summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVolker Lendecke <vlendec@samba.org>2004-07-01 14:52:34 +0000
committerGerald W. Carter <jerry@samba.org>2008-04-23 08:45:57 -0500
commit55bb7454c215531ad1f498d9a7cfb41a17fefa9d (patch)
treebdba4cbd717eaa77d253a159850fe472102d48db
parent0cc55aa5f5556ac1d5fc8b3b2dc487770e5a4451 (diff)
downloadsamba-55bb7454c215531ad1f498d9a7cfb41a17fefa9d.tar.gz
samba-55bb7454c215531ad1f498d9a7cfb41a17fefa9d.tar.bz2
samba-55bb7454c215531ad1f498d9a7cfb41a17fefa9d.zip
Document force unknown acl user
(This used to be commit 031fe950bb0bab78fcc4df143e78c6ff2e7e3c55)
-rw-r--r--docs/smbdotconf/security/forceunknownacluser.xml27
1 files changed, 27 insertions, 0 deletions
diff --git a/docs/smbdotconf/security/forceunknownacluser.xml b/docs/smbdotconf/security/forceunknownacluser.xml
new file mode 100644
index 0000000000..c54b9b0338
--- /dev/null
+++ b/docs/smbdotconf/security/forceunknownacluser.xml
@@ -0,0 +1,27 @@
+<samba:parameter name="force unknown acl user"
+ context="S"
+ type="boolean"
+ xmlns:samba="http://samba.org/common">
+
+<description>
+ <para>If this parameter is set, a Windows NT ACL that contains an unknown
+ SID (security descriptor, or representation of a user or group
+ id) as the owner or group owner of the file will be silently
+ mapped into the current UNIX uid or gid of the currently
+ connected user.</para>
+
+ <para>This is designed to allow Windows NT clients to copy files and
+ folders containing ACLs that were created locally on the client
+ machine and contain users local to that machine only (no domain
+ users) to be copied to a Samba server (usually with XCOPY /O)
+ and have the unknown userid and groupid of the file owner map to
+ the current connected user. This can only be fixed correctly
+ when winbindd allows arbitrary mapping from any Windows NT SID
+ to a UNIX uid or gid.</para>
+
+ <para>Try using this parameter when XCOPY /O gives an ACCESS_DENIED
+ error.</para>
+</description>
+
+<value type="default">no</value>
+</samba:parameter>