Changeset 988 for vendor/current/docs-xml/manpages/smbcacls.1.xml
- Timestamp:
- Nov 24, 2016, 1:14:11 PM (9 years ago)
- Location:
- vendor/current/docs-xml/manpages
- Files:
-
- 1 edited
- 1 moved
Legend:
- Unmodified
- Added
- Removed
-
vendor/current/docs-xml/manpages/smbcacls.1.xml
r860 r988 8 8 <refmiscinfo class="source">Samba</refmiscinfo> 9 9 <refmiscinfo class="manual">User Commands</refmiscinfo> 10 <refmiscinfo class="version"> 3.6</refmiscinfo>10 <refmiscinfo class="version">4.4</refmiscinfo> 11 11 </refmeta> 12 12 … … 22 22 <arg choice="req">//server/share</arg> 23 23 <arg choice="req">/filename</arg> 24 <arg choice="opt">-D|--delete acl s</arg>25 <arg choice="opt">-M|--modify acl s</arg>26 <arg choice="opt">-a|--add acl s</arg>27 <arg choice="opt">-S|--set acl s</arg>24 <arg choice="opt">-D|--delete acl</arg> 25 <arg choice="opt">-M|--modify acl</arg> 26 <arg choice="opt">-a|--add acl</arg> 27 <arg choice="opt">-S|--set acl</arg> 28 28 <arg choice="opt">-C|--chown name</arg> 29 29 <arg choice="opt">-G|--chgrp name</arg> 30 <arg choice="opt">-I allow|r omove|copy</arg>30 <arg choice="opt">-I allow|remove|copy</arg> 31 31 <arg choice="opt">--numeric</arg> 32 32 <arg choice="opt">-t</arg> 33 33 <arg choice="opt">-U username</arg> 34 <arg choice="opt">-h</arg>35 34 <arg choice="opt">-d</arg> 35 <arg choice="opt">-e</arg> 36 <arg choice="opt">-m|--max-protocol LEVEL</arg> 37 <arg choice="opt">--query-security-info FLAGS</arg> 38 <arg choice="opt">--set-security-info FLAGS</arg> 39 <arg choice="opt">--sddl</arg> 40 <arg choice="opt">--domain-sid SID</arg> 36 41 </cmdsynopsis> 37 42 </refsynopsisdiv> … … 44 49 45 50 <para>The <command>smbcacls</command> program manipulates NT Access Control 46 Lists (ACLs) on SMB file shares. </para> 51 Lists (ACLs) on SMB file shares. An ACL is comprised zero or more Access 52 Control Entries (ACEs), which define access restrictions for a specific 53 user or group.</para> 47 54 </refsect1> 48 55 … … 57 64 <variablelist> 58 65 <varlistentry> 59 <term>-a|--add acl s</term>60 <listitem><para>Add the ACLs specified to the ACL list. Existing61 access control entries are unchanged. 62 </varlistentry> 63 64 65 66 <varlistentry> 67 <term>-M|--modify acl s</term>68 <listitem><para>Modify the mask value (permissions) for the AC Ls66 <term>-a|--add acl</term> 67 <listitem><para>Add the entries specified to the ACL. Existing 68 access control entries are unchanged.</para></listitem> 69 </varlistentry> 70 71 72 73 <varlistentry> 74 <term>-M|--modify acl</term> 75 <listitem><para>Modify the mask value (permissions) for the ACEs 69 76 specified on the command line. An error will be printed for each 70 AC L specified that was not already present in the ACL list71 </para></listitem> 72 </varlistentry> 73 74 75 76 <varlistentry> 77 <term>-D|--delete acl s</term>78 <listitem><para>Delete any AC Ls specified on the command line.79 An error will be printed for each AC L specified that was not80 already present in the ACL list. </para></listitem>81 </varlistentry> 82 83 84 85 <varlistentry> 86 <term>-S|--set acl s</term>87 <listitem><para>This command sets the ACL s on the file with88 only the ones specified on the command line. All other ACLs are89 erased. Note that the ACL specified must contain at least a revision,77 ACE specified that was not already present in the object's ACL. 78 </para></listitem> 79 </varlistentry> 80 81 82 83 <varlistentry> 84 <term>-D|--delete acl</term> 85 <listitem><para>Delete any ACEs specified on the command line. 86 An error will be printed for each ACE specified that was not 87 already present in the object's ACL. </para></listitem> 88 </varlistentry> 89 90 91 92 <varlistentry> 93 <term>-S|--set acl</term> 94 <listitem><para>This command sets the ACL on the object with 95 only what is specified on the command line. Any existing ACL 96 is erased. Note that the ACL specified must contain at least a revision, 90 97 type, owner and group for the call to succeed. </para></listitem> 91 98 </varlistentry> … … 131 138 132 139 133 134 140 <varlistentry> 135 141 <term>--numeric</term> … … 140 146 141 147 <varlistentry> 148 <term>-m|--max-protocol PROTOCOL_NAME</term> 149 <listitem><para>This allows the user to select the 150 highest SMB protocol level that smbcacls will use to 151 connect to the server. By default this is set to 152 NT1, which is the highest available SMB1 protocol. 153 To connect using SMB2 or SMB3 protocol, use the 154 strings SMB2 or SMB3 respectively. Note that to connect 155 to a Windows 2012 server with encrypted transport selecting 156 a max-protocol of SMB3 is required. 157 </para></listitem> 158 </varlistentry> 159 160 <varlistentry> 142 161 <term>-t|--test-args</term> 143 162 <listitem><para> … … 146 165 </para></listitem> 147 166 </varlistentry> 148 149 &stdarg.help; 167 168 <varlistentry> 169 <term>--query-security-info FLAGS</term> 170 <listitem><para>The security-info flags for queries. 171 </para></listitem> 172 </varlistentry> 173 174 <varlistentry> 175 <term>--set-security-info FLAGS</term> 176 <listitem><para>The security-info flags for queries. 177 </para></listitem> 178 </varlistentry> 179 180 <varlistentry> 181 <term>--sddl</term> 182 <listitem><para>Output and input acls in sddl format. 183 </para></listitem> 184 </varlistentry> 185 186 <varlistentry> 187 <term>--domain-sid SID</term> 188 <listitem><para>SID used for sddl processing. 189 </para></listitem> 190 </varlistentry> 191 150 192 &stdarg.server.debug; 151 193 &popt.common.samba; 152 194 &popt.common.credentials; 195 &popt.common.connection; 196 &popt.autohelp; 153 197 </variablelist> 154 198 </refsect1> … … 158 202 <title>ACL FORMAT</title> 159 203 160 <para>The format of an ACL is one or more ACL entries separated by204 <para>The format of an ACL is one or more entries separated by 161 205 either commas or newlines. An ACL entry is one of the following: </para> 162 206 … … 179 223 the file or directory resides. </para> 180 224 181 <para>AC Ls specify permissions granted to the SID. This SID again182 can be specified in S-1-x-y-z format or as a name in which case183 it is resolved against the server on which the file or directory184 resides. The type, flags and mask values determine the type of185 access granted to the SID. </para>225 <para>ACEs are specified with an "ACL:" prefix, and define permissions 226 granted to an SID. The SID again can be specified in S-1-x-y-z format 227 or as a name in which case it is resolved against the server on which 228 the file or directory resides. The type, flags and mask values 229 determine the type of access granted to the SID. </para> 186 230 187 231 <para>The type can be either ALLOWED or DENIED to allow/deny access 188 to the SID. The flags values are generally zero for file AC Ls and189 either 9 or 2 for directory AC Ls. Some common flags are: </para>232 to the SID. The flags values are generally zero for file ACEs and 233 either 9 or 2 for directory ACEs. Some common flags are: </para> 190 234 191 235 <itemizedlist> … … 196 240 </itemizedlist> 197 241 198 <para>At present flags can only be specified as decimal or242 <para>At present, flags can only be specified as decimal or 199 243 hexadecimal values.</para> 200 244 … … 244 288 <title>VERSION</title> 245 289 246 <para>This man page is correct for version 3of the Samba suite.</para>290 <para>This man page is correct for version 4 of the Samba suite.</para> 247 291 </refsect1> 248 292
Note:
See TracChangeset
for help on using the changeset viewer.