2 files changed, 37 insertions, 0 deletions
diff --git a/docs/docbook/smbdotconf/misc/afsshare.xml b/docs/docbook/smbdotconf/misc/afsshare.xml
new file mode 100644
index 0000000000..1933fa5768
--- /dev/null
+++ b/docs/docbook/smbdotconf/misc/afsshare.xml
@@ -0,0 +1,17 @@
+<samba:parameter name="afs share"
+	         context="S"
+		 advanced="1"
+		 xmlns:samba="http://samba.org/common">
+<listitem>
+	<para>This parameter controls whether special AFS features are enabled
+	for this share. If enabled, it assumes that the directory exported via
+	the <parameter>path</parameter> parameter is a local AFS import. The
+	special AFS features include the attempt to hand-craft an AFS token
+	if you enabled --with-fake-kaserver in configure.
+	</para>
+
+	<para>Default: <command moreinfo="none">afs share = no</command></para>
+
+	<para>Example: <command moreinfo="none">afs share = yes</command></para>
+</listitem>
+</samba:parameter>
diff --git a/docs/docbook/smbdotconf/misc/afsusernamemap.xml b/docs/docbook/smbdotconf/misc/afsusernamemap.xml
new file mode 100644
index 0000000000..a312f4309b
--- /dev/null
+++ b/docs/docbook/smbdotconf/misc/afsusernamemap.xml
@@ -0,0 +1,20 @@
+<samba:parameter name="afs username map"
+                 context="G"
+                 advanced="1"
+                 xmlns:samba="http://samba.org/common">
+<listitem>
+	<para>If you are using the fake kaserver AFS feature, you might
+	want to hand-craft the usernames you are creating tokens for.
+	For example this is necessary if you have users from several domain
+	in your AFS Protection Database. One possible scheme to code users
+	as DOMAIN+User as it is done by winbind with the + as a separator.
+	</para>
+
+	<para>The mapped user name must contain the cell name to log into,
+	so without setting this parameter there will be no token.</para>
+		
+	<para>Default: <command moreinfo="none">none</command></para>
+
+	<para>Example: <command moreinfo="none">afs username map = %u@afs.samba.org</command></para>
+</listitem>
+</samba:parameter>