Ignore:
Timestamp:
Nov 24, 2016, 1:14:11 PM (9 years ago)
Author:
Silvan Scherrer
Message:

Samba Server: update vendor to version 4.4.3

Location:
vendor/current/docs-xml/smbdotconf
Files:
66 added
17 deleted
374 edited

Legend:

Unmodified
Added
Removed

  • vendor/current/docs-xml/smbdotconf/base/bindinterfacesonly.xml

    r414 r988  
    11<samba:parameter name="bind interfaces only"
    2                                 type="boolean"
     2                 type="boolean"
    33                 context="G"
    4                  advanced="1" wizard="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    3837        If <smbconfoption name="bind interfaces only"/> is set and the network address
    3938         <emphasis>127.0.0.1</emphasis> is not added to the <smbconfoption name="interfaces"/> parameter list
    40          <citerefentry><refentrytitle>smbpasswd</refentrytitle> <manvolnum>8</manvolnum></citerefentry> and
    41          <citerefentry><refentrytitle>swat</refentrytitle> <manvolnum>8</manvolnum></citerefentry> may not work as
    42         expected due to the reasons covered below.
     39         <citerefentry><refentrytitle>smbpasswd</refentrytitle> <manvolnum>8</manvolnum></citerefentry> may not
     40         work as expected due to the reasons covered below.
    4341        </para>
    4442
    … …  
    5553        </para>
    5654
    57         <para>
    58         The <command moreinfo="none">swat</command> status page tries to connect with <command
    59         moreinfo="none">smbd</command> and <command moreinfo="none">nmbd</command> at the address
    60         <emphasis>127.0.0.1</emphasis> to determine if they are running.  Not adding <emphasis>127.0.0.1</emphasis>
    61         will cause <command moreinfo="none"> smbd</command> and <command moreinfo="none">nmbd</command> to always show
    62         &quot;not running&quot; even if they really are.  This can prevent <command moreinfo="none"> swat</command>
    63         from starting/stopping/restarting <command moreinfo="none">smbd</command> and <command
    64         moreinfo="none">nmbd</command>.
    65         </para>
    66 
    6755</description>
    6856<value type="default">no</value>

  • vendor/current/docs-xml/smbdotconf/base/comment.xml

    r414 r988  
    11<samba:parameter name="comment"
    22                 context="S"
    3                                  type="string"
    4                  basic="1" advanced="1" share="1" print="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/base/configbackend.xml

    r414 r988  
    11<samba:parameter name="config backend"
    22                 context="G"
    3                                 type="enum"
    4                  advanced="1" developer="1"
     3                type="enum"
     4                 enumlist="enum_config_backend"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/base/doscharset.xml

    r414 r988  
    11<samba:parameter name="dos charset"
    2                                 type="string"
     2                type="string"
    33                 context="G"
    4                  advanced="1" developer="1"
    5                                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     4                 constant="1"
     5                 handler="handle_dos_charset"
     6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>
    78        <para>DOS SMB clients assume the server has

  • vendor/current/docs-xml/smbdotconf/base/enablecorefiles.xml

    r414 r988  
    11<samba:parameter name="enable core files"
    22                 context="G"
    3                  basic="1" advanced="1" developer="1"
     3                 type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55

  • vendor/current/docs-xml/smbdotconf/base/interfaces.xml

    r414 r988  
    11<samba:parameter name="interfaces"
    22                 context="G"
    3                                  type="list"
    4                  basic="1" advanced="1" wizard="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    4039        except the loopback adaptor (IP address 127.0.0.1).
    4140        </para>
    42        
     41
     42        <para>
     43        In order to support SMB3 multi-channel configurations, smbd understands
     44        some extra data that can be appended after the actual interface with
     45        this extended syntax:
     46        </para>
     47
     48        <para>
     49        interface[;key1=value1[,key2=value2[...]]]
     50        </para>
     51
     52        <para>
     53        Known keys are speed, capability, and if_index. Speed is specified in
     54        bits per second. Known capabilities are RSS and RDMA. The
     55        if_index should be used with care: the values must not coincide with
     56        indexes used by the kernel.
     57        Note that these options are mainly intended for testing and
     58        development rather than for production use. At least on Linux systems,
     59        these values should be auto-detected, but the settings can serve
     60        as last a resort when autodetection is not working or is not available.
     61        </para>
     62
    4363        <para>
    4464        The example below configures three network interfaces corresponding

  • vendor/current/docs-xml/smbdotconf/base/multicastdnsregister.xml

    r740 r988  
    11<samba:parameter name="multicast dns register"
    2                                 type="boolean"
     2                 type="boolean"
    33                 context="G"
    4                  advanced="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/base/netbiosaliases.xml

    r414 r988  
    11<samba:parameter name="netbios aliases"
    22                 context="G"
    3                                  type="list"
    4                  advanced="1" wizard="1" developer="1"
     3                 type="cmdlist"
     4                 handler="handle_netbios_aliases"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66 <description>

  • vendor/current/docs-xml/smbdotconf/base/netbiosname.xml

    r414 r988  
    11<samba:parameter name="netbios name"
    22                 context="G"
    3                  basic="1" advanced="1" wizard="1" developer="1"
     3                 type="ustring"
     4                 constant="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    … …  
    1011                </para>
    1112
     13                <para>Note that the maximum length for a NetBIOS name is 15 charactars.</para>
     14
    1215                <para>
    13                 There is a bug in Samba-3 that breaks operation of browsing and access to shares if the netbios name
    14                 is set to the literal name <literal>PIPE</literal>. To avoid this problem, do not name your Samba-3
     16                There is a bug in Samba that breaks operation of browsing and access to shares if the netbios name
     17                is set to the literal name <literal>PIPE</literal>. To avoid this problem, do not name your Samba
    1518                server <literal>PIPE</literal>.
    1619                </para>

  • vendor/current/docs-xml/smbdotconf/base/netbiosscope.xml

    r414 r988  
    11<samba:parameter name="netbios scope"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="ustring"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/base/path.xml

    r414 r988  
    11<samba:parameter name="path"
    22                 context="S"
    3                  basic="1" advanced="1" share="1" print="1" developer="1"
     3                 type="string"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<synonym>directory</synonym>

  • vendor/current/docs-xml/smbdotconf/base/realm.xml

    r414 r988  
    11<samba:parameter name="realm"
    22                 context="G"
    3                                  type="string"
    4                  basic="1" advanced="1" wizard="1" developer="1"
     3                 type="string"
     4                 constant="1"
     5                 handler="handle_realm"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>

  • vendor/current/docs-xml/smbdotconf/base/serverstring.xml

    r414 r988  
    11<samba:parameter name="server string"
    22                 context="G"
    3                  basic="1" advanced="1" developer="1"
     3                 type="string"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/base/unixcharset.xml

    r414 r988  
    11<samba:parameter name="unix charset"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="1"
     2                 context="G"
     3                 type="string"
     4                 constant="1"
     5                 handler="handle_charset"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>
    … …  
    1516</description>
    1617
    17 <value type="default">UTF8</value>
     18<value type="default">UTF-8</value>
    1819<value type="example">ASCII</value>
    1920</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/base/workgroup.xml

    r414 r988  
    11<samba:parameter name="workgroup"
    22                 context="G"
    3                                  type="string"
    4                  basic="1" advanced="1" wizard="1" developer="1"
     3                 type="ustring"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/browse/browseable.xml

    r414 r988  
    1 <samba:parameter name="browseable" context="S" type="boolean"
    2                  basic="1" advanced="1" print="1" developer="1"
     1<samba:parameter name="browseable"
     2                 context="S"
     3                 type="boolean"
    34                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    45<synonym>browsable</synonym>

  • vendor/current/docs-xml/smbdotconf/browse/browselist.xml

    r414 r988  
    11<samba:parameter name="browse list"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/browse/domainmaster.xml

    r414 r988  
    11<samba:parameter name="domain master"
    2                                  type="boolean"
     2                 type="enum"
     3                 enumlist="enum_bool_auto"
    34                 context="G"
    4                  basic="1" advanced="1" developer="1"
     5                 function="_domain_master"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>

  • vendor/current/docs-xml/smbdotconf/browse/enhancedbrowsing.xml

    r414 r988  
    11<samba:parameter name="enhanced browsing"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/browse/lmannounce.xml

    r414 r988  
    11<samba:parameter name="lm announce"
    22                 context="G"
    3                                  type="boolean-auto"
    4                  advanced="1" developer="1"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/browse/lminterval.xml

    r414 r988  
    11<samba:parameter name="lm interval"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/browse/localmaster.xml

    r414 r988  
    11<samba:parameter name="local master"
    22                 context="G"
    3                  basic="1" advanced="1" developer="1"
     3                 type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/browse/oslevel.xml

    r414 r988  
    11<samba:parameter name="os level"
    22                 context="G"
    3                                  type="integer"
    4                  basic="1" advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/browse/preferredmaster.xml

    r414 r988  
    11<samba:parameter name="preferred master"
    22                 context="G"
    3                                  type="boolean-auto"
    4                  basic="1" advanced="1" developer="1"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                 function="_preferred_master"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<synonym>prefered master</synonym>

  • vendor/current/docs-xml/smbdotconf/domain/machinepasswordtimeout.xml

    r414 r988  
    11<samba:parameter name="machine password timeout"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65         <description>
    76
    87        <para>
    9         If a Samba server is a member of a Windows NT Domain (see the <smbconfoption
    10         name="security">domain</smbconfoption> parameter) then periodically a running smbd process will try and change
    11         the MACHINE ACCOUNT PASSWORD stored in the TDB called <filename moreinfo="none">private/secrets.tdb
     8        If a Samba server is a member of a Windows NT or Active Directory Domain (see the <smbconfoption
     9        name="security">domain</smbconfoption> and
     10        <smbconfoption name="security">ads</smbconfoption> parameters),
     11        then periodically a running winbindd process will try and change
     12        the MACHINE ACCOUNT PASSWORD stored in the TDB called <filename moreinfo="none">secrets.tdb
    1213        </filename>.  This parameter specifies how often this password will be changed, in seconds. The default is one
    1314        week (expressed in seconds), the same as a Windows NT Domain member server.
    … …  
    1617        <para>
    1718        See also <citerefentry><refentrytitle>smbpasswd</refentrytitle> <manvolnum>8</manvolnum></citerefentry>,
    18         and the <smbconfoption name="security">domain</smbconfoption> parameter.
     19        and the <smbconfoption name="security">domain</smbconfoption>
     20        and <smbconfoption name="security">ads</smbconfoption> parameters.
    1921        </para>
    2022

  • vendor/current/docs-xml/smbdotconf/filename/casesensitive.xml

    r746 r988  
    11<samba:parameter name="case sensitive"
    22                 context="S"
    3                                  type="boolean"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<synonym>casesignames</synonym>

  • vendor/current/docs-xml/smbdotconf/filename/defaultcase.xml

    r414 r988  
    11<samba:parameter name="default case"
    2         context="S"
    3         type="string" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="enum"
     4                 enumlist="enum_case"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    46<description>
    57        <para>See the section on <smbconfoption name="name mangling"/>.

  • vendor/current/docs-xml/smbdotconf/filename/deletevetofiles.xml

    r414 r988  
    11<samba:parameter name="delete veto files"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/filename/hidedotfiles.xml

    r414 r988  
    11<samba:parameter name="hide dot files"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/filename/hidespecialfiles.xml

    r414 r988  
    11<samba:parameter name="hide special files"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/filename/hideunreadable.xml

    r414 r988  
    11<samba:parameter name="hide unreadable"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55 <description>
    66        <para>This parameter prevents clients from seeing the
    77                existance of files that cannot be read. Defaults to off.</para>
     8        <para>Please note that enabling this can slow down listing large
     9        directories significantly. Samba has to evaluate the ACLs of all
     10        directory members, which can be a lot of effort.</para>
    811</description>
    912<value type="default">no</value>

  • vendor/current/docs-xml/smbdotconf/filename/hideunwriteablefiles.xml

    r414 r988  
    11<samba:parameter name="hide unwriteable files"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    88    Defaults to off. Note that unwriteable directories are shown as usual.
    99    </para>
     10    <para>Please note that enabling this can slow down listing large
     11    directories significantly. Samba has to evaluate the ACLs of all directory
     12    members, which can be a lot of effort.</para>
    1013</description>
    1114<value type="default">no</value>

  • vendor/current/docs-xml/smbdotconf/filename/manglednames.xml

    r414 r988  
    11<samba:parameter name="mangled names"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
     4                 parm="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>

  • vendor/current/docs-xml/smbdotconf/filename/mangleprefix.xml

    r414 r988  
    11<samba:parameter name="mangle prefix"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/filename/manglingchar.xml

    r414 r988  
    11<samba:parameter name="mangling char"
    22                 context="S"
    3                                  type="string"
     3                 type="char"
     4                 parm="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56 <description>

  • vendor/current/docs-xml/smbdotconf/filename/manglingmethod.xml

    r414 r988  
    11<samba:parameter name="mangling method"
    2                          context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     2                 context="G"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para> controls the algorithm used for the generating
    87        the mangled names. Can take two different values, &quot;hash&quot; and
    9         &quot;hash2&quot;. &quot;hash&quot; is the algorithm that was used
     8        &quot;hash2&quot;. &quot;hash&quot; is the algorithm that was
    109        used in Samba for many years and was the default in Samba 2.2.x &quot;hash2&quot; is
    1110        now the default and is newer and considered a better algorithm (generates less collisions) in

  • vendor/current/docs-xml/smbdotconf/filename/maparchive.xml

    r414 r988  
    11<samba:parameter name="map archive"
    22                 context="S"
    3                                 type="boolean"
    4                                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>
    … …  
    1414
    1515        <para>
     16        Note that this parameter will be ignored if the <smbconfoption name="store dos attributes"/>
     17        parameter is set, as the DOS archive attribute will then be stored inside a UNIX extended
     18        attribute.
     19        </para>
     20
     21        <para>
    1622        Note that this requires the <smbconfoption name="create mask"/> parameter to be set such that owner
    1723        execute bit is not masked out (i.e. it must include 100). See the parameter

  • vendor/current/docs-xml/smbdotconf/filename/maphidden.xml

    r414 r988  
    11<samba:parameter name="map hidden"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>
    77        This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
     8        </para>
     9
     10        <para>
     11        Note that this parameter will be ignored if the <smbconfoption name="store dos attributes"/>
     12        parameter is set, as the DOS hidden attribute will then be stored inside a UNIX extended
     13        attribute.
    814        </para>
    915
    … …  
    1521
    1622</description>
    17 <value type="boolean">no</value>
     23<value type="default">no</value>
    1824</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/filename/mapreadonly.xml

    r414 r988  
    11<samba:parameter name="map readonly"
    22                 context="S"
    3                  type="enum"
     3                 type="enum"
     4                 enumlist="enum_map_readonly"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    … …  
    4344    </itemizedlist>
    4445
     46        <para>
     47        Note that this parameter will be ignored if the <smbconfoption name="store dos attributes"/>
     48        parameter is set, as the DOS 'read-only' attribute will then be stored inside a UNIX extended
     49        attribute.
     50        </para>
     51
    4552</description>
    4653<value type="default">yes</value>

  • vendor/current/docs-xml/smbdotconf/filename/mapsystem.xml

    r414 r988  
    11<samba:parameter name="map system"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    77        This controls whether DOS style system files should be mapped to the UNIX group execute bit.
    88        </para>
     9
     10        <para>
     11        Note that this parameter will be ignored if the <smbconfoption name="store dos attributes"/>
     12        parameter is set, as the DOS system attribute will then be stored inside a UNIX extended
     13        attribute.
     14        </para>
    915
    1016        <para>

  • vendor/current/docs-xml/smbdotconf/filename/maxstatcachesize.xml

    r746 r988  
    11<samba:parameter name="max stat cache size"
    22                 context="G"
    3                  developer="1"
    4                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/filename/preservecase.xml

    r414 r988  
    11<samba:parameter name="preserve case"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/filename/shortpreservecase.xml

    r414 r988  
    11<samba:parameter name="short preserve case"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/filename/statcache.xml

    r414 r988  
    11<samba:parameter name="stat cache"
    22                 context="G"
    3                  developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/filename/storedosattributes.xml

    r414 r988  
    11<samba:parameter name="store dos attributes"
    22                 context="S"
    3                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    99        as occurs with <smbconfoption name="map hidden"/> and <smbconfoption name="map readonly"/>).  When set, DOS
    1010        attributes will be stored onto an extended attribute in the UNIX filesystem, associated with the file or
    11         directory.  For no other mapping to occur as a fall-back, the parameters <smbconfoption name="map hidden"/>,
     11        directory.  When this parameter is set it will override the parameters <smbconfoption name="map hidden"/>,
    1212        <smbconfoption name="map system"/>, <smbconfoption name="map archive"/> and <smbconfoption name="map
    13         readonly"/> must be set to off. This parameter writes the DOS attributes as a string into the extended
     13        readonly"/> and they will behave as if they were set to off. This parameter writes the DOS attributes as a string into the extended
    1414        attribute named "user.DOSATTRIB". This extended attribute is explicitly hidden from smbd clients requesting an
    1515        EA list. On Linux the filesystem must have been mounted with the mount option user_xattr in order for

  • vendor/current/docs-xml/smbdotconf/filename/vetofiles.xml

    r414 r988  
    11<samba:parameter name="veto files"
    22                 context="S"
    3                                 type="string"
     3                type="string"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55 <description>
    … …  
    4949<related>case sensitive</related>
    5050
    51 <value type="default">No files or directories are vetoed.</value>
     51<value type="default"><comment>No files or directories are vetoed</comment></value>
    5252</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/filename/vetooplockfiles.xml

    r414 r988  
    11<samba:parameter name="veto oplock files"
    22                 context="S"
    3                                 type="string"
     3                type="string"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55 <description>

  • vendor/current/docs-xml/smbdotconf/generate-file-list.sh

    r414 r988  
    11#!/bin/sh
     2#
     3# This is the fallback table for when we use the docs-xml build
     4# system.  When build as part of the main waf build, these are set to
     5# the full correct path for the system.
     6#
     7echo "<!DOCTYPE section [
     8<!ENTITY pathconfig.SCRIPTSBINDIR        '\${prefix}/sbin'>
     9<!ENTITY pathconfig.LOCKDIR              '\${prefix}/var/lock'>
     10<!ENTITY pathconfig.NCALRPCDIR           '\${prefix}/var/run/ncalrpc'>
     11<!ENTITY pathconfig.PIDDIR               '\${prefix}/var/run'>
     12<!ENTITY pathconfig.STATEDIR             '\${prefix}/var/locks'>
     13<!ENTITY pathconfig.PRIVATE_DIR          '\${prefix}/private'>
     14<!ENTITY pathconfig.SMB_PASSWD_FILE      '\${prefix}/private/smbpasswd'>
     15<!ENTITY pathconfig.WINBINDD_SOCKET_DIR  '\${prefix}/var/run/winbindd'>
     16<!ENTITY pathconfig.WINBINDD_PRIVILEGED_SOCKET_DIR '\${prefix}/var/lib/winbindd_privileged'>
     17<!ENTITY pathconfig.CACHEDIR             '\${prefix}/var/cache'>
     18<!ENTITY pathconfig.NTP_SIGND_SOCKET_DIR '\${prefix}/var/lib/ntp_signd'>
     19]>"
     20
    221DIR=.
    322if [ "x$1" != "x" ]
    … …  
    928cd $DIR
    1029
    11 echo "<section xmlns:xi=\"http://www.w3.org/2003/XInclude\">"
     30echo "<section>"
    1231for I in `find . -mindepth 2 -type f -name '*.xml' | sort -t/ -k3 | xargs`
    1332do
    14         echo "<xi:include href='$I' parse='xml'/>"
     33        cat $I
    1534done
    16                
    1735echo "</section>"
    1836
     37
    1938cd $OLD

  • vendor/current/docs-xml/smbdotconf/ldap/clientldapsaslwrapping.xml

    r919 r988  
    11<samba:parameter name="client ldap sasl wrapping"
    22                 context="G"
    3                  type="string"
    4                  advanced="1"
     3                 type="enum"
     4                 enumlist="enum_ldap_sasl_wrapping"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapadmindn.xml

    r414 r988  
    11<samba:parameter name="ldap admin dn"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    6                                  <description>
     5<description>
    76
    87         <para>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapconnectiontimeout.xml

    r414 r988  
    11<samba:parameter name="ldap connection timeout"
    2                  context="G"
    3                  advanced="1" developer="1"
    4                         type="integer"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapdeletedn.xml

    r414 r988  
    11<samba:parameter name="ldap delete dn"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapderef.xml

    r414 r988  
    1 <samba:parameter name="ldap deref" context="G" type="enum"
    2         advanced="1" developer="1"
    3         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     1<samba:parameter name="ldap deref"
     2                 context="G"
     3                 type="enum"
     4                 enumlist="enum_ldap_deref"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    46
    57<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapfollowreferral.xml

    r414 r988  
    1 <samba:parameter name="ldap follow referral" context="G" type="enum"
    2         advanced="1" developer="1"
    3         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     1<samba:parameter name="ldap follow referral"
     2                 context="G"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    46
    57<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapgroupsuffix.xml

    r414 r988  
    11<samba:parameter name="ldap group suffix"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 function="_ldap_group_suffix"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapidmapsuffix.xml

    r414 r988  
    11<samba:parameter name="ldap idmap suffix"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="string"
     3                 type="string"
     4                 function="_ldap_idmap_suffix"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapmachinesuffix.xml

    r414 r988  
    11<samba:parameter name="ldap machine suffix"
    2                 context="G"
    3                 advanced="1"
    4                 developer="1"
    5                 type="string"
    6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 function="_ldap_machine_suffix"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    76
    87<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldappagesize.xml

    r414 r988  
    11<samba:parameter name="ldap page size"
    2         context="G"
    3         type="integer"
    4         advanced="1" developer="1"
    5         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>
    … …  
    1413        </para>
    1514</description>
    16 <value type="default">1024</value>
     15<value type="default">1000</value>
    1716<value type="example">512</value>
    1817</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/ldap/ldappasswdsync.xml

    r414 r988  
    11<samba:parameter name="ldap passwd sync"
    2                         context="G"
    3                         advanced="1"
    4                         developer="1"
    5                         type="enum"
    6                         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="enum"
     4                 enumlist="enum_ldap_passwd_sync"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    76
     7<synonym>ldap password sync</synonym>
    88<description>
    99        <para>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapreplicationsleep.xml

    r414 r988  
    11<samba:parameter name="ldap replication sleep"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapsameditposix.xml

    r414 r988  
    11<samba:parameter name="ldapsam:editposix"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="0"
     2                 context="G"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1817        configured. On virgin servers the default users and groups (Administrator, Guest, Domain Users,
    1918        Domain Admins, Domain Guests) can be precreated with the command <command moreinfo="none">net sam
    20         provision</command>. To run this command the ldap server must be running, Winindd must be running and
     19        provision</command>. To run this command the ldap server must be running, Winbindd must be running and
    2120        the smb.conf ldap options must be properly configured.
    2221

  • vendor/current/docs-xml/smbdotconf/ldap/ldapsamtrusted.xml

    r414 r988  
    11<samba:parameter name="ldapsam:trusted"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="0"
     2                 context="G"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapssl.xml

    r414 r988  
    11<samba:parameter name="ldap ssl"
    22                 context="G"
    3                                 type="enum"
    4                  advanced="1" developer="1"
     3                type="enum"
     4                 enumlist="enum_ldap_ssl"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapsslads.xml

    r414 r988  
    11<samba:parameter name="ldap ssl ads"
    2                  context="G"
    3                  type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This option is used to define whether or not Samba should

  • vendor/current/docs-xml/smbdotconf/ldap/ldapsuffix.xml

    r414 r988  
    11<samba:parameter name="ldap suffix"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldaptimeout.xml

    r414 r988  
    11<samba:parameter name="ldap timeout"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/ldap/ldapusersuffix.xml

    r414 r988  
    11<samba:parameter name="ldap user suffix"
    2         context="G"
    3         type="string"
    4         advanced="1" developer="1"
    5         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 function="_ldap_user_suffix"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77        <para>

  • vendor/current/docs-xml/smbdotconf/locking/blockinglocks.xml

    r414 r988  
    11<samba:parameter name="blocking locks"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/locking/cscpolicy.xml

    r414 r988  
    11<samba:parameter name="csc policy"
    22                 context="S"
    3                                  type="enum"
     3                 type="enum"
     4                 enumlist="enum_csc_policy"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>

  • vendor/current/docs-xml/smbdotconf/locking/fakeoplocks.xml

    r414 r988  
    11<samba:parameter name="fake oplocks"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/locking/kerneloplocks.xml

    r414 r988  
    11<samba:parameter name="kernel oplocks"
    2                                 type="boolean"
    3                  context="G"
     2                type="boolean"
     3                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>For UNIXes that support kernel based <smbconfoption name="oplocks"/>
    77        (currently only IRIX and the Linux 2.4 kernel), this parameter
    8         allows the use of them to be turned on or off.</para>
     8        allows the use of them to be turned on or off. However, this disables
     9        Level II oplocks for clients as the Linux and IRIX kernels do not
     10        support them properly.</para>
    911
    1012        <para>Kernel oplocks support allows Samba <parameter moreinfo="none">oplocks
    … …  
    1416        data consistency between SMB/CIFS, NFS and local file access (and is
    1517        a <emphasis>very</emphasis> cool feature :-).</para>
     18        <para>If you do not need this interaction, you should disable the
     19        parameter on Linux and IRIX to get Level II oplocks and the associated
     20        performance benefit.</para>
    1621
    17         <para>This parameter defaults to <constant>on</constant>, but is translated
    18         to a no-op on systems that no not have the necessary kernel support.
    19         You should never need to touch this parameter.</para>
     22        <para>This parameter defaults to <constant>no</constant> and is translated
     23        to a no-op on systems that do not have the necessary kernel support.</para>
    2024</description>
    2125
    2226<related>oplocks</related>
    2327<related>level2 oplocks</related>
    24 <value type="default">yes</value>
     28<related>smb2 leases</related>
     29<value type="default">no</value>
    2530</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/locking/level2oplocks.xml

    r414 r988  
    11<samba:parameter name="level2 oplocks"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/locking/locking.xml

    r414 r988  
    11<samba:parameter name="locking"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
     4                 parm="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    … …  
    2526</description>
    2627
    27 <value type="boolean">yes</value>
     28<value type="default">yes</value>
    2829</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/locking/lockspintime.xml

    r414 r988  
    11<samba:parameter name="lock spin time"
    2                                 type="integer"
     2                type="integer"
    33                 context="G"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/locking/oplockbreakwaittime.xml

    r414 r988  
    11<samba:parameter name="oplock break wait time"
    22                 context="G"
    3                                 type="integer"
     3                type="integer"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55 <description>

  • vendor/current/docs-xml/smbdotconf/locking/oplockcontentionlimit.xml

    r414 r988  
    11<samba:parameter name="oplock contention limit"
    22                 context="S"
    3                                 type="integer"
     3                type="integer"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/locking/oplocks.xml

    r414 r988  
    11<samba:parameter name="oplocks"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    2626<related>kernel oplocks</related>
    2727<related>level2 oplocks</related>
     28<related>smb2 leases</related>
    2829<value type="default">yes</value>
    2930</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/locking/posixlocking.xml

    r740 r988  
    11<samba:parameter name="posix locking"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
     4                 parm="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>

  • vendor/current/docs-xml/smbdotconf/locking/strictlocking.xml

    r414 r988  
    11<samba:parameter name="strict locking"
    22                 context="S"
    3                                  type="enum"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                 parm="1"
    46                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    57<description>

  • vendor/current/docs-xml/smbdotconf/logging/debugclass.xml

    r414 r988  
    11<samba:parameter name="debug class"
    22                 context="G"
    3                  type="boolean"
    4                  developer="1" advanced="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/debughirestimestamp.xml

    r414 r988  
    11<samba:parameter name="debug hires timestamp"
    22                 context="G"
    3                  developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/debugpid.xml

    r414 r988  
    11<samba:parameter name="debug pid"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/debugprefixtimestamp.xml

    r414 r988  
    11<samba:parameter name="debug prefix timestamp"
    22                 context="G"
    3                  developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/debuguid.xml

    r414 r988  
    11<samba:parameter name="debug uid"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/ldapdebuglevel.xml

    r414 r988  
    11<samba:parameter name="ldap debug level"
    2                 type="integer"
    3                 context="G"
    4                 developer="1" advanced="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                type="integer"
     3                 context="G"
     4                 handler="handle_ldap_debug_level"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77        <para>
    … …  
    1818        </para>
    1919        <para>
    20                 The debug ouput from the LDAP libraries appears with the
     20                The debug output from the LDAP libraries appears with the
    2121                prefix [LDAP] in Samba's logging output.
    2222                The level at which LDAP logging is printed is controlled by the

  • vendor/current/docs-xml/smbdotconf/logging/ldapdebugthreshold.xml

    r414 r988  
    11<samba:parameter name="ldap debug threshold"
    2                 type="integer"
    3                 context="G"
    4                 developer="1" advanced="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="integer"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/logging/logfile.xml

    r414 r988  
    11<samba:parameter name="log file"
    22                 context="G"
    3                                  type="string"
    4                  developer="1" advanced="1"
     3                 type="string"
     4                 function="logfile"
     5                 handler="handle_logfile"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>

  • vendor/current/docs-xml/smbdotconf/logging/loglevel.xml

    r414 r988  
    11<samba:parameter name="log level"
    2                                 type="string"
     2                type="string"
    33                 context="G"
    4                  developer="1" advanced="1"
     4                 handler="handle_debug_list"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<synonym>debuglevel</synonym>
    … …  
    1212
    1313    <para>This parameter has been extended since the 2.2.x
    14     series, now it allows to specify the debug level for multiple
     14    series, now it allows one to specify the debug level for multiple
    1515    debug classes. This is to give greater flexibility in the configuration
    1616    of the system. The following debug classes are currently implemented:

  • vendor/current/docs-xml/smbdotconf/logging/maxlogsize.xml

    r414 r988  
    11<samba:parameter name="max log size"
    2                                  type="integer"
     2                 type="bytes"
    33                 context="G"
    4                  developer="1" advanced="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logging/syslog.xml

    r414 r988  
    11<samba:parameter name="syslog"
    22                 context="G"
    3                                 type="integer"
    4                  developer="1" advanced="1"
     3                type="integer"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1717    logging to log.[sn]mbd even if <emphasis>syslog only</emphasis> is enabled.
    1818    </para>
     19
     20    <para>The <smbconfoption name="logging"/> parameter should be used
     21      instead. When <smbconfoption name="logging"/> is set, it
     22      overrides the <smbconfoption name="syslog"/> parameter.</para>
    1923</description>
    2024<value type="default">1</value>

  • vendor/current/docs-xml/smbdotconf/logging/syslogonly.xml

    r414 r988  
    11<samba:parameter name="syslog only"
    22                 context="G"
    3                                 type="boolean"
    4                  developer="1" advanced="1"
     3                type="boolean"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1010        logging to log.[sn]mbd even if <emphasis>syslog only</emphasis> is enabled.
    1111    </para>
     12
     13
     14    <para>The <smbconfoption name="logging"/> parameter should be used
     15      instead. When <smbconfoption name="logging"/> is set, it
     16      overrides the <smbconfoption name="syslog only"/> parameter.</para>
    1217</description>
    1318<value type="default">no</value>

  • vendor/current/docs-xml/smbdotconf/logon/abortshutdownscript.xml

    r414 r988  
    11<samba:parameter name="abort shutdown script"
    22                 context="G"
    3                  advanced="1" developer="1"
    43                                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    … …  
    98        should stop a shutdown procedure issued by the <smbconfoption name="shutdown script"/>.</para>
    109               
    11         <para>If the connected user posseses the <constant>SeRemoteShutdownPrivilege</constant>,
     10        <para>If the connected user possesses the <constant>SeRemoteShutdownPrivilege</constant>,
    1211        right, this command will be run as root.</para>
    1312</description>

  • vendor/current/docs-xml/smbdotconf/logon/addgroupscript.xml

    r414 r988  
    22                context="G"
    33                type="string"
    4                 advanced="1" developer="1"
    54                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/addmachinescript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/adduserscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1716        NT PDC is an onerous task. This option allows smbd to create the required UNIX users
    1817         <emphasis>ON DEMAND</emphasis> when a user accesses the Samba server.
    19         </para>
    20 
    21         <para>
    22         In order to use this option, <citerefentry><refentrytitle>smbd</refentrytitle>
    23         <manvolnum>8</manvolnum></citerefentry> must <emphasis>NOT</emphasis> be set to
    24         <smbconfoption name="security">share</smbconfoption> and <smbconfoption name="add user script"/>
    25         must be set to a full pathname for a script that will create a UNIX user given one argument of
    26         <parameter moreinfo="none">%u</parameter>, which expands into the UNIX user name to create.
    2718        </para>
    2819

  • vendor/current/docs-xml/smbdotconf/logon/addusertogroupscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/deletegroupscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/deleteuserfromgroupscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/deleteuserscript.xml

    r414 r988  
    22                             type="string"
    33                 context="G"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/domainlogons.xml

    r414 r988  
    11<samba:parameter name="domain logons"
    22                 context="G"
    3                                 type="boolean"
    4                  advanced="1" developer="1"
     3                type="boolean"
     4                 function="_domain_logons"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/enableprivileges.xml

    r740 r988  
    11<samba:parameter name="enable privileges"
    22                 context="G"
    3                 type="boolean"
    4                  advanced="1" developer="1"
     3                type="boolean"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/initlogondelay.xml

    r414 r988  
    22                 context="G"
    33                 type="integer"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/initlogondelayedhosts.xml

    r414 r988  
    11<samba:parameter name="init logon delayed hosts"
    22                 context="G"
    3                  type="list"
    4                  advanced="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/logon/logondrive.xml

    r414 r988  
    11<samba:parameter name="logon drive"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/logonhome.xml

    r414 r988  
    11<samba:parameter name="logon home"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/logonpath.xml

    r414 r988  
    11<samba:parameter name="logon path"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/logonscript.xml

    r414 r988  
    11<samba:parameter name="logon script"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/logon/setprimarygroupscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    87        <para>Thanks to the Posix subsystem in NT a Windows User has a
    98        primary group in addition to the auxiliary groups.  This script
    10         sets the primary group in the unix userdatase when an
     9        sets the primary group in the unix user database when an
    1110        administrator sets the primary group from the windows user
    1211        manager or when fetching a SAM with <command>net rpc

  • vendor/current/docs-xml/smbdotconf/logon/shutdownscript.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    109        start a shutdown procedure.</para>
    1110
    12         <para>If the connected user posseses the <constant>SeRemoteShutdownPrivilege</constant>,
     11        <para>If the connected user possesses the <constant>SeRemoteShutdownPrivilege</constant>,
    1312        right, this command will be run as root.</para>
    1413

  • vendor/current/docs-xml/smbdotconf/misc/addsharecommand.xml

    r414 r988  
    11<samba:parameter name="add share command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/afsshare.xml

    r414 r988  
    11<samba:parameter name="afs share"
    2                  context="S"
    3                          type="boolean"
    4                  advanced="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter controls whether special AFS features are enabled

  • vendor/current/docs-xml/smbdotconf/misc/afsusernamemap.xml

    r414 r988  
    11<samba:parameter name="afs username map"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66 <description>

  • vendor/current/docs-xml/smbdotconf/misc/allowinsecurewidelinks.xml

    r748 r988  
    11<samba:parameter name="allow insecure wide links"
    2                 context="G"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>

  • vendor/current/docs-xml/smbdotconf/misc/asyncsmbechohandler.xml

    r740 r988  
    11<samba:parameter name="async smb echo handler"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/available.xml

    r414 r988  
    11<samba:parameter name="available"
    2                  context="S"
    3                  basic="1" advanced="1" print="1"
    4                  type="boolean"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 generated_function="0"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77        <para>This parameter lets you &quot;turn off&quot; a service. If

  • vendor/current/docs-xml/smbdotconf/misc/cachedirectory.xml

    r414 r988  
    11<samba:parameter name="cache directory"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1818</description>
    1919
    20 <value type="default">${prefix}/var/locks</value>
     20<value type="default">&pathconfig.CACHEDIR;</value>
    2121<value type="example">/var/run/samba/locks/cache</value>
    2222</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/changenotify.xml

    r414 r988  
    11<samba:parameter name="change notify"
    2                  context="S"
    3                                  type="boolean"
    4                  advanced="1"
     2                 context="G"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/changesharecommand.xml

    r414 r988  
    11<samba:parameter name="change share command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2423        <para>
    2524        When executed, <command moreinfo="none">smbd</command> will automatically invoke the
    26         <parameter moreinfo="none">change share command</parameter> with five parameters.
     25        <parameter moreinfo="none">change share command</parameter> with six parameters.
    2726        </para>
    2827
    … …  
    5958                        </para>
    6059                </listitem>
     60
     61                <listitem>
     62                        <para><parameter moreinfo="none">CSC policy</parameter> - client side caching
     63                        policy in string form. Valid values are: manual, documents, programs, disable.
     64                        </para>
     65                </listitem>
    6166        </itemizedlist>
    6267

  • vendor/current/docs-xml/smbdotconf/misc/clusteraddresses.xml

    r414 r988  
    11<samba:parameter name="cluster addresses"
    2                  context="G"
    3                          type="list"
    4                  developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="cmdlist"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>With this parameter you can add additional addresses

  • vendor/current/docs-xml/smbdotconf/misc/clustering.xml

    r414 r988  
    11<samba:parameter name="clustering"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/configfile.xml

    r414 r988  
    11<samba:parameter name="config file"
    22                 context="G"
    3                                 type="string"
    4                  hide="1"
     3                type="string"
     4                 function="next_configfile"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/misc/copy.xml

    r414 r988  
    1 <samba:parameter name="copy" context="S" hide="1" xmlns:samba="http://www.samba.org/samba/DTD/samba-doc" type="string">
     1<samba:parameter name="copy"
     2                 type="string"
     3                 context="S"
     4                 generated_function="0"
     5                 handler="handle_copy"
     6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    27<description>
    38        <para>This parameter allows you to &quot;clone&quot; service

  • vendor/current/docs-xml/smbdotconf/misc/ctdbdsocket.xml

    r414 r988  
    11<samba:parameter name="ctdbd socket"
    22                 context="G"
    3                  advanced="1"
    4                                  type="string"
     3                 type="string"
     4                 constant="1"
     5                 function="_ctdbd_socket"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>

  • vendor/current/docs-xml/smbdotconf/misc/ctdblocktimewarnthreshold.xml

    r740 r988  
    11<samba:parameter name="ctdb locktime warn threshold"
    22                 context="G"
    3                  type="integer"
    4                  advanced="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/ctdbtimeout.xml

    r414 r988  
    11<samba:parameter name="ctdb timeout"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    7         <para>This parameter specifies a timeout in seconds for the
     6        <para>This parameter specifies a timeout in milliseconds for the
    87          connection between Samba and ctdb. It is only valid if you
    98          have compiled Samba with clustering and if you have
    … …  
    2625          the file smb.conf, it is not really helpful to put this into
    2726          a registry configuration (typical on a cluster), because to
    28           access the registry contact to ctdb is requred.
     27          access the registry contact to ctdb is required.
    2928        </para>
    3029        <para>Setting <parameter>ctdb timeout</parameter> to n makes
    31           any process waiting longer than n seconds for a reply by the
     30          any process waiting longer than n milliseconds for a reply by the
    3231          cluster panic. Setting it to 0 (the default) makes Samba
    3332          block forever, which is the highly recommended default.

  • vendor/current/docs-xml/smbdotconf/misc/defaultservice.xml

    r414 r988  
    11<samba:parameter name="default service"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
     4                 function="defaultservice"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<synonym>default</synonym>

  • vendor/current/docs-xml/smbdotconf/misc/deletereadonly.xml

    r414 r988  
    11<samba:parameter name="delete readonly"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>This parameter allows readonly files to be deleted. 

  • vendor/current/docs-xml/smbdotconf/misc/deletesharecommand.xml

    r414 r988  
    11<samba:parameter name="delete share command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/dfreecachetime.xml

    r414 r988  
    11<samba:parameter name="dfree cache time"
    2                  context="S"
    3                          type="integer"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76
    … …  
    2423
    2524</description>
    26 <value type="example">dfree cache time = 60</value>
     25<value type="example">60</value>
    2726</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/dfreecommand.xml

    r414 r988  
    22                 context="S"
    33                         type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/directorynamecachesize.xml

    r414 r988  
    11<samba:parameter name="directory name cache size"
    2                  context="S"
    3                  type="integer"
    4                  advanced="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>
    8         This parameter specifies the the size of the directory name cache.
     7        This parameter specifies the size of the directory name cache.
    98        It will be needed to turn this off for *BSD systems.
    109        </para>

  • vendor/current/docs-xml/smbdotconf/misc/dmapisupport.xml

    r414 r988  
    11<samba:parameter name="dmapi support"
    22                 context="S"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/dontdescend.xml

    r414 r988  
    11<samba:parameter name="dont descend"
    2                  context="S"
    3                          type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>There are certain directories on some systems

  • vendor/current/docs-xml/smbdotconf/misc/dosfilemode.xml

    r414 r988  
    11<samba:parameter name="dos filemode"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para> The default behavior in Samba is to provide

  • vendor/current/docs-xml/smbdotconf/misc/dosfiletimeresolution.xml

    r414 r988  
    11<samba:parameter name="dos filetime resolution"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>Under the DOS and Windows FAT filesystem, the finest

  • vendor/current/docs-xml/smbdotconf/misc/dosfiletimes.xml

    r414 r988  
    11<samba:parameter name="dos filetimes"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>Under DOS and Windows, if a user can write to a
    77        file they can change the timestamp on it. Under POSIX semantics,
    88        only the owner of the file or root may change the timestamp. By
    9         default, Samba emulates the DOS semantics and allows to change the
     9        default, Samba emulates the DOS semantics and allows one to change the
    1010        timestamp on a file if the user <command moreinfo="none">smbd</command> is acting
    1111        on behalf has write permissions.

  • vendor/current/docs-xml/smbdotconf/misc/fakedirectorycreatetimes.xml

    r414 r988  
    11<samba:parameter name="fake directory create times"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>NTFS and Windows VFAT file systems keep a create
    … …  
    2121
    2222        <para>However, Unix time semantics mean that the create time
    23         reported by Samba will be updated whenever a file is created or
     23        reported by Samba will be updated whenever a file is created
    2424        or deleted in the directory.  NMAKE finds all object files in
    2525        the object directory.  The timestamp of the last one built is then

  • vendor/current/docs-xml/smbdotconf/misc/followsymlinks.xml

    r414 r988  
    11<samba:parameter name="follow symlinks"
    2                  context="S"
    3                         type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>

  • vendor/current/docs-xml/smbdotconf/misc/fstype.xml

    r414 r988  
    11<samba:parameter name="fstype"
    2                  context="S"
    3                          type="string"
    4                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                 constant="1"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    67        <para>

  • vendor/current/docs-xml/smbdotconf/misc/homedirmap.xml

    r414 r988  
    11<samba:parameter name="homedir map"
    2                  context="G"
    3                          type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/include.xml

    r414 r988  
    11<samba:parameter name="include"
    2                  context="G"
    3                  type="string"
    4                  hide="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                 generated_function="0"
     5                 handler="handle_include"
     6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>
    78        <para>

  • vendor/current/docs-xml/smbdotconf/misc/kernelchangenotify.xml

    r414 r988  
    11<samba:parameter name="kernel change notify"
    2                  context="S"
    3                                  type="boolean"
    4                  advanced="1"
     2                 context="G"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/lockdirectory.xml

    r414 r988  
    11<samba:parameter name="lock directory"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<synonym>lock dir</synonym>
    … …  
    1717</description>
    1818
    19 <value type="default">${prefix}/var/locks</value>
     19<value type="default">&pathconfig.LOCKDIR;</value>
    2020<value type="example">/var/run/samba/locks</value>
    2121</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/logwriteablefilesonexit.xml

    r740 r988  
    11<samba:parameter name="log writeable files on exit"
    2                  context="G"
    3                  type="boolean"
    4                  advanced="1" developer="0"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/magicoutput.xml

    r414 r988  
    11<samba:parameter name="magic output"
    2                 context="S"
    3                 type="string"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="string"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>
    … …  
    1414</description>
    1515
    16 <value type="default">&lt;magic script name&gt;.out</value>
     16<value type="default"><comment>&lt;magic script name&gt;.out</comment></value>
    1717<value type="example">myfile.txt</value>
    1818</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/magicscript.xml

    r414 r988  
    11<samba:parameter name="magic script"
    2                 context="S"
    3                 type="string"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="string"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>This parameter specifies the name of a file which,

  • vendor/current/docs-xml/smbdotconf/misc/messagecommand.xml

    r414 r988  
    11<samba:parameter name="message command"
    2                  context="G"
    3                          type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This specifies what command to run when the

  • vendor/current/docs-xml/smbdotconf/misc/ncalrpcdir.xml

    r740 r988  
    11<samba:parameter name="ncalrpc dir"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    7         <para>This directory will hold a series of named pipes to allow RPC over inter-process communication.  </para>.
    8         <para>This will allow Samba and other unix processes to interact over DCE/RPC without using TCP/IP.  Additionally a sub-directory 'np' has restricted permissions, and allows a trusted communication channel between Samba processes</para>
     7        <para>This directory will hold a series of named pipes to allow RPC over inter-process communication.</para>
     8        <para>This will allow Samba and other unix processes to interact over DCE/RPC without using TCP/IP. Additionally a sub-directory 'np' has restricted permissions, and allows a trusted communication channel between Samba processes</para>
    99</description>
    1010
    11 <value type="default">${prefix}/var/ncalrpc</value>
     11<value type="default">&pathconfig.NCALRPCDIR;</value>
    1212<value type="example">/var/run/samba/ncalrpc</value>
    1313</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/nishomedir.xml

    r414 r988  
    1 <samba:parameter name="nis homedir"
    2                  context="G"
    3                          type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     1<samba:parameter name="NIS homedir"
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>Get the home share server from a NIS map. For

  • vendor/current/docs-xml/smbdotconf/misc/nmbdbindexplicitbroadcast.xml

    r414 r988  
    11<samba:parameter name="nmbd bind explicit broadcast"
    2                  context="G"
    3                  advanced="1" developer="1"
    4                  type="boolean"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/panicaction.xml

    r414 r988  
    11<samba:parameter name="panic action"
    2                  context="G"
    3                  type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This is a Samba developer option that allows a

  • vendor/current/docs-xml/smbdotconf/misc/perfcountmodule.xml

    r414 r988  
    11<samba:parameter name="perfcount module"
    2                  context="G"
    3                  type="string"
    4                  advanced="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies the perfcount backend to be used when monitoring SMB

  • vendor/current/docs-xml/smbdotconf/misc/piddirectory.xml

    r414 r988  
    11<samba:parameter name="pid directory"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1010</description>
    1111
    12 <value type="default">${prefix}/var/locks</value>
    13 <value type="example">pid directory = /var/run/</value>
     12<value type="default">&pathconfig.PIDDIR;</value>
     13<value type="example">/var/run/</value>
    1414</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/postexec.xml

    r414 r988  
    11<samba:parameter name="postexec"
    2                  context="S"
    3                          type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This option specifies a command to be run

  • vendor/current/docs-xml/smbdotconf/misc/preexec.xml

    r414 r988  
    11<samba:parameter name="preexec"
    2                  context="S"
    3                  type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    6  <synonym>exec</synonym>
     2                 context="S"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     5<synonym>exec</synonym>
    76<description>
    87        <para>This option specifies a command to be run whenever

  • vendor/current/docs-xml/smbdotconf/misc/preexecclose.xml

    r414 r988  
    22                 context="S"
    33                 type="boolean"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/registryshares.xml

    r414 r988  
    11<samba:parameter name="registry shares"
    22                 context="G"
    3                  type="bool"
    4                  advanced="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/remoteannounce.xml

    r414 r988  
    11<samba:parameter name="remote announce"
    2                  context="G"
    3                  advanced="1" developer="1"
    4                  type="list"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/remotebrowsesync.xml

    r414 r988  
    11<samba:parameter name="remote browse sync"
    2                  context="G"
    3                  advanced="1" developer="1"
    4                  type="list"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/resetonzerovc.xml

    r414 r988  
    11<samba:parameter name="reset on zero vc"
    2                  context="G"
    3                  type="boolean"
    4                  advanced="1" developer="0"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/rootpostexec.xml

    r414 r988  
    11<samba:parameter name="root postexec"
    2                  context="S"
    3                  type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/rootpreexec.xml

    r414 r988  
    11<samba:parameter name="root preexec"
    2                  context="S"
    3                  type="string"
    4                  advanced="1" wizard="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>

  • vendor/current/docs-xml/smbdotconf/misc/rootpreexecclose.xml

    r414 r988  
    11<samba:parameter name="root preexec close"
    2                  context="S"
    3                  type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This is the same as the <parameter moreinfo="none">preexec close

  • vendor/current/docs-xml/smbdotconf/misc/rpcserver.xml

    r740 r988  
    1 <samba:parameter name="rpc_server"
     1<samba:parameter name="rpc_server:SERVER"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>
    8         Defines what kind of rpc server to use for a named pipe.
    9         The rpc_server prefix must be followed by the pipe name, and a value.
     7                With this option you can define if a rpc service should be
     8                running internal/embedded in smbd or should be redirected to an
     9                external daemon like Samba4, the endpoint mapper daemon, the
     10                spoolss daemon or the new LSA service daemon. The rpc_server
     11                prefix must be followed by the pipe name, and a value.
    1012        </para>
    1113
    1214        <para>
    13         Three possible values are currently supported:
     15                This option can be set for each available rpc service in Samba.
     16                The following list shows all available pipe names services you
     17                can modify with this option.
     18        </para>
     19
     20        <itemizedlist>
     21                <listitem><para>epmapper     - Endpoint Mapper</para></listitem>
     22                <listitem><para>winreg       - Remote Registry Service</para></listitem>
     23                <listitem><para>srvsvc       - Remote Server Services</para></listitem>
     24                <listitem><para>lsarpc       - Local Security Authority</para></listitem>
     25                <listitem><para>samr         - Security Account Management</para></listitem>
     26                <listitem><para>netlogon     - Netlogon Remote Protocol</para></listitem>
     27                <listitem><para>netdfs       - Settings for Distributed File System</para></listitem>
     28                <listitem><para>dssetup      - Active Directory Setup</para></listitem>
     29                <listitem><para>wkssvc       - Workstation Services</para></listitem>
     30                <listitem><para>spoolss      - Network Printing Spooler</para></listitem>
     31                <listitem><para>svcctl       - Service Control</para></listitem>
     32                <listitem><para>ntsvcs       - Plug and Play Services</para></listitem>
     33                <listitem><para>eventlog     - Event Logger</para></listitem>
     34                <listitem><para>initshutdown - Init Shutdown Service</para></listitem>
     35                <listitem><para>mdssvc       - Spotlight</para></listitem>
     36        </itemizedlist>
     37
     38        <para>
     39                Three possible values currently supported are:
    1440                <command moreinfo="none">embedded</command>
    15                 <command moreinfo="none">daemon</command>
    1641                <command moreinfo="none">external</command>
     42                <command moreinfo="none">disabled</command>
    1743        </para>
    1844
    1945        <para>
    20         The classic method is to run every pipe as an internal function
    21         <emphasis>embedded</emphasis> in smbd.
     46                The classic method is to run every pipe as an internal function
     47                <emphasis>embedded</emphasis> in smbd. The defaults may vary
     48                depending on the service.
    2249        </para>
    2350
    2451        <para>
    25         An alternative method is to fork a <emphasis>daemon</emphasis>
    26         early on at smbd startup time. This is supported only for selected
    27         pipes.
     52                Choosing the <emphasis>external</emphasis> option allows one to run
     53                a separate daemon or even a completely independent (3rd party)
     54                server capable of interfacing with samba via the MS-RPC
     55                interface over named pipes.
    2856        </para>
    2957
    3058        <para>
    31         Choosing the <emphasis>external</emphasis> option allows to run a
    32         completely independent (3rd party) server capable of interfacing
    33         with samba via the MS-RPC interface over named pipes.
     59                Currently in Samba3 we support four daemons, spoolssd, epmd,
     60                lsasd and mdssd. These daemons can be enabled using the
     61                <emphasis>rpc_daemon</emphasis> option. For spoolssd you have
     62                to enable the daemon and proxy the named pipe with:
    3463        </para>
    3564
    3665        <para>
    37         Currently only the spoolss pipe can be configured in
    38         <emphasis>daemon</emphasis> mode like this:
    39         <programlisting>
    40         rpc_server:spoolss = daemon
    41         </programlisting>
     66                Examples:
     67                <programlisting>
     68                        rpc_daemon:lsasd = fork
     69                        rpc_server:lsarpc = external
     70                        rpc_server:samr = external
     71                        rpc_server:netlogon = external
     72
     73                        rpc_server:spoolss = external
     74                        rpc_server:epmapper = disabled
     75
     76                        rpc_daemon:mdssd = fork
     77                        rpc_server:mdssvc = external
     78                </programlisting>
    4279        </para>
     80
     81        <para>
     82                There is one special option which allows you to enable rpc
     83                services to listen for ncacn_ip_tcp connections too. Currently
     84                this is only used for testing and doesn't scale!
     85
     86                <programlisting>
     87                        rpc_server:tcpip = yes
     88                </programlisting>
     89        </para>
     90
    4391</description>
    4492
    45 <value type="default">none</value>
     93<value type="default">embedded</value>
    4694</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/statedirectory.xml

    r414 r988  
    11<samba:parameter name="state directory"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1818</description>
    1919
    20 <value type="default">${prefix}/var/locks</value>
     20<value type="default">&pathconfig.STATEDIR;</value>
    2121<value type="example">/var/run/samba/locks/state</value>
    2222</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/usershareallowguests.xml

    r414 r988  
    11<samba:parameter name="usershare allow guests"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="boolean"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter controls whether user defined shares are allowed

  • vendor/current/docs-xml/smbdotconf/misc/usersharemaxshares.xml

    r414 r988  
    11<samba:parameter name="usershare max shares"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="integer"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies the number of user defined shares

  • vendor/current/docs-xml/smbdotconf/misc/usershareowneronly.xml

    r414 r988  
    11<samba:parameter name="usershare owner only"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="boolean"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter controls whether the pathname exported by
    … …  
    1615
    1716</description>
    18 <value type="default">True</value>
     17<value type="default">yes</value>
    1918</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/usersharepath.xml

    r414 r988  
    11<samba:parameter name="usershare path"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="string"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies the absolute path of the directory on the
    … …  
    1211        owners of a file (in the same way the /tmp directory is usually configured).
    1312        Members of the group owner of this directory are the users allowed to create
    14         usershares. If this parameter is undefined then no user defined
    15         shares are allowed.
     13        usershares.
    1614        </para>
    1715        <para>
    … …  
    3028
    3129</description>
    32 <value type="default">NULL</value>
     30<value type="default">&pathconfig.STATEDIR;/usershares</value>
    3331</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/usershareprefixallowlist.xml

    r414 r988  
    11<samba:parameter name="usershare prefix allow list"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="string"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="cmdlist"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies a list of absolute pathnames
    … …  
    2019
    2120</description>
    22 <value type="default">NULL</value>
     21<value type="default"></value>
    2322<value type="example">/home /data /space</value>
    2423</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/usershareprefixdenylist.xml

    r414 r988  
    11<samba:parameter name="usershare prefix deny list"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="string"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="cmdlist"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies a list of absolute pathnames
    … …  
    2120
    2221</description>
    23 <value type="default">NULL</value>
     22<value type="default"></value>
    2423<value type="example">/etc /dev /private</value>
    2524</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/usersharetemplateshare.xml

    r414 r988  
    11<samba:parameter name="usershare template share"
    2                  context="G"
    3                  basic="1" advanced="1"
    4                  type="string"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>User defined shares only have limited possible parameters
    … …  
    2019
    2120</description>
    22 <value type="default">NULL</value>
     21<value type="default"></value>
    2322<value type="example">template_share</value>
    2423</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/misc/utmp.xml

    r414 r988  
    22                 context="G"
    33                                 type="boolean"
    4                  developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/misc/utmpdirectory.xml

    r414 r988  
    11<samba:parameter name="utmp directory"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/misc/valid.xml

    r414 r988  
    11<samba:parameter name="-valid"
    2                  context="S"
    3                  type="boolean"
    4                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 generated_function="0"
     5                 function="valid"
     6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    57<description>
    68        <para> This parameter indicates whether a share is

  • vendor/current/docs-xml/smbdotconf/misc/volume.xml

    r414 r988  
    11<samba:parameter name="volume"
    2                 context="S"
    3                 type="string"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="string"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>This allows you to override the volume label

  • vendor/current/docs-xml/smbdotconf/misc/widelinks.xml

    r746 r988  
    11<samba:parameter name="wide links"
    2                 context="S"
    3                 type="boolean"
    4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="S"
     3                type="boolean"
     4                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    66        <para>This parameter controls whether or not links

  • vendor/current/docs-xml/smbdotconf/misc/wtmpdirectory.xml

    r414 r988  
    11<samba:parameter name="wtmp directory"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/printing/addportcommand.xml

    r740 r988  
    1 <samba:parameter name="add port command"
     1<samba:parameter name="addport command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/addprintercommand.xml

    r414 r988  
    11<samba:parameter name="addprinter command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/cupsconnectiontimeout.xml

    r414 r988  
    22                 context="G"
    33                 type="integer"
    4                  print="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/cupsencrypt.xml

    r414 r988  
    11<samba:parameter name="cups encrypt"
    2         context="G"
    3         type="enum"
    4         advanced="1" print="1"
    5         xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77        <para>
    … …  
    2222</description>
    2323
    24 <value type="default">"no"</value>
     24<value type="default">no</value>
    2525</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/cupsoptions.xml

    r414 r988  
    11<samba:parameter name="cups options"
    22                 context="S"
    3                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/cupsserver.xml

    r414 r988  
    11<samba:parameter name="cups server"
    22                 context="G"
    3                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/defaultdevmode.xml

    r414 r988  
    11<samba:parameter name="default devmode"
    22                 context="S"
    3                                  type="boolean"
    4                  print="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/deleteprintercommand.xml

    r414 r988  
    11<samba:parameter name="deleteprinter command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/disablespoolss.xml

    r414 r988  
    11<samba:parameter name="disable spoolss"
    22                 context="G"
    3                                 type="boolean"
    4                  print="1"
     3                type="boolean"
     4                 function="_disable_spoolss"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/printing/enablespoolss.xml

    r414 r988  
    11<samba:parameter name="enable spoolss"
    22                 context="G"
    3                  type="boolean"
     3                 type="boolean-rev"
     4                 function="_disable_spoolss"
     5                 synonym="1"
    46                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    57<description>

  • vendor/current/docs-xml/smbdotconf/printing/enumportscommand.xml

    r414 r988  
    11<samba:parameter name="enumports command"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/forceprintername.xml

    r414 r988  
    11<samba:parameter name="force printername"
    22                 context="S"
    3                  type="boolean"
    4                  print="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/iprintserver.xml

    r414 r988  
    11<samba:parameter name="iprint server"
    22                 context="G"
    3                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/loadprinters.xml

    r414 r988  
    11<samba:parameter name="load printers"
    22                 context="G"
    3                                  type="boolean"
    4                  print="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/lppausecommand.xml

    r414 r988  
    11<samba:parameter name="lppause command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2524    <para>Note that it is good practice to include the absolute path
    2625    in the lppause command as the PATH may not be available to the server.</para>
    27 </description>
    2826
    29 <related>printing</related>
    30 
    31 <value type="default"><comment>Currently no default value is given to
     27    <para>Currently no default value is given to
    3228    this string, unless the value of the <smbconfoption name="printing"/>
    3329    parameter is <constant>SYSV</constant>, in which case the default is :
    … …  
    3531    <parameter moreinfo="none">printing</parameter> parameter is
    3632    <constant>SOFTQ</constant>, then the default is:
    37     <command moreinfo="none">qstat -s -j%j -h</command>. </comment></value>
     33    <command moreinfo="none">qstat -s -j%j -h</command>. </para>
     34
     35</description>
     36
     37<related>printing</related>
     38
     39<value type="default"><comment>determined by printing parameter</comment></value>
    3840<value type="example">/usr/bin/lpalt %p-%j -p0</value>
    3941</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/lpqcachetime.xml

    r414 r988  
    11<samba:parameter name="lpq cache time"
    2                  context="G"
    3                  type="integer"
    4                  developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This controls how long lpq info will be cached

  • vendor/current/docs-xml/smbdotconf/printing/lpqcommand.xml

    r414 r988  
    11<samba:parameter name="lpq command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>
    … …  
    3938
    4039<value type="example">/usr/bin/lpq -P%p</value>
    41 <value type="default"></value>
     40<value type="default"><comment>determined by printing parameter</comment></value>
    4241</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/lpresumecommand.xml

    r414 r988  
    11<samba:parameter name="lpresume command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    3534</description>
    3635
     36<value type="default"><comment>determined by printing parameter</comment></value>
    3737<value type="example">/usr/bin/lpalt %p-%j -p2</value>
    3838</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/lprmcommand.xml

    r414 r988  
    11<samba:parameter name="lprm command"
    22                 context="S"
    3                                  type="string"
    4                                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    3332<related>printing</related>
    3433
    35 <value type="default"> determined by printing parameter</value>
     34<value type="default"><comment>determined by printing parameter</comment></value>
    3635</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/maxprintjobs.xml

    r414 r988  
    11<samba:parameter name="max print jobs"
    22                 context="S"
    3                  print="1"
    4                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/maxreportedprintjobs.xml

    r414 r988  
    11<samba:parameter name="max reported print jobs"
    22                 context="S"
    3                                  type="integer"
    4                  print="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/os2drivermap.xml

    r414 r988  
    11<samba:parameter name="os2 driver map"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="string"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/printable.xml

    r414 r988  
    11<samba:parameter name="printable"
    22                 context="S"
    3                                  print="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<synonym>print ok</synonym>

  • vendor/current/docs-xml/smbdotconf/printing/printcapcachetime.xml

    r740 r988  
    11<samba:parameter name="printcap cache time"
    2         context="G"
    3         type="integer"
    4                  print="1" developer="1"
     2                 context="G"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/printcapname.xml

    r414 r988  
    11<samba:parameter name="printcap name"
    2         context="G"
    3         type="string"
    4                  print="1" developer="1"
     2                 context="G"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<synonym>printcap</synonym>
    … …  
    1414    <para>
    1515        To use the CUPS printing interface set <command moreinfo="none">printcap name = cups </command>. This should
    16         be supplemented by an addtional setting <smbconfoption name="printing">cups</smbconfoption> in the [global]
     16        be supplemented by an additional setting <smbconfoption name="printing">cups</smbconfoption> in the [global]
    1717        section.  <command moreinfo="none">printcap name = cups</command> will use the  &quot;dummy&quot; printcap
    1818        created by CUPS, as specified in your CUPS configuration file.

  • vendor/current/docs-xml/smbdotconf/printing/printcommand.xml

    r414 r988  
    11<samba:parameter name="print command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/printing/printername.xml

    r414 r988  
    11<samba:parameter name="printer name"
    22                 context="S"
    3                  print="1"
    4                  type="string"
     3                 type="string"
     4                 function="_printername"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66 <synonym>printer</synonym>
    … …  
    2222</description>
    2323
    24 <value type="default">none</value>
     24<value type="default"></value>
    2525<value type="example">laserwriter</value>
    2626</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/printing.xml

    r414 r988  
    11<samba:parameter name="printing"
    22                 context="S"
    3                                  type="enum"
    4                  print="1"
     3                 type="enum"
     4                 enumlist="enum_printing"
     5                 handler="handle_printing"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>
    … …  
    1920    <constant>SYSV</constant>, <constant>HPUX</constant>,
    2021    <constant>QNX</constant>, <constant>SOFTQ</constant>,
    21     and <constant>CUPS</constant>.</para>
     22    <constant>CUPS</constant> and <constant>IPRINT</constant>.</para>
     23
     24    <para>Be aware that CUPS and IPRINT are only available if the CUPS
     25    development library was available at the time Samba was compiled
     26    or packaged.</para>
    2227
    2328    <para>To see what the defaults are for the other print
    … …  
    3338    <para>See also the discussion in the <link linkend="PRINTERSSECT">
    3439    [printers]</link> section.</para>
     40
     41    <para>See <command moreinfo="none">testparm -v.</command> for the default
     42    value on your system</para>
    3543</description>
    36 <value type="default">Depends on the operating system, see
    37 <command moreinfo="none">testparm -v.</command></value>
     44<value type="default"><comment>Depends on the operating system</comment></value>
    3845</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/printjobusername.xml

    r414 r988  
    11<samba:parameter name="printjob username"
    22                 context="S"
    3                                 type="string"
    4                  print="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/printing/printnotifybackchannel.xml

    r740 r988  
    11<samba:parameter name="print notify backchannel"
    2                  context="S"
    3                  print="1"
    4                  type="boolean"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76<para>Windows print clients can update print queue status by expecting
    … …  
    98        client firewall settings this can cause considerable timeouts
    109        and will often fail, as there is no guarantee the client is even
    11         running an SMB server. By setting this parameter to <constant>no</constant>
    12         the Samba print server will not try to connect back to clients
    13         and treat corresponding requests as if the connection back to
    14         the client failed. The default setting of <constant>yes</constant>
    15         causes smbd to attempt this connection.
     10        running an SMB server. By default, the Samba print server will
     11        not try to connect back to clients, and will treat corresponding
     12        requests as if the connection back to the client failed.
    1613</para>
    1714</description>
    18 <value type="default">yes</value>
     15<value type="default">no</value>
    1916</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/queuepausecommand.xml

    r414 r988  
    11<samba:parameter name="queuepause command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2524</description>
    2625
     26<value type="default"><comment>determined by printing parameter</comment></value>
    2727<value type="example">disable %p</value>
    2828</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/queueresumecommand.xml

    r414 r988  
    11<samba:parameter name="queueresume command"
    22                 context="S"
    3                                  type="string"
    4                  print="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2726</description>
    2827
    29 <value type="default"></value>
     28<value type="default"><comment>determined by printing parameter</comment></value>
    3029<value type="example">enable %p</value>
    3130</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/printing/showaddprinterwizard.xml

    r414 r988  
    11<samba:parameter name="show add printer wizard"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1514    open a handle on the printer server with OpenPrinterEx() asking for
    1615    Administrator privileges.  If the user does not have administrative
    17     access on the print server (i.e is not root or a member of the
    18     <parameter moreinfo="none">printer admin</parameter> group), the OpenPrinterEx()
     16    access on the print server (i.e is not root or has granted the
     17    SePrintOperatorPrivilege), the OpenPrinterEx()
    1918    call fails and the client makes another open call with a request for
    2019    a lower privilege level.  This should succeed, however the APW
    … …  
    3130<related>addprinter command</related>
    3231<related>deleteprinter command</related>
    33 <related>printer admin</related>
    3432
    3533<value type="default">yes</value>

  • vendor/current/docs-xml/smbdotconf/printing/useclientdriver.xml

    r414 r988  
    11<samba:parameter name="use client driver"
    22                 context="S"
    3                                  type="boolean"
    4                  print="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2019    considers the printer to be local, it will attempt to issue the
    2120    OpenPrinterEx() call requesting access rights associated  with the
    22     logged on user. If the user possesses local administator rights but
     21    logged on user. If the user possesses local administrator rights but
    2322    not root privilege on the Samba host (often the case), the
    2423    OpenPrinterEx() call will fail.  The result is that the client will

  • vendor/current/docs-xml/smbdotconf/protocol/aclcheckpermissions.xml

    r414 r988  
    11<samba:parameter name="acl check permissions"
    22                 context="S"
    3                 type="boolean"
    4                  advanced="1" wizard="1"
     3                type="boolean"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
     7    <para>Please note this parameter is now deprecated in Samba 3.6.2 and will be removed
     8    in a future version of Samba.
     9    </para>
    710    <para>This boolean parameter controls what <citerefentry><refentrytitle>smbd</refentrytitle>
    8     <manvolnum>8</manvolnum></citerefentry>does on receiving a protocol request of "open for delete"
     11    <manvolnum>8</manvolnum></citerefentry> does on receiving a protocol request of "open for delete"
    912    from a Windows client. If a Windows client doesn't have permissions to delete a file then they
    1013    expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by
    … …  
    2730    </para>
    2831</description>
    29 <value type="default">True</value>
     32<value type="default">yes</value>
    3033</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/aclmapfullcontrol.xml

    r581 r988  
    11<samba:parameter name="acl map full control"
    2                 context="S"
    3                 type="boolean"
    4                 advanced="1" wizard="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="S"
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>
    … …  
    1413        </para>
    1514</description>
    16 <value type="default">True</value>
     15<value type="default">yes</value>
    1716</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/clientusespnego.xml

    r919 r988  
    11<samba:parameter name="client use spnego"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/defersharingviolations.xml

    r414 r988  
    11<samba:parameter name="defer sharing violations"
    22                 context="G"
    3                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2322</description>
    2423
    25 <value type="default">True</value>
     24<value type="default">yes</value>
    2625</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/disablenetbios.xml

    r414 r988  
    11<samba:parameter name="disable netbios"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/easupport.xml

    r414 r988  
    11<samba:parameter name="ea support"
    22                 context="S"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/enableasusupport.xml

    r414 r988  
    11<samba:parameter name="enable asu support"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    7     <para>Hosts running the "Advanced Server for Unix (ASU)" product 
    8     require some special accomodations such as creating a builtin [ADMIN$] 
     6    <para>Hosts running the "Advanced Server for Unix (ASU)" product
     7    require some special accomodations such as creating a builtin [ADMIN$]
    98    share that only supports IPC connections.  The has been the default
    109    behavior in smbd for many years.  However, certain Microsoft applications
    1110    such as the Print Migrator tool require that the remote server support
    12     an [ADMIN$} file share.  Disabling this parameter allows for creating
     11    an [ADMIN$] file share.  Disabling this parameter allows for creating
    1312    an [ADMIN$] file share in smb.conf.</para>
    1413</description>

  • vendor/current/docs-xml/smbdotconf/protocol/eventloglist.xml

    r414 r988  
    11<samba:parameter name="eventlog list"
    2                  type="string"
     2                 type="cmdlist"
    33                 context="G"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    … …  
    77    report to the Microsoft EventViewer utility.  The listed
    88    eventlogs will be associated with tdb file on disk in the
    9     <filename>$(lockdir)/eventlog</filename>.
     9    <filename>$(statedir)/eventlog</filename>.
    1010    </para>
    1111

  • vendor/current/docs-xml/smbdotconf/protocol/largereadwrite.xml

    r414 r988  
    11<samba:parameter name="large readwrite"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/mapaclinherit.xml

    r414 r988  
    11<samba:parameter name="map acl inherit"
    22                 context="S"
    3                                  type="boolean"
    4                  advanced="1" wizard="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/maxmux.xml

    r414 r988  
    11<samba:parameter name="max mux"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/maxttl.xml

    r414 r988  
    11<samba:parameter name="max ttl"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/maxwinsttl.xml

    r414 r988  
    11<samba:parameter name="max wins ttl"
    2                                 type="integer"
     2                type="integer"
    33                 context="G"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/maxxmit.xml

    r414 r988  
    11<samba:parameter name="max xmit"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="bytes"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/minreceivefilesize.xml

    r414 r988  
    11<samba:parameter name="min receivefile size"
    2                 type="integer"
    3                 context="G"
    4                 advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="bytes"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76<para>This option changes the behavior of <citerefentry><refentrytitle>smbd</refentrytitle>
    … …  
    1514nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k.</para>
    1615<para>Note this option will have NO EFFECT if set on a SMB signed connection.</para>
    17 <para>The default is zero, which diables this option.</para>
     16<para>The default is zero, which disables this option.</para>
    1817</description>
    1918

  • vendor/current/docs-xml/smbdotconf/protocol/minwinsttl.xml

    r414 r988  
    11<samba:parameter name="min wins ttl"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/nameresolveorder.xml

    r746 r988  
    11<samba:parameter name="name resolve order"
    22                 context="G"
    3                                  type="list"
    4                  advanced="1" wizard="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/ntaclsupport.xml

    r414 r988  
    11<samba:parameter name="nt acl support"
    22                 context="S"
    3                  advanced="1" wizard="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    87    <manvolnum>8</manvolnum></citerefentry> will attempt to map
    98    UNIX permissions into Windows NT access control lists.  The UNIX
    10     permissions considered are the the traditional UNIX owner and
     9    permissions considered are the traditional UNIX owner and
    1110    group permissions, as well as POSIX ACLs set on any files or
    1211    directories.  This parameter was formally a global parameter in

  • vendor/current/docs-xml/smbdotconf/protocol/ntpipesupport.xml

    r414 r988  
    11<samba:parameter name="nt pipe support"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/ntstatussupport.xml

    r414 r988  
    11<samba:parameter name="nt status support"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/profileacls.xml

    r746 r988  
    11<samba:parameter name="profile acls"
    22                 context="S"
    3                                  type="boolean"
    4                  advanced="1" wizard="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/readraw.xml

    r414 r988  
    11<samba:parameter name="read raw"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    7     <para>This parameter controls whether or not the server
    8     will support the raw read SMB requests when transferring data
    9     to clients.</para>
     6    <para>This is ignored if <smbconfoption name="async smb echo handler"/> is set,
     7    because this feature is incompatible with raw read SMB requests</para>
    108
    119    <para>If enabled, raw reads allow reads of 65535 bytes in
    12     one packet. This typically provides a major performance benefit.
     10    one packet. This typically provides a major performance benefit for some very, very old clients.
    1311    </para>
    1412
    … …  
    2422
    2523<related>write raw</related>
     24<related>async smb echo handler</related>
    2625</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/sharefakefscaps.xml

    r414 r988  
    11<samba:parameter name="share:fake_fscaps"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="0"
     2                 context="G"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/smb2maxcredits.xml

    r746 r988  
    11<samba:parameter name="smb2 max credits"
    2                 type="integer"
    3                 context="G"
    4                 advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="integer"
     3                 context="G"
     4                 handler="handle_smb2_max_credits"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77<para>This option controls the maximum number of outstanding simultaneous SMB2 operations

  • vendor/current/docs-xml/smbdotconf/protocol/smb2maxread.xml

    r746 r988  
    11<samba:parameter name="smb2 max read"
    2                 type="integer"
    3                 context="G"
    4                 advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="bytes"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76<para>This option specifies the protocol value that <citerefentry><refentrytitle>smbd</refentrytitle>
    … …  
    98size that may be returned by a single SMB2 read call.
    109</para>
    11 <para>The maximum is 65536 bytes (64KB), which is the same as a Windows Vista SMB2 server.</para>
     10<para>The maximum is 8388608 bytes (8MiB), which is the same as a Windows Server 2012 r2.</para>
     11<para>Please note that the default is 8MiB, but it's limit is based on the
     12smb2 dialect (64KiB for SMB == 2.0, 8MiB for SMB >= 2.1 with LargeMTU).
     13Large MTU is not supported over NBT (tcp port 139).</para>
    1214</description>
    1315
    1416<related>smb2 max write</related>
    1517<related>smb2 max trans</related>
    16 <value type="default">65536</value>
     18<value type="default">8388608</value>
    1719</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/smb2maxtrans.xml

    r746 r988  
    11<samba:parameter name="smb2 max trans"
    2                 type="integer"
    3                 context="G"
    4                 advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="bytes"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76<para>This option specifies the protocol value that <citerefentry><refentrytitle>smbd</refentrytitle>
    … …  
    98size of buffer that may be used in querying file meta-data via QUERY_INFO and related SMB2 calls.
    109</para>
    11 <para>The maximum is 65536 bytes (64KB), which is the same as a Windows Vista SMB2 server.</para>
     10<para>The maximum is 8388608 bytes (8MiB), which is the same as a Windows Server 2012 r2.</para>
     11<para>Please note that the default is 8MiB, but it's limit is based on the
     12smb2 dialect (64KiB for SMB == 2.0, 1MiB for SMB >= 2.1 with LargeMTU).
     13Large MTU is not supported over NBT (tcp port 139).</para>
    1214</description>
    1315
    1416<related>smb2 max read</related>
    1517<related>smb2 max write</related>
    16 <value type="default">65536</value>
     18<value type="default">8388608</value>
    1719</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/smb2maxwrite.xml

    r746 r988  
    11<samba:parameter name="smb2 max write"
    2                 type="integer"
    3                 context="G"
    4                 advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="bytes"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76<para>This option specifies the protocol value that <citerefentry><refentrytitle>smbd</refentrytitle>
    … …  
    98size that may be sent to the server by a single SMB2 write call.
    109</para>
    11 <para>The maximum is 65536 bytes (64KB), which is the same as a Windows Vista SMB2 server.</para>
     10<para>The maximum is 8388608 bytes (8MiB), which is the same as a Windows Server 2012 r2.</para>
     11<para>Please note that the default is 8MiB, but it's limit is based on the
     12smb2 dialect (64KiB for SMB == 2.0, 8MiB for SMB => 2.1 with LargeMTU).
     13Large MTU is not supported over NBT (tcp port 139).</para>
    1214</description>
    1315
    1416<related>smb2 max read</related>
    1517<related>smb2 max trans</related>
    16 <value type="default">65536</value>
     18<value type="default">8388608</value>
    1719</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/protocol/smbports.xml

    r414 r988  
    11<samba:parameter name="smb ports"
    22                 context="G"
    3                                  type="list"
    4                  advanced="1" developer="1"
     3                 type="cmdlist"
     4                 handler="handle_smb_ports"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/protocol/svcctllist.xml

    r414 r988  
    11<samba:parameter name="svcctl list"
    2                  type="string"
     2                 type="cmdlist"
    33                 context="G"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/protocol/timeserver.xml

    r414 r988  
    11<samba:parameter name="time server"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/protocol/unixextensions.xml

    r746 r988  
    11<samba:parameter name="unix extensions"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>

  • vendor/current/docs-xml/smbdotconf/protocol/usespnego.xml

    r740 r988  
    11<samba:parameter name="use spnego"
    22                 context="G"
    3                                 type="boolean"
    4                  developer="1"
     3                type="boolean"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    7     <para>This deprecated variable controls controls whether samba will try
     7    <para>This deprecated variable controls whether samba will try
    88    to use Simple and Protected NEGOciation (as specified by rfc2478) with
    99    WindowsXP and Windows2000 clients to agree upon an authentication mechanism.

  • vendor/current/docs-xml/smbdotconf/protocol/writeraw.xml

    r414 r988  
    11<samba:parameter name="write raw"
    22                 context="G"
    3                                  type="boolean"
    4                  developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    7     <para>This parameter controls whether or not the server
    8     will support raw write SMB's when transferring data from clients.
    9     You should never need to change this parameter.</para>
     6    <para>This is ignored if <smbconfoption name="async smb echo handler"/> is set,
     7    because this feature is incompatible with raw write SMB requests</para>
     8
     9    <para>If enabled, raw writes allow writes of 65535 bytes in
     10    one packet. This typically provides a major performance benefit for some very, very old clients.
     11    </para>
     12
     13    <para>However, some clients either negotiate the allowable
     14    block size incorrectly or are incapable of supporting larger block
     15        sizes, and for these clients you may need to disable raw writes.</para>
     16
     17<para>In general this parameter should be viewed as a system tuning
     18        tool and left severely alone.</para>
    1019</description>
    1120
    1221<value type="default">yes</value>
     22
     23<related>read raw</related>
     24<related>async smb echo handler</related>
    1325</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/accessbasedshareenum.xml

    r414 r988  
    11<samba:parameter name="access based share enum"
    2                 type="boolean"
     2                type="boolean"
    33                 context="S"
    4                  basic="1" advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>
    76     <para>If this parameter is <constant>yes</constant> for a
    87    service, then the share hosted by the service will only be visible
    98    to users who have read or write access to the share during share
    10     enumeration (for example net view \\sambaserver).  This has
     9    enumeration (for example net view \\sambaserver). The share ACLs
     10    which allow or deny the access to the share can be modified using
     11    for example the <command moreinfo="none">sharesec</command> command
     12    or using the appropriate Windows tools. This has
    1113    parallels to access based enumeration, the main difference being
    1214    that only share permissions are evaluated, and security

  • vendor/current/docs-xml/smbdotconf/security/aclgroupcontrol.xml

    r414 r988  
    11<samba:parameter name="acl group control"
    22                 context="S"
    3                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1515        on a point in the filesystem to the group owner of a directory and anything below it also owned
    1616        by that group. This means there are multiple people with permissions to modify ACLs on a file
    17         or directory, easing managability.
     17        or directory, easing manageability.
    1818        </para>
    1919        <para>
    … …  
    2525        <para>
    2626        This parameter is best used with the <smbconfoption name="inherit owner"/> option and also
    27         on on a share containing directories with the UNIX <emphasis>setgid bit</emphasis> set
     27        on a share containing directories with the UNIX <emphasis>setgid bit</emphasis> set
    2828        on them, which causes new files and directories created within it to inherit the group
    2929        ownership from the containing directory.
    … …  
    3131
    3232        <para>
    33         This is parameter has been was deprecated in Samba 3.0.23, but re-activated in
     33        This parameter was deprecated in Samba 3.0.23, but re-activated in
    3434        Samba 3.0.31 and above, as it now only controls permission changes if the user
    3535        is in the owning primary group. It is now no longer equivalent to the

  • vendor/current/docs-xml/smbdotconf/security/adminusers.xml

    r414 r988  
    11<samba:parameter name="admin users"
    22                 context="S"
    3                                  type="list"
     3                 type="cmdlist"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1212    irrespective of file permissions.</para>
    1313
    14     <para>This parameter will not work with the <smbconfoption name="security">share</smbconfoption> in
    15     Samba 3.0.  This is by design.</para>
    16 
    1714</description>
    1815

  • vendor/current/docs-xml/smbdotconf/security/algorithmicridbase.xml

    r414 r988  
    11<samba:parameter name="algorithmic rid base"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="integer"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>This determines how Samba will use its
    … …  
    1211    <para>Setting this option to a larger value could be useful to sites
    1312    transitioning from WinNT and Win2k, as existing user and
    14     group rids would otherwise clash with sytem users etc.
     13    group rids would otherwise clash with system users etc.
    1514    </para>
    1615

  • vendor/current/docs-xml/smbdotconf/security/allowdcerpcauthlevelconnect.xml

    r919 r988  
    88        but no per message integrity nor privacy protection.</para>
    99
    10         <para>The behavior can be controlled per interface name (e.g. lsarpc, netlogon, samr, srvsvc,
    11         winreg, wkssvc ...) by using 'allow dcerpc auth level connect:interface = no' as option.</para>
     10        <para>Some interfaces like samr, lsarpc and netlogon have a hard-coded default of
     11        <constant>no</constant> and epmapper, mgmt and rpcecho have a hard-coded default of
     12        <constant>yes</constant>.
     13        </para>
    1214
    13         <para>This option yields precedence to the implentation specific restrictions.
     15        <para>The behavior can be overwritten per interface name (e.g. lsarpc, netlogon, samr, srvsvc,
     16        winreg, wkssvc ...) by using 'allow dcerpc auth level connect:interface = yes' as option.</para>
     17
     18        <para>This option yields precedence to the implementation specific restrictions.
    1419        E.g. the drsuapi and backupkey protocols require DCERPC_AUTH_LEVEL_PRIVACY.
    15         While others like samr and lsarpc have a hardcoded default of <constant>no</constant>.
     20        The dnsserver protocol requires DCERPC_AUTH_LEVEL_INTEGRITY.
    1621        </para>
    1722</description>

  • vendor/current/docs-xml/smbdotconf/security/allowtrusteddomains.xml

    r414 r988  
    11<samba:parameter name="allow trusted domains"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>

  • vendor/current/docs-xml/smbdotconf/security/authmethods.xml

    r414 r988  
    11<samba:parameter name="auth methods"
    22                 context="G"
    3                                  type="list"
    4                  basic="1" advanced="1" wizard="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="cmdlist"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76

  • vendor/current/docs-xml/smbdotconf/security/checkpasswordscript.xml

    r414 r988  
    11<samba:parameter name="check password script"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1817</description>
    1918
    20 <value type="default">Disabled</value>
     19<value type="default"><comment>Disabled</comment></value>
    2120<value type="example">/usr/local/sbin/crackcheck</value>
    2221</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/clientipcsigning.xml

    r919 r988  
    22                 context="G"
    33                 type="enum"
     4                 function="_client_ipc_signing"
    45                 enumlist="enum_smb_signing_vals"
    56                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    67<description>
    78    <para>This controls whether the client is allowed or required to use SMB signing for IPC$
    8     connections as DCERPC transport inside of winbind. Possible values
     9    connections as DCERPC transport. Possible values
    910    are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
    1011    and <emphasis>disabled</emphasis>.
    1112    </para>
     13
     14    <para>When set to mandatory or default, SMB signing is required.</para>
    1215
    1316    <para>When set to auto, SMB signing is offered, but not enforced and if set
    … …  
    2023<related>client signing</related>
    2124
    22 <value type="default">mandatory</value>
     25<value type="default">default</value>
    2326</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/clientlanmanauth.xml

    r414 r988  
    11<samba:parameter name="client lanman auth"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/clientntlmv2auth.xml

    r919 r988  
    1 <samba:parameter name="client ntlmv2 auth"
     1<samba:parameter name="client NTLMv2 auth"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/clientplaintextauth.xml

    r414 r988  
    11<samba:parameter name="client plaintext auth"
    22                 context="G"
    3                                  type="boolean"
    4                  basic="1" advanced="1" wizard="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>Specifies whether a client should send a plaintext

  • vendor/current/docs-xml/smbdotconf/security/clientschannel.xml

    r414 r988  
    11<samba:parameter name="client schannel"
    22                 context="G"
    3                  basic="1"
    4                                  type="boolean-auto"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77
    … …  
    1313    if the server is not able to speak netlogon schannel.
    1414    </para>
     15
     16    <para>Note that for active directory domains this is hardcoded to
     17    <smbconfoption name="client schannel">yes</smbconfoption>.</para>
     18
     19    <para>This option yields precedence to the <smbconfoption name="require strong key"/> option.</para>
    1520</description>
    1621<value type="default">auto</value>

  • vendor/current/docs-xml/smbdotconf/security/clientsigning.xml

    r919 r988  
    11<samba:parameter name="client signing"
    22                 context="G"
    3                                  type="boolean-auto"
    4                  basic="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="enum"
     4                 enumlist="enum_smb_signing_vals"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77    <para>This controls whether the client is allowed or required to use SMB signing. Possible values
    … …  
    1010    </para>
    1111
    12     <para>When set to auto, SMB signing is offered, but not enforced.
    13     When set to mandatory, SMB signing is required and if set
    14         to disabled, SMB signing is not offered either.
     12    <para>When set to auto or default, SMB signing is offered, but not enforced.</para>
     13
     14    <para>When set to mandatory, SMB signing is required and if set
     15    to disabled, SMB signing is not offered either.</para>
    1516
    1617    <para>IPC$ connections for DCERPC e.g. in winbindd, are handled by the
    1718    <smbconfoption name="client ipc signing"/> option.</para>
    18 </para>
    1919</description>
    2020
    21 <value type="default">auto</value>
     21<related>client ipc signing</related>
     22
     23<value type="default">default</value>
    2224</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/clientusepsnegoprincipal.xml

    r860 r988  
    11<samba:parameter name="client use spnego principal"
    22                 context="G"
    3                                 type="boolean"
    4                  advanced="1" developer="1"
     3                type="boolean"
     4                 deprecated="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1515    ordinarily cannot function in this situation. </para>
    1616
     17    <para>This is a VERY BAD IDEA for security reasons, and so this
     18    parameter SHOULD NOT BE USED. It will be removed in a future
     19    version of Samba.</para>
     20
    1721    <para>If disabled, Samba will use the name used to look up the
    1822    server when asking the KDC for a ticket.  This avoids situations
    … …  
    2428    this behaviour, and Windows Vista and later servers no longer
    2529    supply this 'rfc4178 hint' principal on the server side.</para>
     30
     31    <para>This parameter is deprecated in Samba 4.2.1 and will be removed
     32    (along with the functionality) in a later release of Samba.</para>
    2633</description>
    2734<value type="default">no</value>

  • vendor/current/docs-xml/smbdotconf/security/createmask.xml

    r414 r988  
    11<samba:parameter name="create mask"
    22                 context="S"
    3                                  type="string"
     3                 type="octal"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55
    … …  
    2727        for details.
    2828        </para>
    29 
    30     <para>
    31         Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the
    32         administrator wishes to enforce a mask on access control lists also, they need to set the <smbconfoption
    33         name="security mask"/>.
    34         </para>
    3529</description>
    3630

  • vendor/current/docs-xml/smbdotconf/security/dedicatedkeytabfile.xml

    r414 r988  
    1 <samba:parameter name="dedicated keytab file" context="G" type="string"
    2                  advanced="1" developer="1"
     1<samba:parameter name="dedicated keytab file"
     2                 context="G"
     3                 type="string"
     4                 constant="1"
    35                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    46<description>

  • vendor/current/docs-xml/smbdotconf/security/directorymask.xml

    r414 r988  
    11<samba:parameter name="directory mask"
    2         context="S"
    3         type="string"
     2                 context="S"
     3                 type="octal"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<synonym>directory mode</synonym>
    … …  
    2424    created from this parameter with the value of the <smbconfoption name="force directory mode"/> parameter.
    2525    This parameter is set to 000 by default (i.e. no extra mode bits are added).</para>
    26 
    27     <para>Note that this parameter does not apply to permissions
    28     set by Windows NT/2000 ACL editors. If the administrator wishes to enforce
    29     a mask on access control lists also, they need to set the <smbconfoption name="directory security mask"/>.</para>
    3026</description>
    3127
    3228<related>force directory mode</related>
    3329<related>create mask</related>
    34 <related>directory security mask</related>
    3530<related>inherit permissions</related>
    3631<value type="default">0755</value>

  • vendor/current/docs-xml/smbdotconf/security/directorysecuritymask.xml

    r414 r988  
    11<samba:parameter name="directory security mask"
    22                 context="S"
    3                                  type="string"
     3                 removed="1"
     4                 type="string"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    6     <para>This parameter controls what UNIX permission bits
    7     will be set when a Windows NT client is manipulating the UNIX
    8     permission on a directory using the native NT security dialog
    9     box.</para>
    10 
    117    <para>
    12         This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
    13         any bits not in this mask.  Make sure not to mix up this parameter with <smbconfoption name="force
    14         directory security mode"/>, which works similar like this one but uses logical OR instead of AND.
    15         Essentially, zero bits in this mask are a set of bits that will always be set to zero.
    16         </para>
    17 
    18     <para>
    19         Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
    20         file permissions regardless of the previous status of this bits on the file.
     8        This parameter has been removed for Samba 4.0.0.
    219    </para>
    22 
    23     <para>If not set explicitly this parameter is set to 0777
    24     meaning a user is allowed to set all the user/group/world
    25     permissions on a directory.</para>
    26 
    27     <para><emphasis>Note</emphasis> that users who can access the
    28     Samba server through other means can easily bypass this restriction,
    29     so it is primarily useful for standalone &quot;appliance&quot; systems. 
    30     Administrators of most normal systems will probably want to leave
    31         it as the default of <constant>0777</constant>.</para>
    3210</description>
    3311
    34 <related>force directory security mode</related>
    35 <related>security mask</related>
    36 <related>force security mode</related>
    37 <value type="default">0777</value>
    38 <value type="example">0700</value>
    3912</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/encryptpasswords.xml

    r414 r988  
    11<samba:parameter name="encrypt passwords"
    22                 context="G"
    3                                  type="boolean"
    4                  basic="1" advanced="1" wizard="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>This boolean controls whether encrypted passwords
    … …  
    3332    <manvolnum>5</manvolnum></citerefentry> file (see the <citerefentry><refentrytitle>smbpasswd</refentrytitle>
    3433    <manvolnum>8</manvolnum></citerefentry> program for information on how to set up
    35     and maintain this file), or set the <smbconfoption name="security">[server|domain|ads]</smbconfoption> parameter which
     34    and maintain this file), or set the <smbconfoption name="security">[domain|ads]</smbconfoption> parameter which
    3635    causes <command moreinfo="none">smbd</command> to authenticate against another
    3736        server.</para>

  • vendor/current/docs-xml/smbdotconf/security/forcecreatemode.xml

    r414 r988  
    11<samba:parameter name="force create mode"
    22                 context="S"
     3                 type="octal"
    34                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    45<description>
    … …  
    2021<related>inherit permissions</related>
    2122
    22 <value type="default">000</value>
     23<value type="default">0000</value>
    2324<value type="example">0755</value>
    2425</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/forcedirectorymode.xml

    r414 r988  
    11<samba:parameter name="force directory mode"
    22                 context="S"
    3                                  type="string"
     3                 type="octal"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1818</description>
    1919
    20 <value type="default">000</value>
     20<value type="default">0000</value>
    2121<value type="example">0755</value>
    2222

  • vendor/current/docs-xml/smbdotconf/security/forcedirectorysecuritymode.xml

    r414 r988  
    11<samba:parameter name="force directory security mode"
    22                 context="S"
    3                                  type="string"
     3                 type="string"
     4                 removed="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    67    <para>
    7         This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    8         the UNIX permission on a directory using the native NT security dialog box.
    9         </para>
    10 
    11     <para>
    12         This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this
    13         mask that the user may have modified to be on.  Make sure not to mix up this parameter with <smbconfoption
    14         name="directory security mask"/>, which works in a similar manner to this one, but uses a logical AND instead
    15         of an OR.
    16         </para>
    17 
    18         <para>
    19         Essentially, this mask may be treated as a set of bits that, when modifying security on a directory,
    20         to will enable (1) any flags that are off (0) but which the mask has set to on (1).
    21         </para>
    22 
    23     <para>
    24         If not set explicitly this parameter is 0000, which allows a user to modify all the user/group/world
    25         permissions on a directory without restrictions.
    26         </para>
    27 
    28     <note><para>
    29         Users who can access the Samba server through other means can easily bypass this restriction, so it is
    30         primarily useful for standalone &quot;appliance&quot; systems.  Administrators of most normal systems will
    31         probably want to leave it set as 0000.
    32         </para></note>
    33 
     8        This parameter has been removed for Samba 4.0.0.
     9    </para>
    3410</description>
    35 
    36 <value type="default">0</value>
    37 <value type="example">700</value>
    38 
    39 <related>directory security mask</related>
    40 <related>security mask</related>
    41 <related>force security mode</related>
    42 
    4311</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/forcegroup.xml

    r414 r988  
    11<samba:parameter name="force group"
    22                 context="S"
    3                                 type="string"
     3                type="string"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<synonym>group</synonym>

  • vendor/current/docs-xml/smbdotconf/security/forcesecuritymode.xml

    r414 r988  
    11<samba:parameter name="force security mode"
    22                 context="S"
    3                                  type="string"
     3                 type="string"
     4                 removed="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    67    <para>
    7         This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
    8     the UNIX permission on a file using the native NT security dialog box.
    9         </para>
    10                
    11     <para>
    12         This parameter is applied as a mask (OR'ed with) to the changed permission bits, thus forcing any bits in this
    13         mask that the user may have modified to be on.  Make sure not to mix up this parameter with <smbconfoption
    14         name="security mask"/>, which works similar like this one but uses logical AND instead of OR.
    15         </para>
    16 
    17         <para>
    18         Essentially, one bits in this mask may be treated as a set of bits that, when modifying security on a file,
    19         the user has always set to be on.
    20         </para>
    21 
    22     <para>
    23         If not set explicitly this parameter is set to 0, and allows a user to modify all the user/group/world
    24         permissions on a file, with no restrictions.
    25         </para>
    26                
    27     <para><emphasis>
    28         Note</emphasis> that users who can access the Samba server through other means can easily bypass this
    29         restriction, so it is primarily useful for standalone &quot;appliance&quot; systems. Administrators of most
    30         normal systems will probably want to leave this set to 0000.
    31         </para>
    32 
     8        This parameter has been removed for Samba 4.0.0.
     9    </para>
    3310</description>
    34 
    35 <value type="default">0</value>
    36 <value type="example">700</value>
    37 
    38 <related>force directory security mode</related>
    39 <related>directory security mask</related>
    40 <related>security mask</related>
    4111</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/forceunknownacluser.xml

    r414 r988  
    11<samba:parameter name="force unknown acl user"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55

  • vendor/current/docs-xml/smbdotconf/security/forceuser.xml

    r414 r988  
    11<samba:parameter name="force user"
    2                                 type="string"
     2                type="string"
    33                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/security/guestaccount.xml

    r414 r988  
    11<samba:parameter name="guest account"
    22                 context="G"
    3                                 type="string"
    4                  basic="1" advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                type="string"
     4                 constant="1"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77    <para>This is a username which will be used for access

  • vendor/current/docs-xml/smbdotconf/security/guestok.xml

    r740 r988  
    11<samba:parameter name="guest ok"
    2                                 type="boolean"
     2                type="boolean"
    33                 context="S"
    4                  basic="1" advanced="1" print="1" developer="1"
    5                                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<synonym>public</synonym>
    76<description>

  • vendor/current/docs-xml/smbdotconf/security/guestonly.xml

    r414 r988  
    11<samba:parameter name="guest only"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<synonym>only guest</synonym>

  • vendor/current/docs-xml/smbdotconf/security/hostsallow.xml

    r414 r988  
    11<samba:parameter name="hosts allow"
    22                 context="S"
    3                                  type="list"
    4                  basic="1" advanced="1" print="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<synonym>allow hosts</synonym>

  • vendor/current/docs-xml/smbdotconf/security/hostsdeny.xml

    r414 r988  
    11<samba:parameter name="hosts deny"
    22                 context="S"
    3                                  type="list"
    4                  basic="1" advanced="1" print="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<synonym>deny hosts</synonym>

  • vendor/current/docs-xml/smbdotconf/security/inheritacls.xml

    r414 r988  
    11<samba:parameter name="inherit acls"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/security/inheritowner.xml

    r414 r988  
    11<samba:parameter name="inherit owner"
    22                 context="S"
    3                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1111       
    1212        <para>Common scenarios where this behavior is useful is in
    13         implementing drop-boxes where users can create and edit files but not
    14         delete them and to ensure that newly create files in a user's
    15         roaming profile directory are actually owner by the user.</para>
     13        implementing drop-boxes, where users can create and edit files but
     14        not delete them and ensuring that newly created files in a user's
     15        roaming profile directory are actually owned by the user.</para>
    1616</description>
    1717

  • vendor/current/docs-xml/smbdotconf/security/inheritpermissions.xml

    r414 r988  
    11<samba:parameter name="inherit permissions"
    22                 context="S"
    3                                 type="boolean"
     3                type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/security/invalidusers.xml

    r414 r988  
    11<samba:parameter name="invalid users"
    22                 context="S"
    3                                  type="list"
     3                 type="cmdlist"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/security/kerberosmethod.xml

    r414 r988  
    1 <samba:parameter name="kerberos method" context="G" type="enum"
    2                  advanced="1" developer="1"
     1<samba:parameter name="kerberos method"
     2                 context="G"
     3                 type="enum"
     4                 enumlist="enum_kerberos_method"
    35                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    46<description>
    … …  
    3638</description>
    3739<related>dedicated keytab file</related>
    38 <value type="default">secrets only</value>
     40<value type="default">default</value>
    3941</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/lanmanauth.xml

    r414 r988  
    11<samba:parameter name="lanman auth"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2221    blanked after the next password change. As a result of that
    2322    lanman clients won't be able to authenticate, even if lanman
    24     auth is reenabled later on.
     23    auth is re-enabled later on.
    2524    </para>
    2625               

  • vendor/current/docs-xml/smbdotconf/security/maptoguest.xml

    r414 r988  
    11<samba:parameter name="map to guest"
    2                                 type="enum"
     2                type="enum"
    33                 context="G"
    4                  advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     4                 enumlist="enum_map_to_guest"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    7     <para>This parameter is only useful in <smbconfoption name="SECURITY">
    8     security</smbconfoption> modes other than <parameter moreinfo="none">security = share</parameter>
    9     and <parameter moreinfo="none">security = server</parameter>
    10     - i.e. <constant>user</constant>, and <constant>domain</constant>.</para>
    11 
    127    <para>This parameter can take four different values, which tell
    138    <citerefentry><refentrytitle>smbd</refentrytitle>
    … …  
    5651
    5752    <para>Note that this parameter is needed to set up &quot;Guest&quot;
    58     share services when using <parameter moreinfo="none">security</parameter> modes other than
    59     share and server. This is because in these modes the name of the resource being
     53    share services. This is because in these modes the name of the resource being
    6054    requested is <emphasis>not</emphasis> sent to the server until after
    6155    the server has successfully authenticated the client so the server
    6256    cannot make authentication decisions at the correct time (connection
    63     to the share) for &quot;Guest&quot; shares. This parameter is not useful with
    64     <parameter moreinfo="none">security = server</parameter> as in this security mode
    65     no information is returned about whether a user logon failed due to
    66     a bad username or bad password, the same error is returned from a modern server
    67     in both cases.</para>
    68 
    69     <para>For people familiar with the older Samba releases, this
    70     parameter maps to the old compile-time setting of the <constant>
    71                 GUEST_SESSSETUP</constant> value in local.h.</para>
     57    to the share) for &quot;Guest&quot; shares. </para>
    7258</description>
    7359

  • vendor/current/docs-xml/smbdotconf/security/mapuntrustedtodomain.xml

    r414 r988  
    11<samba:parameter name="map untrusted to domain"
    22                 context="G"
    3                  type="boolean"
    4                  advanced="1"
    5                  developer="1"
    6                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    75<description>
    86    <para>

  • vendor/current/docs-xml/smbdotconf/security/ntlmauth.xml

    r414 r988  
    11<samba:parameter name="ntlm auth"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/nullpasswords.xml

    r414 r988  
    11<samba:parameter name="null passwords"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="boolean"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 deprecated="1"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77    <para>Allow or disallow client access to accounts that have null passwords. </para>

  • vendor/current/docs-xml/smbdotconf/security/obeypamrestrictions.xml

    r414 r988  
    11<samba:parameter name="obey pam restrictions"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>When Samba 3.0 is configured to enable PAM support

  • vendor/current/docs-xml/smbdotconf/security/onlyuser.xml

    r414 r988  
    11<samba:parameter name="only user"
    2                                         type="boolean"
     2                 type="boolean"
    33                 context="S"
     4                 deprecated="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    6     <para>This is a boolean option that controls whether
    7     connections with usernames not in the <parameter moreinfo="none">user</parameter>
    8     list will be allowed. By default this option is disabled so that a
    9     client can supply a username to be used by the server.  Enabling
    10     this parameter will force the server to only use the login
    11     names from the <parameter moreinfo="none">user</parameter> list and is only really
    12     useful in <smbconfoption name="security">share</smbconfoption> level security.</para>
     7    <para>To restrict a service to a particular set of users you
     8    can use the <smbconfoption name="valid users"/> parameter.</para>
    139
    14     <para>Note that this also means Samba won't try to deduce
    15     usernames from the service name. This can be annoying for
    16     the [homes] section. To get around this you could use <command moreinfo="none">user =
    17     %S</command> which means your <parameter moreinfo="none">user</parameter> list
    18     will be just the service name, which for home directories is the
    19     name of the user.</para>
     10    <para>This parameter is deprecated</para>
     11
     12    <para>However, it currently operates only in conjunction with
     13    <smbconfoption name="username"/>.  The supported way to restrict
     14    a service to a particular set of users is the
     15    <smbconfoption name="valid users"/> parameter.</para>
     16
    2017</description>
    2118

  • vendor/current/docs-xml/smbdotconf/security/pampasswordchange.xml

    r414 r988  
    11<samba:parameter name="pam password change"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>With the addition of better PAM support in Samba 2.2,

  • vendor/current/docs-xml/smbdotconf/security/passdbbackend.xml

    r414 r988  
    11<samba:parameter name="passdb backend"
    22                 context="G"
    3                  type="list"
    4                  advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="string"
     4                 constant="1"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77

  • vendor/current/docs-xml/smbdotconf/security/passdbexpandexplicit.xml

    r414 r988  
    11<samba:parameter name="passdb expand explicit"
    22                 context="G"
    3                  advanced="1" developer="0"
    4                                  type="boolean"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="boolean"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>

  • vendor/current/docs-xml/smbdotconf/security/passwdchat.xml

    r414 r988  
    22                 context="G"
    33                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    5655<related>pam password change</related>
    5756
    58 <value type="default">*new*password* %n\n*new*password* %n\n *changed*</value>
     57<value type="default">*new*password* %n\n *new*password* %n\n *changed*</value>
    5958<value type="example">&quot;*Enter NEW password*&quot; %n\n &quot;*Reenter NEW password*&quot; %n\n &quot;*Password changed*&quot;</value>
    6059</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/passwdchatdebug.xml

    r414 r988  
    11<samba:parameter name="passwd chat debug"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="boolean"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/passwdchattimeout.xml

    r414 r988  
    11<samba:parameter name="passwd chat timeout"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/passwdprogram.xml

    r414 r988  
    11<samba:parameter name="passwd program"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>
    76    <para>The name of a program that can be used to set

  • vendor/current/docs-xml/smbdotconf/security/passwordserver.xml

    r740 r988  
    11<samba:parameter name="password server"
    22                 context="G"
    3                                  type="list"
    4                  advanced="1" wizard="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="string"
     4                 constant="1"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    7     <para>By specifying the name of another SMB server
    8     or Active Directory domain controller with this option,
    9     and using <command moreinfo="none">security = [ads|domain|server]</command>
     7    <para>By specifying the name of a domain controller with this option,
     8    and using <command moreinfo="none">security = [ads|domain]</command>
    109    it is possible to get Samba
    1110    to do all its username/password validation using a specific remote server.</para>
    1211
    13     <para>If the <parameter moreinfo="none">security</parameter> parameter is set to
    14     <constant>domain</constant> or <constant>ads</constant>, then this option
    15     <emphasis>should not</emphasis> be used, as the default '*' indicates to Samba
    16     to determine the best DC to contact dynamically, just as all other hosts in an
    17     AD domain do.  This allows the domain to be maintained without modification to
    18     the smb.conf file.  The cryptograpic protection on the authenticated RPC calls
     12    <para>Ideally, this option
     13    <emphasis>should not</emphasis> be used, as the default '*' indicates to Samba
     14    to determine the best DC to contact dynamically, just as all other hosts in an
     15    AD domain do.  This allows the domain to be maintained (addition
     16    and removal of domain controllers) without modification to
     17    the smb.conf file.  The cryptographic protection on the authenticated RPC calls
    1918    used to verify passwords ensures that this default is safe.</para>
    2019
    … …  
    3635    this list by locating the closest DC.</para>
    3736               
    38     <para>If parameter is a name, it is looked up using the
     37    <para>If parameter is a name, it is looked up using the 
    3938    parameter <smbconfoption name="name resolve order"/> and so may resolved
    4039    by any method and order described in that parameter.</para>
    4140
    42     <para>If the <parameter moreinfo="none">security</parameter> parameter is
    43     set to <constant>server</constant>, these additional restrictions apply:</para>
    44 
    45     <itemizedlist>
    46         <listitem>
    47             <para>You may list several password servers in
    48             the <parameter moreinfo="none">password server</parameter> parameter, however if an
    49             <command moreinfo="none">smbd</command> makes a connection to a password server,
    50             and then the password server fails, no more users will be able
    51             to be authenticated from this <command moreinfo="none">smbd</command>.  This is a
    52             restriction of the SMB/CIFS protocol when in <command moreinfo="none">security = server
    53             </command> mode and cannot be fixed in Samba.</para>
    54         </listitem>
    55            
    56         <listitem>
    57             <para>You will have to ensure that your users
    58             are able to login from the Samba server, as when in <command moreinfo="none">
    59             security = server</command>  mode the network logon will appear to
    60             come from the Samba server rather than from the users workstation.</para>
    61         </listitem>
    62 
    63         <listitem>
    64             <para>The client must not select NTLMv2 authentication.</para>
    65         </listitem>
    66 
    67         <listitem>
    68           <para>The password server must be a machine capable of using
    69           the &quot;LM1.2X002&quot; or the &quot;NT LM 0.12&quot; protocol, and it must be in
    70           user level security mode.</para>
    71         </listitem>
    72 
    73         <listitem>
    74           <para>Using a password server  means your UNIX box (running
    75           Samba) is only as secure as (a host masqurading as) your password server. <emphasis>DO NOT
    76           CHOOSE A PASSWORD SERVER THAT  YOU DON'T COMPLETELY TRUST</emphasis>.
    77           </para>
    78         </listitem>
    79 
    80         <listitem>
    81           <para>Never point a Samba server at itself for password serving.
    82           This will cause a loop and could lock up your Samba  server!</para>
    83         </listitem>
    84 
    85         <listitem>
    86           <para>The name of the password server takes the standard
    87           substitutions, but probably the only useful one is <parameter moreinfo="none">%m
    88           </parameter>, which means the Samba server will use the incoming
    89           client as the password server. If you use this then you better
    90           trust your clients, and you had better restrict them with hosts allow!</para>
    91         </listitem>
    92 
    93     </itemizedlist>
    9441</description>
    9542

  • vendor/current/docs-xml/smbdotconf/security/preloadmodules.xml

    r414 r988  
    11<samba:parameter name="preload modules"
    2                 type="list"
    3                  context="G"
    4                  basic="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 type="cmdlist"
     3                 context="G"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This is a list of paths to modules that should

  • vendor/current/docs-xml/smbdotconf/security/privatedir.xml

    r414 r988  
    11<samba:parameter name="private dir"
    22                 context="G"
    3                                  type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="string"
     4                 constant="1"
     5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     6<synonym>private directory</synonym>
    67<description>
    78    <para>This parameters defines the directory
    … …  
    1112</description>
    1213
    13 <value type="default">${prefix}/private</value>
     14<value type="default">&pathconfig.PRIVATE_DIR;</value>
    1415</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/readlist.xml

    r414 r988  
    11<samba:parameter name="read list"
    22                 context="S"
    3                                  type="list"
     3                 type="cmdlist"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1010        parameter.
    1111        </para>
    12  
    13     <para>This parameter will not work with the <smbconfoption name="security">share</smbconfoption> in
    14     Samba 3.0.  This is by design.</para>
    1512</description>
    16 
    1713<related>write list</related>
    1814<related>invalid users</related>

  • vendor/current/docs-xml/smbdotconf/security/readonly.xml

    r414 r988  
    11<samba:parameter name="read only"
    22                 context="S"
    3                                  type="boolean"
    4                  basic="1" advanced="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/renameuserscript.xml

    r414 r988  
    11<samba:parameter name="rename user script"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="boolean"
    5                                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76    <para>
    … …  
    3029</description>
    3130
    32 <value type="default">no</value>
     31<value type="default"></value>
    3332</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/restrictanonymous.xml

    r414 r988  
    11<samba:parameter name="restrict anonymous"
    2         type="integer"
     2                 type="integer"
    33                 context="G"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1413        registry key in Windows 2000 and Windows NT.  When set to 0, user
    1514        and group list information is returned to anyone who asks.  When set
    16     to 1, only an authenticated user can retrive user and
     15    to 1, only an authenticated user can retrieve user and
    1716    group list information.  For the value 2, supported by
    1817    Windows 2000/XP and Samba, no anonymous connections are allowed at

  • vendor/current/docs-xml/smbdotconf/security/rootdirectory.xml

    r414 r988  
    11<samba:parameter name="root directory"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                 context="G"
     3                 type="string"
     4                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<synonym>root</synonym>
    76<synonym>root dir</synonym>
    … …  
    3130</description>
    3231
    33 <value type="default">/</value>
     32<value type="default"></value>
    3433<value type="example">/homes/smb</value>
    3534</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/security.xml

    r740 r988  
    11<samba:parameter name="security"
    22                 context="G"
    3                                  type="enum"
    4                  basic="1" advanced="1" wizard="1" developer="1"
    5                  xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    6                  <when_value value="security">
    7                          <requires option="encrypted passwords">/(yes|true)/</requires>
    8                  </when_value>
     3                 type="enum"
     4                 function="_security"
     5                 enumlist="enum_security"
     6                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     7<when_value value="security">
     8    <requires option="encrypted passwords">/(yes|true)/</requires>
     9</when_value>
    910<description>
    1011    <para>This option affects how clients respond to
    … …  
    1213    smb.conf</filename> file.</para>
    1314
    14     <para>The option sets the &quot;security mode bit&quot; in replies to
    15     protocol negotiations with <citerefentry><refentrytitle>smbd</refentrytitle>
    16     <manvolnum>8</manvolnum></citerefentry> to turn share level security on or off. Clients decide
    17     based on this bit whether (and how) to transfer user and password
    18     information to the server.</para>
    19 
    20 
    2115    <para>The default is <command moreinfo="none">security = user</command>, as this is
    22     the most common setting needed when talking to Windows 98 and
    23     Windows NT.</para>
     16    the most common setting, used for a standalone file server or a DC.</para>
    2417
    2518    <para>The alternatives are
    2619    <command moreinfo="none">security = ads</command> or <command moreinfo="none">security = domain
    27     </command>, which support joining Samba to a Windows domain, along with <command moreinfo="none">security = share</command> and <command moreinfo="none">security = server</command>, both of which are deprecated.</para>
     20    </command>, which support joining Samba to a Windows domain</para>
    2821
    29     <para>In versions of Samba prior to 2.0.0, the default was
    30     <command moreinfo="none">security = share</command> mainly because that was
    31     the only option at one stage.</para>
    32 
    33     <para>You should use <command moreinfo="none">security = user</command> and
    34     <smbconfoption name="map to guest"/> if you
     22    <para>You should use <command moreinfo="none">security = user</command> and
     23    <smbconfoption name="map to guest"/> if you
    3524    want to mainly setup shares without a password (guest shares). This
    3625    is commonly used for a shared printer server. </para>
    3726               
    38     <para>It is possible to use <command moreinfo="none">smbd</command> in a <emphasis>
    39     hybrid mode</emphasis> where it is offers both user and share
    40     level security under different <smbconfoption name="NetBIOS aliases"/>. </para>
    41 
    4227    <para>The different settings will now be explained.</para>
    4328
    4429
     30    <para><anchor id="SECURITYEQUALSAUTO"/><emphasis>SECURITY = AUTO</emphasis></para>
     31
     32    <para>This is the default security setting in Samba, and causes Samba to consult
     33    the <smbconfoption name="server role"/> parameter (if set) to determine the security mode.</para>
     34
    4535    <para><anchor id="SECURITYEQUALSUSER"/><emphasis>SECURITY = USER</emphasis></para>
    4636
    47     <para>This is the default security setting in Samba.
    48     With user-level security a client must first &quot;log-on&quot; with a
    49     valid username and password (which can be mapped using the <smbconfoption name="username map"/>
     37    <para>If <smbconfoption name="server role"/> is not specified, this is the default security setting in Samba.
     38    With user-level security a client must first &quot;log-on&quot; with a 
     39    valid username and password (which can be mapped using the <smbconfoption name="username map"/> 
    5040    parameter). Encrypted passwords (see the <smbconfoption name="encrypted passwords"/> parameter) can also
    5141    be used in this security mode. Parameters such as <smbconfoption name="user"/> and <smbconfoption
    52         name="guest only"/> if set      are then applied and
    53     may change the UNIX user to use on this connection, but only after
     42        name="guest only"/> if set      are then applied and 
     43    may change the UNIX user to use on this connection, but only after 
    5444    the user has been successfully authenticated.</para>
    55 
    56     <para><emphasis>Note</emphasis> that the name of the resource being
    57     requested is <emphasis>not</emphasis> sent to the server until after
    58     the server has successfully authenticated the client. This is why
    59     guest shares don't work in user level security without allowing
    60     the server to automatically map unknown users into the <smbconfoption name="guest account"/>.
    61     See the <smbconfoption name="map to guest"/> parameter for details on doing this.</para>
    62 
    63     <para>See also the section <link linkend="VALIDATIONSECT">NOTE ABOUT USERNAME/PASSWORD VALIDATION</link>.</para>
    64 
    65     <para><anchor id="SECURITYEQUALSDOMAIN"/><emphasis>SECURITY = DOMAIN</emphasis></para>
    66 
    67     <para>This mode will only work correctly if <citerefentry><refentrytitle>net</refentrytitle>
    68     <manvolnum>8</manvolnum></citerefentry> has been used to add this
    69     machine into a Windows NT Domain. It expects the <smbconfoption name="encrypted passwords"/>
    70         parameter to be set to <constant>yes</constant>. In this
    71     mode Samba will try to validate the username/password by passing
    72     it to a Windows NT Primary or Backup Domain Controller, in exactly
    73     the same way that a Windows NT Server would do.</para>
    74 
    75     <para><emphasis>Note</emphasis> that a valid UNIX user must still
    76     exist as well as the account on the Domain Controller to allow
    77     Samba to have a valid UNIX account to map file access to.</para>
    78 
    79     <para><emphasis>Note</emphasis> that from the client's point
    80     of view <command moreinfo="none">security = domain</command> is the same
    81     as <command moreinfo="none">security = user</command>. It only
    82     affects how the server deals with the authentication,
    83     it does not in any way affect what the client sees.</para>
    84 
    85     <para><emphasis>Note</emphasis> that the name of the resource being
    86     requested is <emphasis>not</emphasis> sent to the server until after
    87     the server has successfully authenticated the client. This is why
    88     guest shares don't work in user level security without allowing
    89     the server to automatically map unknown users into the <smbconfoption name="guest account"/>.
    90     See the <smbconfoption name="map to guest"/> parameter for details on doing this.</para>
    91 
    92     <para>See also the section <link linkend="VALIDATIONSECT">
    93     NOTE ABOUT USERNAME/PASSWORD VALIDATION</link>.</para>
    94 
    95     <para>See also the <smbconfoption name="password server"/> parameter and
    96          the <smbconfoption name="encrypted passwords"/> parameter.</para>
    97 
    98     <para><anchor id="SECURITYEQUALSSHARE"/><emphasis>SECURITY = SHARE</emphasis></para>
    99 
    100     <note><para>This option is deprecated as it is incompatible with SMB2</para></note>
    101                
    102     <para>When clients connect to a share level security server, they
    103     need not log onto the server with a valid username and password before
    104     attempting to connect to a shared resource (although modern clients
    105     such as Windows 95/98 and Windows NT will send a logon request with
    106     a username but no password when talking to a <command moreinfo="none">security = share
    107     </command> server). Instead, the clients send authentication information
    108     (passwords) on a per-share basis, at the time they attempt to connect
    109     to that share.</para>
    110 
    111     <para>Note that <command moreinfo="none">smbd</command> <emphasis>ALWAYS</emphasis>
    112     uses a valid UNIX user to act on behalf of the client, even in
    113     <command moreinfo="none">security = share</command> level security.</para>
    114 
    115     <para>As clients are not required to send a username to the server
    116     in share level security, <command moreinfo="none">smbd</command> uses several
    117     techniques to determine the correct UNIX user to use on behalf
    118     of the client.</para>
    119 
    120     <para>A list of possible UNIX usernames to match with the given
    121     client password is constructed using the following methods :</para>
    122 
    123     <itemizedlist>
    124         <listitem>
    125             <para>If the <smbconfoption name="guest only"/> parameter is set, then all the other
    126             stages are missed and only the <smbconfoption name="guest account"/> username is checked.
    127             </para>
    128         </listitem>
    129 
    130         <listitem>
    131             <para>Is a username is sent with the share connection
    132             request, then this username (after mapping - see <smbconfoption name="username map"/>),
    133             is added as a potential username.
    134             </para>
    135         </listitem>
    136 
    137         <listitem>
    138             <para>If the client did a previous <emphasis>logon
    139             </emphasis> request (the SessionSetup SMB call) then the
    140             username sent in this SMB will be added as a potential username.
    141             </para>
    142         </listitem>
    143 
    144         <listitem>
    145             <para>The name of the service the client requested is
    146             added as a potential username.
    147             </para>
    148         </listitem>
    149 
    150         <listitem>
    151             <para>The NetBIOS name of the client is added to
    152             the list as a potential username.
    153             </para>
    154         </listitem>
    155 
    156         <listitem>
    157             <para>Any users on the <smbconfoption name="user"/> list are added as potential usernames.
    158             </para>
    159         </listitem>
    160     </itemizedlist>
    161 
    162     <para>If the <parameter moreinfo="none">guest only</parameter> parameter is
    163     not set, then this list is then tried with the supplied password.
    164     The first user for whom the password matches will be used as the
    165     UNIX user.</para>
    166 
    167     <para>If the <parameter moreinfo="none">guest only</parameter> parameter is
    168     set, or no username can be determined then if the share is marked
    169     as available to the <parameter moreinfo="none">guest account</parameter>, then this
    170     guest user will be used, otherwise access is denied.</para>
    171 
    172     <para>Note that it can be <emphasis>very</emphasis> confusing
    173     in share-level security as to which UNIX username will eventually
    174     be used in granting access.</para>
    175 
    176     <para>See also the section <link linkend="VALIDATIONSECT">
    177     NOTE ABOUT USERNAME/PASSWORD VALIDATION</link>.</para>
    178 
    179     <para><anchor id="SECURITYEQUALSSERVER"/><emphasis>SECURITY = SERVER</emphasis></para>
    180 
    181     <para>
    182         In this depicted mode Samba will try to validate the username/password by passing it to another SMB server, such as an
    183         NT box. If this fails it will revert to <command moreinfo="none">security = user</command>. It expects the
    184         <smbconfoption name="encrypted passwords"/> parameter to be set to <constant>yes</constant>, unless the remote
    185         server does not support them.  However note that if encrypted passwords have been negotiated then Samba cannot
    186         revert back to checking the UNIX password file, it must have a valid <filename
    187         moreinfo="none">smbpasswd</filename> file to check users against. See the chapter about the User Database in
    188         the Samba HOWTO Collection for details on how to set this up.
    189 </para>
    190 
    191         <note><para>This mode of operation has
    192     significant pitfalls since it is more vulnerable to
    193     man-in-the-middle attacks and server impersonation.  In particular,
    194     this mode of operation can cause significant resource consumption on
    195     the PDC, as it must maintain an active connection for the duration
    196     of the user's session.  Furthermore, if this connection is lost,
    197     there is no way to reestablish it, and further authentications to the
    198     Samba server may fail (from a single client, till it disconnects).
    199         </para></note>
    200 
    201         <note><para>If the client selects NTLMv2 authentication, then this mode of operation <emphasis>will fail</emphasis>
    202         </para></note>
    203 
    204         <note><para>From the client's point of
    205     view, <command moreinfo="none">security = server</command> is the
    206     same as <command moreinfo="none">security = user</command>.  It
    207     only affects how the server deals  with the authentication, it does
    208         not in any way affect what the  client sees.</para></note>
    209 
    210     <note><para>This option is deprecated, and may be removed in future</para></note>
    21145
    21246    <para><emphasis>Note</emphasis> that the name of the resource being
    … …  
    21751    See the <smbconfoption name="map to guest"/> parameter for details on doing this.</para>
    21852
    219     <para>See also the section <link linkend="VALIDATIONSECT">
    220     NOTE ABOUT USERNAME/PASSWORD VALIDATION</link>.</para>
     53    <para><anchor id="SECURITYEQUALSDOMAIN"/><emphasis>SECURITY = DOMAIN</emphasis></para>
     54
     55    <para>This mode will only work correctly if <citerefentry><refentrytitle>net</refentrytitle>
     56    <manvolnum>8</manvolnum></citerefentry> has been used to add this
     57    machine into a Windows NT Domain. It expects the <smbconfoption name="encrypted passwords"/>
     58        parameter to be set to <constant>yes</constant>. In this
     59    mode Samba will try to validate the username/password by passing
     60    it to a Windows NT Primary or Backup Domain Controller, in exactly
     61    the same way that a Windows NT Server would do.</para>
     62
     63    <para><emphasis>Note</emphasis> that a valid UNIX user must still
     64    exist as well as the account on the Domain Controller to allow
     65    Samba to have a valid UNIX account to map file access to.</para>
     66
     67    <para><emphasis>Note</emphasis> that from the client's point
     68    of view <command moreinfo="none">security = domain</command> is the same
     69    as <command moreinfo="none">security = user</command>. It only
     70    affects how the server deals with the authentication,
     71    it does not in any way affect what the client sees.</para>
     72
     73    <para><emphasis>Note</emphasis> that the name of the resource being
     74    requested is <emphasis>not</emphasis> sent to the server until after
     75    the server has successfully authenticated the client. This is why
     76    guest shares don't work in user level security without allowing
     77    the server to automatically map unknown users into the <smbconfoption name="guest account"/>.
     78    See the <smbconfoption name="map to guest"/> parameter for details on doing this.</para>
     79
     80    <para>See also the <smbconfoption name="password server"/> parameter and
     81         the <smbconfoption name="encrypted passwords"/> parameter.</para>
     82
     83
     84    <para><emphasis>Note</emphasis> that the name of the resource being
     85    requested is <emphasis>not</emphasis> sent to the server until after
     86    the server has successfully authenticated the client. This is why
     87    guest shares don't work in user level security without allowing
     88    the server to automatically map unknown users into the <smbconfoption name="guest account"/>.
     89    See the <smbconfoption name="map to guest"/> parameter for details on doing this.</para>
    22190
    22291    <para>See also the <smbconfoption name="password server"/> parameter and the
    … …  
    232101        <para>Note that this mode does NOT make Samba operate as a Active Directory Domain
    233102                Controller. </para>
    234        
     103
     104        <para>Note that this forces <smbconfoption name="require strong key">yes</smbconfoption>
     105        and <smbconfoption name="client schannel">yes</smbconfoption> for the primary domain.</para>
     106
    235107        <para>Read the chapter about Domain Membership in the HOWTO for details.</para>
    236108</description>
    … …  
    239111<related>encrypt passwords</related>
    240112
    241 <value type="default">USER</value>
     113<value type="default">AUTO</value>
    242114<value type="example">DOMAIN</value>
    243115</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/securitymask.xml

    r414 r988  
    11<samba:parameter name="security mask"
    22                 context="S"
    3                                  type="string"
     3                 type="string"
     4                 removed="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    67    <para>
    7         This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
    8         UNIX permission on a file using the native NT security dialog box.
    9         </para>
    10 
    11     <para>
    12         This parameter is applied as a mask (AND'ed with) to the incoming permission bits, thus resetting
    13         any bits not in this mask. Make sure not to mix up this parameter with <smbconfoption name="force
    14         security mode"/>, which works in a manner similar to this one but uses a logical OR instead of an AND.
    15         </para>
    16 
    17     <para>
    18         Essentially, all bits set to zero in this mask will result in setting to zero the corresponding bits on the
    19         file permissions regardless of the previous status of this bits on the file.
     8        This parameter has been removed for Samba 4.0.0.
    209    </para>
    21 
    22     <para>
    23         If not set explicitly this parameter is 0777, allowing a user to set all the user/group/world permissions on a file.
    24     </para>
    25 
    26     <para><emphasis>
    27         Note</emphasis> that users who can access the Samba server through other means can easily bypass this
    28     restriction, so it is primarily useful for standalone &quot;appliance&quot; systems.  Administrators of
    29         most normal systems will probably want to leave it set to <constant>0777</constant>.
    30         </para>
    3110</description>
    32 
    33 <related>force directory security mode</related>
    34 <related>directory security mask</related>
    35 <related>force security mode</related>
    36 
    37 <value type="default">0777</value>
    38 <value type="example">0770</value>
    3911</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/serverschannel.xml

    r414 r988  
    11<samba:parameter name="server schannel"
    22                 context="G"
    3                                  type="boolean-auto"
    4                  basic="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                 type="enum"
     4                 enumlist="enum_bool_auto"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77    <para>

  • vendor/current/docs-xml/smbdotconf/security/serversigning.xml

    r746 r988  
    11<samba:parameter name="server signing"
    22                 context="G"
    3                                 type="enum"
    4                  basic="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                type="enum"
     4                 enumlist="enum_smb_signing_vals"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77
    88    <para>This controls whether the client is allowed or required to use SMB1 and SMB2 signing. Possible values
    9     are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
     9    are <emphasis>default</emphasis>, <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
    1010    and <emphasis>disabled</emphasis>.
    1111    </para>
     12
     13    <para>By default, and when smb signing is set to
     14    <emphasis>default</emphasis>, smb signing is required when
     15    <smbconfoption name="server role"/> is <emphasis>active directory
     16    domain controller</emphasis> and disabled otherwise.</para>
    1217
    1318    <para>When set to auto, SMB1 signing is offered, but not enforced.
    … …  
    2126</description>
    2227
    23 <value type="default">Disabled</value>
     28<value type="default">default</value>
    2429</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/smbencrypt.xml

    r414 r988  
    11<samba:parameter name="smb encrypt"
    22                 context="S"
    3                                 type="enum"
    4                  basic="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     3                type="enum"
     4                 enumlist="enum_smb_signing_vals"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    7 
    8     <para>This is a new feature introduced with Samba 3.2 and above. It is an
    9     extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
    10     SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
    11     and sign every request/response in a SMB protocol stream. When
    12     enabled it provides a secure method of SMB/CIFS communication,
    13     similar to an ssh protected session, but using SMB/CIFS authentication
    14     to negotiate encryption and signing keys. Currently this is only
    15     supported by Samba 3.2 smbclient, and hopefully soon Linux CIFSFS
    16     and MacOS/X clients. Windows clients do not support this feature.
    17     </para>
    18 
    19     <para>This controls whether the remote client is allowed or required to use SMB encryption. Possible values
    20     are <emphasis>auto</emphasis>, <emphasis>mandatory</emphasis>
    21     and <emphasis>disabled</emphasis>. This may be set on a per-share
    22     basis, but clients may chose to encrypt the entire session, not
    23     just traffic to a specific share. If this is set to mandatory
    24     then all traffic to a share <emphasis>must</emphasis> must
    25     be encrypted once the connection has been made to the share.
    26     The server would return "access denied" to all non-encrypted
    27     requests on such a share. Selecting encrypted traffic reduces
    28     throughput as smaller packet sizes must be used (no huge UNIX
    29     style read/writes allowed) as well as the overhead of encrypting
    30     and signing all the data.
    31     </para>
    32 
    33     <para>If SMB encryption is selected, Windows style SMB signing (see
    34     the <smbconfoption name="server signing"/> option) is no longer necessary,
    35     as the GSSAPI flags use select both signing and sealing of the data.
    36     </para>
    37 
    38     <para>When set to auto, SMB encryption is offered, but not enforced.
    39     When set to mandatory, SMB encryption is required and if set
    40     to disabled, SMB encryption can not be negotiated.</para>
     7        <para>
     8        This parameter controls whether a remote client is allowed or required
     9        to use SMB encryption. It has different effects depending on whether
     10        the connection uses SMB1 or SMB2 and newer:
     11        </para>
     12
     13        <itemizedlist>
     14        <listitem>
     15                <para>
     16                If the connection uses SMB1, then this option controls the use
     17                of a Samba-specific extension to the SMB protocol introduced in
     18                Samba 3.2 that makes use of the Unix extensions.
     19                </para>
     20        </listitem>
     21
     22        <listitem>
     23                <para>
     24                If the connection uses SMB2 or newer, then this option controls
     25                the use of the SMB-level encryption that is supported in SMB
     26                version 3.0 and above and available in Windows 8 and newer.
     27                </para>
     28        </listitem>
     29        </itemizedlist>
     30
     31        <para>
     32                This parameter can be set globally and on a per-share bases.
     33                Possible values are
     34                <emphasis>off</emphasis> (or <emphasis>disabled</emphasis>),
     35                <emphasis>enabled</emphasis> (or <emphasis>auto</emphasis>, or
     36                <emphasis>if_required</emphasis>),
     37                <emphasis>desired</emphasis>,
     38                and
     39                <emphasis>required</emphasis>
     40                (or <emphasis>mandatory</emphasis>).
     41                A special value is <emphasis>default</emphasis> which is
     42                the implicit default setting of <emphasis>enabled</emphasis>.
     43        </para>
     44
     45        <variablelist>
     46                <varlistentry>
     47                <term><emphasis>Effects for SMB1</emphasis></term>
     48                <listitem>
     49                <para>
     50                The Samba-specific encryption of SMB1 connections is an
     51                extension to the SMB protocol negotiated as part of the UNIX
     52                extensions.  SMB encryption uses the GSSAPI (SSPI on Windows)
     53                ability to encrypt and sign every request/response in a SMB
     54                protocol stream. When enabled it provides a secure method of
     55                SMB/CIFS communication, similar to an ssh protected session, but
     56                using SMB/CIFS authentication to negotiate encryption and
     57                signing keys. Currently this is only supported smbclient of by
     58                Samba 3.2 and newer, and hopefully soon Linux CIFSFS and MacOS/X
     59                clients. Windows clients do not support this feature.
     60                </para>
     61
     62                <para>This may be set on a per-share
     63                basis, but clients may chose to encrypt the entire session, not
     64                just traffic to a specific share. If this is set to mandatory
     65                then all traffic to a share <emphasis>must</emphasis>
     66                be encrypted once the connection has been made to the share.
     67                The server would return "access denied" to all non-encrypted
     68                requests on such a share. Selecting encrypted traffic reduces
     69                throughput as smaller packet sizes must be used (no huge UNIX
     70                style read/writes allowed) as well as the overhead of encrypting
     71                and signing all the data.
     72                </para>
     73
     74                <para>
     75                If SMB encryption is selected, Windows style SMB signing (see
     76                the <smbconfoption name="server signing"/> option) is no longer
     77                necessary, as the GSSAPI flags use select both signing and
     78                sealing of the data.
     79                </para>
     80
     81                <para>
     82                When set to auto or default, SMB encryption is offered, but not
     83                enforced.  When set to mandatory, SMB encryption is required and
     84                if set to disabled, SMB encryption can not be negotiated.
     85                </para>
     86                </listitem>
     87                </varlistentry>
     88
     89                <varlistentry>
     90                <term><emphasis>Effects for SMB2</emphasis></term>
     91                <listitem>
     92                <para>
     93                Native SMB transport encryption is available in SMB version 3.0
     94                or newer. It is only offered by Samba if
     95                <emphasis>server max protocol</emphasis> is set to
     96                <emphasis>SMB3</emphasis> or newer.
     97                Clients supporting this type of encryption include
     98                Windows 8 and newer,
     99                Windows server 2012 and newer,
     100                and smbclient of Samba 4.1 and newer.
     101                </para>
     102
     103                <para>
     104                The protocol implementation offers various options:
     105                </para>
     106
     107                <itemizedlist>
     108                        <listitem>
     109                        <para>
     110                        The capability to perform SMB encryption can be
     111                        negotiated during protocol negotiation.
     112                        </para>
     113                        </listitem>
     114
     115                        <listitem>
     116                        <para>
     117                        Data encryption can be enabled globally. In that case,
     118                        an encryption-capable connection will have all traffic
     119                        in all its sessions encrypted. In particular all share
     120                        connections will be encrypted.
     121                        </para>
     122                        </listitem>
     123
     124                        <listitem>
     125                        <para>
     126                        Data encryption can also be enabled per share if not
     127                        enabled globally. For an encryption-capable connection,
     128                        all connections to an encryption-enabled share will be
     129                        encrypted.
     130                        </para>
     131                        </listitem>
     132
     133                        <listitem>
     134                        <para>
     135                        Encryption can be enforced. This means that session
     136                        setups will be denied on non-encryption-capable
     137                        connections if data encryption has been enabled
     138                        globally. And tree connections will be denied for
     139                        non-encryption capable connections to shares with data
     140                        encryption enabled.
     141                        </para>
     142                        </listitem>
     143                </itemizedlist>
     144
     145                <para>
     146                These features can be controlled with settings of
     147                <emphasis>smb encrypt</emphasis> as follows:
     148                </para>
     149
     150                <itemizedlist>
     151                        <listitem>
     152                        <para>
     153                        Leaving it as default, explicitly setting
     154                        <emphasis>default</emphasis>, or setting it to
     155                        <emphasis>enabled</emphasis> globally will enable
     156                        negotiation of encryption but will not turn on
     157                        data encryption globally or per share.
     158                        </para>
     159                        </listitem>
     160
     161                        <listitem>
     162                        <para>
     163                        Setting it to <emphasis>desired</emphasis> globally
     164                        will enable negotiation and will turn on data encryption
     165                        on sessions and share connections for those clients
     166                        that support it.
     167                        </para>
     168                        </listitem>
     169
     170                        <listitem>
     171                        <para>
     172                        Setting it to <emphasis>required</emphasis> globally
     173                        will enable negotiation and turn on data encryption
     174                        on sessions and share connections. Clients that do
     175                        not support encryption will be denied access to the
     176                        server.
     177                        </para>
     178                        </listitem>
     179
     180                        <listitem>
     181                        <para>
     182                        Setting it to <emphasis>off</emphasis> globally will
     183                        completely disable the encryption feature.
     184                        </para>
     185                        </listitem>
     186
     187                        <listitem>
     188                        <para>
     189                        Setting it to <emphasis>desired</emphasis> on a share
     190                        will turn on data encryption for this share for clients
     191                        that support encryption if negotiation has been
     192                        enabled globally.
     193                        </para>
     194                        </listitem>
     195
     196                        <listitem>
     197                        <para>
     198                        Setting it to <emphasis>required</emphasis> on a share
     199                        will enforce data encryption for this share if
     200                        negotiation has been enabled globally. I.e. clients that
     201                        do not support encryption will be denied access to the
     202                        share.
     203                        </para>
     204                        <para>
     205                        Note that this allows per-share enforcing to be
     206                        controlled in Samba differently from Windows:
     207                        In Windows, <emphasis>RejectUnencryptedAccess</emphasis>
     208                        is a global setting, and if it is set, all shares with
     209                        data encryption turned on
     210                        are automatically enforcing encryption. In order to
     211                        achieve the same effect in Samba, one
     212                        has to globally set <emphasis>smb encrypt</emphasis> to
     213                        <emphasis>enabled</emphasis>, and then set all shares
     214                        that should be encrypted to
     215                        <emphasis>required</emphasis>.
     216                        Additionally, it is possible in Samba to have some
     217                        shares with encryption <emphasis>required</emphasis>
     218                        and some other shares with encryption only
     219                        <emphasis>desired</emphasis>, which is not possible in
     220                        Windows.
     221                        </para>
     222                        </listitem>
     223
     224                        <listitem>
     225                        <para>
     226                        Setting it to <emphasis>off</emphasis> or
     227                        <emphasis>enabled</emphasis> for a share has
     228                        no effect.
     229                        </para>
     230                        </listitem>
     231                </itemizedlist>
     232                </listitem>
     233                </varlistentry>
     234        </variablelist>
    41235</description>
    42236
    43 <value type="default">auto</value>
     237<value type="default">default</value>
    44238</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/smbpasswdfile.xml

    r414 r988  
    11<samba:parameter name="smb passwd file"
    2         type="string"
     2                 type="string"
    33                 context="G"
    4                  advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     4                 constant="1"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77    <para>This option sets the path to the encrypted smbpasswd file. By
    … …  
    1616</description>
    1717
    18 <value type="default">${prefix}/private/smbpasswd</value>
     18<value type="default">&pathconfig.SMB_PASSWD_FILE;</value>
    1919</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/security/unixpasswordsync.xml

    r414 r988  
    11<samba:parameter name="unix password sync"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/username.xml

    r740 r988  
    11<samba:parameter name="username"
    2         context="S"
    3         type="string"
     2                 context="S"
     3                 type="string"
     4                 deprecated="1"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<synonym>user</synonym>
    67<synonym>users</synonym>
    78<description>
    8     <para>Multiple users may be specified in a comma-delimited
    9     list, in which case the supplied password will be tested against
    10     each username in turn (left to right).</para>
    11 
    12     <para>The deprecated <parameter moreinfo="none">username</parameter> line is needed only when
    13     the PC is unable to supply its own username. This is the case
    14     for the COREPLUS protocol or where your users have different WfWg
    15     usernames to UNIX usernames. In both these cases you may also be
    16     better using the \\server\share%user syntax instead.</para>
    17 
    18     <para>The <parameter moreinfo="none">username</parameter> line is not a great
    19     solution in many cases as it means Samba will try to validate
    20     the supplied password against each of the usernames in the
    21     <parameter moreinfo="none">username</parameter> line in turn. This is slow and
    22     a bad idea for lots of users in case of duplicate passwords.
    23     You may get timeouts or security breaches using this parameter
    24     unwisely.</para>
    25 
    26     <para>Samba relies on the underlying UNIX security. This
    27     parameter does not restrict who can login, it just offers hints
    28     to the Samba server as to what usernames might correspond to the
    29     supplied password. Users can login as whoever they please and
    30     they will be able to do no more damage than if they started a
    31     telnet session. The daemon runs as the user that they log in as,
    32     so they cannot do anything that user cannot do.</para>
    33 
    349    <para>To restrict a service to a particular set of users you
    3510    can use the <smbconfoption name="valid users"/> parameter.</para>
    3611
    37     <para>If any of the usernames begin with a '@' then the name
    38     will be looked up first in the NIS netgroups list (if Samba
    39     is compiled with netgroup support), followed by a lookup in
    40     the UNIX groups database and will expand to a list of all users
    41     in the group of that name.</para>
    42                
    43     <para>If any of the usernames begin with a '+' then the name
    44     will be looked up only in the UNIX groups database and will
    45     expand to a list of all users in the group of that name.</para>
     12    <para>This parameter is deprecated</para>
    4613
    47     <para>If any of the usernames begin with a '&amp;' then the name
    48     will be looked up only in the NIS netgroups database (if Samba
    49     is compiled with netgroup support) and will expand to a list
    50     of all users in the netgroup group of that name.</para>
     14    <para>However, it currently operates only in conjunction with
     15    <smbconfoption name="only user"/>.  The supported way to restrict
     16    a service to a particular set of users is the
     17    <smbconfoption name="valid users"/> parameter.</para>
    5118
    52     <para>Note that searching though a groups database can take
    53     quite some time, and some clients may time out during the
    54     search.</para>
    55 
    56     <para>See the section <link linkend="VALIDATIONSECT">NOTE ABOUT
    57         USERNAME/PASSWORD VALIDATION</link> for more information on how
    58         this parameter determines access to the services.</para>
    5919</description>
    6020

  • vendor/current/docs-xml/smbdotconf/security/usernamelevel.xml

    r414 r988  
    11<samba:parameter name="username level"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/usernamemap.xml

    r414 r988  
    11<samba:parameter name="username map"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1312
    1413    <para>
    15         Please note that for user or share mode security, the username map is applied prior to validating the user
     14        Please note that for user mode security, the username map is applied prior to validating the user
    1615        credentials.  Domain member servers (domain or ads) apply the username map after the user has been
    17         successfully authenticated by the domain controller and require fully qualified enties in the map table (e.g.
     16        successfully authenticated by the domain controller and require fully qualified entries in the map table (e.g.
    1817        biddle = <literal>DOMAIN\foo</literal>).
    1918        </para>
    … …  
    8584        <constant>fred</constant> is remapped to <constant>mary</constant> then you will actually be connecting to
    8685        \\server\mary and will need to supply a password suitable for <constant>mary</constant> not
    87         <constant>fred</constant>. The only exception to this is the username passed to the <smbconfoption
    88         name="password server"/> (if you have one). The password server will receive whatever username the client
     86        <constant>fred</constant>. The only exception to this is the
     87        username passed to a Domain Controller (if you have one). The DC will receive whatever username the client
    8988        supplies without  modification.
    9089    </para>

  • vendor/current/docs-xml/smbdotconf/security/usernamemapcachetime.xml

    r740 r988  
    11<samba:parameter name="username map cache time"
    22                 context="G"
    3                  advanced="1" developer="0"
    4                                  type="integer"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/security/usernamemapscript.xml

    r414 r988  
    11<samba:parameter name="username map script"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" developer="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    98        specifies and external program or script that must accept a single
    109        command line option (the username transmitted in the authentication
    11         request) and return a line line on standard output (the name to which
     10        request) and return a line on standard output (the name to which
    1211        the account should mapped).  In this way, it is possible to store
    1312        username map tables in an LDAP or NIS directory services.

  • vendor/current/docs-xml/smbdotconf/security/validusers.xml

    r414 r988  
    11<samba:parameter name="valid users"
    22                 context="S"
    3                                  type="list"
     3                 type="cmdlist"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    2020    This is useful in the [homes] section.
    2121    </para>
     22
     23    <para><emphasis>Note: </emphasis>When used in the [global] section this
     24    parameter may have unwanted side effects. For example: If samba is configured as a MASTER BROWSER (see
     25    <parameter moreinfo="none">local master</parameter>,
     26    <parameter moreinfo="none">os level</parameter>,
     27    <parameter moreinfo="none">domain master</parameter>,
     28    <parameter moreinfo="none">preferred master</parameter>) this option
     29    will prevent workstations from being able to browse the network.
     30    </para>
     31
    2232</description>
    2333

  • vendor/current/docs-xml/smbdotconf/security/writeable.xml

    r414 r988  
    11<samba:parameter name="writeable"
    22                 context="S"
    3                                  type="boolean"
     3                 type="boolean-rev"
     4                 function="read_only"
     5                 synonym="1"
    46                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    57<synonym>writable</synonym>
     8<synonym>write ok</synonym>
    69<description>
    710    <para>Inverted synonym for <smbconfoption name="read only"/>.</para>

  • vendor/current/docs-xml/smbdotconf/security/writelist.xml

    r414 r988  
    11<samba:parameter name="write list"
    22                 context="S"
    3                                  type="list"
     3                 type="cmdlist"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    1616    </para>
    1717
    18     <para>
    19     By design, this parameter will not work with the
    20     <smbconfoption name="security">share</smbconfoption> in Samba 3.0.
    21     </para>
    22 
    2318</description>
    2419

  • vendor/current/docs-xml/smbdotconf/tuning/aioreadsize.xml

    r414 r988  
    11<samba:parameter name="aio read size"
    22                 context="S"
    3                  type="integer"
     3                 type="bytes"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/tuning/aiowritesize.xml

    r414 r988  
    11<samba:parameter name="aio write size"
    22                 context="S"
    3                  type="integer"
     3                 type="bytes"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/tuning/allocationroundupsize.xml

    r414 r988  
    11<samba:parameter name="allocation roundup size"
    22                 context="S"
    3                  type="integer"
     3                 type="bytes"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/tuning/blocksize.xml

    r414 r988  
    11<samba:parameter name="block size"
    2                                 type="integer"
     2                 type="bytes"
    33                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/tuning/deadtime.xml

    r414 r988  
    11<samba:parameter name="deadtime"
    22                 context="G"
    3                  developer="1"
    43                                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/tuning/getwdcache.xml

    r414 r988  
    11<samba:parameter name="getwd cache"
    22                 context="G"
    3                  developer="1"
     3                 type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/tuning/hostnamelookups.xml

    r414 r988  
    22                 context="G"
    33                                 type="boolean"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/keepalive.xml

    r414 r988  
    22                 context="G"
    33                                 type="integer"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1413    has the SO_KEEPALIVE attribute set on it by default. (see <smbconfoption name="socket options"/>).
    1514Basically you should only use this option if you strike difficulties.</para>
     15
     16    <para>Please note this option only applies to SMB1 client connections, and
     17    has no effect on SMB2 clients.</para>
    1618</description>
    1719

  • vendor/current/docs-xml/smbdotconf/tuning/maxdisksize.xml

    r414 r988  
    11<samba:parameter name="max disk size"
    22                 context="G"
    3                                  type="integer"
    4                  developer="1"
     3                 type="bytes"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/maxopenfiles.xml

    r414 r988  
    22                                 type="integer"
    33                 context="G"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    87    open files that one <citerefentry><refentrytitle>smbd</refentrytitle>
    98    <manvolnum>8</manvolnum></citerefentry> file
    10     serving process may have open for a client at any one time. The
    11     This parameter can be set very high (16404) as Samba uses
     9    serving process may have open for a client at any one time.
     10    This parameter can be set very high (16384) as Samba uses
    1211    only one bit per unopened file. Setting this parameter lower than
    13     16404 will cause Samba to complain and set this value back to
    14     the minimum of 16404, as Windows 7 depends on this number of
     12    16384 will cause Samba to complain and set this value back to
     13    the minimum of 16384, as Windows 7 depends on this number of
    1514    open file handles being available.</para>
    1615
    … …  
    2019</description>
    2120
    22 <value type="default">16404</value>
     21<value type="default">16384</value>
    2322</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/tuning/maxsmbdprocesses.xml

    r414 r988  
    22                                 type="integer"
    33                 context="G"
    4                  developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/minprintspace.xml

    r414 r988  
    22                 context="S"
    33                                 type="integer"
    4                  print="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/namecachetimeout.xml

    r414 r988  
    22                 context="G"
    33                                 type="integer"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/socketoptions.xml

    r414 r988  
    11<samba:parameter name="socket options"
    22                 context="G"
    3                                  type="list"
    4                  developer="1"
     3                                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
     7    <para>
     8        <warning>
     9        <para>Modern server operating systems are tuned for high
     10        network performance in the majority of situations; when you set socket
     11        options you are overriding those settings.  Linux in particular has an
     12        auto-tuning mechanism for buffer sizes that will be disabled if you
     13        specify a socket buffer size.  This can potentially cripple your
     14        TCP/IP stack.</para>
     15
     16        <para> Getting the socket options correct can make a big difference to
     17        your performance, but getting them wrong can degrade it by just as
     18        much.  As with any other low level setting, if you must make changes
     19        to it, make small changes and <emphasis>test</emphasis> the effect
     20        before making any large changes.</para>
     21        </warning>
     22    </para>
     23
    724    <para>This option allows you to set socket options
    825    to be used when talking with the client.</para>
    … …  
    2441    either incorrectly  typed it or you need to add an include file
    2542    to includes.h for your OS.  If the latter is the case please
    26     send the patch to <ulink url="mailto:samba-technical@samba.org">
    27     samba-technical@samba.org</ulink>.</para>
     43    send the patch to <ulink url="mailto:samba-technical@lists.samba.org">
     44    samba-technical@lists.samba.org</ulink>.</para>
    2845
    2946    <para>Any of the supported socket options may be combined
    … …  
    3855        <listitem><para>SO_BROADCAST</para></listitem>
    3956        <listitem><para>TCP_NODELAY</para></listitem>
     57        <listitem><para>TCP_KEEPCNT *</para></listitem>
     58        <listitem><para>TCP_KEEPIDLE *</para></listitem>
     59        <listitem><para>TCP_KEEPINTVL *</para></listitem>
    4060        <listitem><para>IPTOS_LOWDELAY</para></listitem>
    4161        <listitem><para>IPTOS_THROUGHPUT</para></listitem>
     62        <listitem><para>SO_REUSEPORT</para></listitem>
    4263        <listitem><para>SO_SNDBUF *</para></listitem>
    4364        <listitem><para>SO_RCVBUF *</para></listitem>
    4465        <listitem><para>SO_SNDLOWAT *</para></listitem>
    4566        <listitem><para>SO_RCVLOWAT *</para></listitem>
     67        <listitem><para>SO_SNDTIMEO *</para></listitem>
     68        <listitem><para>SO_RCVTIMEO *</para></listitem>
     69        <listitem><para>TCP_FASTACK *</para></listitem>
     70        <listitem><para>TCP_QUICKACK</para></listitem>
     71        <listitem><para>TCP_NODELAYACK</para></listitem>
     72        <listitem><para>TCP_KEEPALIVE_THRESHOLD *</para></listitem>
     73        <listitem><para>TCP_KEEPALIVE_ABORT_THRESHOLD *</para></listitem>
     74        <listitem><para>TCP_DEFER_ACCEPT *</para></listitem>
    4675    </itemizedlist>
    4776

  • vendor/current/docs-xml/smbdotconf/tuning/strictallocate.xml

    r740 r988  
    1212    terminology this means that Samba will stop creating sparse files.</para>
    1313
    14     <para>This option is really desgined for file systems that support
     14    <para>This option is really designed for file systems that support
    1515    fast allocation of large numbers of blocks such as extent-based file systems.
    1616    On file systems that don't support extents (most notably ext3) this can

  • vendor/current/docs-xml/smbdotconf/tuning/strictsync.xml

    r414 r988  
    66    <para>Many Windows applications (including the Windows 98 explorer
    77    shell) seem to confuse flushing buffer contents to disk with doing
    8     a sync to disk. Under UNIX, a sync call forces the process to be
     8    a sync to disk. Under UNIX, a sync call forces the thread to be
    99    suspended until the kernel has ensured that all outstanding data in
    1010    kernel disk buffers has been safely stored onto stable storage.
    … …  
    1818    addition, this fixes many performance problems that people have
    1919    reported with the new Windows98 explorer shell file copies.</para>
     20    <para>The flush request from SMB2/3 clients is handled
     21    asynchronously, so for these clients setting the parameter
     22    to <constant>yes</constant> does not block the processing of other
     23    requests in the smbd process.</para>
    2024</description>
    2125

  • vendor/current/docs-xml/smbdotconf/tuning/usemmap.xml

    r414 r988  
    22                 context="G"
    33                                 type="boolean"
    4                  developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/tuning/usesendfile.xml

    r414 r988  
    22                 context="S"
    33                                 type="boolean"
     4                 function="_use_sendfile"
    45                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    56<description>
    … …  
    1415</description>
    1516
    16 <value type="default">false</value>
     17<value type="default">no</value>
    1718</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/tuning/writecachesize.xml

    r414 r988  
    11<samba:parameter name="write cache size"
    22                 context="S"
    3                                  type="integer"
     3                 type="bytes"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>
    … …  
    2222    <para>The integer parameter specifies the size of this cache
    2323                (per oplocked file) in bytes.</para>
     24
     25    <para>Note that the write cache won't be used for file handles with a smb2 write lease.</para>
    2426</description>
    2527
     28<related>aio read size</related>
     29<related>aio write size</related>
     30<related>smb2 leases</related>
    2631<value type="default">0</value>
    2732<value type="example">262144<comment> for a 256k cache size per file</comment></value>

  • vendor/current/docs-xml/smbdotconf/vfs/getquotacommand.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    98        samba can use.</para>
    109
    11         <para>This option is only available you have compiled Samba with the
    12         <command moreinfo="none">--with-sys-quotas</command> option or on Linux with
    13         <command moreinfo="none">--with-quotas</command> and a working quota api
    14         was found in the system.</para>
     10        <para>This option is only available Samba was compiled with
     11        quotas support.</para>
    1512
    1613        <para>This parameter should specify the path to a script that
    … …  
    1916        the specified directory is on.</para>
    2017
    21         <para>Such a script should take 3 arguments:</para>
     18        <para>Such a script is being given 3 arguments:</para>
    2219
    2320        <itemizedlist>
    … …  
    2724        </itemizedlist>
    2825
    29         <para>The type of query can be one of :</para>
     26        <para>The directory is actually mostly just "." - It needs to be
     27        treated relatively to the current working directory that the script can
     28        also query.</para>
     29
     30        <para>The type of query can be one of:</para>
    3031
    3132        <itemizedlist>
    … …  
    3637        </itemizedlist>
    3738
    38         <para>This script should print one line as output with spaces between the arguments. The arguments are:
     39        <para>This script should print one line as output with spaces between the columns. The printed columns should be:
    3940              </para>
    4041
    4142        <itemizedlist>
    42                 <listitem><para>Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</para></listitem>
    43                 <listitem><para>Arg 2 - number of currently used blocks</para></listitem>
    44                 <listitem><para>Arg 3 - the softlimit number of blocks</para></listitem>
    45                 <listitem><para>Arg 4 - the hardlimit number of blocks</para></listitem>
    46                 <listitem><para>Arg 5 - currently used number of inodes</para></listitem>
    47                 <listitem><para>Arg 6 - the softlimit number of inodes</para></listitem>
    48                 <listitem><para>Arg 7 - the hardlimit number of inodes</para></listitem>
    49                 <listitem><para>Arg 8(optional) - the number of bytes in a block(default is 1024)</para></listitem>
     43                <listitem><para>1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced)</para></listitem>
     44                <listitem><para>2 - number of currently used blocks</para></listitem>
     45                <listitem><para>3 - the softlimit number of blocks</para></listitem>
     46                <listitem><para>4 - the hardlimit number of blocks</para></listitem>
     47                <listitem><para>5 - currently used number of inodes</para></listitem>
     48                <listitem><para>6 - the softlimit number of inodes</para></listitem>
     49                <listitem><para>7 - the hardlimit number of inodes</para></listitem>
     50                <listitem><para>8 (optional) - the number of bytes in a block(default is 1024)</para></listitem>
    5051        </itemizedlist>
    5152</description>

  • vendor/current/docs-xml/smbdotconf/vfs/hostmsdfs.xml

    r414 r988  
    22                 context="G"
    33                                 type="boolean"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65 <description>

  • vendor/current/docs-xml/smbdotconf/vfs/msdfsproxy.xml

    r414 r988  
    77        stand-in for another CIFS share whose location is specified by
    88        the value of the parameter. When clients attempt to connect to
    9         this share, they are redirected to the proxied share using
    10         the SMB-Dfs protocol.</para>
     9        this share, they are redirected to one or multiple, comma separated
     10        proxied shares using the SMB-Dfs protocol.</para>
    1111
    1212        <para>Only Dfs roots can act as proxy shares. Take a look at the
    … …  
    1515</description>
    1616
    17 <value type="example">\otherserver\someshare</value>
     17<value type="example">\otherserver\someshare,\otherserver2\someshare</value>
    1818</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/vfs/msdfsroot.xml

    r414 r988  
    11<samba:parameter name="msdfs root"
    22                 context="S"
    3                                  tye="boolean"
     3                                 type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/vfs/setquotacommand.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    98        samba can use.</para>
    109
    11         <para>This option is only available if Samba was configured with the argument <command>--with-sys-quotas</command> or
    12         on linux when <command>./configure --with-quotas</command> was used and a working quota api
    13         was found in the system. Most packages are configured with these options already.</para>
     10        <para>This option is only available if Samba was compiled with
     11        quota support.</para>
    1412
    1513        <para>This parameter should specify the path to a script that
    … …  
    1917
    2018        <itemizedlist>
    21                 <listitem><para>1 - quota type
     19                <listitem><para>1 - path to where the quota needs to be set.
     20                This needs to be interpreted relative to the current working
     21                directory that the script may also check for.</para></listitem>
     22                <listitem><para>2 - quota type
    2223                        <itemizedlist>
    2324                                <listitem><para>1 - user quotas</para></listitem>
    … …  
    2627                                <listitem><para>4 - group default quotas (gid = -1)</para></listitem>
    2728                        </itemizedlist></para></listitem>
    28                 <listitem><para>2 - id (uid for user, gid for group, -1 if N/A)</para></listitem>
    29                 <listitem><para>3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</para></listitem>
    30                 <listitem><para>4 - block softlimit</para></listitem>
    31                 <listitem><para>5 - block hardlimit</para></listitem>
    32                 <listitem><para>6 - inode softlimit</para></listitem>
    33                 <listitem><para>7 - inode hardlimit</para></listitem>
    34                 <listitem><para>8(optional) - block size, defaults to 1024</para></listitem>
     29                <listitem><para>3 - id (uid for user, gid for group, -1 if N/A)</para></listitem>
     30                <listitem><para>4 - quota state (0 = disable, 1 = enable, 2 = enable and enforce)</para></listitem>
     31                <listitem><para>5 - block softlimit</para></listitem>
     32                <listitem><para>6 - block hardlimit</para></listitem>
     33                <listitem><para>7 - inode softlimit</para></listitem>
     34                <listitem><para>8 - inode hardlimit</para></listitem>
     35                <listitem><para>9(optional) - block size, defaults to 1024</para></listitem>
    3536        </itemizedlist>
    3637

  • vendor/current/docs-xml/smbdotconf/vfs/vfsobjects.xml

    r414 r988  
    11<samba:parameter name="vfs objects"
    2                                 type="list"
     2                 type="cmdlist"
    33                 context="S"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">

  • vendor/current/docs-xml/smbdotconf/winbind/createkrb5conf.xml

    r414 r988  
    11<samba:parameter name="create krb5 conf"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="0"
     2                 context="G"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76
    87        <para>
    9         Setting this paramter to <value type="example">no</value> prevents
     8        Setting this parameter to <value type="example">no</value> prevents
    109        winbind from creating custom krb5.conf files. Winbind normally does
    1110        this because the krb5 libraries are not AD-site-aware and thus would

  • vendor/current/docs-xml/smbdotconf/winbind/idmapbackend.xml

    r740 r988  
    11<samba:parameter name="idmap backend"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" developer="1" hide="1"
     3                 type="string"
     4                 generated_function="0"
     5                 handler="handle_idmap_backend"
     6                 deprecated="1"
    57                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    68<description>

  • vendor/current/docs-xml/smbdotconf/winbind/idmapcachetime.xml

    r414 r988  
    11<samba:parameter name="idmap cache time"
    22                 context="G"
    3                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76        <para>This parameter specifies the number of seconds that Winbind's
    8         idmap interface will cache positive SID/uid/gid query results.
     7        idmap interface will cache positive SID/uid/gid query results. By
     8    default, Samba will cache these results for one week.
    99        </para>
    1010</description>
    1111
    12 <value type="default">604800 (one week)</value>
     12<value type="default">604800</value>
    1313</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/idmapconfig.xml

    r740 r988  
    1 <samba:parameter name="idmap config"
     1<samba:parameter name="idmap config DOMAIN : OPTION"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" developer="1" hide="1"
     3                 type="string"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1817        <para>
    1918        The idmap configuration is hence divided into groups, one group
    20         for each domain to be configured, and one group with the the
    21         asterisk instead of a proper domain name, which speifies the
     19        for each domain to be configured, and one group with the
     20        asterisk instead of a proper domain name, which specifies the
    2221        default configuration that is used to catch all domains that do
    2322        not have an explicit idmap configuration of their own.
    … …  
    4039                ldap
    4140                (<citerefentry><refentrytitle>idmap_ldap</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    42                 ,
    4341                rid
    4442                (<citerefentry><refentrytitle>idmap_rid</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    45                 ,
    4643                hash
    4744                (<citerefentry><refentrytitle>idmap_hash</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    48                 ,
    4945                autorid
    5046                (<citerefentry><refentrytitle>idmap_autorid</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    51                 ,
    5247                ad
    53                 (<citerefentry><refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    54                 ,
    55                 adex
    56                 (<citerefentry><refentrytitle>idmap_adex</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
    57                 ,
    58                 and nss.
    59                 (<citerefentry><refentrytitle>idmap_nss</refentrytitle> <manvolnum>8</manvolnum></citerefentry>),
     48                (<citerefentry><refentrytitle>idmap_ad</refentrytitle> <manvolnum>8</manvolnum></citerefentry>)
     49                and nss
     50                (<citerefentry><refentrytitle>idmap_nss</refentrytitle> <manvolnum>8</manvolnum></citerefentry>).
    6051                The corresponding manual pages contain the details, but
    6152                here is a summary.
    … …  
    7061                each domain encountered and then uses the rid algorithm for each
    7162                of these automatically configured domains individually.
    72                 The ad and adex
    73                 backends both use unix IDs stored in Active Directory via
     63                The ad backend uses unix ids stored in Active Directory via
    7464                the standard schema extensions. The nss backend reverses
    75                 the standard winbindd setup and gets the unixids via names
     65                the standard winbindd setup and gets the unix ids via names
    7666                from nsswitch which can be useful in an ldap setup.
    7767                </para></listitem>
    … …  
    8474                backend is authoritative. For allocating backends, this also
    8575                defines the start and the end of the range for allocating
    86                 new unid IDs.
     76                new unique IDs.
    8777                </para>
    8878                <para>

  • vendor/current/docs-xml/smbdotconf/winbind/idmapgid.xml

    r740 r988  
    11<samba:parameter name="idmap gid"
    22                 context="G"
    3                  type="string"
    4                  advanced="1" developer="1" hide="1"
     3                 type="string"
     4                 generated_function="0"
     5                 handler="handle_idmap_gid"
     6                 deprecated="1"
    57                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    6                 <synonym>winbind gid</synonym>
     8<synonym>winbind gid</synonym>
    79<description>
    810        <para>

  • vendor/current/docs-xml/smbdotconf/winbind/idmapnegativecachetime.xml

    r414 r988  
    11<samba:parameter name="idmap negative cache time"
    22                 context="G"
    3                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/idmapuid.xml

    r740 r988  
    11<samba:parameter name="idmap uid"
    2                         type="string"
     2                type="string"
    33                 context="G"
    4                  advanced="1" developer="1" hide="1"
     4                 generated_function="0"
     5                 handler="handle_idmap_uid"
     6                 deprecated="1"
    57                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    68<synonym>winbind uid</synonym>

  • vendor/current/docs-xml/smbdotconf/winbind/templatehomedir.xml

    r414 r988  
    11<samba:parameter name="template homedir"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/winbind/templateshell.xml

    r414 r988  
    11<samba:parameter name="template shell"
    22                 context="G"
    3                                 type="string"
    4                  advanced="1" developer="1"
     3                type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1111</description>
    1212
    13 <value type="string">/bin/false</value>
     13<value type="default">/bin/false</value>
    1414</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindcachetime.xml

    r414 r988  
    11<samba:parameter name="winbind cache time"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindenumgroups.xml

    r414 r988  
    11<samba:parameter name="winbind enum groups"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindenumusers.xml

    r414 r988  
    11<samba:parameter name="winbind enum users"
    22                 context="G"
    3                  advanced="1" developer="1"
     3                 type="boolean"
    44                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    55<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindexpandgroups.xml

    r414 r988  
    11<samba:parameter name="winbind expand groups"
    22                 context="G"
    3                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1817         must perform the group unrolling and will be unable to answer
    1918         incoming NSS or authentication requests during this time.</para>
    20  
     19
     20        <para>The default value was changed from 1 to 0 with Samba 4.2.
     21        Some broken applications calculate the group memberships of
     22        users by traversing groups, such applications will require
     23        "winbind expand groups = 1". But the new default makes winbindd more reliable
     24        as it doesn't require SAMR access to domain controllers of trusted domains.</para>
    2125</description>
    2226
    23 <value type="default">1</value>
     27<value type="default">0</value>
    2428</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindmaxclients.xml

    r740 r988  
    11<samba:parameter name="winbind max clients"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    87        the <citerefentry><refentrytitle>winbindd</refentrytitle>
    98        <manvolnum>8</manvolnum></citerefentry> daemon can connect with.
     9        The parameter is not a hard limit.
     10        The <citerefentry><refentrytitle>winbindd</refentrytitle>
     11        <manvolnum>8</manvolnum></citerefentry> daemon configures
     12        itself to be able to accept at least that many connections,
     13        and if the limit is reached, an attempt is made to disconnect
     14        idle clients.
    1015        </para>
    1116</description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindmaxdomainconnections.xml

    r740 r988  
    11<samba:parameter name="winbind max domain connections"
    2                 context="G"
    3                 type="integer"
    4                  advanced="1" developer="1"
    5                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
     2                context="G"
     3                type="integer"
     4                 function="_winbind_max_domain_connections"
     5                xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    77        <para>This parameter specifies the maximum number of simultaneous

  • vendor/current/docs-xml/smbdotconf/winbind/winbindnestedgroups.xml

    r414 r988  
    11<samba:parameter name="winbind nested groups"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindnormalizenames.xml

    r414 r988  
    11<samba:parameter name="winbind normalize names"
    22                 context="G"
    3                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    2221          name aliasing for a specific configuration.  Name aliasing takes
    2322          precedence (and is mutually exclusive) over the whitespace
    24           replacement mechanism discussed previsouly.
     23          replacement mechanism discussed previously.
    2524          </para>
    2625

  • vendor/current/docs-xml/smbdotconf/winbind/winbindnssinfo.xml

    r478 r988  
    11<samba:parameter name="winbind nss info"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="cmdlist"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1918
    2019                <listitem>
    21                         <para><parameter moreinfo="none">&lt;sfu | rfc2307 &gt;</parameter>
     20                        <para><parameter moreinfo="none">&lt;sfu | sfu20 | rfc2307 &gt;</parameter>
    2221                        - When Samba is running in security = ads and your Active Directory
    2322                        Domain Controller does support the Microsoft "Services for Unix" (SFU)
    2423                        LDAP schema, winbind can retrieve the login shell and the home
    25                         directory attributes directly from your Directory Server. Note that
     24                        directory attributes directly from your Directory Server. For SFU 3.0 or 3.5 simply choose
     25                        "sfu", if you use SFU 2.0 please choose "sfu20". Note that
    2626                        retrieving UID and GID from your ADS-Server requires to
    2727                        use <parameter moreinfo="none">idmap config DOMAIN:backend</parameter> = ad
    28                         as well.
     28                        as well. The primary group membership is currently
     29                        always calculated via the "primaryGroupID" LDAP attribute.
    2930                        </para>
    3031                </listitem>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindofflinelogon.xml

    r414 r988  
    11<samba:parameter name="winbind offline logon"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    76
    87        <para>This parameter is designed to control whether Winbind should
    9         allow to login with the <parameter moreinfo="none">pam_winbind</parameter>
     8        allow one to login with the <parameter moreinfo="none">pam_winbind</parameter>
    109        module using Cached Credentials. If enabled, winbindd will store user credentials
    1110        from successful logins encrypted in a local cache.
    … …  
    1413</description>
    1514
    16 <value type="default">false</value>
    17 <value type="example">true</value>
     15<value type="default">no</value>
     16<value type="example">yes</value>
    1817</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindreconnectdelay.xml

    r414 r988  
    11<samba:parameter name="winbind reconnect delay"
    22                 context="G"
    3                                  type="integer"
    4                  advanced="1" developer="1"
     3                 type="integer"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindrefreshtickets.xml

    r414 r988  
    11<samba:parameter name="winbind refresh tickets"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>
    … …  
    1211</description>
    1312
    14 <value type="default">false</value>
    15 <value type="example">true</value>
     13<value type="default">no</value>
     14<value type="example">yes</value>
    1615</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindrpconly.xml

    r414 r988  
    11<samba:parameter name="winbind rpc only"
    2         context="G"
    3         type="string"
    4                  advanced="1" developer="0"
     2                 context="G"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindseparator.xml

    r414 r988  
    11<samba:parameter name="winbind separator"
    22                 context="G"
    3                  advanced="1" developer="1"
    4                                  type="string"
     3                 type="string"
     4                 constant="1"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>
    … …  
    1717</description>
    1818
    19 <value type="default">'\'</value>
     19<value type="default">\</value>
    2020<value type="example">+</value>
    2121</samba:parameter>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindtrusteddomainsonly.xml

    r414 r988  
    11<samba:parameter name="winbind trusted domains only"
    22                 context="G"
    3                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/winbind/winbindusedefaultdomain.xml

    r740 r988  
    11<samba:parameter name="winbind use default domain"
    22                 context="G"
    3                                  type="boolean"
    4                  advanced="1" developer="1"
     3                 type="boolean"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/wins/dnsproxy.xml

    r414 r988  
    11<samba:parameter name="dns proxy"
    22                 context="G"
    3                                 type="boolean"
    4                  advanced="1" developer="1"
     3                type="boolean"
     4                 function="wins_dns_proxy"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/wins/winshook.xml

    r414 r988  
    22                 context="G"
    33                                 type="string"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/wins/winsproxy.xml

    r414 r988  
    22                 context="G"
    33                                 type="boolean"
    4                  advanced="1" developer="1"
    54                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    65<description>

  • vendor/current/docs-xml/smbdotconf/wins/winsserver.xml

    r414 r988  
    11<samba:parameter name="wins server"
    22                 context="G"
    3                                  type="boolean"
    4                  basic="1" advanced="1" wizard="1" developer="1"
     3                 type="cmdlist"
     4                 function="wins_server_list"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66<description>

  • vendor/current/docs-xml/smbdotconf/wins/winssupport.xml

    r414 r988  
    22        type="boolean"
    33                 context="G"
    4                  basic="1" advanced="1" wizard="1" developer="1"
     4                 function="we_are_a_wins_server"
    55                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
    66 <description>
Note: See TracChangeset for help on using the changeset viewer.