="id327 285"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will4211 </h3></div></div></div><a class="indexterm" name="id327380"></a><a name="NETBIOSSCOPE"></a><div class="variablelist"><dl><dt></dt><dd><p>This sets the NetBIOS scope that Samba will 4170 4212 operate under. This should not be set unless every machine 4171 4213 on your LAN also sets this value.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>netbios scope</code></em> = <code class="literal"></code> 4172 4214 </em></span> 4173 </p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 324"></a>4215 </p></dd></dl></div></div><div class="section" title="nis homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327420"></a> 4174 4216 4175 4217 nis homedir (G) 4176 </h3></div></div></div><a class="indexterm" name="id327 326"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For4218 </h3></div></div></div><a class="indexterm" name="id327421"></a><a name="NISHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>Get the home share server from a NIS map. For 4177 4219 UNIX systems that use an automounter, the user's home directory 4178 4220 will often be mounted on a workstation on demand from a remote … … 4193 4235 be a logon server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nis homedir</code></em> = <code class="literal">no</code> 4194 4236 </em></span> 4195 </p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 395"></a>4237 </p></dd></dl></div></div><div class="section" title="nmbd bind explicit broadcast (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327490"></a> 4196 4238 4197 4239 nmbd bind explicit broadcast (G) 4198 </h3></div></div></div><a class="indexterm" name="id327 396"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p>4240 </h3></div></div></div><a class="indexterm" name="id327492"></a><a name="NMBDBINDEXPLICITBROADCAST"></a><div class="variablelist"><dl><dt></dt><dd><p> 4199 4241 This option causes <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to explicitly bind to the 4200 4242 broadcast address of the local subnets. This is needed to make nmbd … … 4203 4245 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nmbd bind explicit broadcast</code></em> = <code class="literal">yes</code> 4204 4246 </em></span> 4205 </p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 457"></a>4247 </p></dd></dl></div></div><div class="section" title="nt acl support (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327553"></a> 4206 4248 4207 4249 nt acl support (S) 4208 </h3></div></div></div><a class="indexterm" name="id327 458"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map4250 </h3></div></div></div><a class="indexterm" name="id327554"></a><a name="NTACLSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to map 4209 4251 UNIX permissions into Windows NT access control lists. The UNIX 4210 4252 permissions considered are the the traditional UNIX owner and … … 4213 4255 releases prior to 2.2.2.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt acl support</code></em> = <code class="literal">yes</code> 4214 4256 </em></span> 4215 </p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 509"></a>4257 </p></dd></dl></div></div><div class="section" title="ntlm auth (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327605"></a> 4216 4258 4217 4259 ntlm auth (G) 4218 </h3></div></div></div><a class="indexterm" name="id327 510"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to4260 </h3></div></div></div><a class="indexterm" name="id327606"></a><a name="NTLMAUTH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will attempt to 4219 4261 authenticate users using the NTLM encrypted password response. 4220 4262 If disabled, either the lanman password hash or an NTLMv2 response … … 4224 4266 special configuration to use it.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>ntlm auth</code></em> = <code class="literal">yes</code> 4225 4267 </em></span> 4226 </p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 569"></a>4268 </p></dd></dl></div></div><div class="section" title="nt pipe support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327665"></a> 4227 4269 4228 4270 nt pipe support (G) 4229 </h3></div></div></div><a class="indexterm" name="id327 570"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether4271 </h3></div></div></div><a class="indexterm" name="id327666"></a><a name="NTPIPESUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether 4230 4272 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will allow Windows NT 4231 4273 clients to connect to the NT SMB specific <code class="constant">IPC$</code> … … 4233 4275 alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt pipe support</code></em> = <code class="literal">yes</code> 4234 4276 </em></span> 4235 </p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 622"></a>4277 </p></dd></dl></div></div><div class="section" title="nt status support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327718"></a> 4236 4278 4237 4279 nt status support (G) 4238 </h3></div></div></div><a class="indexterm" name="id327 624"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status4280 </h3></div></div></div><a class="indexterm" name="id327719"></a><a name="NTSTATUSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will negotiate NT specific status 4239 4281 support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. 4240 4282 If this option is set to <code class="constant">no</code> then Samba offers … … 4242 4284 reported.</p><p>You should not need to ever disable this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>nt status support</code></em> = <code class="literal">yes</code> 4243 4285 </em></span> 4244 </p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 681"></a>4286 </p></dd></dl></div></div><div class="section" title="null passwords (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327776"></a> 4245 4287 4246 4288 null passwords (G) 4247 </h3></div></div></div><a class="indexterm" name="id327 682"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code>4248 </em></span> 4249 </p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 733"></a>4289 </h3></div></div></div><a class="indexterm" name="id327777"></a><a name="NULLPASSWORDS"></a><div class="variablelist"><dl><dt></dt><dd><p>Allow or disallow client access to accounts that have null passwords. </p><p>See also <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>null passwords</code></em> = <code class="literal">no</code> 4290 </em></span> 4291 </p></dd></dl></div></div><div class="section" title="obey pam restrictions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327828"></a> 4250 4292 4251 4293 obey pam restrictions (G) 4252 </h3></div></div></div><a class="indexterm" name="id327 734"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support4294 </h3></div></div></div><a class="indexterm" name="id327829"></a><a name="OBEYPAMRESTRICTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba 3.0 is configured to enable PAM support 4253 4295 (i.e. --with-pam), this parameter will control whether or not Samba 4254 4296 should obey PAM's account and session management directives. The … … 4260 4302 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>obey pam restrictions</code></em> = <code class="literal">no</code> 4261 4303 </em></span> 4262 </p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 790"></a>4304 </p></dd></dl></div></div><div class="section" title="only user (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id327885"></a> 4263 4305 4264 4306 only user (S) 4265 </h3></div></div></div><a class="indexterm" name="id327 791"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether4307 </h3></div></div></div><a class="indexterm" name="id327886"></a><a name="ONLYUSER"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean option that controls whether 4266 4308 connections with usernames not in the <em class="parameter"><code>user</code></em> 4267 4309 list will be allowed. By default this option is disabled so that a … … 4276 4318 name of the user.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>only user</code></em> = <code class="literal">no</code> 4277 4319 </em></span> 4278 </p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327 873"></a>4320 </p></dd></dl></div></div><div class="section" title="oplock break wait time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id327968"></a> 4279 4321 4280 4322 oplock break wait time (G) 4281 </h3></div></div></div><a class="indexterm" name="id327 874"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p>4323 </h3></div></div></div><a class="indexterm" name="id327969"></a><a name="OPLOCKBREAKWAITTIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4282 4324 This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too 4283 4325 quickly when that client issues an SMB that can cause an oplock break request, then the network client can … … 4288 4330 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock break wait time</code></em> = <code class="literal">0</code> 4289 4331 </em></span> 4290 </p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id32 7922"></a>4332 </p></dd></dl></div></div><div class="section" title="oplock contention limit (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328017"></a> 4291 4333 4292 4334 oplock contention limit (S) 4293 </h3></div></div></div><a class="indexterm" name="id32 7923"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4335 </h3></div></div></div><a class="indexterm" name="id328018"></a><a name="OPLOCKCONTENTIONLIMIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4294 4336 This is a <span class="emphasis"><em>very</em></span> advanced <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> tuning option to improve the efficiency of the 4295 4337 granting of oplocks under multiple client contention for the same file. … … 4303 4345 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplock contention limit</code></em> = <code class="literal">2</code> 4304 4346 </em></span> 4305 </p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3280 00"></a>4347 </p></dd></dl></div></div><div class="section" title="oplocks (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id328095"></a> 4306 4348 4307 4349 oplocks (S) 4308 </h3></div></div></div><a class="indexterm" name="id3280 01"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p>4350 </h3></div></div></div><a class="indexterm" name="id328096"></a><a name="OPLOCKS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4309 4351 This boolean option tells <code class="literal">smbd</code> whether to 4310 4352 issue oplocks (opportunistic locks) to file open requests on this … … 4323 4365 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>oplocks</code></em> = <code class="literal">yes</code> 4324 4366 </em></span> 4325 </p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 077"></a>4367 </p></dd></dl></div></div><div class="section" title="os2 driver map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328172"></a> 4326 4368 4327 4369 os2 driver map (G) 4328 </h3></div></div></div><a class="indexterm" name="id328 078"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute4370 </h3></div></div></div><a class="indexterm" name="id328173"></a><a name="OS2DRIVERMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>The parameter is used to define the absolute 4329 4371 path to a file containing a mapping of Windows NT printer driver 4330 4372 names to OS/2 printer driver names. The format is:</p><p><nt driver name> = <os2 driver name>.<device name></p><p>For example, a valid entry using the HP LaserJet 5 … … 4336 4378 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>os2 driver map</code></em> = <code class="literal"></code> 4337 4379 </em></span> 4338 </p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 137"></a>4380 </p></dd></dl></div></div><div class="section" title="os level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328232"></a> 4339 4381 4340 4382 os level (G) 4341 </h3></div></div></div><a class="indexterm" name="id328 138"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>4383 </h3></div></div></div><a class="indexterm" name="id328233"></a><a name="OSLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 4342 4384 This integer value controls what level Samba advertises itself as for browse elections. The value of this 4343 4385 parameter determines whether <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> has a chance of becoming a local master browser for the <a class="link" href="smb.conf.5.html#WORKGROUP" target="_top">workgroup</a> in the local broadcast area. … … 4355 4397 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>os level</code></em> = <code class="literal">65</code> 4356 4398 </em></span> 4357 </p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 235"></a>4399 </p></dd></dl></div></div><div class="section" title="pam password change (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328326"></a> 4358 4400 4359 4401 pam password change (G) 4360 </h3></div></div></div><a class="indexterm" name="id328 236"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2,4402 </h3></div></div></div><a class="indexterm" name="id328327"></a><a name="PAMPASSWORDCHANGE"></a><div class="variablelist"><dl><dt></dt><dd><p>With the addition of better PAM support in Samba 2.2, 4361 4403 this parameter, it is possible to use PAM's password change control 4362 4404 flag for Samba. If enabled, then PAM will be used for password … … 4366 4408 <a class="link" href="smb.conf.5.html#PASSWDCHAT" target="_top">passwd chat</a> parameter for most setups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pam password change</code></em> = <code class="literal">no</code> 4367 4409 </em></span> 4368 </p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3283 02"></a>4410 </p></dd></dl></div></div><div class="section" title="panic action (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328393"></a> 4369 4411 4370 4412 panic action (G) 4371 </h3></div></div></div><a class="indexterm" name="id3283 03"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a4413 </h3></div></div></div><a class="indexterm" name="id328394"></a><a name="PANICACTION"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a Samba developer option that allows a 4372 4414 system command to be called when either <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> or <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> crashes. This is usually used to 4373 4415 draw attention to the fact that a problem occurred. … … 4376 4418 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>panic action</code></em> = <code class="literal">"/bin/sleep 90000"</code> 4377 4419 </em></span> 4378 </p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 376"></a>4420 </p></dd></dl></div></div><div class="section" title="paranoid server security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328467"></a> 4379 4421 4380 4422 paranoid server security (G) 4381 </h3></div></div></div><a class="indexterm" name="id328 377"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest4423 </h3></div></div></div><a class="indexterm" name="id328468"></a><a name="PARANOIDSERVERSECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>Some version of NT 4.x allow non-guest 4382 4424 users with a bad passowrd. When this option is enabled, samba will not 4383 4425 use a broken NT 4.x server as password server, but instead complain … … 4387 4429 bad logon to the remote server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>paranoid server security</code></em> = <code class="literal">yes</code> 4388 4430 </em></span> 4389 </p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 424"></a>4431 </p></dd></dl></div></div><div class="section" title="passdb backend (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328515"></a> 4390 4432 4391 4433 passdb backend (G) 4392 </h3></div></div></div><a class="indexterm" name="id328 425"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend4434 </h3></div></div></div><a class="indexterm" name="id328516"></a><a name="PASSDBBACKEND"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows the administrator to chose which backend 4393 4435 will be used for storing user and possibly group information. This allows 4394 4436 you to swap between different storage mechanisms without recompile. </p><p>The parameter value is divided into two parts, the backend's name, and a 'location' … … 4425 4467 </pre><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb backend</code></em> = <code class="literal">tdbsam</code> 4426 4468 </em></span> 4427 </p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 568"></a>4469 </p></dd></dl></div></div><div class="section" title="passdb expand explicit (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328658"></a> 4428 4470 4429 4471 passdb expand explicit (G) 4430 </h3></div></div></div><a class="indexterm" name="id328 569"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p>4472 </h3></div></div></div><a class="indexterm" name="id328659"></a><a name="PASSDBEXPANDEXPLICIT"></a><div class="variablelist"><dl><dt></dt><dd><p> 4431 4473 This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We 4432 4474 used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable … … 4434 4476 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passdb expand explicit</code></em> = <code class="literal">no</code> 4435 4477 </em></span> 4436 </p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 610"></a>4478 </p></dd></dl></div></div><div class="section" title="passwd chat debug (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328701"></a> 4437 4479 4438 4480 passwd chat debug (G) 4439 </h3></div></div></div><a class="indexterm" name="id328 611"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script4481 </h3></div></div></div><a class="indexterm" name="id328702"></a><a name="PASSWDCHATDEBUG"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean specifies if the passwd chat script 4440 4482 parameter is run in <span class="emphasis"><em>debug</em></span> mode. In this mode the 4441 4483 strings passed to and received from the passwd chat are printed … … 4450 4492 parameter is set. This parameter is off by default.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat debug</code></em> = <code class="literal">no</code> 4451 4493 </em></span> 4452 </p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3287 07"></a>4494 </p></dd></dl></div></div><div class="section" title="passwd chat timeout (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328798"></a> 4453 4495 4454 4496 passwd chat timeout (G) 4455 </h3></div></div></div><a class="indexterm" name="id3287 08"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial4497 </h3></div></div></div><a class="indexterm" name="id328799"></a><a name="PASSWDCHATTIMEOUT"></a><div class="variablelist"><dl><dt></dt><dd><p>This integer specifies the number of seconds smbd will wait for an initial 4456 4498 answer from a passwd chat script being run. Once the initial answer is received 4457 4499 the subsequent answers must be received in one tenth of this time. The default it 4458 4500 two seconds.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>passwd chat timeout</code></em> = <code class="literal">2</code> 4459 4501 </em></span> 4460 </p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328 750"></a>4502 </p></dd></dl></div></div><div class="section" title="passwd chat (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id328840"></a> 4461 4503 4462 4504 passwd chat (G) 4463 </h3></div></div></div><a class="indexterm" name="id328 751"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span>4505 </h3></div></div></div><a class="indexterm" name="id328841"></a><a name="PASSWDCHAT"></a><div class="variablelist"><dl><dt></dt><dd><p>This string controls the <span class="emphasis"><em>"chat"</em></span> 4464 4506 conversation that takes places between <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> and the local password changing 4465 4507 program to change the user's password. The string describes a … … 4492 4534 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd chat</code></em> = <code class="literal">"*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"</code> 4493 4535 </em></span> 4494 </p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id32 8933"></a>4536 </p></dd></dl></div></div><div class="section" title="passwd program (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329024"></a> 4495 4537 4496 4538 passwd program (G) 4497 </h3></div></div></div><a class="indexterm" name="id32 8934"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set4539 </h3></div></div></div><a class="indexterm" name="id329025"></a><a name="PASSWDPROGRAM"></a><div class="variablelist"><dl><dt></dt><dd><p>The name of a program that can be used to set 4498 4540 UNIX user passwords. Any occurrences of <em class="parameter"><code>%u</code></em> 4499 4541 will be replaced with the user name. The user name is checked for … … 4516 4558 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>passwd program</code></em> = <code class="literal">/bin/passwd %u</code> 4517 4559 </em></span> 4518 </p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 059"></a>4560 </p></dd></dl></div></div><div class="section" title="password level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329150"></a> 4519 4561 4520 4562 password level (G) 4521 </h3></div></div></div><a class="indexterm" name="id329 060"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty4563 </h3></div></div></div><a class="indexterm" name="id329151"></a><a name="PASSWORDLEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Some client/server combinations have difficulty 4522 4564 with mixed-case passwords. One offending client is Windows for 4523 4565 Workgroups, which for some reason forces passwords to upper … … 4541 4583 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password level</code></em> = <code class="literal">4</code> 4542 4584 </em></span> 4543 </p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 182"></a>4585 </p></dd></dl></div></div><div class="section" title="password server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329273"></a> 4544 4586 4545 4587 password server (G) 4546 </h3></div></div></div><a class="indexterm" name="id329 183"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server4588 </h3></div></div></div><a class="indexterm" name="id329274"></a><a name="PASSWORDSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>By specifying the name of another SMB server 4547 4589 or Active Directory domain controller with this option, 4548 4590 and using <code class="literal">security = [ads|domain|server]</code> … … 4604 4646 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>password server</code></em> = <code class="literal">windc.mydomain.com:389 192.168.1.101 *</code> 4605 4647 </em></span> 4606 </p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329 447"></a>4648 </p></dd></dl></div></div><div class="section" title="directory"><div class="titlepage"><div><div><h3 class="title"><a name="id329538"></a> 4607 4649 4608 4650 <a name="DIRECTORY"></a>directory 4609 </h3></div></div></div><a class="indexterm" name="id329 448"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329478"></a>4651 </h3></div></div></div><a class="indexterm" name="id329539"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PATH">path</a>.</p></dd></dl></div></div><div class="section" title="path (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329568"></a> 4610 4652 4611 4653 path (S) 4612 </h3></div></div></div><a class="indexterm" name="id329 479"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which4654 </h3></div></div></div><a class="indexterm" name="id329570"></a><a name="PATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a directory to which 4613 4655 the user of the service is to be given access. In the case of 4614 4656 printable services, this is where print data will spool prior to … … 4627 4669 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>path</code></em> = <code class="literal">/home/fred</code> 4628 4670 </em></span> 4629 </p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 575"></a>4671 </p></dd></dl></div></div><div class="section" title="perfcount module (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329666"></a> 4630 4672 4631 4673 perfcount module (G) 4632 </h3></div></div></div><a class="indexterm" name="id329 576"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB4674 </h3></div></div></div><a class="indexterm" name="id329667"></a><a name="PERFCOUNTMODULE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the perfcount backend to be used when monitoring SMB 4633 4675 operations. Only one perfcount module may be used, and it must implement all of the 4634 4676 apis contained in the smb_perfcount_handler structure defined in smb.h. 4635 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3296 06"></a>4677 </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="pid directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id329696"></a> 4636 4678 4637 4679 pid directory (G) 4638 </h3></div></div></div><a class="indexterm" name="id3296 07"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>4680 </h3></div></div></div><a class="indexterm" name="id329697"></a><a name="PIDDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 4639 4681 This option specifies the directory where pid files will be placed. 4640 4682 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">${prefix}/var/locks</code> … … 4642 4684 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>pid directory</code></em> = <code class="literal">pid directory = /var/run/</code> 4643 4685 </em></span> 4644 </p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 663"></a>4686 </p></dd></dl></div></div><div class="section" title="posix locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329754"></a> 4645 4687 4646 4688 posix locking (S) 4647 </h3></div></div></div><a class="indexterm" name="id329 664"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>4689 </h3></div></div></div><a class="indexterm" name="id329755"></a><a name="POSIXLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 4648 4690 The <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> 4649 4691 daemon maintains an database of file locks obtained by SMB clients. The default behavior is 4650 4692 to map this internal database to POSIX locks. This means that file locks obtained by SMB clients are 4651 4693 consistent with those seen by POSIX compliant applications accessing the files via a non-SMB 4652 method (e.g. NFS or local file access). You should never need to disable this parameter. 4694 method (e.g. NFS or local file access). It is very unlikely that you need to set this parameter 4695 to "no", unless you are sharing from an NFS mount, which is not a good idea in the first place. 4653 4696 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>posix locking</code></em> = <code class="literal">yes</code> 4654 4697 </em></span> 4655 </p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 715"></a>4698 </p></dd></dl></div></div><div class="section" title="postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329806"></a> 4656 4699 4657 4700 postexec (S) 4658 </h3></div></div></div><a class="indexterm" name="id329 716"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run4701 </h3></div></div></div><a class="indexterm" name="id329807"></a><a name="POSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run 4659 4702 whenever the service is disconnected. It takes the usual 4660 4703 substitutions. The command may be run as the root on some … … 4664 4707 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>postexec</code></em> = <code class="literal">echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log</code> 4665 4708 </em></span> 4666 </p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329 784"></a>4709 </p></dd></dl></div></div><div class="section" title="preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329876"></a> 4667 4710 4668 4711 preexec close (S) 4669 </h3></div></div></div><a class="indexterm" name="id329 785"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>4712 </h3></div></div></div><a class="indexterm" name="id329877"></a><a name="PREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4670 4713 This boolean option controls whether a non-zero return code from <a class="link" href="smb.conf.5.html#PREEXEC" target="_top">preexec</a> 4671 4714 should close the service being connected to. 4672 4715 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preexec close</code></em> = <code class="literal">no</code> 4673 4716 </em></span> 4674 </p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329 837"></a>4717 </p></dd></dl></div></div><div class="section" title="exec"><div class="titlepage"><div><div><h3 class="title"><a name="id329929"></a> 4675 4718 4676 4719 <a name="EXEC"></a>exec 4677 </h3></div></div></div><a class="indexterm" name="id329 838"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329868"></a>4720 </h3></div></div></div><a class="indexterm" name="id329930"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREEXEC">preexec</a>.</p></dd></dl></div></div><div class="section" title="preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id329960"></a> 4678 4721 4679 4722 preexec (S) 4680 </h3></div></div></div><a class="indexterm" name="id329 869"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever4723 </h3></div></div></div><a class="indexterm" name="id329961"></a><a name="PREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies a command to be run whenever 4681 4724 the service is connected to. It takes the usual substitutions.</p><p>An interesting example is to send the users a welcome 4682 4725 message every time they log in. Maybe a message of the day? Here … … 4690 4733 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preexec</code></em> = <code class="literal">echo \"%u connected to %S from %m (%I)\" >> /tmp/log</code> 4691 4734 </em></span> 4692 </p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id3 29970"></a>4735 </p></dd></dl></div></div><div class="section" title="prefered master"><div class="titlepage"><div><div><h3 class="title"><a name="id330061"></a> 4693 4736 4694 4737 <a name="PREFEREDMASTER"></a>prefered master 4695 </h3></div></div></div><a class="indexterm" name="id3 29971"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330002"></a>4738 </h3></div></div></div><a class="indexterm" name="id330062"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PREFERREDMASTER">preferred master</a>.</p></dd></dl></div></div><div class="section" title="preferred master (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330093"></a> 4696 4739 4697 4740 preferred master (G) 4698 </h3></div></div></div><a class="indexterm" name="id3300 03"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p>4741 </h3></div></div></div><a class="indexterm" name="id330094"></a><a name="PREFERREDMASTER"></a><div class="variablelist"><dl><dt></dt><dd><p> 4699 4742 This boolean parameter controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> is a preferred master browser for its workgroup. 4700 4743 </p><p> … … 4710 4753 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preferred master</code></em> = <code class="literal">auto</code> 4711 4754 </em></span> 4712 </p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330 088"></a>4755 </p></dd></dl></div></div><div class="section" title="preload modules (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330180"></a> 4713 4756 4714 4757 preload modules (G) 4715 </h3></div></div></div><a class="indexterm" name="id330 089"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should4758 </h3></div></div></div><a class="indexterm" name="id330181"></a><a name="PRELOADMODULES"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of paths to modules that should 4716 4759 be loaded into smbd before a client connects. This improves 4717 4760 the speed of smbd when reacting to new connections somewhat. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal"></code> … … 4719 4762 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload modules</code></em> = <code class="literal">/usr/lib/samba/passdb/mysql.so</code> 4720 4763 </em></span> 4721 </p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330 146"></a>4764 </p></dd></dl></div></div><div class="section" title="auto services"><div class="titlepage"><div><div><h3 class="title"><a name="id330238"></a> 4722 4765 4723 4766 <a name="AUTOSERVICES"></a>auto services 4724 </h3></div></div></div><a class="indexterm" name="id330 148"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330178"></a>4767 </h3></div></div></div><a class="indexterm" name="id330239"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRELOAD">preload</a>.</p></dd></dl></div></div><div class="section" title="preload (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330270"></a> 4725 4768 4726 4769 preload (G) 4727 </h3></div></div></div><a class="indexterm" name="id330 179"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be4770 </h3></div></div></div><a class="indexterm" name="id330271"></a><a name="PRELOAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a list of services that you want to be 4728 4771 automatically added to the browse lists. This is most useful 4729 4772 for homes and printers services that would otherwise not be … … 4736 4779 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>preload</code></em> = <code class="literal">fred lp colorlp</code> 4737 4780 </em></span> 4738 </p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330 252"></a>4781 </p></dd></dl></div></div><div class="section" title="preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330343"></a> 4739 4782 4740 4783 preserve case (S) 4741 </h3></div></div></div><a class="indexterm" name="id330 253"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>4784 </h3></div></div></div><a class="indexterm" name="id330344"></a><a name="PRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 4742 4785 This controls if new filenames are created with the case that the client passes, or if 4743 4786 they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 4746 4789 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>preserve case</code></em> = <code class="literal">yes</code> 4747 4790 </em></span> 4748 </p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330 315"></a>4791 </p></dd></dl></div></div><div class="section" title="print ok"><div class="titlepage"><div><div><h3 class="title"><a name="id330407"></a> 4749 4792 4750 4793 <a name="PRINTOK"></a>print ok 4751 </h3></div></div></div><a class="indexterm" name="id330 316"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330347"></a>4794 </h3></div></div></div><a class="indexterm" name="id330408"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTABLE">printable</a>.</p></dd></dl></div></div><div class="section" title="printable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330438"></a> 4752 4795 4753 4796 printable (S) 4754 </h3></div></div></div><a class="indexterm" name="id330 348"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then4797 </h3></div></div></div><a class="indexterm" name="id330439"></a><a name="PRINTABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, then 4755 4798 clients may open, write to and submit spool files on the directory 4756 4799 specified for the service. </p><p>Note that a printable service will ALWAYS allow writing … … 4759 4802 the resource.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printable</code></em> = <code class="literal">no</code> 4760 4803 </em></span> 4761 </p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3304 07"></a>4804 </p></dd></dl></div></div><div class="section" title="printcap cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330499"></a> 4762 4805 4763 4806 printcap cache time (G) 4764 </h3></div></div></div><a class="indexterm" name="id330408"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4765 subsystem is again asked for the known printers. If the value 4766 is greater than 60 the initial waiting time is set to 60 seconds 4767 to allow an earlier first rescan of the printing subsystem. 4807 </h3></div></div></div><a class="indexterm" name="id330500"></a><a name="PRINTCAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the number of seconds before the printing 4808 subsystem is again asked for the known printers. 4768 4809 </p><p>Setting this parameter to 0 disables any rescanning for new 4769 4810 or removed printers after the initial startup. … … 4772 4813 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap cache time</code></em> = <code class="literal">600</code> 4773 4814 </em></span> 4774 </p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330 472"></a>4815 </p></dd></dl></div></div><div class="section" title="printcap"><div class="titlepage"><div><div><h3 class="title"><a name="id330562"></a> 4775 4816 4776 4817 <a name="PRINTCAP"></a>printcap 4777 </h3></div></div></div><a class="indexterm" name="id330 473"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330504"></a>4818 </h3></div></div></div><a class="indexterm" name="id330563"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTCAPNAME">printcap name</a>.</p></dd></dl></div></div><div class="section" title="printcap name (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id330594"></a> 4778 4819 4779 4820 printcap name (G) 4780 </h3></div></div></div><a class="indexterm" name="id3305 05"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4821 </h3></div></div></div><a class="indexterm" name="id330595"></a><a name="PRINTCAPNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4781 4822 This parameter may be used to override the compiled-in default printcap name used by the server (usually 4782 4823 <code class="filename"> /etc/printcap</code>). See the discussion of the <a class="link" href="#PRINTERSSECT" title="The [printers] section">[printers]</a> section above for reasons why you might want to do this. … … 4813 4854 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printcap name</code></em> = <code class="literal">/etc/myprintcap</code> 4814 4855 </em></span> 4815 </p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330 675"></a>4856 </p></dd></dl></div></div><div class="section" title="print command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id330766"></a> 4816 4857 4817 4858 print command (S) 4818 </h3></div></div></div><a class="indexterm" name="id330 676"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to4859 </h3></div></div></div><a class="indexterm" name="id330767"></a><a name="PRINTCOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>After a print job has finished spooling to 4819 4860 a service, this command will be used via a <code class="literal">system()</code> 4820 4861 call to process the spool file. Typically the command specified will … … 4858 4899 set print command will be ignored.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>print command</code></em> = <code class="literal">/usr/local/samba/bin/myprintscript %p %s</code> 4859 4900 </em></span> 4860 </p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 0918"></a>4901 </p></dd></dl></div></div><div class="section" title="printer admin (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331008"></a> 4861 4902 4862 4903 printer admin (S) 4863 </h3></div></div></div><a class="indexterm" name="id33 0919"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p>4904 </h3></div></div></div><a class="indexterm" name="id331010"></a><a name="PRINTERADMIN"></a><div class="variablelist"><dl><dt></dt><dd><p> 4864 4905 This lists users who can do anything to printers 4865 4906 via the remote administration interfaces offered … … 4877 4918 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer admin</code></em> = <code class="literal">admin, @staff</code> 4878 4919 </em></span> 4879 </p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id33 0982"></a>4920 </p></dd></dl></div></div><div class="section" title="printer"><div class="titlepage"><div><div><h3 class="title"><a name="id331072"></a> 4880 4921 4881 4922 <a name="PRINTER"></a>printer 4882 </h3></div></div></div><a class="indexterm" name="id33 0983"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331012"></a>4923 </h3></div></div></div><a class="indexterm" name="id331073"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#PRINTERNAME">printer name</a>.</p></dd></dl></div></div><div class="section" title="printer name (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331103"></a> 4883 4924 4884 4925 printer name (S) 4885 </h3></div></div></div><a class="indexterm" name="id331 014"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>4926 </h3></div></div></div><a class="indexterm" name="id331104"></a><a name="PRINTERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p> 4886 4927 This parameter specifies the name of the printer to which print jobs spooled through a printable service 4887 4928 will be sent. … … 4896 4937 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printer name</code></em> = <code class="literal">laserwriter</code> 4897 4938 </em></span> 4898 </p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 096"></a>4939 </p></dd></dl></div></div><div class="section" title="printing (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331187"></a> 4899 4940 4900 4941 printing (S) 4901 </h3></div></div></div><a class="indexterm" name="id331 097"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is4942 </h3></div></div></div><a class="indexterm" name="id331188"></a><a name="PRINTING"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters controls how printer status information is 4902 4943 interpreted on your system. It also affects the default values for 4903 4944 the <em class="parameter"><code>print command</code></em>, <em class="parameter"><code>lpq command</code></em>, <em class="parameter"><code>lppause command </code></em>, <em class="parameter"><code>lpresume command</code></em>, and <em class="parameter"><code>lprm command</code></em> if specified in the … … 4916 4957 <code class="literal">testparm -v.</code></code> 4917 4958 </em></span> 4918 </p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 242"></a>4959 </p></dd></dl></div></div><div class="section" title="printjob username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331333"></a> 4919 4960 4920 4961 printjob username (S) 4921 </h3></div></div></div><a class="indexterm" name="id331 243"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be4962 </h3></div></div></div><a class="indexterm" name="id331334"></a><a name="PRINTJOBUSERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies which user information will be 4922 4963 passed to the printing system. Usually, the username is sent, 4923 4964 but in some cases, e.g. the domain prefix is useful, too.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%U</code> … … 4925 4966 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>printjob username</code></em> = <code class="literal">%D\%U</code> 4926 4967 </em></span> 4927 </p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331301"></a> 4968 </p></dd></dl></div></div><div class="section" title="print notify backchannel (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331392"></a> 4969 4970 print notify backchannel (S) 4971 </h3></div></div></div><a class="indexterm" name="id331393"></a><a name="PRINTNOTIFYBACKCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>Windows print clients can update print queue status by expecting 4972 the server to open a backchannel SMB connection to them. Due to 4973 client firewall settings this can cause considerable timeouts 4974 and will often fail, as there is no guarantee the client is even 4975 running an SMB server. By setting this parameter to <code class="constant">no</code> 4976 the Samba print server will not try to connect back to clients 4977 and treat corresponding requests as if the connection back to 4978 the client failed. The default setting of <code class="constant">yes</code> 4979 causes smbd to attempt this connection. 4980 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>print notify backchannel</code></em> = <code class="literal">yes</code> 4981 </em></span> 4982 </p></dd></dl></div></div><div class="section" title="private dir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331444"></a> 4928 4983 4929 4984 private dir (G) 4930 </h3></div></div></div><a class="indexterm" name="id331 302"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory4985 </h3></div></div></div><a class="indexterm" name="id331445"></a><a name="PRIVATEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameters defines the directory 4931 4986 smbd will use for storing such files as <code class="filename">smbpasswd</code> 4932 4987 and <code class="filename">secrets.tdb</code>. 4933 4988 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>private dir</code></em> = <code class="literal">${prefix}/private</code> 4934 4989 </em></span> 4935 </p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 354"></a>4990 </p></dd></dl></div></div><div class="section" title="profile acls (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331497"></a> 4936 4991 4937 4992 profile acls (S) 4938 </h3></div></div></div><a class="indexterm" name="id331 355"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p>4993 </h3></div></div></div><a class="indexterm" name="id331498"></a><a name="PROFILEACLS"></a><div class="variablelist"><dl><dt></dt><dd><p> 4939 4994 This boolean parameter was added to fix the problems that people have been 4940 4995 having with storing user profiles on Samba shares from Windows 2000 or … … 4964 5019 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>profile acls</code></em> = <code class="literal">no</code> 4965 5020 </em></span> 4966 </p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 414"></a>5021 </p></dd></dl></div></div><div class="section" title="queuepause command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331557"></a> 4967 5022 4968 5023 queuepause command (S) 4969 </h3></div></div></div><a class="indexterm" name="id331 415"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be5024 </h3></div></div></div><a class="indexterm" name="id331558"></a><a name="QUEUEPAUSECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4970 5025 executed on the server host in order to pause the printer queue.</p><p>This command should be a program or script which takes 4971 5026 a printer name as its only parameter and stops the printer queue, … … 4978 5033 server.</p><p><span class="emphasis"><em>No default</em></span></p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queuepause command</code></em> = <code class="literal">disable %p</code> 4979 5034 </em></span> 4980 </p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 485"></a>5035 </p></dd></dl></div></div><div class="section" title="queueresume command (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331628"></a> 4981 5036 4982 5037 queueresume command (S) 4983 </h3></div></div></div><a class="indexterm" name="id331 486"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be5038 </h3></div></div></div><a class="indexterm" name="id331629"></a><a name="QUEUERESUMECOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the command to be 4984 5039 executed on the server host in order to resume the printer queue. It 4985 5040 is the command to undo the behavior that is caused by the … … 4996 5051 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>queueresume command</code></em> = <code class="literal">enable %p</code> 4997 5052 </em></span> 4998 </p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 579"></a>5053 </p></dd></dl></div></div><div class="section" title="read list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331722"></a> 4999 5054 5000 5055 read list (S) 5001 </h3></div></div></div><a class="indexterm" name="id331 580"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>5056 </h3></div></div></div><a class="indexterm" name="id331723"></a><a name="READLIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 5002 5057 This is a list of users that are given read-only access to a service. If the connecting user is in this list 5003 5058 then they will not be given write access, no matter what the <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a> option is set … … 5009 5064 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>read list</code></em> = <code class="literal">mary, @students</code> 5010 5065 </em></span> 5011 </p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 673"></a>5066 </p></dd></dl></div></div><div class="section" title="read only (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id331816"></a> 5012 5067 5013 5068 read only (S) 5014 </h3></div></div></div><a class="indexterm" name="id331 674"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users5069 </h3></div></div></div><a class="indexterm" name="id331817"></a><a name="READONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>An inverted synonym is <a class="link" href="smb.conf.5.html#WRITEABLE" target="_top">writeable</a>.</p><p>If this parameter is <code class="constant">yes</code>, then users 5015 5070 of a service may not create or modify files in the service's 5016 5071 directory.</p><p>Note that a printable service (<code class="literal">printable = yes</code>) … … 5018 5073 (user privileges permitting), but only via spooling operations.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read only</code></em> = <code class="literal">yes</code> 5019 5074 </em></span> 5020 </p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 746"></a>5075 </p></dd></dl></div></div><div class="section" title="read raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331888"></a> 5021 5076 5022 5077 read raw (G) 5023 </h3></div></div></div><a class="indexterm" name="id331 747"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server5078 </h3></div></div></div><a class="indexterm" name="id331890"></a><a name="READRAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 5024 5079 will support the raw read SMB requests when transferring data 5025 5080 to clients.</p><p>If enabled, raw reads allow reads of 65535 bytes in … … 5030 5085 tool and left severely alone.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>read raw</code></em> = <code class="literal">yes</code> 5031 5086 </em></span> 5032 </p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331 801"></a>5087 </p></dd></dl></div></div><div class="section" title="realm (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id331944"></a> 5033 5088 5034 5089 realm (G) 5035 </h3></div></div></div><a class="indexterm" name="id331 802"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is5090 </h3></div></div></div><a class="indexterm" name="id331945"></a><a name="REALM"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the kerberos realm to use. The realm is 5036 5091 used as the ADS equivalent of the NT4 <code class="literal">domain</code>. It 5037 5092 is usually set to the DNS name of the kerberos server. … … 5040 5095 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>realm</code></em> = <code class="literal">mysambabox.mycompany.com</code> 5041 5096 </em></span> 5042 </p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 1864"></a>5097 </p></dd></dl></div></div><div class="section" title="registry shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332006"></a> 5043 5098 5044 5099 registry shares (G) 5045 </h3></div></div></div><a class="indexterm" name="id33 1865"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>5100 </h3></div></div></div><a class="indexterm" name="id332007"></a><a name="REGISTRYSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5046 5101 This turns on or off support for share definitions read from 5047 5102 registry. Shares defined in <span class="emphasis"><em>smb.conf</em></span> take … … 5058 5113 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>registry shares</code></em> = <code class="literal">yes</code> 5059 5114 </em></span> 5060 </p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 1947"></a>5115 </p></dd></dl></div></div><div class="section" title="remote announce (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332089"></a> 5061 5116 5062 5117 remote announce (G) 5063 </h3></div></div></div><a class="indexterm" name="id33 1948"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p>5118 </h3></div></div></div><a class="indexterm" name="id332090"></a><a name="REMOTEANNOUNCE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5064 5119 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically announce itself 5065 5120 to arbitrary IP addresses with an arbitrary workgroup name. … … 5085 5140 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote announce</code></em> = <code class="literal"></code> 5086 5141 </em></span> 5087 </p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 043"></a>5142 </p></dd></dl></div></div><div class="section" title="remote browse sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332186"></a> 5088 5143 5089 5144 remote browse sync (G) 5090 </h3></div></div></div><a class="indexterm" name="id332 044"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>5145 </h3></div></div></div><a class="indexterm" name="id332187"></a><a name="REMOTEBROWSESYNC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5091 5146 This option allows you to setup <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> to periodically request 5092 5147 synchronization of browse lists with the master browser of a Samba … … 5120 5175 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>remote browse sync</code></em> = <code class="literal"></code> 5121 5176 </em></span> 5122 </p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 143"></a>5177 </p></dd></dl></div></div><div class="section" title="rename user script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332290"></a> 5123 5178 5124 5179 rename user script (G) 5125 </h3></div></div></div><a class="indexterm" name="id332 144"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>5180 </h3></div></div></div><a class="indexterm" name="id332291"></a><a name="RENAMEUSERSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p> 5126 5181 This is the full pathname to a script that will be run as root by <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> under special circumstances described below. 5127 5182 </p><p> … … 5141 5196 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>rename user script</code></em> = <code class="literal">no</code> 5142 5197 </em></span> 5143 </p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 222"></a>5198 </p></dd></dl></div></div><div class="section" title="reset on zero vc (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332369"></a> 5144 5199 5145 5200 reset on zero vc (G) 5146 </h3></div></div></div><a class="indexterm" name="id332 224"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p>5201 </h3></div></div></div><a class="indexterm" name="id332370"></a><a name="RESETONZEROVC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5147 5202 This boolean option controls whether an incoming session setup 5148 5203 should kill other connections coming from the same IP. This matches … … 5163 5218 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>reset on zero vc</code></em> = <code class="literal">no</code> 5164 5219 </em></span> 5165 </p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 269"></a>5220 </p></dd></dl></div></div><div class="section" title="restrict anonymous (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332415"></a> 5166 5221 5167 5222 restrict anonymous (G) 5168 </h3></div></div></div><a class="indexterm" name="id332 270"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and5223 </h3></div></div></div><a class="indexterm" name="id332416"></a><a name="RESTRICTANONYMOUS"></a><div class="variablelist"><dl><dt></dt><dd><p>The setting of this parameter determines whether user and 5169 5224 group list information is returned for an anonymous connection. 5170 5225 and mirrors the effects of the … … 5189 5244 </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>restrict anonymous</code></em> = <code class="literal">0</code> 5190 5245 </em></span> 5191 </p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332 342"></a>5246 </p></dd></dl></div></div><div class="section" title="root"><div class="titlepage"><div><div><h3 class="title"><a name="id332488"></a> 5192 5247 5193 5248 <a name="ROOT"></a>root 5194 </h3></div></div></div><a class="indexterm" name="id332 343"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332375"></a>5249 </h3></div></div></div><a class="indexterm" name="id332490"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root dir"><div class="titlepage"><div><div><h3 class="title"><a name="id332521"></a> 5195 5250 5196 5251 <a name="ROOTDIR"></a>root dir 5197 </h3></div></div></div><a class="indexterm" name="id332 376"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332405"></a>5252 </h3></div></div></div><a class="indexterm" name="id332522"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#ROOTDIRECTORY">root directory</a>.</p></dd></dl></div></div><div class="section" title="root directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332552"></a> 5198 5253 5199 5254 root directory (G) 5200 </h3></div></div></div><a class="indexterm" name="id332 406"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e.5255 </h3></div></div></div><a class="indexterm" name="id332553"></a><a name="ROOTDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>The server will <code class="literal">chroot()</code> (i.e. 5201 5256 Change its root directory) to this directory on startup. This is 5202 5257 not strictly necessary for secure operation. Even without it the … … 5221 5276 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>root directory</code></em> = <code class="literal">/homes/smb</code> 5222 5277 </em></span> 5223 </p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 518"></a>5278 </p></dd></dl></div></div><div class="section" title="root postexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332664"></a> 5224 5279 5225 5280 root postexec (S) 5226 </h3></div></div></div><a class="indexterm" name="id332 519"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>5281 </h3></div></div></div><a class="indexterm" name="id332665"></a><a name="ROOTPOSTEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5227 5282 This is the same as the <em class="parameter"><code>postexec</code></em> 5228 5283 parameter except that the command is run as root. This is useful for … … 5230 5285 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root postexec</code></em> = <code class="literal"></code> 5231 5286 </em></span> 5232 </p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 565"></a>5287 </p></dd></dl></div></div><div class="section" title="root preexec close (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332711"></a> 5233 5288 5234 5289 root preexec close (S) 5235 </h3></div></div></div><a class="indexterm" name="id332 566"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close5290 </h3></div></div></div><a class="indexterm" name="id332712"></a><a name="ROOTPREEXECCLOSE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is the same as the <em class="parameter"><code>preexec close 5236 5291 </code></em> parameter except that the command is run as root.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec close</code></em> = <code class="literal">no</code> 5237 5292 </em></span> 5238 </p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332 612"></a>5293 </p></dd></dl></div></div><div class="section" title="root preexec (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332758"></a> 5239 5294 5240 5295 root preexec (S) 5241 </h3></div></div></div><a class="indexterm" name="id332 613"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p>5296 </h3></div></div></div><a class="indexterm" name="id332760"></a><a name="ROOTPREEXEC"></a><div class="variablelist"><dl><dt></dt><dd><p> 5242 5297 This is the same as the <em class="parameter"><code>preexec</code></em> 5243 5298 parameter except that the command is run as root. This is useful for … … 5245 5300 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>root preexec</code></em> = <code class="literal"></code> 5246 5301 </em></span> 5247 </p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332659"></a> 5302 </p></dd></dl></div></div><div class="section" title="rpc_server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id332806"></a> 5303 5304 rpc_server (G) 5305 </h3></div></div></div><a class="indexterm" name="id332807"></a><a name="RPC_SERVER"></a><div class="variablelist"><dl><dt></dt><dd><p> 5306 Defines what kind of rpc server to use for a named pipe. 5307 The rpc_server prefix must be followed by the pipe name, and a value. 5308 </p><p> 5309 Three possible values are currently supported: 5310 <code class="literal">embedded</code> 5311 <code class="literal">daemon</code> 5312 <code class="literal">external</code> 5313 </p><p> 5314 The classic method is to run every pipe as an internal function 5315 <span class="emphasis"><em>embedded</em></span> in smbd. 5316 </p><p> 5317 An alternative method is to fork a <span class="emphasis"><em>daemon</em></span> 5318 early on at smbd startup time. This is supported only for selected 5319 pipes. 5320 </p><p> 5321 Choosing the <span class="emphasis"><em>external</em></span> option allows to run a 5322 completely independent (3rd party) server capable of interfacing 5323 with samba via the MS-RPC interface over named pipes. 5324 </p><p> 5325 Currently only the spoolss pipe can be configured in 5326 <span class="emphasis"><em>daemon</em></span> mode like this: 5327 </p><pre class="programlisting"> 5328 rpc_server:spoolss = daemon 5329 </pre><p> 5330 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>rpc_server</code></em> = <code class="literal">none</code> 5331 </em></span> 5332 </p></dd></dl></div></div><div class="section" title="security mask (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id332905"></a> 5248 5333 5249 5334 security mask (S) 5250 </h3></div></div></div><a class="indexterm" name="id332 660"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p>5335 </h3></div></div></div><a class="indexterm" name="id332906"></a><a name="SECURITYMASK"></a><div class="variablelist"><dl><dt></dt><dd><p> 5251 5336 This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the 5252 5337 UNIX permission on a file using the native NT security dialog box. … … 5267 5352 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security mask</code></em> = <code class="literal">0770</code> 5268 5353 </em></span> 5269 </p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 2755"></a>5354 </p></dd></dl></div></div><div class="section" title="security (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333001"></a> 5270 5355 5271 5356 security (G) 5272 </h3></div></div></div><a class="indexterm" name="id33 2756"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to5357 </h3></div></div></div><a class="indexterm" name="id333002"></a><a name="SECURITY"></a><div class="variablelist"><dl><dt></dt><dd><p>This option affects how clients respond to 5273 5358 Samba and is one of the most important settings in the <code class="filename"> 5274 5359 smb.conf</code> file.</p><p>The option sets the "security mode bit" in replies to … … 5394 5479 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>security</code></em> = <code class="literal">DOMAIN</code> 5395 5480 </em></span> 5396 </p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333543"></a> 5481 </p></dd></dl></div></div><div class="section" title="send spnego principal (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333789"></a> 5482 5483 send spnego principal (G) 5484 </h3></div></div></div><a class="indexterm" name="id333790"></a><a name="SENDSPNEGOPRINCIPAL"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines whether or not 5485 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will send the 5486 server-supplied principal sometimes given in the SPNEGO 5487 exchange.</p><p>If enabled, Samba can attempt to help clients to use 5488 Kerberos to contact it, even when known only by IP address or a 5489 name not registered with our KDC as a service principal name. 5490 Kerberos relies on names, so ordinarily cannot function in this 5491 situation. </p><p>If disabled, Samba will send the string 5492 not_defined_in_RFC4178@please_ignore as the 'rfc4178 hint', 5493 following the updated RFC and Windows 2008 behaviour in this area. 5494 </p><p>Note that Windows XP SP2 and later versions already ignored 5495 this value in all circumstances. </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>send spnego principal</code></em> = <code class="literal">no</code> 5496 </em></span> 5497 </p></dd></dl></div></div><div class="section" title="server schannel (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333854"></a> 5397 5498 5398 5499 server schannel (G) 5399 </h3></div></div></div><a class="indexterm" name="id333 544"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p>5500 </h3></div></div></div><a class="indexterm" name="id333855"></a><a name="SERVERSCHANNEL"></a><div class="variablelist"><dl><dt></dt><dd><p> 5400 5501 This controls whether the server offers or even demands the use of the netlogon schannel. 5401 5502 <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = no</a> does not offer the schannel, <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = auto</a> offers the schannel but does not enforce it, and <a class="link" href="smb.conf.5.html#SERVERSCHANNEL" target="_top">server schannel = yes</a> denies access if the client is not able to speak netlogon schannel. … … 5408 5509 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server schannel</code></em> = <code class="literal">yes</code> 5409 5510 </em></span> 5410 </p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333 651"></a>5511 </p></dd></dl></div></div><div class="section" title="server signing (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id333962"></a> 5411 5512 5412 5513 server signing (G) 5413 </h3></div></div></div><a class="indexterm" name="id333 652"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values5514 </h3></div></div></div><a class="indexterm" name="id333963"></a><a name="SERVERSIGNING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls whether the client is allowed or required to use SMB signing. Possible values 5414 5515 are <span class="emphasis"><em>auto</em></span>, <span class="emphasis"><em>mandatory</em></span> 5415 5516 and <span class="emphasis"><em>disabled</em></span>. … … 5418 5519 to disabled, SMB signing is not offered either.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>server signing</code></em> = <code class="literal">Disabled</code> 5419 5520 </em></span> 5420 </p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 3708"></a>5521 </p></dd></dl></div></div><div class="section" title="server string (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334019"></a> 5421 5522 5422 5523 server string (G) 5423 </h3></div></div></div><a class="indexterm" name="id33 3709"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print5524 </h3></div></div></div><a class="indexterm" name="id334020"></a><a name="SERVERSTRING"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what string will show up in the printer comment box in print 5424 5525 manager and next to the IPC connection in <code class="literal">net view</code>. It 5425 5526 can be any string that you wish to show to your users.</p><p>It also sets what will appear in browse lists next … … 5430 5531 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>server string</code></em> = <code class="literal">University of GNUs Samba Server</code> 5431 5532 </em></span> 5432 </p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 3795"></a>5533 </p></dd></dl></div></div><div class="section" title="set directory (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334106"></a> 5433 5534 5434 5535 set directory (S) 5435 </h3></div></div></div><a class="indexterm" name="id33 3796"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>5536 </h3></div></div></div><a class="indexterm" name="id334107"></a><a name="SETDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5436 5537 If <code class="literal">set directory = no</code>, then users of the 5437 5538 service may not use the setdir command to change directory. … … 5442 5543 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>set directory</code></em> = <code class="literal">no</code> 5443 5544 </em></span> 5444 </p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 3852"></a>5545 </p></dd></dl></div></div><div class="section" title="set primary group script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334163"></a> 5445 5546 5446 5547 set primary group script (G) 5447 </h3></div></div></div><a class="indexterm" name="id33 3854"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a5548 </h3></div></div></div><a class="indexterm" name="id334164"></a><a name="SETPRIMARYGROUPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>Thanks to the Posix subsystem in NT a Windows User has a 5448 5549 primary group in addition to the auxiliary groups. This script 5449 5550 sets the primary group in the unix userdatase when an … … 5457 5558 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set primary group script</code></em> = <code class="literal">/usr/sbin/usermod -g '%g' '%u'</code> 5458 5559 </em></span> 5459 </p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 3930"></a>5560 </p></dd></dl></div></div><div class="section" title="set quota command (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334240"></a> 5460 5561 5461 5562 set quota command (G) 5462 </h3></div></div></div><a class="indexterm" name="id33 3931"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used5563 </h3></div></div></div><a class="indexterm" name="id334241"></a><a name="SETQUOTACOMMAND"></a><div class="variablelist"><dl><dt></dt><dd><p>The <code class="literal">set quota command</code> should only be used 5463 5564 whenever there is no operating system API available from the OS that 5464 5565 samba can use.</p><p>This option is only available if Samba was configured with the argument <code class="literal">--with-sys-quotas</code> or … … 5470 5571 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>set quota command</code></em> = <code class="literal">/usr/local/sbin/set_quota</code> 5471 5572 </em></span> 5472 </p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334 083"></a>5573 </p></dd></dl></div></div><div class="section" title="share:fake_fscaps (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334394"></a> 5473 5574 5474 5575 share:fake_fscaps (G) 5475 </h3></div></div></div><a class="indexterm" name="id334 084"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p>5576 </h3></div></div></div><a class="indexterm" name="id334395"></a><a name="SHARE:FAKE_FSCAPS"></a><div class="variablelist"><dl><dt></dt><dd><p> 5476 5577 This is needed to support some special application that makes 5477 5578 QFSINFO calls to check whether we set the SPARSE_FILES bit … … 5483 5584 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share:fake_fscaps</code></em> = <code class="literal">0</code> 5484 5585 </em></span> 5485 </p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334 140"></a>5586 </p></dd></dl></div></div><div class="section" title="share modes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334450"></a> 5486 5587 5487 5588 share modes (S) 5488 </h3></div></div></div><a class="indexterm" name="id334 141"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of5589 </h3></div></div></div><a class="indexterm" name="id334451"></a><a name="SHAREMODES"></a><div class="variablelist"><dl><dt></dt><dd><p>This enables or disables the honoring of 5489 5590 the <em class="parameter"><code>share modes</code></em> during a file open. These 5490 5591 modes are used by clients to gain exclusive read or write access … … 5498 5599 off as many Windows applications will break if you do so.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>share modes</code></em> = <code class="literal">yes</code> 5499 5600 </em></span> 5500 </p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334 210"></a>5601 </p></dd></dl></div></div><div class="section" title="short preserve case (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334520"></a> 5501 5602 5502 5603 short preserve case (S) 5503 </h3></div></div></div><a class="indexterm" name="id334 211"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p>5604 </h3></div></div></div><a class="indexterm" name="id334522"></a><a name="SHORTPRESERVECASE"></a><div class="variablelist"><dl><dt></dt><dd><p> 5504 5605 This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of 5505 5606 suitable length, are created upper case, or if they are forced to be the <a class="link" href="smb.conf.5.html#DEFAULTCASE" target="_top">default case</a>. … … 5508 5609 </p><p>See the section on <a class="link" href="#NAMEMANGLINGSECT" title="NAME MANGLING">NAME MANGLING</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>short preserve case</code></em> = <code class="literal">yes</code> 5509 5610 </em></span> 5510 </p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334 284"></a>5611 </p></dd></dl></div></div><div class="section" title="show add printer wizard (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334594"></a> 5511 5612 5512 5613 show add printer wizard (G) 5513 </h3></div></div></div><a class="indexterm" name="id334 285"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support5614 </h3></div></div></div><a class="indexterm" name="id334595"></a><a name="SHOWADDPRINTERWIZARD"></a><div class="variablelist"><dl><dt></dt><dd><p>With the introduction of MS-RPC based printing support 5514 5615 for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will 5515 5616 appear on Samba hosts in the share listing. Normally this folder will … … 5529 5630 administrative privilege on an individual printer.</p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>show add printer wizard</code></em> = <code class="literal">yes</code> 5530 5631 </em></span> 5531 </p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334 356"></a>5632 </p></dd></dl></div></div><div class="section" title="shutdown script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334667"></a> 5532 5633 5533 5634 shutdown script (G) 5534 </h3></div></div></div><a class="indexterm" name="id334 357"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by5635 </h3></div></div></div><a class="indexterm" name="id334668"></a><a name="SHUTDOWNSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This a full path name to a script called by 5535 5636 <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> that should 5536 5637 start a shutdown procedure.</p><p>If the connected user posseses the <code class="constant">SeRemoteShutdownPrivilege</code>, … … 5558 5659 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>shutdown script</code></em> = <code class="literal">/usr/local/samba/sbin/shutdown %m %t %r %f</code> 5559 5660 </em></span> 5560 </p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id334503"></a> 5661 </p></dd></dl></div></div><div class="section" title="smb2 max credits (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334813"></a> 5662 5663 smb2 max credits (G) 5664 </h3></div></div></div><a class="indexterm" name="id334814"></a><a name="SMB2MAXCREDITS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum number of outstanding simultaneous SMB2 operations 5665 that Samba tells the client it will allow. This is similar to the <a class="link" href="smb.conf.5.html#MAXMUX" target="_top">max mux</a> 5666 parameter for SMB1. You should never need to set this parameter. 5667 </p><p>The default is 128 credits, which is the same as a Windows SMB2 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb2 max credits</code></em> = <code class="literal">128</code> 5668 </em></span> 5669 </p></dd></dl></div></div><div class="section" title="smb2 max read (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334871"></a> 5670 5671 smb2 max read (G) 5672 </h3></div></div></div><a class="indexterm" name="id334872"></a><a name="SMB2MAXREAD"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the protocol value that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will return to a client, informing the client of the largest 5673 size that may be returned by a single SMB2 read call. 5674 </p><p>The default is 1048576 bytes (1MB), which is the same as a Windows7 SMB2 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb2 max read</code></em> = <code class="literal">1048576</code> 5675 </em></span> 5676 </p></dd></dl></div></div><div class="section" title="smb2 max trans (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334924"></a> 5677 5678 smb2 max trans (G) 5679 </h3></div></div></div><a class="indexterm" name="id334925"></a><a name="SMB2MAXTRANS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the protocol value that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will return to a client, informing the client of the largest 5680 size of buffer that may be used in querying file meta-data via QUERY_INFO and related SMB2 calls. 5681 </p><p>The default is 1048576 bytes (1MB), which is the same as a Windows7 SMB2 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb2 max trans</code></em> = <code class="literal">1048576</code> 5682 </em></span> 5683 </p></dd></dl></div></div><div class="section" title="smb2 max write (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id334979"></a> 5684 5685 smb2 max write (G) 5686 </h3></div></div></div><a class="indexterm" name="id334980"></a><a name="SMB2MAXWRITE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option specifies the protocol value that <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will return to a client, informing the client of the largest 5687 size that may be sent to the server by a single SMB2 write call. 5688 </p><p>The default is 1048576 bytes (1MB), which is the same as a Windows7 SMB2 server.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb2 max write</code></em> = <code class="literal">1048576</code> 5689 </em></span> 5690 </p></dd></dl></div></div><div class="section" title="smb encrypt (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335033"></a> 5561 5691 5562 5692 smb encrypt (S) 5563 </h3></div></div></div><a class="indexterm" name="id33 4504"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an5693 </h3></div></div></div><a class="indexterm" name="id335034"></a><a name="SMBENCRYPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a new feature introduced with Samba 3.2 and above. It is an 5564 5694 extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. 5565 5695 SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt … … 5589 5719 to disabled, SMB encryption can not be negotiated.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb encrypt</code></em> = <code class="literal">auto</code> 5590 5720 </em></span> 5591 </p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 4599"></a>5721 </p></dd></dl></div></div><div class="section" title="smb passwd file (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335124"></a> 5592 5722 5593 5723 smb passwd file (G) 5594 </h3></div></div></div><a class="indexterm" name="id33 4600"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By5724 </h3></div></div></div><a class="indexterm" name="id335125"></a><a name="SMBPASSWDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>This option sets the path to the encrypted smbpasswd file. By 5595 5725 default the path to the smbpasswd file is compiled into Samba.</p><p> 5596 5726 An example of use is: … … 5600 5730 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb passwd file</code></em> = <code class="literal">${prefix}/private/smbpasswd</code> 5601 5731 </em></span> 5602 </p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 4651"></a>5732 </p></dd></dl></div></div><div class="section" title="smb ports (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335176"></a> 5603 5733 5604 5734 smb ports (G) 5605 </h3></div></div></div><a class="indexterm" name="id33 4652"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code>5606 </em></span> 5607 </p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 4692"></a>5735 </h3></div></div></div><a class="indexterm" name="id335177"></a><a name="SMBPORTS"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies which ports the server should listen on for SMB traffic.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>smb ports</code></em> = <code class="literal">445 139</code> 5736 </em></span> 5737 </p></dd></dl></div></div><div class="section" title="socket address (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335217"></a> 5608 5738 5609 5739 socket address (G) 5610 </h3></div></div></div><a class="indexterm" name="id33 4693"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what5740 </h3></div></div></div><a class="indexterm" name="id335218"></a><a name="SOCKETADDRESS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to control what 5611 5741 address Samba will listen for connections on. This is used to 5612 5742 support multiple virtual interfaces on the one server, each … … 5617 5747 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket address</code></em> = <code class="literal">192.168.2.20</code> 5618 5748 </em></span> 5619 </p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 4758"></a>5749 </p></dd></dl></div></div><div class="section" title="socket options (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335283"></a> 5620 5750 5621 5751 socket options (G) 5622 </h3></div></div></div><a class="indexterm" name="id33 4759"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options5752 </h3></div></div></div><a class="indexterm" name="id335284"></a><a name="SOCKETOPTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option allows you to set socket options 5623 5753 to be used when talking with the client.</p><p>Socket options are controls on the networking layer 5624 5754 of the operating systems which allow the connection to be … … 5648 5778 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>socket options</code></em> = <code class="literal">IPTOS_LOWDELAY</code> 5649 5779 </em></span> 5650 </p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 4950"></a>5780 </p></dd></dl></div></div><div class="section" title="stat cache (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335475"></a> 5651 5781 5652 5782 stat cache (G) 5653 </h3></div></div></div><a class="indexterm" name="id33 4951"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to5783 </h3></div></div></div><a class="indexterm" name="id335476"></a><a name="STATCACHE"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a> will use a cache in order to 5654 5784 speed up case insensitive name mappings. You should never need 5655 5785 to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>stat cache</code></em> = <code class="literal">yes</code> 5656 5786 </em></span> 5657 </p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 000"></a>5787 </p></dd></dl></div></div><div class="section" title="state directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335525"></a> 5658 5788 5659 5789 state directory (G) 5660 </h3></div></div></div><a class="indexterm" name="id335 001"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the5790 </h3></div></div></div><a class="indexterm" name="id335526"></a><a name="STATEDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>Usually, most of the TDB files are stored in the 5661 5791 <em class="parameter"><code>lock directory</code></em>. Since 5662 5792 Samba 3.4.0, it is possible to differentiate between TDB files … … 5670 5800 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>state directory</code></em> = <code class="literal">/var/run/samba/locks/state</code> 5671 5801 </em></span> 5672 </p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 082"></a>5802 </p></dd></dl></div></div><div class="section" title="store dos attributes (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335607"></a> 5673 5803 5674 5804 store dos attributes (S) 5675 </h3></div></div></div><a class="indexterm" name="id335 083"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p>5805 </h3></div></div></div><a class="indexterm" name="id335608"></a><a name="STOREDOSATTRIBUTES"></a><div class="variablelist"><dl><dt></dt><dd><p> 5676 5806 If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or 5677 5807 READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such … … 5692 5822 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>store dos attributes</code></em> = <code class="literal">no</code> 5693 5823 </em></span> 5694 </p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 198"></a>5824 </p></dd></dl></div></div><div class="section" title="strict allocate (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335731"></a> 5695 5825 5696 5826 strict allocate (S) 5697 </h3></div></div></div><a class="indexterm" name="id335 199"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of5827 </h3></div></div></div><a class="indexterm" name="id335732"></a><a name="STRICTALLOCATE"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls the handling of 5698 5828 disk space allocation in the server. When this is set to <code class="constant">yes</code> 5699 5829 the server will change from UNIX behaviour of not committing real … … 5702 5832 when a file is created or extended to be a given size. In UNIX 5703 5833 terminology this means that Samba will stop creating sparse files. 5704 This can be slow on some systems. When you work with large files like 5705 >100MB or so you may even run into problems with clients running into 5706 timeouts.</p><p>When you have an extent based filesystem it's likely that we can make 5834 Modern UNIX filesystems now support extents and so in Samba 3.6.0 we 5835 have changed this parameter to default to "yes". On older filesystems 5836 without extents you might want to turn this parameter to "no". 5837 </p><p>When you have an extent based filesystem it's likely that we can make 5707 5838 use of unwritten extents which allows Samba to allocate even large amounts 5708 5839 of space very fast and you will not see any timeout problems caused by … … 5716 5847 performance and risk to let clients run into timeouts when creating large 5717 5848 files. Examples are ext3, ZFS, HFS+ and most others, so be aware if you 5718 activate this setting on those filesystems.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">no</code>5719 </em></span> 5720 </p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 264"></a>5849 leave the default setting on those filesystems.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict allocate</code></em> = <code class="literal">yes</code> 5850 </em></span> 5851 </p></dd></dl></div></div><div class="section" title="strict locking (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335795"></a> 5721 5852 5722 5853 strict locking (S) 5723 </h3></div></div></div><a class="indexterm" name="id335 266"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p>5854 </h3></div></div></div><a class="indexterm" name="id335796"></a><a name="STRICTLOCKING"></a><div class="variablelist"><dl><dt></dt><dd><p> 5724 5855 This is an enumerated type that controls the handling of file locking in the server. When this is set to <code class="constant">yes</code>, 5725 5856 the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on … … 5737 5868 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict locking</code></em> = <code class="literal">Auto</code> 5738 5869 </em></span> 5739 </p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 336"></a>5870 </p></dd></dl></div></div><div class="section" title="strict sync (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id335868"></a> 5740 5871 5741 5872 strict sync (S) 5742 </h3></div></div></div><a class="indexterm" name="id335 337"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer5873 </h3></div></div></div><a class="indexterm" name="id335869"></a><a name="STRICTSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>Many Windows applications (including the Windows 98 explorer 5743 5874 shell) seem to confuse flushing buffer contents to disk with doing 5744 5875 a sync to disk. Under UNIX, a sync call forces the process to be … … 5754 5885 reported with the new Windows98 explorer shell file copies.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>strict sync</code></em> = <code class="literal">no</code> 5755 5886 </em></span> 5756 </p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335 394"></a>5887 </p></dd></dl></div></div><div class="section" title="svcctl list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id335926"></a> 5757 5888 5758 5889 svcctl list (G) 5759 </h3></div></div></div><a class="indexterm" name="id335 395"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd5890 </h3></div></div></div><a class="indexterm" name="id335927"></a><a name="SVCCTLLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This option defines a list of init scripts that smbd 5760 5891 will use for starting and stopping Unix services via the Win32 5761 5892 ServiceControl API. This allows Windows administrators to … … 5770 5901 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>svcctl list</code></em> = <code class="literal">cups postfix portmap httpd</code> 5771 5902 </em></span> 5772 </p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5475"></a>5903 </p></dd></dl></div></div><div class="section" title="sync always (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336006"></a> 5773 5904 5774 5905 sync always (S) 5775 </h3></div></div></div><a class="indexterm" name="id33 5476"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls5906 </h3></div></div></div><a class="indexterm" name="id336007"></a><a name="SYNCALWAYS"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean parameter that controls 5776 5907 whether writes will always be written to stable storage before 5777 5908 the write call returns. If this is <code class="constant">no</code> then the server will be … … 5784 5915 any effect.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>sync always</code></em> = <code class="literal">no</code> 5785 5916 </em></span> 5786 </p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5542"></a>5917 </p></dd></dl></div></div><div class="section" title="syslog only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336072"></a> 5787 5918 5788 5919 syslog only (G) 5789 </h3></div></div></div><a class="indexterm" name="id33 5543"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>5920 </h3></div></div></div><a class="indexterm" name="id336074"></a><a name="SYSLOGONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 5790 5921 If this parameter is set then Samba debug messages are logged into the system 5791 5922 syslog only, and not to the debug log files. There still will be some … … 5793 5924 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog only</code></em> = <code class="literal">no</code> 5794 5925 </em></span> 5795 </p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5587"></a>5926 </p></dd></dl></div></div><div class="section" title="syslog (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336118"></a> 5796 5927 5797 5928 syslog (G) 5798 </h3></div></div></div><a class="indexterm" name="id33 5588"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p>5929 </h3></div></div></div><a class="indexterm" name="id336119"></a><a name="SYSLOG"></a><div class="variablelist"><dl><dt></dt><dd><p> 5799 5930 This parameter maps how Samba debug messages are logged onto the system syslog logging levels. 5800 5931 Samba debug level zero maps onto syslog <code class="constant">LOG_ERR</code>, debug level one maps onto … … 5807 5938 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>syslog</code></em> = <code class="literal">1</code> 5808 5939 </em></span> 5809 </p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5654"></a>5940 </p></dd></dl></div></div><div class="section" title="template homedir (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336185"></a> 5810 5941 5811 5942 template homedir (G) 5812 </h3></div></div></div><a class="indexterm" name="id33 5655"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5943 </h3></div></div></div><a class="indexterm" name="id336186"></a><a name="TEMPLATEHOMEDIR"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5813 5944 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5814 5945 parameter to fill in the home directory for that user. If the … … 5818 5949 is substituted with the user's Windows NT user name.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>template homedir</code></em> = <code class="literal">/home/%D/%U</code> 5819 5950 </em></span> 5820 </p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5716"></a>5951 </p></dd></dl></div></div><div class="section" title="template shell (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336247"></a> 5821 5952 5822 5953 template shell (G) 5823 </h3></div></div></div><a class="indexterm" name="id33 5717"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT5954 </h3></div></div></div><a class="indexterm" name="id336248"></a><a name="TEMPLATESHELL"></a><div class="variablelist"><dl><dt></dt><dd><p>When filling out the user information for a Windows NT 5824 5955 user, the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon uses this 5825 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5753"></a>5956 parameter to fill in the login shell for that user.</p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="time offset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336284"></a> 5826 5957 5827 5958 time offset (G) 5828 </h3></div></div></div><a class="indexterm" name="id33 5754"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add5959 </h3></div></div></div><a class="indexterm" name="id336285"></a><a name="TIMEOFFSET"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a setting in minutes to add 5829 5960 to the normal GMT to local time conversion. This is useful if 5830 5961 you are serving a lot of PCs that have incorrect daylight … … 5833 5964 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>time offset</code></em> = <code class="literal">60</code> 5834 5965 </em></span> 5835 </p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5812"></a>5966 </p></dd></dl></div></div><div class="section" title="time server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336343"></a> 5836 5967 5837 5968 time server (G) 5838 </h3></div></div></div><a class="indexterm" name="id33 5814"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows5969 </h3></div></div></div><a class="indexterm" name="id336344"></a><a name="TIMESERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter determines if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> advertises itself as a time server to Windows 5839 5970 clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>time server</code></em> = <code class="literal">no</code> 5840 5971 </em></span> 5841 </p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5862"></a>5972 </p></dd></dl></div></div><div class="section" title="unix charset (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336393"></a> 5842 5973 5843 5974 unix charset (G) 5844 </h3></div></div></div><a class="indexterm" name="id33 5863"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine5975 </h3></div></div></div><a class="indexterm" name="id336394"></a><a name="UNIXCHARSET"></a><div class="variablelist"><dl><dt></dt><dd><p>Specifies the charset the unix machine 5845 5976 Samba runs on uses. Samba needs to know this in order to be able to 5846 5977 convert text to the charsets other SMB clients use. … … 5851 5982 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>unix charset</code></em> = <code class="literal">ASCII</code> 5852 5983 </em></span> 5853 </p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5925"></a>5984 </p></dd></dl></div></div><div class="section" title="unix extensions (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336456"></a> 5854 5985 5855 5986 unix extensions (G) 5856 </h3></div></div></div><a class="indexterm" name="id33 5926"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba5987 </h3></div></div></div><a class="indexterm" name="id336457"></a><a name="UNIXEXTENSIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5857 5988 implements the CIFS UNIX extensions, as defined by HP. 5858 5989 These extensions enable Samba to better serve UNIX CIFS clients … … 5864 5995 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix extensions</code></em> = <code class="literal">yes</code> 5865 5996 </em></span> 5866 </p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 5986"></a>5997 </p></dd></dl></div></div><div class="section" title="unix password sync (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336517"></a> 5867 5998 5868 5999 unix password sync (G) 5869 </h3></div></div></div><a class="indexterm" name="id33 5987"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba6000 </h3></div></div></div><a class="indexterm" name="id336518"></a><a name="UNIXPASSWORDSYNC"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean parameter controls whether Samba 5870 6001 attempts to synchronize the UNIX password with the SMB password 5871 6002 when the encrypted SMB password in the smbpasswd file is changed. … … 5876 6007 access to the old password cleartext, only the new).</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>unix password sync</code></em> = <code class="literal">no</code> 5877 6008 </em></span> 5878 </p></dd></dl></div></div><div class="section" title="update encrypted (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336043"></a> 5879 5880 update encrypted (G) 5881 </h3></div></div></div><a class="indexterm" name="id336044"></a><a name="UPDATEENCRYPTED"></a><div class="variablelist"><dl><dt></dt><dd><p> 5882 This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed) 5883 password in the smbpasswd file to be updated automatically as they log on. This option allows a site to 5884 migrate from plaintext password authentication (users authenticate with plaintext password over the 5885 wire, and are checked against a UNIX account database) to encrypted password authentication (the SMB 5886 challenge/response authentication mechanism) without forcing all users to re-enter their passwords via 5887 smbpasswd at the time the change is made. This is a convenience option to allow the change over to encrypted 5888 passwords to be made over a longer period. Once all users have encrypted representations of their passwords 5889 in the smbpasswd file this parameter should be set to <code class="constant">no</code>. 5890 </p><p> 5891 In order for this parameter to be operative the <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords</a> parameter must 5892 be set to <code class="constant">no</code>. The default value of <a class="link" href="smb.conf.5.html#ENCRYPTPASSWORDS" target="_top">encrypt passwords = Yes</a>. Note: This must be set to <code class="constant">no</code> for this <a class="link" href="smb.conf.5.html#UPDATEENCRYPTED" target="_top">update encrypted</a> to work. 5893 </p><p> 5894 Note that even when this parameter is set, a user authenticating to <code class="literal">smbd</code> 5895 must still enter a valid password in order to connect correctly, and to update their hashed (smbpasswd) 5896 passwords. 5897 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>update encrypted</code></em> = <code class="literal">no</code> 5898 </em></span> 5899 </p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336148"></a> 6009 </p></dd></dl></div></div><div class="section" title="use client driver (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336574"></a> 5900 6010 5901 6011 use client driver (S) 5902 </h3></div></div></div><a class="indexterm" name="id336 149"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/20006012 </h3></div></div></div><a class="indexterm" name="id336575"></a><a name="USECLIENTDRIVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter applies only to Windows NT/2000 5903 6013 clients. It has no effect on Windows 95/98/ME clients. When 5904 6014 serving a printer to Windows NT/2000 clients without first installing … … 5925 6035 server.</em></span></p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use client driver</code></em> = <code class="literal">no</code> 5926 6036 </em></span> 5927 </p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336 222"></a>6037 </p></dd></dl></div></div><div class="section" title="use mmap (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336642"></a> 5928 6038 5929 6039 use mmap (G) 5930 </h3></div></div></div><a class="indexterm" name="id336 223"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can6040 </h3></div></div></div><a class="indexterm" name="id336643"></a><a name="USEMMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>This global parameter determines if the tdb internals of Samba can 5931 6041 depend on mmap working correctly on the running system. Samba requires a coherent 5932 6042 mmap/read-write system memory cache. Currently only HPUX does not have such a … … 5937 6047 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use mmap</code></em> = <code class="literal">yes</code> 5938 6048 </em></span> 5939 </p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336 270"></a>6049 </p></dd></dl></div></div><div class="section" title="username level (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336690"></a> 5940 6050 5941 6051 username level (G) 5942 </h3></div></div></div><a class="indexterm" name="id336 271"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at6052 </h3></div></div></div><a class="indexterm" name="id336691"></a><a name="USERNAMELEVEL"></a><div class="variablelist"><dl><dt></dt><dd><p>This option helps Samba to try and 'guess' at 5943 6053 the real UNIX username, as many DOS clients send an all-uppercase 5944 6054 username. By default Samba tries all lowercase, followed by the … … 5955 6065 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username level</code></em> = <code class="literal">5</code> 5956 6066 </em></span> 5957 </p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336343"></a> 6067 </p></dd></dl></div></div><div class="section" title="username map cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336763"></a> 6068 6069 username map cache time (G) 6070 </h3></div></div></div><a class="indexterm" name="id336764"></a><a name="USERNAMEMAPCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p> 6071 Mapping usernames with the <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> 6072 or <a class="link" href="smb.conf.5.html#USERNAMEMAPSCRIPT" target="_top">username map script</a> 6073 features of Samba can be relatively expensive. 6074 During login of a user, the mapping is done several times. 6075 In particular, calling the <a class="link" href="smb.conf.5.html#USERNAMEMAPSCRIPT" target="_top">username map script</a> 6076 can slow down logins if external databases have to be queried from 6077 the script being called. 6078 </p><p> 6079 The parameter <a class="link" href="smb.conf.5.html#USERNAMEMAPCACHETIME" target="_top">username map cache time</a> 6080 controls a mapping cache. It specifies the number of seconds a 6081 mapping from the username map file or script is to be efficiently cached. 6082 The default of 0 means no caching is done. 6083 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>username map cache time</code></em> = <code class="literal">0</code> 6084 </em></span> 6085 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map cache time</code></em> = <code class="literal">60</code> 6086 </em></span> 6087 </p></dd></dl></div></div><div class="section" title="username map script (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336873"></a> 5958 6088 5959 6089 username map script (G) 5960 </h3></div></div></div><a class="indexterm" name="id336 344"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the6090 </h3></div></div></div><a class="indexterm" name="id336874"></a><a name="USERNAMEMAPSCRIPT"></a><div class="variablelist"><dl><dt></dt><dd><p>This script is a mutually exclusive alternative to the 5961 6091 <a class="link" href="smb.conf.5.html#USERNAMEMAP" target="_top">username map</a> parameter. This parameter 5962 6092 specifies and external program or script that must accept a single … … 5969 6099 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username map script</code></em> = <code class="literal">/etc/samba/scripts/mapusers.sh</code> 5970 6100 </em></span> 5971 </p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336 415"></a>6101 </p></dd></dl></div></div><div class="section" title="username map (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id336944"></a> 5972 6102 5973 6103 username map (G) 5974 </h3></div></div></div><a class="indexterm" name="id336 416"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p>6104 </h3></div></div></div><a class="indexterm" name="id336945"></a><a name="USERNAMEMAP"></a><div class="variablelist"><dl><dt></dt><dd><p> 5975 6105 This option allows you to specify a file containing a mapping of usernames from the clients to the server. 5976 6106 This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows … … 6056 6186 # no username map</code> 6057 6187 </em></span> 6058 </p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id33 6657"></a>6188 </p></dd></dl></div></div><div class="section" title="user"><div class="titlepage"><div><div><h3 class="title"><a name="id337186"></a> 6059 6189 6060 6190 <a name="USER"></a>user 6061 </h3></div></div></div><a class="indexterm" name="id33 6658"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id336689"></a>6191 </h3></div></div></div><a class="indexterm" name="id337187"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="users"><div class="titlepage"><div><div><h3 class="title"><a name="id337217"></a> 6062 6192 6063 6193 <a name="USERS"></a>users 6064 </h3></div></div></div><a class="indexterm" name="id33 6690"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id336720"></a>6194 </h3></div></div></div><a class="indexterm" name="id337218"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#USERNAME">username</a>.</p></dd></dl></div></div><div class="section" title="username (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337248"></a> 6065 6195 6066 6196 username (S) 6067 </h3></div></div></div><a class="indexterm" name="id33 6721"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited6197 </h3></div></div></div><a class="indexterm" name="id337250"></a><a name="USERNAME"></a><div class="variablelist"><dl><dt></dt><dd><p>Multiple users may be specified in a comma-delimited 6068 6198 list, in which case the supplied password will be tested against 6069 6199 each username in turn (left to right).</p><p>The <em class="parameter"><code>username</code></em> line is needed only when … … 6103 6233 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>username</code></em> = <code class="literal">fred, mary, jack, jane, @users, @pcgroup</code> 6104 6234 </em></span> 6105 </p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 6866"></a>6235 </p></dd></dl></div></div><div class="section" title="usershare allow guests (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337395"></a> 6106 6236 6107 6237 usershare allow guests (G) 6108 </h3></div></div></div><a class="indexterm" name="id33 6867"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed6238 </h3></div></div></div><a class="indexterm" name="id337396"></a><a name="USERSHAREALLOWGUESTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether user defined shares are allowed 6109 6239 to be accessed by non-authenticated users or not. It is the equivalent 6110 6240 of allowing people who can create a share the option of setting … … 6113 6243 is set to off.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare allow guests</code></em> = <code class="literal">no</code> 6114 6244 </em></span> 6115 </p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 6915"></a>6245 </p></dd></dl></div></div><div class="section" title="usershare max shares (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337444"></a> 6116 6246 6117 6247 usershare max shares (G) 6118 </h3></div></div></div><a class="indexterm" name="id33 6916"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares6248 </h3></div></div></div><a class="indexterm" name="id337445"></a><a name="USERSHAREMAXSHARES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of user defined shares 6119 6249 that are allowed to be created by users belonging to the group owning the 6120 6250 usershare directory. If set to zero (the default) user defined shares are ignored. 6121 6251 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare max shares</code></em> = <code class="literal">0</code> 6122 6252 </em></span> 6123 </p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 6957"></a>6253 </p></dd></dl></div></div><div class="section" title="usershare owner only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337486"></a> 6124 6254 6125 6255 usershare owner only (G) 6126 </h3></div></div></div><a class="indexterm" name="id33 6958"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by6256 </h3></div></div></div><a class="indexterm" name="id337487"></a><a name="USERSHAREOWNERONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether the pathname exported by 6127 6257 a user defined shares must be owned by the user creating the 6128 6258 user defined share or not. If set to True (the default) then … … 6134 6264 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare owner only</code></em> = <code class="literal">True</code> 6135 6265 </em></span> 6136 </p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 002"></a>6266 </p></dd></dl></div></div><div class="section" title="usershare path (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337530"></a> 6137 6267 6138 6268 usershare path (G) 6139 </h3></div></div></div><a class="indexterm" name="id337 003"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the6269 </h3></div></div></div><a class="indexterm" name="id337531"></a><a name="USERSHAREPATH"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the absolute path of the directory on the 6140 6270 filesystem used to store the user defined share definition files. 6141 6271 This directory must be owned by root, and have no access for … … 6158 6288 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>usershare path</code></em> = <code class="literal">NULL</code> 6159 6289 </em></span> 6160 </p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 065"></a>6290 </p></dd></dl></div></div><div class="section" title="usershare prefix allow list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337594"></a> 6161 6291 6162 6292 usershare prefix allow list (G) 6163 </h3></div></div></div><a class="indexterm" name="id337 066"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames6293 </h3></div></div></div><a class="indexterm" name="id337595"></a><a name="USERSHAREPREFIXALLOWLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 6164 6294 the root of which are allowed to be exported by user defined share definitions. 6165 6295 If the pathname to be exported doesn't start with one of the strings in this … … 6176 6306 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix allow list</code></em> = <code class="literal">/home /data /space</code> 6177 6307 </em></span> 6178 </p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 133"></a>6308 </p></dd></dl></div></div><div class="section" title="usershare prefix deny list (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337661"></a> 6179 6309 6180 6310 usershare prefix deny list (G) 6181 </h3></div></div></div><a class="indexterm" name="id337 134"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames6311 </h3></div></div></div><a class="indexterm" name="id337662"></a><a name="USERSHAREPREFIXDENYLIST"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies a list of absolute pathnames 6182 6312 the root of which are NOT allowed to be exported by user defined share definitions. 6183 6313 If the pathname exported starts with one of the strings in this … … 6195 6325 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare prefix deny list</code></em> = <code class="literal">/etc /dev /private</code> 6196 6326 </em></span> 6197 </p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 199"></a>6327 </p></dd></dl></div></div><div class="section" title="usershare template share (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337728"></a> 6198 6328 6199 6329 usershare template share (G) 6200 </h3></div></div></div><a class="indexterm" name="id337 200"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters6330 </h3></div></div></div><a class="indexterm" name="id337729"></a><a name="USERSHARETEMPLATESHARE"></a><div class="variablelist"><dl><dt></dt><dd><p>User defined shares only have limited possible parameters 6201 6331 such as path, guest ok, etc. This parameter allows usershares to 6202 6332 "cloned" from an existing share. If "usershare template share" … … 6213 6343 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>usershare template share</code></em> = <code class="literal">template_share</code> 6214 6344 </em></span> 6215 </p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 266"></a>6345 </p></dd></dl></div></div><div class="section" title="use sendfile (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337795"></a> 6216 6346 6217 6347 use sendfile (S) 6218 </h3></div></div></div><a class="indexterm" name="id337 267"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code>6348 </h3></div></div></div><a class="indexterm" name="id337796"></a><a name="USESENDFILE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this parameter is <code class="constant">yes</code>, and the <code class="constant">sendfile()</code> 6219 6349 system call is supported by the underlying operating system, then some SMB read calls 6220 6350 (mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that … … 6225 6355 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use sendfile</code></em> = <code class="literal">false</code> 6226 6356 </em></span> 6227 </p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 319"></a>6357 </p></dd></dl></div></div><div class="section" title="use spnego (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337847"></a> 6228 6358 6229 6359 use spnego (G) 6230 </h3></div></div></div><a class="indexterm" name="id337 320"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try6360 </h3></div></div></div><a class="indexterm" name="id337848"></a><a name="USESPNEGO"></a><div class="variablelist"><dl><dt></dt><dd><p>This variable controls controls whether samba will try 6231 6361 to use Simple and Protected NEGOciation (as specified by rfc2478) with 6232 6362 WindowsXP and Windows2000 clients to agree upon an authentication mechanism. … … 6236 6366 disabled.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>use spnego</code></em> = <code class="literal">yes</code> 6237 6367 </em></span> 6238 </p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 365"></a>6368 </p></dd></dl></div></div><div class="section" title="utmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337894"></a> 6239 6369 6240 6370 utmp directory (G) 6241 </h3></div></div></div><a class="indexterm" name="id337 366"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has6371 </h3></div></div></div><a class="indexterm" name="id337895"></a><a name="UTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is only available if Samba has 6242 6372 been configured and compiled with the option <code class="literal"> 6243 6373 --with-utmp</code>. It specifies a directory pathname that is … … 6251 6381 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>utmp directory</code></em> = <code class="literal">/var/run/utmp</code> 6252 6382 </em></span> 6253 </p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337 439"></a>6383 </p></dd></dl></div></div><div class="section" title="utmp (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id337967"></a> 6254 6384 6255 6385 utmp (G) 6256 </h3></div></div></div><a class="indexterm" name="id337 440"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p>6386 </h3></div></div></div><a class="indexterm" name="id337968"></a><a name="UTMP"></a><div class="variablelist"><dl><dt></dt><dd><p> 6257 6387 This boolean parameter is only available if Samba has been configured and compiled 6258 6388 with the option <code class="literal">--with-utmp</code>. If set to … … 6266 6396 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>utmp</code></em> = <code class="literal">no</code> 6267 6397 </em></span> 6268 </p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7496"></a>6398 </p></dd></dl></div></div><div class="section" title="valid users (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338025"></a> 6269 6399 6270 6400 valid users (S) 6271 </h3></div></div></div><a class="indexterm" name="id33 7497"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>6401 </h3></div></div></div><a class="indexterm" name="id338026"></a><a name="VALIDUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p> 6272 6402 This is a list of users that should be allowed to login to this service. Names starting with 6273 6403 '@', '+' and '&' are interpreted using the same rules as described in the … … 6285 6415 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>valid users</code></em> = <code class="literal">greg, @pcusers</code> 6286 6416 </em></span> 6287 </p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7583"></a>6417 </p></dd></dl></div></div><div class="section" title="-valid (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338111"></a> 6288 6418 6289 6419 -valid (S) 6290 </h3></div></div></div><a class="indexterm" name="id33 7584"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is6420 </h3></div></div></div><a class="indexterm" name="id338112"></a><a name="-VALID"></a><div class="variablelist"><dl><dt></dt><dd><p> This parameter indicates whether a share is 6291 6421 valid and thus can be used. When this parameter is set to false, 6292 6422 the share will be in no way visible nor accessible. … … 6297 6427 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>-valid</code></em> = <code class="literal">yes</code> 6298 6428 </em></span> 6299 </p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7629"></a>6429 </p></dd></dl></div></div><div class="section" title="veto files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338157"></a> 6300 6430 6301 6431 veto files (S) 6302 </h3></div></div></div><a class="indexterm" name="id33 7630"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>6432 </h3></div></div></div><a class="indexterm" name="id338158"></a><a name="VETOFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 6303 6433 This is a list of files and directories that are neither visible nor accessible. Each entry in 6304 6434 the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?' … … 6331 6461 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>veto files</code></em> = <code class="literal">No files or directories are vetoed.</code> 6332 6462 </em></span> 6333 </p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7736"></a>6463 </p></dd></dl></div></div><div class="section" title="veto oplock files (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338264"></a> 6334 6464 6335 6465 veto oplock files (S) 6336 </h3></div></div></div><a class="indexterm" name="id33 7737"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p>6466 </h3></div></div></div><a class="indexterm" name="id338266"></a><a name="VETOOPLOCKFILES"></a><div class="variablelist"><dl><dt></dt><dd><p> 6337 6467 This parameter is only valid when the <a class="link" href="smb.conf.5.html#OPLOCKS" target="_top">oplocks</a> 6338 6468 parameter is turned on for a share. It allows the Samba administrator … … 6355 6485 # No files are vetoed for oplock grants</code> 6356 6486 </em></span> 6357 </p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7822"></a>6487 </p></dd></dl></div></div><div class="section" title="vfs object"><div class="titlepage"><div><div><h3 class="title"><a name="id338350"></a> 6358 6488 6359 6489 <a name="VFSOBJECT"></a>vfs object 6360 </h3></div></div></div><a class="indexterm" name="id33 7823"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id337854"></a>6490 </h3></div></div></div><a class="indexterm" name="id338351"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#VFSOBJECTS">vfs objects</a>.</p></dd></dl></div></div><div class="section" title="vfs objects (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338382"></a> 6361 6491 6362 6492 vfs objects (S) 6363 </h3></div></div></div><a class="indexterm" name="id33 7855"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which6493 </h3></div></div></div><a class="indexterm" name="id338383"></a><a name="VFSOBJECTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the backend names which 6364 6494 are used for Samba VFS I/O operations. By default, normal 6365 6495 disk I/O operations are used but these can be overloaded … … 6368 6498 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>vfs objects</code></em> = <code class="literal">extd_audit recycle</code> 6369 6499 </em></span> 6370 </p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7912"></a>6500 </p></dd></dl></div></div><div class="section" title="volume (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338440"></a> 6371 6501 6372 6502 volume (S) 6373 </h3></div></div></div><a class="indexterm" name="id33 7913"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label6503 </h3></div></div></div><a class="indexterm" name="id338441"></a><a name="VOLUME"></a><div class="variablelist"><dl><dt></dt><dd><p>This allows you to override the volume label 6374 6504 returned for a share. Useful for CDROMs with installation programs 6375 6505 that insist on a particular volume label.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>volume</code></em> = <code class="literal"> 6376 6506 # the name of the share</code> 6377 6507 </em></span> 6378 </p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 7953"></a>6508 </p></dd></dl></div></div><div class="section" title="wide links (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id338482"></a> 6379 6509 6380 6510 wide links (S) 6381 </h3></div></div></div><a class="indexterm" name="id33 7954"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links6511 </h3></div></div></div><a class="indexterm" name="id338483"></a><a name="WIDELINKS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not links 6382 6512 in the UNIX file system may be followed by the server. Links 6383 6513 that point to areas within the directory tree exported by the … … 6392 6522 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wide links</code></em> = <code class="literal">no</code> 6393 6523 </em></span> 6394 </p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338 014"></a>6524 </p></dd></dl></div></div><div class="section" title="winbind cache time (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338542"></a> 6395 6525 6396 6526 winbind cache time (G) 6397 </h3></div></div></div><a class="indexterm" name="id338 015"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6527 </h3></div></div></div><a class="indexterm" name="id338543"></a><a name="WINBINDCACHETIME"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6398 6528 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will cache 6399 6529 user and group information before querying a Windows NT server … … 6403 6533 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind cache time</code></em> = <code class="literal">300</code> 6404 6534 </em></span> 6405 </p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338 080"></a>6535 </p></dd></dl></div></div><div class="section" title="winbind enum groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338609"></a> 6406 6536 6407 6537 winbind enum groups (G) 6408 </h3></div></div></div><a class="indexterm" name="id338 082"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress6538 </h3></div></div></div><a class="indexterm" name="id338610"></a><a name="WINBINDENUMGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be necessary to suppress 6409 6539 the enumeration of groups through the <code class="literal">setgrent()</code>, 6410 6540 <code class="literal">getgrent()</code> and … … 6414 6544 call will not return any data. </p><div class="warning" title="Warning" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Warning</h3><p>Turning off group enumeration may cause some programs to behave oddly. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum groups</code></em> = <code class="literal">no</code> 6415 6545 </em></span> 6416 </p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338 168"></a>6546 </p></dd></dl></div></div><div class="section" title="winbind enum users (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338697"></a> 6417 6547 6418 6548 winbind enum users (G) 6419 </h3></div></div></div><a class="indexterm" name="id338 169"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be6549 </h3></div></div></div><a class="indexterm" name="id338698"></a><a name="WINBINDENUMUSERS"></a><div class="variablelist"><dl><dt></dt><dd><p>On large installations using <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> it may be 6420 6550 necessary to suppress the enumeration of users through the <code class="literal">setpwent()</code>, 6421 6551 <code class="literal">getpwent()</code> and … … 6429 6559 usernames. </p></div><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind enum users</code></em> = <code class="literal">no</code> 6430 6560 </em></span> 6431 </p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338 257"></a>6561 </p></dd></dl></div></div><div class="section" title="winbind expand groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338786"></a> 6432 6562 6433 6563 winbind expand groups (G) 6434 </h3></div></div></div><a class="indexterm" name="id338 258"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd6564 </h3></div></div></div><a class="indexterm" name="id338787"></a><a name="WINBINDEXPANDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>This option controls the maximum depth that winbindd 6435 6565 will traverse when flattening nested group memberships 6436 6566 of Windows domain groups. This is different from the … … 6444 6574 incoming NSS or authentication requests during this time.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind expand groups</code></em> = <code class="literal">1</code> 6445 6575 </em></span> 6446 </p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338319"></a> 6576 </p></dd></dl></div></div><div class="section" title="winbind max clients (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338848"></a> 6577 6578 winbind max clients (G) 6579 </h3></div></div></div><a class="indexterm" name="id338849"></a><a name="WINBINDMAXCLIENTS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the maximum number of clients 6580 the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon can connect with. 6581 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind max clients</code></em> = <code class="literal">200</code> 6582 </em></span> 6583 </p></dd></dl></div></div><div class="section" title="winbind max domain connections (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338897"></a> 6584 6585 winbind max domain connections (G) 6586 </h3></div></div></div><a class="indexterm" name="id338898"></a><a name="WINBINDMAXDOMAINCONNECTIONS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the maximum number of simultaneous 6587 connections that the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should open to the 6588 domain controller of one domain. 6589 Setting this parameter to a value greater than 1 can improve 6590 scalability with many simultaneous winbind requests, 6591 some of which might be slow. 6592 </p><p> 6593 Note that if <a class="link" href="smb.conf.5.html#WINBINDOFFLINELOGON" target="_top">winbind offline logon</a> is set to 6594 <code class="constant">Yes</code>, then only one 6595 DC connection is allowed per domain, regardless of this setting. 6596 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind max domain connections</code></em> = <code class="literal">1</code> 6597 </em></span> 6598 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind max domain connections</code></em> = <code class="literal">10</code> 6599 </em></span> 6600 </p></dd></dl></div></div><div class="section" title="winbind nested groups (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id338983"></a> 6447 6601 6448 6602 winbind nested groups (G) 6449 </h3></div></div></div><a class="indexterm" name="id338 320"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested6603 </h3></div></div></div><a class="indexterm" name="id338984"></a><a name="WINBINDNESTEDGROUPS"></a><div class="variablelist"><dl><dt></dt><dd><p>If set to yes, this parameter activates the support for nested 6450 6604 groups. Nested groups are also called local groups or 6451 6605 aliases. They work like their counterparts in Windows: Nested … … 6455 6609 groups, you need to run nss_winbind.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind nested groups</code></em> = <code class="literal">yes</code> 6456 6610 </em></span> 6457 </p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8364"></a>6611 </p></dd></dl></div></div><div class="section" title="winbind normalize names (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339032"></a> 6458 6612 6459 6613 winbind normalize names (G) 6460 </h3></div></div></div><a class="indexterm" name="id33 8365"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace6614 </h3></div></div></div><a class="indexterm" name="id339033"></a><a name="WINBINDNORMALIZENAMES"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether winbindd will replace 6461 6615 whitespace in user and group names with an underscore (_) character. 6462 6616 For example, whether the name "Space Kadet" should be … … 6478 6632 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind normalize names</code></em> = <code class="literal">yes</code> 6479 6633 </em></span> 6480 </p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8433"></a>6634 </p></dd></dl></div></div><div class="section" title="winbind nss info (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339101"></a> 6481 6635 6482 6636 winbind nss info (G) 6483 </h3></div></div></div><a class="indexterm" name="id33 8434"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name6637 </h3></div></div></div><a class="indexterm" name="id339102"></a><a name="WINBINDNSSINFO"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control how Winbind retrieves Name 6484 6638 Service Information to construct a user's home directory and login shell. 6485 6639 Currently the following settings are available: … … 6502 6656 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind nss info</code></em> = <code class="literal">sfu</code> 6503 6657 </em></span> 6504 </p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8540"></a>6658 </p></dd></dl></div></div><div class="section" title="winbind offline logon (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339208"></a> 6505 6659 6506 6660 winbind offline logon (G) 6507 </h3></div></div></div><a class="indexterm" name="id33 8541"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should6661 </h3></div></div></div><a class="indexterm" name="id339209"></a><a name="WINBINDOFFLINELOGON"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should 6508 6662 allow to login with the <em class="parameter"><code>pam_winbind</code></em> 6509 6663 module using Cached Credentials. If enabled, winbindd will store user credentials … … 6513 6667 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind offline logon</code></em> = <code class="literal">true</code> 6514 6668 </em></span> 6515 </p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8605"></a>6669 </p></dd></dl></div></div><div class="section" title="winbind reconnect delay (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339274"></a> 6516 6670 6517 6671 winbind reconnect delay (G) 6518 </h3></div></div></div><a class="indexterm" name="id33 8606"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of6672 </h3></div></div></div><a class="indexterm" name="id339275"></a><a name="WINBINDRECONNECTDELAY"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies the number of 6519 6673 seconds the <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon will wait between 6520 6674 attempts to contact a Domain controller for a domain that is 6521 6675 determined to be down or not contactable.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind reconnect delay</code></em> = <code class="literal">30</code> 6522 6676 </em></span> 6523 </p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8655"></a>6677 </p></dd></dl></div></div><div class="section" title="winbind refresh tickets (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339324"></a> 6524 6678 6525 6679 winbind refresh tickets (G) 6526 </h3></div></div></div><a class="indexterm" name="id33 8656"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets6680 </h3></div></div></div><a class="indexterm" name="id339325"></a><a name="WINBINDREFRESHTICKETS"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is designed to control whether Winbind should refresh Kerberos Tickets 6527 6681 retrieved using the <em class="parameter"><code>pam_winbind</code></em> module. 6528 6682 … … 6531 6685 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind refresh tickets</code></em> = <code class="literal">true</code> 6532 6686 </em></span> 6533 </p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8721"></a>6687 </p></dd></dl></div></div><div class="section" title="winbind rpc only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339389"></a> 6534 6688 6535 6689 winbind rpc only (G) 6536 </h3></div></div></div><a class="indexterm" name="id33 8722"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6690 </h3></div></div></div><a class="indexterm" name="id339390"></a><a name="WINBINDRPCONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6537 6691 Setting this parameter to <code class="literal">yes</code> forces 6538 6692 winbindd to use RPC instead of LDAP to retrieve information from Domain … … 6540 6694 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind rpc only</code></em> = <code class="literal">no</code> 6541 6695 </em></span> 6542 </p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8768"></a>6696 </p></dd></dl></div></div><div class="section" title="winbind separator (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339436"></a> 6543 6697 6544 6698 winbind separator (G) 6545 </h3></div></div></div><a class="indexterm" name="id33 8769"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character6699 </h3></div></div></div><a class="indexterm" name="id339437"></a><a name="WINBINDSEPARATOR"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter allows an admin to define the character 6546 6700 used when listing a username of the form of <em class="replaceable"><code>DOMAIN 6547 6701 </code></em>\<em class="replaceable"><code>user</code></em>. This parameter … … 6554 6708 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind separator</code></em> = <code class="literal">+</code> 6555 6709 </em></span> 6556 </p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8850"></a>6710 </p></dd></dl></div></div><div class="section" title="winbind trusted domains only (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339519"></a> 6557 6711 6558 6712 winbind trusted domains only (G) 6559 </h3></div></div></div><a class="indexterm" name="id33 8851"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p>6713 </h3></div></div></div><a class="indexterm" name="id339520"></a><a name="WINBINDTRUSTEDDOMAINSONLY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6560 6714 This parameter is designed to allow Samba servers that are members 6561 6715 of a Samba controlled domain to use UNIX accounts distributed via NIS, … … 6568 6722 </p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind trusted domains only</code></em> = <code class="literal">no</code> 6569 6723 </em></span> 6570 </p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8912"></a>6724 </p></dd></dl></div></div><div class="section" title="winbind use default domain (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339580"></a> 6571 6725 6572 6726 winbind use default domain (G) 6573 </h3></div></div></div><a class="indexterm" name="id33 8913"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the6727 </h3></div></div></div><a class="indexterm" name="id339582"></a><a name="WINBINDUSEDEFAULTDOMAIN"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter specifies whether the 6574 6728 <a class="citerefentry" href="winbindd.8.html"><span class="citerefentry"><span class="refentrytitle">winbindd</span>(8)</span></a> daemon should operate on users 6575 6729 without domain component in their username. Users without a domain 6576 6730 component are treated as is part of the winbindd server's own 6577 domain. While this does not ben ifit Windows users, it makes SSH, FTP and6731 domain. While this does not benefit Windows users, it makes SSH, FTP and 6578 6732 e-mail function in a way much closer to the way they 6579 would in a native unix system.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">no</code> 6733 would in a native unix system.</p><p>This option should be avoided if possible. It can cause confusion 6734 about responsibilities for a user or group. In many situations it is 6735 not clear whether winbind or /etc/passwd should be seen as authoritative 6736 for a user, likewise for groups.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">no</code> 6580 6737 </em></span> 6581 6738 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>winbind use default domain</code></em> = <code class="literal">yes</code> 6582 6739 </em></span> 6583 </p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id33 8981"></a>6740 </p></dd></dl></div></div><div class="section" title="wins hook (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339655"></a> 6584 6741 6585 6742 wins hook (G) 6586 </h3></div></div></div><a class="indexterm" name="id33 8982"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this6743 </h3></div></div></div><a class="indexterm" name="id339656"></a><a name="WINSHOOK"></a><div class="variablelist"><dl><dt></dt><dd><p>When Samba is running as a WINS server this 6587 6744 allows you to call an external program for all changes to the 6588 6745 WINS database. The primary use for this option is to allow the … … 6605 6762 empty then the name should be deleted.</p></li></ul></div><p>An example script that calls the BIND dynamic DNS update 6606 6763 program <code class="literal">nsupdate</code> is provided in the examples 6607 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339 076"></a>6764 directory of the Samba source code. </p><p><span class="emphasis"><em>No default</em></span></p></dd></dl></div></div><div class="section" title="wins proxy (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339749"></a> 6608 6765 6609 6766 wins proxy (G) 6610 </h3></div></div></div><a class="indexterm" name="id339 077"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name6767 </h3></div></div></div><a class="indexterm" name="id339750"></a><a name="WINSPROXY"></a><div class="variablelist"><dl><dt></dt><dd><p>This is a boolean that controls if <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> will respond to broadcast name 6611 6768 queries on behalf of other hosts. You may need to set this 6612 6769 to <code class="constant">yes</code> for some older clients.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins proxy</code></em> = <code class="literal">no</code> 6613 6770 </em></span> 6614 </p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339 129"></a>6771 </p></dd></dl></div></div><div class="section" title="wins server (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339803"></a> 6615 6772 6616 6773 wins server (G) 6617 </h3></div></div></div><a class="indexterm" name="id339 130"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP6774 </h3></div></div></div><a class="indexterm" name="id339804"></a><a name="WINSSERVER"></a><div class="variablelist"><dl><dt></dt><dd><p>This specifies the IP address (or DNS name: IP 6618 6775 address for preference) of the WINS server that <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> should register with. If you have a WINS server on 6619 6776 your network then you should set this to the WINS server's IP.</p><p>You should point this at your WINS server if you have a … … 6634 6791 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wins server</code></em> = <code class="literal">192.9.200.1 192.168.2.61</code> 6635 6792 </em></span> 6636 </p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339 232"></a>6793 </p></dd></dl></div></div><div class="section" title="wins support (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339905"></a> 6637 6794 6638 6795 wins support (G) 6639 </h3></div></div></div><a class="indexterm" name="id339 233"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should6796 </h3></div></div></div><a class="indexterm" name="id339906"></a><a name="WINSSUPPORT"></a><div class="variablelist"><dl><dt></dt><dd><p>This boolean controls if the <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a> process in Samba will act as a WINS server. You should 6640 6797 not set this to <code class="constant">yes</code> unless you have a multi-subnetted network and 6641 6798 you wish a particular <code class="literal">nmbd</code> to be your WINS server. … … 6643 6800 on more than one machine in your network.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>wins support</code></em> = <code class="literal">no</code> 6644 6801 </em></span> 6645 </p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339 298"></a>6802 </p></dd></dl></div></div><div class="section" title="workgroup (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id339972"></a> 6646 6803 6647 6804 workgroup (G) 6648 </h3></div></div></div><a class="indexterm" name="id339 299"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will6805 </h3></div></div></div><a class="indexterm" name="id339973"></a><a name="WORKGROUP"></a><div class="variablelist"><dl><dt></dt><dd><p>This controls what workgroup your server will 6649 6806 appear to be in when queried by clients. Note that this parameter 6650 6807 also controls the Domain name used with … … 6654 6811 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>workgroup</code></em> = <code class="literal">MYGROUP</code> 6655 6812 </em></span> 6656 </p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id3 39369"></a>6813 </p></dd></dl></div></div><div class="section" title="writable"><div class="titlepage"><div><div><h3 class="title"><a name="id340043"></a> 6657 6814 6658 6815 <a name="WRITABLE"></a>writable 6659 </h3></div></div></div><a class="indexterm" name="id3 39370"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id339400"></a>6816 </h3></div></div></div><a class="indexterm" name="id340044"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter is a synonym for <a class="link" href="#WRITEABLE">writeable</a>.</p></dd></dl></div></div><div class="section" title="writeable (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id340074"></a> 6660 6817 6661 6818 writeable (S) 6662 </h3></div></div></div><a class="indexterm" name="id3 39401"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code>6663 </em></span> 6664 </p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3 39451"></a>6819 </h3></div></div></div><a class="indexterm" name="id340075"></a><a name="WRITEABLE"></a><div class="variablelist"><dl><dt></dt><dd><p>Inverted synonym for <a class="link" href="smb.conf.5.html#READONLY" target="_top">read only</a>.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>writeable</code></em> = <code class="literal">no</code> 6820 </em></span> 6821 </p></dd></dl></div></div><div class="section" title="write cache size (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id340125"></a> 6665 6822 6666 6823 write cache size (S) 6667 </h3></div></div></div><a class="indexterm" name="id3 39452"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value,6824 </h3></div></div></div><a class="indexterm" name="id340126"></a><a name="WRITECACHESIZE"></a><div class="variablelist"><dl><dt></dt><dd><p>If this integer parameter is set to non-zero value, 6668 6825 Samba will create an in-memory cache for each oplocked file 6669 6826 (it does <span class="emphasis"><em>not</em></span> do this for … … 6683 6840 # for a 256k cache size per file</code> 6684 6841 </em></span> 6685 </p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id3 39525"></a>6842 </p></dd></dl></div></div><div class="section" title="write list (S)"><div class="titlepage"><div><div><h3 class="title"><a name="id340199"></a> 6686 6843 6687 6844 write list (S) 6688 </h3></div></div></div><a class="indexterm" name="id3 39526"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p>6845 </h3></div></div></div><a class="indexterm" name="id340200"></a><a name="WRITELIST"></a><div class="variablelist"><dl><dt></dt><dd><p> 6689 6846 This is a list of users that are given read-write access to a service. If the 6690 6847 connecting user is in this list then they will be given write access, no matter … … 6701 6858 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>write list</code></em> = <code class="literal">admin, root, @staff</code> 6702 6859 </em></span> 6703 </p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3 39614"></a>6860 </p></dd></dl></div></div><div class="section" title="write raw (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id340287"></a> 6704 6861 6705 6862 write raw (G) 6706 </h3></div></div></div><a class="indexterm" name="id3 39615"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server6863 </h3></div></div></div><a class="indexterm" name="id340288"></a><a name="WRITERAW"></a><div class="variablelist"><dl><dt></dt><dd><p>This parameter controls whether or not the server 6707 6864 will support raw write SMB's when transferring data from clients. 6708 6865 You should never need to change this parameter.</p><p>Default: <span class="emphasis"><em><em class="parameter"><code>write raw</code></em> = <code class="literal">yes</code> 6709 6866 </em></span> 6710 </p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id3 39656"></a>6867 </p></dd></dl></div></div><div class="section" title="wtmp directory (G)"><div class="titlepage"><div><div><h3 class="title"><a name="id340330"></a> 6711 6868 6712 6869 wtmp directory (G) 6713 </h3></div></div></div><a class="indexterm" name="id3 39657"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p>6870 </h3></div></div></div><a class="indexterm" name="id340331"></a><a name="WTMPDIRECTORY"></a><div class="variablelist"><dl><dt></dt><dd><p> 6714 6871 This parameter is only available if Samba has been configured and compiled with the option <code class="literal"> 6715 6872 --with-utmp</code>. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on … … 6723 6880 </p><p>Example: <span class="emphasis"><em><em class="parameter"><code>wtmp directory</code></em> = <code class="literal">/var/log/wtmp</code> 6724 6881 </em></span> 6725 </p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id3 39734"></a><h2>WARNINGS</h2><p>6882 </p></dd></dl></div></div></div></div><div class="refsect1" title="WARNINGS"><a name="id340408"></a><h2>WARNINGS</h2><p> 6726 6883 Although the configuration file permits service names to contain spaces, your client software may not. 6727 6884 Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility. … … 6736 6893 care when designing these sections. In particular, ensure that the permissions on spool directories are 6737 6894 correct. 6738 </p></div><div class="refsect1" title="VERSION"><a name="id3 39777"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id339788"></a><h2>SEE ALSO</h2><p>6739 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id3 39866"></a><h2>AUTHOR</h2><p>6895 </p></div><div class="refsect1" title="VERSION"><a name="id340451"></a><h2>VERSION</h2><p>This man page is correct for version 3 of the Samba suite.</p></div><div class="refsect1" title="SEE ALSO"><a name="id340462"></a><h2>SEE ALSO</h2><p> 6896 <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a>, <a class="citerefentry" href="smbpasswd.8.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(8)</span></a>, <a class="citerefentry" href="swat.8.html"><span class="citerefentry"><span class="refentrytitle">swat</span>(8)</span></a>, <a class="citerefentry" href="smbd.8.html"><span class="citerefentry"><span class="refentrytitle">smbd</span>(8)</span></a>, <a class="citerefentry" href="nmbd.8.html"><span class="citerefentry"><span class="refentrytitle">nmbd</span>(8)</span></a>, <a class="citerefentry" href="smbclient.1.html"><span class="citerefentry"><span class="refentrytitle">smbclient</span>(1)</span></a>, <a class="citerefentry" href="nmblookup.1.html"><span class="citerefentry"><span class="refentrytitle">nmblookup</span>(1)</span></a>, <a class="citerefentry" href="testparm.1.html"><span class="citerefentry"><span class="refentrytitle">testparm</span>(1)</span></a>, <a class="citerefentry" href="testprns.1.html"><span class="citerefentry"><span class="refentrytitle">testprns</span>(1)</span></a>.</p></div><div class="refsect1" title="AUTHOR"><a name="id340541"></a><h2>AUTHOR</h2><p> 6740 6897 The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed 6741 6898 by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
Note:
See TracChangeset
for help on using the changeset viewer.
