diff options
Diffstat (limited to 'docs/htmldocs/smb.conf.5.html')
| -rw-r--r-- | docs/htmldocs/smb.conf.5.html | 3976 |
1 files changed, 2926 insertions, 1050 deletions
diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index 71f05fc1dc..2197fe195f 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -134,7 +134,7 @@ CLASS="EMPHASIS" to the user of the service. Some housekeeping options are also specifiable.</P ><P ->Sections are either filespace services (used by the +>Sections are either file share services (used by the client as an extension of their native file systems) or printable services (used by the client to access print services on the host running the server).</P @@ -219,7 +219,7 @@ NAME="AEN50" >parameters in this section apply to the server as a whole, or are defaults for sections which do not specifically define certain items. See the notes - under paraMETERS for more information.</P + under PARAMETERS for more information.</P ></DIV ><DIV CLASS="REFSECT2" @@ -426,7 +426,7 @@ CLASS="REFSECT1" NAME="AEN101" ></A ><H2 ->paraMETRS</H2 +>PARAMETERS</H2 ><P >parameters define the specific attributes of sections.</P ><P @@ -539,7 +539,7 @@ CLASS="VARIABLELIST" >%h</DT ><DD ><P ->the internet hostname that Samba is running +>the Internet hostname that Samba is running on.</P ></DD ><DT @@ -561,7 +561,7 @@ CLASS="VARIABLELIST" >%M</DT ><DD ><P ->the internet name of the client machine. +>the Internet name of the client machine. </P ></DD ><DT @@ -749,10 +749,10 @@ NAME="AEN234" >NOTE ABOUT USERNAME/PASSWORD VALIDATION</H2 ><P >There are a number of ways in which a user can connect - to a service. The server follows the following steps in determining + to a service. The server uses the following steps in determining if it will allow a connection to a specified service. If all the - steps fail then the connection request is rejected. If one of the - steps pass then the following steps are not checked.</P + steps fail, then the connection request is rejected. However, if one of the + steps succeeds, then the following steps are not checked.</P ><P >If the service is marked "guest only = yes" then steps 1 to 5 are skipped.</P @@ -832,2401 +832,3325 @@ NAME="AEN253" ><UL ><LI ><P +><A +HREF="#ADDUSERSCRIPT" ><TT CLASS="PARAMETER" ><I >add user script</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ADDPRINTERCOMMAND" +><TT +CLASS="PARAMETER" +><I +>addprinter command</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#ALLOWTRUSTEDDOMAINS" ><TT CLASS="PARAMETER" ><I >allow trusted domains</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ANNOUNCEAS" ><TT CLASS="PARAMETER" ><I >announce as</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ANNOUNCEVERSION" ><TT CLASS="PARAMETER" ><I >announce version</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#AUTOSERVICES" ><TT CLASS="PARAMETER" ><I >auto services</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#BINDINTERFACESONLY" ><TT CLASS="PARAMETER" ><I >bind interfaces only</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#BROWSELIST" ><TT CLASS="PARAMETER" ><I >browse list</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#CHANGENOTIFYTIMEOUT" ><TT CLASS="PARAMETER" ><I >change notify timeout</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CHARACTERSET" ><TT CLASS="PARAMETER" ><I >character set</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CLIENTCODEPAGE" ><TT CLASS="PARAMETER" ><I >client code page</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CODEPAGEDIRECTORY" +><TT +CLASS="PARAMETER" +><I +>code page directory</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#CODINGSYSTEM" ><TT CLASS="PARAMETER" ><I >coding system</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#CONFIGFILE" ><TT CLASS="PARAMETER" ><I >config file</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEADTIME" ><TT CLASS="PARAMETER" ><I >deadtime</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEBUGHIRESTIMESTAMP" ><TT CLASS="PARAMETER" ><I >debug hires timestamp</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEBUGPID" ><TT CLASS="PARAMETER" ><I >debug pid</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I >debug timestamp</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#DEBUGUID" ><TT CLASS="PARAMETER" ><I >debug uid</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEBUGLEVEL" ><TT CLASS="PARAMETER" ><I ->debug level</I +>debuglevel</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEFAULT" ><TT CLASS="PARAMETER" ><I >default</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEFAULTSERVICE" ><TT CLASS="PARAMETER" ><I >default service</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DELETEUSERSCRIPT" ><TT CLASS="PARAMETER" ><I >delete user script</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DELETEPRINTERCOMMAND" +><TT +CLASS="PARAMETER" +><I +>deleteprinter command</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#DFREECOMMAND" ><TT CLASS="PARAMETER" ><I >dfree command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DNSPROXY" ><TT CLASS="PARAMETER" ><I >dns proxy</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINADMINGROUP" ><TT CLASS="PARAMETER" ><I >domain admin group</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINADMINUSERS" ><TT CLASS="PARAMETER" ><I >domain admin users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINGROUPS" ><TT CLASS="PARAMETER" ><I >domain groups</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#DOMAINGUESTGROUP" ><TT CLASS="PARAMETER" ><I >domain guest group</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINGUESTUSERS" ><TT CLASS="PARAMETER" ><I >domain guest users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINLOGONS" ><TT CLASS="PARAMETER" ><I >domain logons</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOMAINMASTER" ><TT CLASS="PARAMETER" ><I >domain master</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I >encrypt passwords</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#ENHANCEDBROWSING" +><TT +CLASS="PARAMETER" +><I +>enhanced browsing</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#ENUMPORTSCOMMAND" +><TT +CLASS="PARAMETER" +><I +>enumports command</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#GETWDCACHE" ><TT CLASS="PARAMETER" ><I >getwd cache</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#HIDELOCALUSERS" ><TT CLASS="PARAMETER" ><I >hide local users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#HOMEDIRMAP" ><TT CLASS="PARAMETER" ><I >homedir map</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#HOSTMSDFS" +><TT +CLASS="PARAMETER" +><I +>host msdfs</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#HOSTSEQUIV" ><TT CLASS="PARAMETER" ><I >hosts equiv</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#INTERFACES" ><TT CLASS="PARAMETER" ><I >interfaces</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#KEEPALIVE" ><TT CLASS="PARAMETER" ><I >keepalive</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#KERNELOPLOCKS" ><TT CLASS="PARAMETER" ><I >kernel oplocks</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#LANMANAUTH" +><TT +CLASS="PARAMETER" +><I +>lanman auth</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#LMANNOUNCE" ><TT CLASS="PARAMETER" ><I >lm announce</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LMINTERVAL" ><TT CLASS="PARAMETER" ><I >lm interval</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOADPRINTERS" ><TT CLASS="PARAMETER" ><I >load printers</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#LOCALMASTER" ><TT CLASS="PARAMETER" ><I >local master</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOCKDIR" ><TT CLASS="PARAMETER" ><I >lock dir</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOCKDIRECTORY" ><TT CLASS="PARAMETER" ><I >lock directory</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOGFILE" ><TT CLASS="PARAMETER" ><I >log file</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOGLEVEL" ><TT CLASS="PARAMETER" ><I >log level</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOGONDRIVE" ><TT CLASS="PARAMETER" ><I >logon drive</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#LOGONHOME" ><TT CLASS="PARAMETER" ><I >logon home</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOGONPATH" ><TT CLASS="PARAMETER" ><I >logon path</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOGONSCRIPT" ><TT CLASS="PARAMETER" ><I >logon script</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LPQCACHETIME" ><TT CLASS="PARAMETER" ><I >lpq cache time</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MACHINEPASSWORDTIMEOUT" ><TT CLASS="PARAMETER" ><I >machine password timeout</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MANGLEDSTACK" ><TT CLASS="PARAMETER" ><I >mangled stack</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I >map to guest</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXDISKSIZE" ><TT CLASS="PARAMETER" ><I >max disk size</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXLOGSIZE" ><TT CLASS="PARAMETER" ><I >max log size</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXMUX" ><TT CLASS="PARAMETER" ><I >max mux</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXOPENFILES" ><TT CLASS="PARAMETER" ><I >max open files</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#MAXPROTOCOL" +><TT +CLASS="PARAMETER" +><I +>max protocol</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#MAXSMBDPROCESSES" ><TT CLASS="PARAMETER" ><I ->max packet</I +>max smbd processes</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXTTL" ><TT CLASS="PARAMETER" ><I >max ttl</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXWINSTTL" ><TT CLASS="PARAMETER" ><I >max wins ttl</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXXMIT" ><TT CLASS="PARAMETER" ><I >max xmit</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MESSAGECOMMAND" ><TT CLASS="PARAMETER" ><I >message command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MINPASSWDLENGTH" ><TT CLASS="PARAMETER" ><I >min passwd length</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MINPASSWORDLENGTH" ><TT CLASS="PARAMETER" ><I >min password length</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#MINPROTOCOL" +><TT +CLASS="PARAMETER" +><I +>min protocol</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#MINWINSTTL" ><TT CLASS="PARAMETER" ><I >min wins ttl</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NAMERESOLVEORDER" ><TT CLASS="PARAMETER" ><I >name resolve order</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NETBIOSALIASES" ><TT CLASS="PARAMETER" ><I >netbios aliases</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NETBIOSNAME" ><TT CLASS="PARAMETER" ><I >netbios name</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NETBIOSSCOPE" ><TT CLASS="PARAMETER" ><I >netbios scope</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NISHOMEDIR" ><TT CLASS="PARAMETER" ><I >nis homedir</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NTACLSUPPORT" ><TT CLASS="PARAMETER" ><I >nt acl support</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NTPIPESUPPORT" ><TT CLASS="PARAMETER" ><I >nt pipe support</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NTSMBSUPPORT" ><TT CLASS="PARAMETER" ><I >nt smb support</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#NULLPASSWORDS" ><TT CLASS="PARAMETER" ><I >null passwords</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#OPLOCKBREAKWAITTIME" ><TT CLASS="PARAMETER" ><I ->ole locking compatibility</I +>oplock break wait time</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#OSLEVEL" ><TT CLASS="PARAMETER" ><I ->oplock break wait time</I +>os level</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#OS2DRIVERMAP" ><TT CLASS="PARAMETER" ><I ->os level</I +>os2 driver map</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PANICACTION" ><TT CLASS="PARAMETER" ><I >panic action</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PASSWDCHAT" ><TT CLASS="PARAMETER" ><I >passwd chat</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#PASSWDCHATDEBUG" ><TT CLASS="PARAMETER" ><I >passwd chat debug</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I >passwd program</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PASSWORDLEVEL" ><TT CLASS="PARAMETER" ><I >password level</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PASSWORDSERVER" ><TT CLASS="PARAMETER" ><I >password server</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PREFEREDMASTER" ><TT CLASS="PARAMETER" ><I >prefered master</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PREFERREDMASTER" ><TT CLASS="PARAMETER" ><I >preferred master</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRELOAD" ><TT CLASS="PARAMETER" ><I >preload</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTCAP" ><TT CLASS="PARAMETER" ><I >printcap</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTCAPNAME" ><TT CLASS="PARAMETER" ><I >printcap name</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTERDRIVERFILE" ><TT CLASS="PARAMETER" ><I >printer driver file</I ></TT -> </P -></LI -><LI -><P -><TT -CLASS="PARAMETER" -><I ->private dir</I -></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PROTOCOL" ><TT CLASS="PARAMETER" ><I >protocol</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#READBMPX" ><TT CLASS="PARAMETER" ><I >read bmpx</I ></TT -> </P -></LI -><LI -><P -><TT -CLASS="PARAMETER" -><I ->read prediction</I -></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#READRAW" ><TT CLASS="PARAMETER" ><I >read raw</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#READSIZE" ><TT CLASS="PARAMETER" ><I >read size</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#REMOTEANNOUNCE" ><TT CLASS="PARAMETER" ><I >remote announce</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#REMOTEBROWSESYNC" ><TT CLASS="PARAMETER" ><I >remote browse sync</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#RESTRICTANONYMOUS" ><TT CLASS="PARAMETER" ><I >restrict anonymous</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ROOT" ><TT CLASS="PARAMETER" ><I >root</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ROOTDIR" ><TT CLASS="PARAMETER" ><I >root dir</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ROOTDIRECTORY" ><TT CLASS="PARAMETER" ><I >root directory</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I >security</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SERVERSTRING" ><TT CLASS="PARAMETER" ><I >server string</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SHOWADDPRINTERWIZARD" ><TT CLASS="PARAMETER" ><I ->shared mem size</I +>show add printer wizard</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SMBPASSWDFILE" ><TT CLASS="PARAMETER" ><I >smb passwd file</I ></TT -> </P -></LI -><LI -><P -><TT -CLASS="PARAMETER" -><I ->smbrun</I -></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SOCKETADDRESS" ><TT CLASS="PARAMETER" ><I >socket address</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SOCKETOPTIONS" ><TT CLASS="PARAMETER" ><I >socket options</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SOURCEENVIRONMENT" ><TT CLASS="PARAMETER" ><I >source environment</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSL" ><TT CLASS="PARAMETER" ><I >ssl</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLCACERTDIR" ><TT CLASS="PARAMETER" ><I >ssl CA certDir</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLCACERTFILE" ><TT CLASS="PARAMETER" ><I >ssl CA certFile</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLCIPHERS" ><TT CLASS="PARAMETER" ><I >ssl ciphers</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLCLIENTCERT" ><TT CLASS="PARAMETER" ><I >ssl client cert</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLCLIENTKEY" ><TT CLASS="PARAMETER" ><I >ssl client key</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#SSLCOMPATIBILITY" ><TT CLASS="PARAMETER" ><I >ssl compatibility</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLHOSTS" ><TT CLASS="PARAMETER" ><I >ssl hosts</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLHOSTSRESIGN" ><TT CLASS="PARAMETER" ><I >ssl hosts resign</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLREQUIRECLIENTCERT" ><TT CLASS="PARAMETER" ><I >ssl require clientcert</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#SSLREQUIRESERVERCERT" ><TT CLASS="PARAMETER" ><I >ssl require servercert</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLSERVERCERT" ><TT CLASS="PARAMETER" ><I >ssl server cert</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLSERVERKEY" ><TT CLASS="PARAMETER" ><I >ssl server key</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SSLVERSION" ><TT CLASS="PARAMETER" ><I >ssl version</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STATCACHE" ><TT CLASS="PARAMETER" ><I >stat cache</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STATCACHESIZE" ><TT CLASS="PARAMETER" ><I >stat cache size</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STRIPDOT" ><TT CLASS="PARAMETER" ><I >strip dot</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SYSLOG" ><TT CLASS="PARAMETER" ><I >syslog</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SYSLOGONLY" ><TT CLASS="PARAMETER" ><I >syslog only</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#TEMPLATEHOMEDIR" ><TT CLASS="PARAMETER" ><I >template homedir</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#TEMPLATESHELL" ><TT CLASS="PARAMETER" ><I >template shell</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#TIMEOFFSET" ><TT CLASS="PARAMETER" ><I >time offset</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#TIMESERVER" ><TT CLASS="PARAMETER" ><I >time server</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#TIMESTAMPLOGS" ><TT CLASS="PARAMETER" ><I >timestamp logs</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#TOTALPRINTJOBS" ><TT CLASS="PARAMETER" ><I ->unix password sync</I +>total print jobs</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I ->unix realname</I +>unix password sync</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#UPDATEENCRYPTED" ><TT CLASS="PARAMETER" ><I >update encrypted</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USERHOSTS" ><TT CLASS="PARAMETER" ><I >use rhosts</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USERNAMELEVEL" ><TT CLASS="PARAMETER" ><I >username level</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USERNAMEMAP" ><TT CLASS="PARAMETER" ><I >username map</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#UTMPDIRECTORY" ><TT CLASS="PARAMETER" ><I >utmp directory</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#VALIDCHARS" ><TT CLASS="PARAMETER" ><I >valid chars</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINBINDCACHETIME" ><TT CLASS="PARAMETER" ><I >winbind cache time</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINBINDGID" ><TT CLASS="PARAMETER" ><I >winbind gid</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#WINBINDSEPARATOR" +><TT +CLASS="PARAMETER" +><I +>winbind separator</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#WINBINDUID" ><TT CLASS="PARAMETER" ><I >winbind uid</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINSHOOK" ><TT CLASS="PARAMETER" ><I >wins hook</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINSPROXY" ><TT CLASS="PARAMETER" ><I >wins proxy</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINSSERVER" ><TT CLASS="PARAMETER" ><I >wins server</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WINSSUPPORT" ><TT CLASS="PARAMETER" ><I >wins support</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WORKGROUP" ><TT CLASS="PARAMETER" ><I >workgroup</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WRITERAW" ><TT CLASS="PARAMETER" ><I >write raw</I ></TT -> </P +></A +></P ></LI ></UL ></DIV ><DIV CLASS="REFSECT1" ><A -NAME="AEN710" +NAME="AEN889" ></A ><H2 >COMPLETE LIST OF SERVICE PARAMETERS</H2 ><P ->Here is a list of all service parameters. See the section of +>Here is a list of all service parameters. See the section on each parameter for details. Note that some are synonyms.</P ><P ></P ><UL ><LI ><P +><A +HREF="#ADMINUSERS" ><TT CLASS="PARAMETER" ><I >admin users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ALLOWHOSTS" ><TT CLASS="PARAMETER" ><I >allow hosts</I ></TT -> </P -></LI -><LI -><P -><TT -CLASS="PARAMETER" -><I ->alternate permissions</I -></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#AVAILABLE" ><TT CLASS="PARAMETER" ><I >available</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#BLOCKINGLOCKS" ><TT CLASS="PARAMETER" ><I >blocking locks</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#BROWSABLE" ><TT CLASS="PARAMETER" ><I >browsable</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#BROWSEABLE" ><TT CLASS="PARAMETER" ><I >browseable</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CASESENSITIVE" ><TT CLASS="PARAMETER" ><I >case sensitive</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CASESIGNAMES" ><TT CLASS="PARAMETER" ><I >casesignames</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#COMMENT" ><TT CLASS="PARAMETER" ><I >comment</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#COPY" ><TT CLASS="PARAMETER" ><I >copy</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I >create mask</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#CREATEMODE" ><TT CLASS="PARAMETER" ><I >create mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DEFAULTCASE" ><TT CLASS="PARAMETER" ><I >default case</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DELETEREADONLY" ><TT CLASS="PARAMETER" ><I >delete readonly</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DELETEVETOFILES" ><TT CLASS="PARAMETER" ><I >delete veto files</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DENYHOSTS" ><TT CLASS="PARAMETER" ><I >deny hosts</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DIRECTORY" ><TT CLASS="PARAMETER" ><I >directory</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DIRECTORYMASK" ><TT CLASS="PARAMETER" ><I >directory mask</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DIRECTORYMODE" ><TT CLASS="PARAMETER" ><I >directory mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I >directory security mask</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#DONTDESCEND" ><TT CLASS="PARAMETER" ><I >dont descend</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#DOSFILEMODE" +><TT +CLASS="PARAMETER" +><I +>dos filemode</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#DOSFILETIMERESOLUTION" ><TT CLASS="PARAMETER" ><I >dos filetime resolution</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#DOSFILETIMES" ><TT CLASS="PARAMETER" ><I >dos filetimes</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#EXEC" ><TT CLASS="PARAMETER" ><I >exec</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FAKEDIRECTORYCREATETIMES" ><TT CLASS="PARAMETER" ><I >fake directory create times</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FAKEOPLOCKS" ><TT CLASS="PARAMETER" ><I >fake oplocks</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FOLLOWSYMLINKS" ><TT CLASS="PARAMETER" ><I >follow symlinks</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCECREATEMODE" ><TT CLASS="PARAMETER" ><I >force create mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I >force directory mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCEDIRECTORYSECURITYMODE" ><TT CLASS="PARAMETER" ><I >force directory security mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCEGROUP" ><TT CLASS="PARAMETER" ><I >force group</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCESECURITYMODE" ><TT CLASS="PARAMETER" ><I >force security mode</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FORCEUSER" ><TT CLASS="PARAMETER" ><I >force user</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#FSTYPE" ><TT CLASS="PARAMETER" ><I >fstype</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#GROUP" ><TT CLASS="PARAMETER" ><I >group</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I >guest account</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#GUESTOK" ><TT CLASS="PARAMETER" ><I >guest ok</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#GUESTONLY" ><TT CLASS="PARAMETER" ><I >guest only</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#HIDEDOTFILES" ><TT CLASS="PARAMETER" ><I >hide dot files</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#HIDEFILES" ><TT CLASS="PARAMETER" ><I >hide files</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#HOSTSALLOW" ><TT CLASS="PARAMETER" ><I >hosts allow</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#HOSTSDENY" ><TT CLASS="PARAMETER" ><I >hosts deny</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#INCLUDE" ><TT CLASS="PARAMETER" ><I >include</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#INHERITPERMISSIONS" ><TT CLASS="PARAMETER" ><I >inherit permissions</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#INVALIDUSERS" ><TT CLASS="PARAMETER" ><I >invalid users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LEVEL2OPLOCKS" ><TT CLASS="PARAMETER" ><I >level2 oplocks</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LOCKING" ><TT CLASS="PARAMETER" ><I >locking</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LPPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I >lppause command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LPQCOMMAND" ><TT CLASS="PARAMETER" ><I >lpq command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LPRESUMECOMMAND" ><TT CLASS="PARAMETER" ><I >lpresume command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#LPRMCOMMAND" ><TT CLASS="PARAMETER" ><I >lprm command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAGICOUTPUT" ><TT CLASS="PARAMETER" ><I >magic output</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAGICSCRIPT" ><TT CLASS="PARAMETER" ><I >magic script</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MANGLECASE" ><TT CLASS="PARAMETER" ><I >mangle case</I ></TT -> </P -></LI -><LI -><P -><TT -CLASS="PARAMETER" -><I ->mangle locks</I -></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MANGLEDMAP" ><TT CLASS="PARAMETER" ><I >mangled map</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MANGLEDNAMES" ><TT CLASS="PARAMETER" ><I >mangled names</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MANGLINGCHAR" ><TT CLASS="PARAMETER" ><I >mangling char</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAPARCHIVE" ><TT CLASS="PARAMETER" ><I >map archive</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAPHIDDEN" ><TT CLASS="PARAMETER" ><I >map hidden</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#MAPSYSTEM" ><TT CLASS="PARAMETER" ><I >map system</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#MAXCONNECTIONS" ><TT CLASS="PARAMETER" ><I >max connections</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#MAXPRINTJOBS" +><TT +CLASS="PARAMETER" +><I +>max print jobs</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#MINPRINTSPACE" ><TT CLASS="PARAMETER" ><I >min print space</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#MSDFSROOT" +><TT +CLASS="PARAMETER" +><I +>msdfs root</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#ONLYGUEST" ><TT CLASS="PARAMETER" ><I >only guest</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ONLYUSER" ><TT CLASS="PARAMETER" ><I >only user</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#OPLOCKCONTENTIONLIMIT" ><TT CLASS="PARAMETER" ><I >oplock contention limit</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I >oplocks</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PATH" ><TT CLASS="PARAMETER" ><I >path</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#POSIXLOCKING" +><TT +CLASS="PARAMETER" +><I +>posix locking</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#POSTEXEC" ><TT CLASS="PARAMETER" ><I >postexec</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#POSTSCRIPT" ><TT CLASS="PARAMETER" ><I >postscript</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I >preexec</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PREEXECCLOSE" ><TT CLASS="PARAMETER" ><I >preexec close</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRESERVECASE" ><TT CLASS="PARAMETER" ><I >preserve case</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTCOMMAND" ><TT CLASS="PARAMETER" ><I >print command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTOK" ><TT CLASS="PARAMETER" ><I >print ok</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTABLE" ><TT CLASS="PARAMETER" ><I >printable</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTER" ><TT CLASS="PARAMETER" ><I >printer</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTERADMIN" ><TT CLASS="PARAMETER" ><I >printer admin</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTERDRIVER" ><TT CLASS="PARAMETER" ><I >printer driver</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTERDRIVERLOCATION" ><TT CLASS="PARAMETER" ><I >printer driver location</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTERNAME" ><TT CLASS="PARAMETER" ><I >printer name</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I >printing</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#PUBLIC" ><TT CLASS="PARAMETER" ><I >public</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#QUEUEPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I >queuepause command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#QUEUERESUMECOMMAND" ><TT CLASS="PARAMETER" ><I >queueresume command</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#READLIST" ><TT CLASS="PARAMETER" ><I >read list</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#READONLY" ><TT CLASS="PARAMETER" ><I >read only</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#ROOTPOSTEXEC" ><TT CLASS="PARAMETER" ><I >root postexec</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ROOTPREEXEC" ><TT CLASS="PARAMETER" ><I >root preexec</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#ROOTPREEXECCLOSE" ><TT CLASS="PARAMETER" ><I >root preexec close</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SECURITYMASK" ><TT CLASS="PARAMETER" ><I >security mask</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SETDIRECTORY" ><TT CLASS="PARAMETER" ><I >set directory</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#SHAREMODES" ><TT CLASS="PARAMETER" ><I >share modes</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#SHORTPRESERVECASE" ><TT CLASS="PARAMETER" ><I >short preserve case</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STATUS" ><TT CLASS="PARAMETER" ><I >status</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STRICTLOCKING" ><TT CLASS="PARAMETER" ><I >strict locking</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#STRICTSYNC" ><TT CLASS="PARAMETER" ><I >strict sync</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#SYNCALWAYS" ><TT CLASS="PARAMETER" ><I >sync always</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USER" ><TT CLASS="PARAMETER" ><I >user</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USERNAME" ><TT CLASS="PARAMETER" ><I >username</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#USERS" ><TT CLASS="PARAMETER" ><I >users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#UTMP" ><TT CLASS="PARAMETER" ><I >utmp</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#VALIDUSERS" ><TT CLASS="PARAMETER" ><I >valid users</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I >veto files</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#VETOOPLOCKFILES" ><TT CLASS="PARAMETER" ><I >veto oplock files</I ></TT -> </P +></A +></P +></LI +><LI +><P +><A +HREF="#VFSOBJECT" +><TT +CLASS="PARAMETER" +><I +>vfs object</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#VFSOPTIONS" +><TT +CLASS="PARAMETER" +><I +>vfs options</I +></TT +></A +></P ></LI ><LI ><P +><A +HREF="#VOLUME" ><TT CLASS="PARAMETER" ><I >volume</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WIDELINKS" ><TT CLASS="PARAMETER" ><I >wide links</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WRITABLE" ><TT CLASS="PARAMETER" ><I >writable</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WRITECACHESIZE" ><TT CLASS="PARAMETER" ><I >write cache size</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WRITELIST" ><TT CLASS="PARAMETER" ><I >write list</I ></TT +></A ></P ></LI ><LI ><P +><A +HREF="#WRITEOK" ><TT CLASS="PARAMETER" ><I >write ok</I ></TT -> </P +></A +></P ></LI ><LI ><P +><A +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I >writeable</I ></TT -> </P +></A +></P ></LI ></UL ></DIV ><DIV CLASS="REFSECT1" ><A -NAME="AEN1053" +NAME="AEN1361" ></A ><H2 >EXPLANATION OF EACH PARAMETER</H2 @@ -3251,7 +4175,7 @@ HREF="smbd.8.html" TARGET="_top" >smbd(8) </A -> under special circumstances decribed below.</P +> under special circumstances described below.</P ><P >Normally, a Samba server requires that UNIX users are created for all users accessing files on this server. For sites @@ -3309,10 +4233,9 @@ CLASS="PARAMETER" ></TT > and attempts to authenticate the given user with the given password. If the - authentication succeeds then <A -HREF="smbd.8.html" -TARGET="_top" ->smbd</A + authentication succeeds then <B +CLASS="COMMAND" +>smbd</B > attempts to find a UNIX user in the UNIX password database to map the Windows user into. If this lookup fails, and <TT @@ -3321,10 +4244,9 @@ CLASS="PARAMETER" >add user script </I ></TT -> is set then <A -HREF="smbd.8.html" -TARGET="_top" ->smbd</A +> is set then <B +CLASS="COMMAND" +>smbd</B > will call the specified script <I CLASS="EMPHASIS" @@ -3337,17 +4259,16 @@ CLASS="PARAMETER" ></TT > argument to be the user name to create.</P ><P ->If this script successfully creates the user then <A -HREF="smbd.8.html" -TARGET="_top" ->smbd</A +>If this script successfully creates the user then <B +CLASS="COMMAND" +>smbd + </B > will continue on as though the UNIX user already existed. In this way, UNIX users are dynamically created to match existing Windows NT accounts.</P ><P >See also <A -HREF="smb.conf.5.html#security" -TARGET="_top" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -3355,17 +4276,16 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="smb.conf.5.html#passwordserver" -TARGET="_top" +HREF="#PASSWORDSERVER" > <TT CLASS="PARAMETER" ><I >password server</I ></TT ></A ->, <A -HREF="smb.conf.5.html#deleteuserscript" -TARGET="_top" +>, + <A +HREF="#DELETEUSERSCRIPT" ><TT CLASS="PARAMETER" ><I @@ -3389,6 +4309,175 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="ADDPRINTERCOMMAND" +></A +>addprinter command (G)</DT +><DD +><P +>With the introduction of MS-RPC based printing + support for Windows NT/2000 clients in Samba 2.2, The MS Add + Printer Wizard (APW) icon is now also available in the + "Printers..." folder displayed a share listing. The APW + allows for printers to be add remotely to a Samba or Windows + NT/2000 print server.</P +><P +>For a Samba host this means that the printer must be + physically added to underlying printing system. The <TT +CLASS="PARAMETER" +><I +> addprinter command</I +></TT +> defines a script to be run which + will perform the necessary operations for adding the printer + to the print system and to add the appropriate service definition + to the <TT +CLASS="FILENAME" +>smb.conf</TT +> file in order that it can be + shared by <A +HREF="smbd.8.html" +TARGET="_top" +><B +CLASS="COMMAND" +>smbd(8)</B +> + </A +>.</P +><P +>The <TT +CLASS="PARAMETER" +><I +>addprinter command</I +></TT +> is + automatically invoked with the following parameter (in + order:</P +><P +></P +><UL +><LI +><P +><TT +CLASS="PARAMETER" +><I +>printer name</I +></TT +></P +></LI +><LI +><P +><TT +CLASS="PARAMETER" +><I +>share name</I +></TT +></P +></LI +><LI +><P +><TT +CLASS="PARAMETER" +><I +>port name</I +></TT +></P +></LI +><LI +><P +><TT +CLASS="PARAMETER" +><I +>driver name</I +></TT +></P +></LI +><LI +><P +><TT +CLASS="PARAMETER" +><I +>location</I +></TT +></P +></LI +><LI +><P +><TT +CLASS="PARAMETER" +><I +>Windows 9x driver location</I +></TT +> + </P +></LI +></UL +><P +>All parameters are filled in from the PRINTER_INFO_2 structure sent + by the Windows NT/2000 client with one exception. The "Windows 9x + driver location" parameter is included for backwards compatibility + only. The remaining fields in the structure are generated from answers + to the APW questions.</P +><P +>Once the <TT +CLASS="PARAMETER" +><I +>addprinter command</I +></TT +> has + been executed, <B +CLASS="COMMAND" +>smbd</B +> will reparse the <TT +CLASS="FILENAME" +> smb.conf</TT +> to determine if the share defined by the APW + exists. If the sharename is still invalid, then <B +CLASS="COMMAND" +>smbd + </B +> will return an ACCESS_DENIED error to the client.</P +><P +>See also <A +HREF="#DELETEPRINTERCOMMAND" +><TT +CLASS="PARAMETER" +><I +> deleteprinter command</I +></TT +></A +>, <A +HREF="#PRINTING" +><TT +CLASS="PARAMETER" +><I +>printing</I +></TT +></A +>, + <A +HREF="#SHOWADDPRINTERWIZARD" +><TT +CLASS="PARAMETER" +><I +>show add + printer wizard</I +></TT +></A +></P +><P +>Default: <I +CLASS="EMPHASIS" +>none</I +></P +><P +>Example: <B +CLASS="COMMAND" +>addprinter command = /usr/bin/addprinter + </B +></P +></DD +><DT +><A NAME="ADMINUSERS" ></A >admin users (S)</DT @@ -3420,8 +4509,7 @@ NAME="ALLOWHOSTS" ><DD ><P >Synonym for <A -HREF="smb.conf.5.html#hostsallow" -TARGET="_top" +HREF="#HOSTSALLOW" > <TT CLASS="PARAMETER" ><I @@ -3438,20 +4526,20 @@ NAME="ALLOWTRUSTEDDOMAINS" ><DD ><P >This option only takes effect when the <A -HREF="smb.conf.5.html" -TARGET="_top" ->security</A -> option is set to - <TT +HREF="#SECURITY" +><TT CLASS="PARAMETER" ><I ->server</I +>security</I ></TT +></A +> option is set to + <TT +CLASS="CONSTANT" +>server</TT > or <TT -CLASS="PARAMETER" -><I ->domain</I -></TT +CLASS="CONSTANT" +>domain</TT >. If it is set to no, then attempts to connect to a resource from a domain or workgroup other than the one which smbd is running @@ -3490,7 +4578,7 @@ CLASS="COMMAND" > will announce itself as, to a network neighborhood browse list. By default this is set to Windows NT. The valid options - are : "NT" (which is a synonym for "NT Server"), "NT Server", + are : "NT Server" (which can also be written as "NT"), "NT Workstation", "Win95" or "WfW" meaning Windows NT Server, Windows NT Workstation, Windows 95 and Windows for Workgroups respectively. Do not change this parameter unless you have a @@ -3510,7 +4598,7 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="ANNOUCEVERSION" +NAME="ANNOUNCEVERSION" ></A >annouce version (G)</DT ><DD @@ -3537,32 +4625,15 @@ NAME="AUTOSERVICES" >auto services (G)</DT ><DD ><P ->This is a list of services that you want to be - automatically added to the browse lists. This is most useful - for homes and printers services that would otherwise not be - visible.</P -><P ->Note that if you just want all printers in your - printcap file loaded then the <A -HREF="smb.conf.5.html#loadprinters" -TARGET="_top" +>This is a synonym for the <A +HREF="#PRELOAD" > <TT CLASS="PARAMETER" ><I ->load printers</I +>preload</I ></TT ></A -> option is easier.</P -><P ->Default: <I -CLASS="EMPHASIS" ->no auto services</I -></P -><P ->Example: <B -CLASS="COMMAND" ->auto services = fred lp colorlp</B -></P +>.</P ></DD ><DT ><A @@ -3916,6 +4987,11 @@ NAME="CASESENSITIVE" HREF="#AEN201" >NAME MANGLING</A >.</P +><P +>Default: <B +CLASS="COMMAND" +>case sensitive = no</B +></P ></DD ><DT ><A @@ -4163,7 +5239,7 @@ CLASS="COMMAND" >. This will output the code page. The default for USA MS-DOS, Windows 95, and Windows NT releases is code page 437. The default for western - european releases of the above operating systems is code page 850.</P + European releases of the above operating systems is code page 850.</P ><P >This parameter tells <A HREF="smbd.8.html" @@ -4312,6 +5388,14 @@ CLASS="PARAMETER" chars</I ></TT ></A +>, <A +HREF="#CODEPAGEDIRECTORY" +> <TT +CLASS="PARAMETER" +><I +>code page directory</I +></TT +></A ></P ><P >Default: <B @@ -4326,6 +5410,39 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="CODEPAGEDIRECTORY" +></A +>code page directory (G)</DT +><DD +><P +>Define the location of the various client code page + files.</P +><P +>See also <A +HREF="#CLIENTCODEPAGE" +><TT +CLASS="PARAMETER" +><I +>client + code page</I +></TT +></A +></P +><P +>Default: <B +CLASS="COMMAND" +>code page directory = ${prefix}/lib/codepages + </B +></P +><P +>Example: <B +CLASS="COMMAND" +>code page directory = /usr/share/samba/codepages + </B +></P +></DD +><DT +><A NAME="CODINGSYSTEM" ></A >codingsystem (G)</DT @@ -4421,6 +5538,12 @@ CLASS="CONSTANT" This is used for compatibility between Samba and CAP.</P ></LI ></UL +><P +>Default: <B +CLASS="COMMAND" +>coding system = <empty value></B +> + </P ></DD ><DT ><A @@ -4509,7 +5632,7 @@ NAME="COPY" ><P >Default: <I CLASS="EMPHASIS" ->none</I +>no value</I ></P ><P >Example: <B @@ -4695,31 +5818,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="DEBUGTIMESTAMP" -></A ->debug timestamp (G)</DT -><DD -><P ->Samba 2.2 debug log messages are timestamped - by default. If you are running at a high <A -HREF="#DEBUGLEVEL" -> <TT -CLASS="PARAMETER" -><I ->debug level</I -></TT -></A -> these timestamps - can be distracting. This boolean parameter allows timestamping - to be turned off.</P -><P ->Default: <B -CLASS="COMMAND" ->debug timestamp = yes</B -></P -></DD -><DT -><A NAME="DEBUGPID" ></A >debug pid (G)</DT @@ -4748,6 +5846,31 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="DEBUGTIMESTAMP" +></A +>debug timestamp (G)</DT +><DD +><P +>Samba 2.2 debug log messages are timestamped + by default. If you are running at a high <A +HREF="#DEBUGLEVEL" +> <TT +CLASS="PARAMETER" +><I +>debug level</I +></TT +></A +> these timestamps + can be distracting. This boolean parameter allows timestamping + to be turned off.</P +><P +>Default: <B +CLASS="COMMAND" +>debug timestamp = yes</B +></P +></DD +><DT +><A NAME="DEBUGUID" ></A >debug uid (G)</DT @@ -4778,7 +5901,7 @@ CLASS="COMMAND" ><A NAME="DEBUGLEVEL" ></A ->debug level (G)</DT +>debuglevel (G)</DT ><DD ><P >The value of the parameter (an integer) allows @@ -4823,7 +5946,7 @@ NAME="DEFAULTCASE" ><P >See the section on <A HREF="#AEN201" -> NAME MANGLING"</A +> NAME MANGLING</A >. Also note the <A HREF="#SHORTPRESERVECASE" > <TT @@ -4833,6 +5956,11 @@ CLASS="PARAMETER" ></TT ></A > parameter.</P +><P +>Default: <B +CLASS="COMMAND" +>default case = lower</B +></P ></DD ><DT ><A @@ -4886,16 +6014,35 @@ CLASS="PARAMETER" interesting things.</P ><P >Example:</P +><P ><PRE -CLASS="SCREEN" -><TT -CLASS="COMPUTEROUTPUT" -> default service = pub +CLASS="PROGRAMLISTING" +>[global] + default service = pub - [pub] - path = /%S - </TT -></PRE +[pub] + path = /%S + </PRE +></P +></DD +><DT +><A +NAME="DELETEREADONLY" +></A +>delete readonly (S)</DT +><DD +><P +>This parameter allows readonly files to be deleted. + This is not normal DOS semantics, but is allowed by UNIX.</P +><P +>This option may be useful for running applications such + as rcs, where UNIX file ownership prevents changing file + permissions, and DOS semantics prevent deletion of a read only file.</P +><P +>Default: <B +CLASS="COMMAND" +>delete readonly = no</B +></P ></DD ><DT ><A @@ -4916,7 +6063,7 @@ CLASS="COMMAND" >smbd(8)</B ></A > under special circumstances - decribed below.</P + described below.</P ><P >Normally, a Samba server requires that UNIX users are created for all users accessing files on this server. For sites @@ -5077,21 +6224,99 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="DELETEREADONLY" +NAME="DELETEPRINTERCOMMAND" ></A ->delete readonly (S)</DT +>deleteprinter command (G)</DT ><DD ><P ->This parameter allows readonly files to be deleted. - This is not normal DOS semantics, but is allowed by UNIX.</P +>With the introduction of MS-RPC based printer + support for Windows NT/2000 clients in Samba 2.2, it is now + possible to delete printer at run time by issuing the + DeletePrinter() RPC call.</P ><P ->This option may be useful for running applications such - as rcs, where UNIX file ownership prevents changing file - permissions, and DOS semantics prevent deletion of a read only file.</P +>For a Samba host this means that the printer must be + physically deleted from underlying printing system. The <TT +CLASS="PARAMETER" +><I +> deleteprinter command</I +></TT +> defines a script to be run which + will perform the necessary operations for removing the printer + from the print system and from <TT +CLASS="FILENAME" +>smb.conf</TT +>. + </P ><P ->Default: <B +>The <TT +CLASS="PARAMETER" +><I +>deleteprinter command</I +></TT +> is + automatically called with only one parameter: <TT +CLASS="PARAMETER" +><I +> "printer name"</I +></TT +>.</P +><P +>Once the <TT +CLASS="PARAMETER" +><I +>deleteprinter command</I +></TT +> has + been executed, <B CLASS="COMMAND" ->delete readonly = no</B +>smbd</B +> will reparse the <TT +CLASS="FILENAME" +> smb.conf</TT +> to associated printer no longer exists. + If the sharename is still valid, then <B +CLASS="COMMAND" +>smbd + </B +> will return an ACCESS_DENIED error to the client.</P +><P +>See also <A +HREF="#ADDPRINTERCOMMAND" +><TT +CLASS="PARAMETER" +><I +> addprinter command</I +></TT +></A +>, <A +HREF="#PRINTING" +><TT +CLASS="PARAMETER" +><I +>printing</I +></TT +></A +>, + <A +HREF="#SHOWADDPRINTERWIZARD" +><TT +CLASS="PARAMETER" +><I +>show add + printer wizard</I +></TT +></A +></P +><P +>Default: <I +CLASS="EMPHASIS" +>none</I +></P +><P +>Example: <B +CLASS="COMMAND" +>deleteprinter command = /usr/bin/removeprinter + </B ></P ></DD ><DT @@ -5200,7 +6425,7 @@ CLASS="PARAMETER" CLASS="FILENAME" >./</TT >. The script should return two - integers in ascii. The first should be the total disk space in blocks, + integers in ASCII. The first should be the total disk space in blocks, and the second should be the number of available blocks. An optional third return value can give the block size in bytes. The default blocksize is 1024 bytes.</P @@ -5732,9 +6957,36 @@ CLASS="PARAMETER" NT PDC is able to do so then cross subnet browsing will behave strangely and may fail.</P ><P +>If <A +HREF="#DOMAINLOGONS" +><B +CLASS="COMMAND" +>domain logons = yes</B +> + </A +>, then the default behavior is to enable the <TT +CLASS="PARAMETER" +><I +>domain + master</I +></TT +> parameter. If <TT +CLASS="PARAMETER" +><I +>domain logons</I +></TT +> is + not enabled (the default setting), then neither will <TT +CLASS="PARAMETER" +><I +>domain + master</I +></TT +> be enabled by default.</P +><P >Default: <B CLASS="COMMAND" ->domain master = no</B +>domain master = auto</B ></P ></DD ><DT @@ -5776,6 +7028,29 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="DOSFILEMODE" +></A +>dos filemode (S)</DT +><DD +><P +> The default behavior in Samba is to provide + UNIX-like behavor where only the owner of a file/directory is + able to change the permissions on it. However, this behavior + is often confusing to DOS/Windows users. Enabling this parameter + allows a user who has write access to the file (by whatever + means) to modify the permissions on it. Note that a user + belonging to the group owning the file will not be allowed to + change permissions if the group is only granted read access. + Ownership of the file/directory is not changed, only the permissions + are modified.</P +><P +>Default: <B +CLASS="COMMAND" +>dos filemode = no</B +></P +></DD +><DT +><A NAME="DOSFILETIMERESOLUTION" ></A >dos filetime resolution (S)</DT @@ -5896,6 +7171,88 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="ENHANCEDBROWSING" +></A +>enhanced browsing (G)</DT +><DD +><P +>This option enables a couple of enhancements to + cross-subnet browse propogation that have been added in Samba + but which are not standard in Microsoft implementations. + <I +CLASS="EMPHASIS" +>These enhancements are currently only available in + the HEAD Samba CVS tree (not Samba 2.2.x).</I +></P +><P +>The first enhancement to browse propogation consists of a regular + wildcard query to a Samba WINS server for all Domain Master Browsers, + followed by a browse synchronisation with each of the returned + DMBs. The second enhancement consists of a regular randomised browse + synchronisation with all currently known DMBs.</P +><P +>You may wish to disable this option if you have a problem with empty + workgroups not disappearing from browse lists. Due to the restrictions + of the browse protocols these enhancements can cause a empty workgroup + to stay around forever which can be annoying.</P +><P +>In general you should leave this option enabled as it makes + cross-subnet browse propogation much more reliable.</P +><P +>Default: <B +CLASS="COMMAND" +>enhanced browsing = yes</B +></P +></DD +><DT +><A +NAME="ENUMPORTSCOMMAND" +></A +>enumports command (G)</DT +><DD +><P +>The concept of a "port" is fairly foreign + to UNIX hosts. Under Windows NT/2000 print servers, a port + is associated with a port monitor and generally takes the form of + a local port (i.e. LPT1:, COM1:, FILE:) or a remote port + (i.e. LPD Port Monitor, etc...). By default, Samba has only one + port defined--<TT +CLASS="CONSTANT" +>"Samba Printer Port"</TT +>. Under + Windows NT/2000, all printers must have a valid port name. + If you wish to have a list of ports displayed (<B +CLASS="COMMAND" +>smbd + </B +> does not use a port name for anything) other than + the default <TT +CLASS="CONSTANT" +>"Samba Printer Port"</TT +>, you + can define <TT +CLASS="PARAMETER" +><I +>enumports command</I +></TT +> to point to + a program which should generate a list of ports, one per line, + to standard output. This listing will then be used in response + to the level 1 and 2 EnumPorts() RPC.</P +><P +>Default: <I +CLASS="EMPHASIS" +>no enumports command</I +></P +><P +>Example: <B +CLASS="COMMAND" +>enumports command = /usr/bin/listports + </B +></P +></DD +><DT +><A NAME="EXEC" ></A >exec (S)</DT @@ -5936,9 +7293,11 @@ NAME="FAKEDIRECTORYCREATETIMES" ><P >However, Unix time semantics mean that the create time reported by Samba will be updated whenever a file is created or - deleted in the directory. NMAKE therefore finds all object files - in the object directory bar the last one built are out of date - compared to the directory and rebuilds them. Enabling this option + or deleted in the directory. NMAKE finds all object files in + the object directory. The timestamp of the last one built is then + compared to the timestamp of the object dircetory. If the + directory's timestamp if newer, then all object files + will be rebuilt. Enabling this option ensures directories always predate their contents and an NMAKE build will proceed as expected.</P ><P @@ -6053,7 +7412,7 @@ NAME="FORCECREATEMODE" CLASS="EMPHASIS" >always</I > be set on a - file by Samba. This is done by bitwise 'OR'ing these bits onto + file created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a file that is being created or having its permissions changed. The default for this parameter is (in octal) 000. The modes in this parameter are bitwise 'OR'ed onto the file @@ -6164,7 +7523,8 @@ CLASS="COMMAND" ><A NAME="FORCEDIRECTORYSECURITYMODE" ></A ->force directory security mode (S)</DT +>force directory + security mode (S)</DT ><DD ><P >This parameter controls what UNIX permission bits @@ -6189,7 +7549,7 @@ CLASS="PARAMETER" ></A > parameter. To allow a user to modify all the user/group/world permissions on a - directory, with restrictions set this parameter to 000.</P + directory without restrictions, set this parameter to 000.</P ><P ><I CLASS="EMPHASIS" @@ -6410,9 +7770,7 @@ NAME="FORCEUSER" Thus clients still need to connect as a valid user and supply a valid password. Once connected, all file operations will be performed as the "forced user", no matter what username the client connected - as.</P -><P ->This can be very useful.</P + as. This can be very useful.</P ><P >In Samba 2.0.5 and above this parameter also causes the primary group of the forced user to be used as the primary group @@ -6508,7 +7866,7 @@ CLASS="CONSTANT" ><P >Default: <B CLASS="COMMAND" ->getwd cache = No</B +>getwd cache = yes</B ></P ></DD ><DT @@ -6546,7 +7904,7 @@ CLASS="PARAMETER" ></TT ></A > (see below). Whatever privileges this - ser has will be available to any client connecting to the guest service. + user has will be available to any client connecting to the guest service. Typically this user will exist in the password file, but will not have a valid login. The user account "ftp" is often a good choice for this parameter. If a username is specified in a given service, @@ -6589,7 +7947,7 @@ NAME="GUESTOK" CLASS="CONSTANT" >yes</TT > for - a service, then no password is equired to connect to the service. + a service, then no password is required to connect to the service. Privileges will be those of the <A HREF="#GUESTACCOUNT" ><TT @@ -6628,7 +7986,7 @@ CLASS="CONSTANT" >yes</TT > for a service, then only guest connections to the service are permitted. - This parameter will have no affect if <A + This parameter will have no effect if <A HREF="#GUESTOK" > <TT CLASS="PARAMETER" @@ -6832,7 +8190,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->homedir map = auto.home</B +>homedir map = <empty string></B ></P ><P >Example: <B @@ -6842,6 +8200,46 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="HOSTMSDFS" +></A +>host msdfs (G)</DT +><DD +><P +>This boolean parameter is only available + if Samba has been configured and compiled with the <B +CLASS="COMMAND" +> --with-msdfs</B +> option. If set to <TT +CLASS="CONSTANT" +>yes</TT +>, + Samba will act as a Dfs server, and allow Dfs-aware clients + to browse Dfs trees hosted on the server.</P +><P +>See also the <A +HREF="#MSDFSROOT" +><TT +CLASS="PARAMETER" +><I +> msdfs root</I +></TT +></A +> share level parameter. For + more information on setting up a Dfs tree on Samba, + refer to <A +HREF="msdfs_setup.html" +TARGET="_top" +>msdfs_setup.html</A +>. + </P +><P +>Default: <B +CLASS="COMMAND" +>host msdfs = no</B +></P +></DD +><DT +><A NAME="HOSTSALLOW" ></A >hosts allow (S)</DT @@ -7269,11 +8667,11 @@ NAME="INTERFACES" ><P >The "mask" parameters can either be a bit length (such as 24 for a C class network) or a full netmask in dotted - decmal form.</P + decimal form.</P ><P >The "IP" parameters above can either be a full dotted decimal IP address or a hostname which will be looked up via - the OSes normal hostname resolution mechanisms.</P + the OS's normal hostname resolution mechanisms.</P ><P >For example, the following line:</P ><P @@ -7297,6 +8695,12 @@ CLASS="PARAMETER" ></TT ></A >.</P +><P +>Default: <I +CLASS="EMPHASIS" +>all active interfaces except 127.0.0.1 + that are broadcast capable</I +></P ></DD ><DT ><A @@ -7400,12 +8804,12 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->keepalive = 0</B +>keepalive = 300</B ></P ><P >Example: <B CLASS="COMMAND" ->keepalive = 60</B +>keepalive = 600</B ></P ></DD ><DT @@ -7415,7 +8819,7 @@ NAME="KERNELOPLOCKS" >kernel oplocks (G)</DT ><DD ><P ->For UNIXs that support kernel based <A +>For UNIXes that support kernel based <A HREF="#OPLOCKS" ><TT CLASS="PARAMETER" @@ -7486,6 +8890,24 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="LANMANAUTH" +></A +>lanman auth (G)</DT +><DD +><P +>This parameter determines whether or not smbd will + attempt to authentication users using the LANMAN password hash. + If disabled, only clients which support NT password hashes (e.g. Windows + NT/2000 clients, smbclient, etc... but not Windows 95/98 or the MS DOS + network client) will be able to connect to the Samba host.</P +><P +>Default : <B +CLASS="COMMAND" +>lanman auth = yes</B +></P +></DD +><DT +><A NAME="LEVEL2OPLOCKS" ></A >level2 oplocks (S)</DT @@ -7501,7 +8923,7 @@ NAME="LEVEL2OPLOCKS" exclusive oplocks). This allows all openers of the file that support level2 oplocks to cache the file for read-ahead only (ie. they may not cache writes or lock requests) and increases performance - for many acesses of files that are not commonly written (such as + for many accesses of files that are not commonly written (such as application .EXE files).</P ><P >Once one of the clients which have a read-only oplock @@ -7510,8 +8932,7 @@ NAME="LEVEL2OPLOCKS" delete any read-ahead caches.</P ><P >It is recommended that this parameter be turned on - to speed access to shared executables (and also to test - the code :-).</P + to speed access to shared executables.</P ><P >For more discussions on level2 oplocks see the CIFS spec.</P ><P @@ -7563,7 +8984,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->level2 oplocks = False</B +>level2 oplocks = yes</B ></P ></DD ><DT @@ -7643,7 +9064,7 @@ CLASS="COMMAND" ><P >Example: <B CLASS="COMMAND" ->lm announce = true</B +>lm announce = yes</B ></P ></DD ><DT @@ -7803,12 +9224,12 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->lock directory = /tmp/samba</B +>lock directory = ${prefix}/var/locks</B ></P ><P >Example: <B CLASS="COMMAND" ->lock directory = /usr/local/samba/var/locks</B +>lock directory = /var/run/samba/locks</B > </P ></DD @@ -7826,9 +9247,9 @@ NAME="LOCKING" >If <B CLASS="COMMAND" >locking = no</B ->, all lock and unlock requests - will appear to succeed and all lock queries will indicate that the - queried lock is clear.</P +>, all lock and unlock + requests will appear to succeed and all lock queries will report + that the file in question is available for locking.</P ><P >If <B CLASS="COMMAND" @@ -7866,7 +9287,7 @@ NAME="LOGFILE" >log file (G)</DT ><DD ><P ->This options allows you to override the name +>This option allows you to override the name of the Samba log file (also known as the debug file).</P ><P >This option takes the standard substitutions, allowing @@ -7960,7 +9381,7 @@ CLASS="USERINPUT" ><P ><B CLASS="COMMAND" ->logon home = \\%L\%U\profile</B +>logon home = \\%N\%U\profile</B ></P ><P >This tells Samba to return the above string, with @@ -8372,8 +9793,11 @@ CLASS="PARAMETER" ><I >lpq command</I ></TT -> as the PATH may not be - available to the server.</P +> as the <TT +CLASS="ENVAR" +>$PATH + </TT +> may not be available to the server.</P ><P >See also the <A HREF="#PRINTING" @@ -8398,7 +9822,7 @@ CLASS="PARAMETER" ><P >Example: <B CLASS="COMMAND" ->lpq command = /usr/bin/lpq %p</B +>lpq command = /usr/bin/lpq -P%p</B ></P ></DD ><DT @@ -8664,7 +10088,8 @@ NAME="MAGICSCRIPT" executed on behalf of the connected user.</P ><P >Scripts executed in this way will be deleted upon - completion, permissions permitting.</P + completion assuming that the user has the appripriate level + of priviledge and the ile permissions allow the deletion.</P ><P >If the script generates output, output will be sent to the file specified by the <A @@ -8678,7 +10103,7 @@ CLASS="PARAMETER" > parameter (see above).</P ><P >Note that some shells are unable to interpret scripts - containing carriage-return-linefeed instead of linefeed as + containing CR/LF instead of CR as the end-of-line marker. Magic scripts must be executable <I CLASS="EMPHASIS" @@ -8716,6 +10141,11 @@ NAME="MANGLECASE" HREF="#AEN201" > NAME MANGLING</A ></P +><P +>Default: <B +CLASS="COMMAND" +>mangle case = no</B +></P ></DD ><DT ><A @@ -8757,7 +10187,7 @@ CLASS="FILENAME" >;1 </TT > off the ends of filenames on some CDROMS (only visible - under some UNIXs). To do this use a map of (*;1 *;).</P + under some UNIXes). To do this use a map of (*;1 *;).</P ><P >Default: <I CLASS="EMPHASIS" @@ -8856,34 +10286,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="MANGLINGCHAR" -></A ->mangling char (S)</DT -><DD -><P ->This controls what character is used as - the <I -CLASS="EMPHASIS" ->magic</I -> character in <A -HREF="#AEN201" ->name mangling</A ->. The default is a '~' - but this may interfere with some software. Use this option to set - it to whatever you prefer.</P -><P ->Default: <B -CLASS="COMMAND" ->mangling char = ~</B -></P -><P ->Example: <B -CLASS="COMMAND" ->mangling char = ^</B -></P -></DD -><DT -><A NAME="MANGLEDSTACK" ></A >mangled stack (G)</DT @@ -8921,6 +10323,34 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="MANGLINGCHAR" +></A +>mangling char (S)</DT +><DD +><P +>This controls what character is used as + the <I +CLASS="EMPHASIS" +>magic</I +> character in <A +HREF="#AEN201" +>name mangling</A +>. The default is a '~' + but this may interfere with some software. Use this option to set + it to whatever you prefer.</P +><P +>Default: <B +CLASS="COMMAND" +>mangling char = ~</B +></P +><P +>Example: <B +CLASS="COMMAND" +>mangling char = ^</B +></P +></DD +><DT +><A NAME="MAPARCHIVE" ></A >map archive (S)</DT @@ -9098,7 +10528,7 @@ HREF="#GUESTACCOUNT" >guest account</A >. Note that this can cause problems as it means that any user incorrectly typing - their password will be silently logged on as a "guest" - and + their password will be silently logged on as "guest" - and will not know the reason they cannot access files they think they should - there will have been no message given to them that they got their password wrong. Helpdesk services will @@ -9303,6 +10733,163 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="MAXPRINTJOBS" +></A +>max print jobs (S)</DT +><DD +><P +>This parameter limits the maximum number of + jobs allowable in a Samba printer queue at any given moment. + If this number is exceeded, <A +HREF="smbd.8.html" +TARGET="_top" +><B +CLASS="COMMAND" +> smbd(8)</B +></A +> will remote "Out of Space" to the client. + See all <A +HREF="#TOTALPRINTJOBS" +><TT +CLASS="PARAMETER" +><I +>total + print jobs</I +></TT +></A +>. + </P +><P +>Default: <B +CLASS="COMMAND" +>max print jobs = 1000</B +></P +><P +>Example: <B +CLASS="COMMAND" +>max print jobs = 5000</B +></P +></DD +><DT +><A +NAME="MAXPROTOCOL" +></A +>max protocol (G)</DT +><DD +><P +>The value of the parameter (a string) is the highest + protocol level that will be supported by the server.</P +><P +>Possible values are :</P +><P +></P +><UL +><LI +><P +><TT +CLASS="CONSTANT" +>CORE</TT +>: Earliest version. No + concept of user names.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>COREPLUS</TT +>: Slight improvements on + CORE for efficiency.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>LANMAN1</TT +>: First <I +CLASS="EMPHASIS" +> modern</I +> version of the protocol. Long filename + support.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>LANMAN2</TT +>: Updates to Lanman1 protocol. + </P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>NT1</TT +>: Current up to date version of + the protocol. Used by Windows NT. Known as CIFS.</P +></LI +></UL +><P +>Normally this option should not be set as the automatic + negotiation phase in the SMB protocol takes care of choosing + the appropriate protocol.</P +><P +>See also <A +HREF="#MINPROTOCOL" +><TT +CLASS="PARAMETER" +><I +>min + protocol</I +></TT +></A +></P +><P +>Default: <B +CLASS="COMMAND" +>max protocol = NT1</B +></P +><P +>Example: <B +CLASS="COMMAND" +>max protocol = LANMAN1</B +></P +></DD +><DT +><A +NAME="MAXSMBDPROCESSES" +></A +>max smbd processes (G)</DT +><DD +><P +>This parameter limits the maximum number of + <A +HREF="smbd.8.html" +TARGET="_top" +><B +CLASS="COMMAND" +>smbd(8)</B +></A +> + processes concurrently running on a system and is intended + as a stop gap to prevent degrading service to clients in the event + that the server has insufficient resources to handle more than this + number of connections. Remember that under normal operating + conditions, each user will have an smbd associated with him or her + to handle connections to all shares from a given host. + </P +><P +>Default: <B +CLASS="COMMAND" +>max smbd processes = 0</B +> ## no limit</P +><P +>Example: <B +CLASS="COMMAND" +>max smbd processes = 1000</B +></P +></DD +><DT +><A NAME="MAXTTL" ></A >max ttl (G)</DT @@ -9517,39 +11104,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="MINPRINTSPACE" -></A ->min print space (S)</DT -><DD -><P ->This sets the minimum amount of free disk - space that must be available before a user will be able to spool - a print job. It is specified in kilobytes. The default is 0, which - means a user can always spool a print job.</P -><P ->See also the <A -HREF="#PRINTING" -><TT -CLASS="PARAMETER" -><I ->printing - </I -></TT -></A -> parameter.</P -><P ->Default: <B -CLASS="COMMAND" ->min print space = 0</B -></P -><P ->Example: <B -CLASS="COMMAND" ->min print space = 2000</B -></P -></DD -><DT -><A NAME="MINPASSWDLENGTH" ></A >min passwd length (G)</DT @@ -9573,7 +11127,10 @@ NAME="MINPASSWORDLENGTH" ><DD ><P >This option sets the minimum length in characters - of a plaintext password than smbd will accept when performing + of a plaintext password that <B +CLASS="COMMAND" +>smbd</B +> will accept when performing UNIX password changing.</P ><P >See also <A @@ -9611,6 +11168,89 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="MINPRINTSPACE" +></A +>min print space (S)</DT +><DD +><P +>This sets the minimum amount of free disk + space that must be available before a user will be able to spool + a print job. It is specified in kilobytes. The default is 0, which + means a user can always spool a print job.</P +><P +>See also the <A +HREF="#PRINTING" +><TT +CLASS="PARAMETER" +><I +>printing + </I +></TT +></A +> parameter.</P +><P +>Default: <B +CLASS="COMMAND" +>min print space = 0</B +></P +><P +>Example: <B +CLASS="COMMAND" +>min print space = 2000</B +></P +></DD +><DT +><A +NAME="MINPROTOCOL" +></A +>min protocol (G)</DT +><DD +><P +>The value of the parameter (a string) is the + lowest SMB protocol dialect than Samba will support. Please refer + to the <A +HREF="#MAXPROTOCOL" +><TT +CLASS="PARAMETER" +><I +>max protocol</I +></TT +></A +> + parameter for a list of valid protocol names and a brief description + of each. You may also wish to refer to the C source code in + <TT +CLASS="FILENAME" +>source/smbd/negprot.c</TT +> for a listing of known protocol + dialects supported by clients.</P +><P +>If you are viewing this parameter as a security measure, you should + also refer to the <A +HREF="#LANMANAUTH" +><TT +CLASS="PARAMETER" +><I +>lanman + auth</I +></TT +></A +> parameter. Otherwise, you should never need + to change this parameter.</P +><P +>Default : <B +CLASS="COMMAND" +>min protocol = CORE</B +></P +><P +>Example : <B +CLASS="COMMAND" +>min protocol = NT1</B +> # disable DOS + clients</P +></DD +><DT +><A NAME="MINWINSTTL" ></A >min wins ttl (G)</DT @@ -9644,15 +11284,61 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="MSDFSROOT" +></A +>msdfs root (S)</DT +><DD +><P +>This boolean parameter is only available if + Samba is configured and compiled with the <B +CLASS="COMMAND" +> --with-msdfs</B +> option. If set to <TT +CLASS="CONSTANT" +>yes></TT +>, + Samba treats the share as a Dfs root and allows clients to browse + the distributed file system tree rooted at the share directory. + Dfs links are specified in the share directory by symbolic + links of the form <TT +CLASS="FILENAME" +>msdfs:serverA\shareA,serverB\shareB + </TT +> and so on. For more information on setting up a Dfs tree + on Samba, refer to <A +HREF="msdfs_setup.html" +TARGET="_top" +>msdfs_setup.html + </A +>.</P +><P +>See also <A +HREF="#HOSTMSDFS" +><TT +CLASS="PARAMETER" +><I +>host msdfs + </I +></TT +></A +></P +><P +>Default: <B +CLASS="COMMAND" +>msdfs root = no</B +></P +></DD +><DT +><A NAME="NAMERESOLVEORDER" ></A >name resolve order (G)</DT ><DD ><P >This option is used by the programs in the Samba - suite to determine what naming services and in what order to resolve - host names to IP addresses. The option takes a space separated - string of different name resolution options.</P + suite to determine what naming services to use and in what order + to resolve host names to IP addresses. The option takes a space + separated string of name resolution options.</P ><P >The options are :"lmhosts", "host", "wins" and "bcast". They cause names to be resolved as follows :</P @@ -9949,9 +11635,11 @@ CLASS="CONSTANT" This information may be of use if any users are having problems with NT SMB support.</P ><P +>You should not need to ever disable this parameter.</P +><P >Default: <B CLASS="COMMAND" ->nt support = yes</B +>nt smb support = yes</B ></P ></DD ><DT @@ -9977,47 +11665,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="OLELOCKINGCOMPATIBILITY" -></A ->ole locking compatibility (G)</DT -><DD -><P ->This parameter allows an administrator to turn - off the byte range lock manipulation that is done within Samba to - give compatibility for OLE applications. Windows OLE applications - use byte range locking as a form of inter-process communication, by - locking ranges of bytes around the 2^32 region of a file range. This - can cause certain UNIX lock managers to crash or otherwise cause - problems. Setting this parameter to <TT -CLASS="CONSTANT" ->no</TT -> means you - trust your UNIX lock manager to handle such cases correctly.</P -><P ->Default: <B -CLASS="COMMAND" ->ole locking compatibility = yes</B -></P -></DD -><DT -><A -NAME="ONLYGUEST" -></A ->only guest (S)</DT -><DD -><P ->A synonym for <A -HREF="#GUESTONLY" -><TT -CLASS="PARAMETER" -><I -> guest only</I -></TT -></A ->.</P -></DD -><DT -><A NAME="ONLYUSER" ></A >only user (S)</DT @@ -10030,8 +11677,20 @@ CLASS="PARAMETER" >user</I ></TT > - list will be allowed. By default this option is disabled so a client - can supply a username to be used by the server.</P + list will be allowed. By default this option is disabled so that a + client can supply a username to be used by the server. Enabling + this parameter will force the server to only user the login + names from the <TT +CLASS="PARAMETER" +><I +>user</I +></TT +> list and is only really + useful in <A +HREF="#SECURITYEQUALSSHARE" +>shave level</A +> + security.</P ><P >Note that this also means Samba won't try to deduce usernames from the service name. This can be annoying for @@ -10066,70 +11725,44 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="OPLOCKS" +NAME="OLELOCKINGCOMPATIBILITY" ></A ->oplocks (S)</DT +>ole locking compatibility (G)</DT ><DD ><P ->This boolean option tells smbd whether to - issue oplocks (opportunistic locks) to file open requests on this - share. The oplock code can dramatically (approx. 30% or more) improve - the speed of access to files on Samba servers. It allows the clients - to aggressively cache files ocally and you may want to disable this - option for unreliable network environments (it is turned on by - default in Windows NT Servers). For more information see the file - <TT -CLASS="FILENAME" ->Speed.txt</TT -> in the Samba <TT -CLASS="FILENAME" ->docs/</TT -> - directory.</P +>This parameter allows an administrator to turn + off the byte range lock manipulation that is done within Samba to + give compatibility for OLE applications. Windows OLE applications + use byte range locking as a form of inter-process communication, by + locking ranges of bytes around the 2^32 region of a file range. This + can cause certain UNIX lock managers to crash or otherwise cause + problems. Setting this parameter to <TT +CLASS="CONSTANT" +>no</TT +> means you + trust your UNIX lock manager to handle such cases correctly.</P ><P ->Oplocks may be selectively turned off on certain files on - a per share basis. See the <A -HREF="#VETOOPLOCKFILES" -><TT -CLASS="PARAMETER" -><I -> veto oplock files</I -></TT +>Default: <B +CLASS="COMMAND" +>ole locking compatibility = yes</B +></P +></DD +><DT +><A +NAME="ONLYGUEST" ></A -> parameter. On some systems - oplocks are recognized by the underlying operating system. This - allows data synchronization between all access to oplocked files, - whether it be via Samba or NFS or a local UNIX process. See the - <TT -CLASS="PARAMETER" -><I ->kernel oplocks</I -></TT -> parameter for details.</P +>only guest (S)</DT +><DD ><P ->See also the <A -HREF="#KERNELOPLOCKS" -><TT -CLASS="PARAMETER" -><I ->kernel - oplocks</I -></TT -></A -> and <A -HREF="#LEVEL2OPLOCKS" +>A synonym for <A +HREF="#GUESTONLY" ><TT CLASS="PARAMETER" ><I -> level2 oplocks</I +> guest only</I ></TT ></A -> parameters.</P -><P ->Default: <B -CLASS="COMMAND" ->oplocks = yes</B -></P +>.</P ></DD ><DT ><A @@ -10141,7 +11774,7 @@ NAME="OPLOCKBREAKWAITTIME" >This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too quickly when that client issues an SMB that can cause an oplock - break request, then the client redirector can fail and not respond + break request, then the network client can fail and not respond to the break request. This tuning parameter (which is set in milliseconds) is the amount of time Samba will wait before sending an oplock break request to such (broken) clients.</P @@ -10154,7 +11787,7 @@ CLASS="EMPHASIS" ><P >Default: <B CLASS="COMMAND" ->oplock break wait time = 10</B +>oplock break wait time = 0</B ></P ></DD ><DT @@ -10198,6 +11831,73 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="OPLOCKS" +></A +>oplocks (S)</DT +><DD +><P +>This boolean option tells smbd whether to + issue oplocks (opportunistic locks) to file open requests on this + share. The oplock code can dramatically (approx. 30% or more) improve + the speed of access to files on Samba servers. It allows the clients + to aggressively cache files locally and you may want to disable this + option for unreliable network environments (it is turned on by + default in Windows NT Servers). For more information see the file + <TT +CLASS="FILENAME" +>Speed.txt</TT +> in the Samba <TT +CLASS="FILENAME" +>docs/</TT +> + directory.</P +><P +>Oplocks may be selectively turned off on certain files with a + share. See the <A +HREF="#VETOOPLOCKFILES" +><TT +CLASS="PARAMETER" +><I +> veto oplock files</I +></TT +></A +> parameter. On some systems + oplocks are recognized by the underlying operating system. This + allows data synchronization between all access to oplocked files, + whether it be via Samba or NFS or a local UNIX process. See the + <TT +CLASS="PARAMETER" +><I +>kernel oplocks</I +></TT +> parameter for details.</P +><P +>See also the <A +HREF="#KERNELOPLOCKS" +><TT +CLASS="PARAMETER" +><I +>kernel + oplocks</I +></TT +></A +> and <A +HREF="#LEVEL2OPLOCKS" +><TT +CLASS="PARAMETER" +><I +> level2 oplocks</I +></TT +></A +> parameters.</P +><P +>Default: <B +CLASS="COMMAND" +>oplocks = yes</B +></P +></DD +><DT +><A NAME="OSLEVEL" ></A >os level (G)</DT @@ -10215,19 +11915,24 @@ CLASS="PARAMETER" ><I > WORKGROUP</I ></TT -> in the local broadcast area. The default is - zero, which means <B -CLASS="COMMAND" ->nmbd</B -> will lose elections to - Windows machines. See <TT +> in the local broadcast area.</P +><P +><I +CLASS="EMPHASIS" +>Note :</I +>By default, Samba will win + a local master browsing election over all Microsoft operating + systems except a Windows NT 4.0/2000 Domain Controller. This + means that a misconfigured Samba host can effectively isolate + a subnet for browsing purposes. See <TT CLASS="FILENAME" ->BROWSING.txt</TT -> in the - Samba <TT +>BROWSING.txt + </TT +> in the Samba <TT CLASS="FILENAME" >docs/</TT -> directory for details.</P +> directory + for details.</P ><P >Default: <B CLASS="COMMAND" @@ -10241,6 +11946,47 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="OS2DRIVERMAP" +></A +>os2 driver map (G)</DT +><DD +><P +>The parameter is used to define the absolute + path to a file containing a mapping of Windows NT printer driver + names to OS/2 printer driver names. The format is:</P +><P +><nt driver name> = <os2 driver + name>.<device name></P +><P +>For example, a valid entry using the HP LaserJet 5 + printer driver woudl appear as <B +CLASS="COMMAND" +>HP LaserJet 5L = LASERJET.HP + LaserJet 5L</B +>.</P +><P +>The need for the file is due to the printer driver namespace + problem described in the <A +HREF="printer_driver2.html" +TARGET="_top" +>Samba + Printing HOWTO</A +>. For more details on OS/2 clients, please + refer to the <A +HREF="OS2-Client-HOWTO.html" +TARGET="_top" +>OS2-Client-HOWTO + </A +> containing in the Samba documentation.</P +><P +>Default: <B +CLASS="COMMAND" +>os2 driver map = <empty string> + </B +></P +></DD +><DT +><A NAME="PANICACTION" ></A >panic action (G)</DT @@ -10343,7 +12089,7 @@ CLASS="CONSTANT" ><P >If the send string in any part of the chat sequence is a fullstop ".", then no string is sent. Similarly, - is the expect string is a fullstop then no string is expected.</P + if the expect string is a fullstop then no string is expected.</P ><P >Note that if the <A HREF="#UNIXPASSWORDSYNC" @@ -10392,8 +12138,8 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->passwd chat = *old*password* %o\n *new* - password* %n\n *new*password* %n\n *changed*</B +>passwd chat = *new*password* %n\n + *new*password* %n\n *changed*</B ></P ><P >Example: <B @@ -10474,11 +12220,6 @@ CLASS="PARAMETER" CLASS="COMMAND" >passwd chat debug = no</B ></P -><P ->Example: <B -CLASS="COMMAND" ->passwd chat debug = yes</B -></P ></DD ><DT ><A @@ -10593,7 +12334,10 @@ NAME="PASSWORDLEVEL" with mixed-case passwords. One offending client is Windows for Workgroups, which for some reason forces passwords to upper case when using the LANMAN1 protocol, but leaves them alone when - using COREPLUS!</P + using COREPLUS! Another problem child is the Windows 95/98 + family of operating systems. These clients upper case clear + text passwords even when NT LM 0.12 selected by the protocol + negotiation request/response.</P ><P >This parameter defines the maximum number of characters that may be upper case in passwords.</P @@ -10657,9 +12401,9 @@ CLASS="COMMAND" > you can get Samba to do all its username/password validation via a remote server.</P ><P ->This options sets the name of the password server to use. +>This option sets the name of the password server to use. It must be a NetBIOS name, so if the machine's NetBIOS name is - different from its internet name then you may have to add its NetBIOS + different from its Internet name then you may have to add its NetBIOS name to the lmhosts file which is stored in the same directory as the <TT CLASS="FILENAME" @@ -10680,7 +12424,7 @@ CLASS="PARAMETER" by any method and order described in that parameter.</P ><P >The password server much be a machine capable of using - the "LM1.2X002" or the "LM NT 0.12" protocol, and it must be in + the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in user level security mode.</P ><P ><I @@ -10706,8 +12450,8 @@ CLASS="PARAMETER" </I ></TT >, which means the Samba server will use the incoming - client as the passwordserver. If you use this then you better - trust your clients, and you better restrict them with hosts allow!</P + client as the password server. If you use this then you better + trust your clients, and you had better restrict them with hosts allow!</P ><P >If the <TT CLASS="PARAMETER" @@ -10720,8 +12464,8 @@ CLASS="CONSTANT" >domain</TT >, then the list of machines in this option must be a list of Primary or Backup Domain controllers for the - Domain or the character '*', as the Samba server is cryptographicly - in that domain, and will use cryptographicly authenticated RPC calls + Domain or the character '*', as the Samba server is effectively + in that domain, and will use cryptographically authenticated RPC calls to authenticate the user logging on. The advantage of using <B CLASS="COMMAND" > security = domain</B @@ -10892,6 +12636,33 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="POSIXLOCKING" +></A +>posix locking (S)</DT +><DD +><P +>The <A +HREF="smbd.8.html" +TARGET="_top" +><B +CLASS="COMMAND" +>smbd(8)</B +></A +> + daemon maintains an database of file locks obtained by SMB clients. + The default behavior is to map this internal database to POSIX + locks. This means that file locks obtained by SMB clients are + consistent with those seen by POSIX compliant applications accessing + the files via a non-SMB method (e.g. NFS or local file access). + You should never need to disable this parameter.</P +><P +>Default: <B +CLASS="COMMAND" +>posix locking = yes</B +></P +></DD +><DT +><A NAME="POSTEXEC" ></A >postexec (S)</DT @@ -11089,7 +12860,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->preferred master = no</B +>preferred master = auto</B ></P ></DD ><DT @@ -11116,15 +12887,31 @@ NAME="PRELOAD" >preload</DT ><DD ><P ->Synonym for <A -HREF="#AUTOSERVICES" -><TT +>This is a list of services that you want to be + automatically added to the browse lists. This is most useful + for homes and printers services that would otherwise not be + visible.</P +><P +>Note that if you just want all printers in your + printcap file loaded then the <A +HREF="#LOADPRINTERS" +> <TT CLASS="PARAMETER" ><I -> auto services</I +>load printers</I ></TT ></A ->.</P +> option is easier.</P +><P +>Default: <I +CLASS="EMPHASIS" +>no preloaded services</I +></P +><P +>Example: <B +CLASS="COMMAND" +>preload = fred lp colorlp</B +></P ></DD ><DT ><A @@ -11140,7 +12927,7 @@ HREF="#DEFAULTCASE" ><TT CLASS="PARAMETER" ><I ->derault case +>default case </I ></TT ></A @@ -11154,7 +12941,7 @@ CLASS="COMMAND" >See the section on <A HREF="#AEN201" >NAME - MANGLING"</A + MANGLING</A > for a fuller discussion.</P ></DD ><DT @@ -11236,7 +13023,7 @@ CLASS="PARAMETER" printable service nor a global print command, spool files will be created but not processed and (most importantly) not removed.</P ><P ->Note that printing may fail on some UNIXs from the +>Note that printing may fail on some UNIXes from the <TT CLASS="CONSTANT" >nobody</TT @@ -11381,29 +13168,6 @@ CLASS="PARAMETER" ></DD ><DT ><A -NAME="PRINTERADMIN" -></A ->printer admin (S)</DT -><DD -><P ->This is a list of users that can do anything to - printers via the remote administration interfaces offered by MSRPC - (usually using a NT workstation). Note that the root user always - has admin rights.</P -><P ->Default: <B -CLASS="COMMAND" ->printer admin = <empty string></B -> - </P -><P ->Example: <B -CLASS="COMMAND" ->printer admin = admin, @staff</B -></P -></DD -><DT -><A NAME="PRINTCAPNAME" ></A >printcap name (G)</DT @@ -11489,30 +13253,25 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="PRINTER" +NAME="PRINTERADMIN" ></A ->printer (S)</DT +>printer admin (S)</DT ><DD ><P ->This parameter specifies the name of the printer - to which print jobs spooled through a printable service will be sent.</P -><P ->If specified in the [global] section, the printer - name given will be used for any printable service that does - not have its own printer name specified.</P +>This is a list of users that can do anything to + printers via the remote administration interfaces offered by MS-RPC + (usually using a NT workstation). Note that the root user always + has admin rights.</P ><P ->Default: <I -CLASS="EMPHASIS" ->none (but may be <TT -CLASS="CONSTANT" ->lp</TT -> - on many systems)</I -></P +>Default: <B +CLASS="COMMAND" +>printer admin = <empty string></B +> + </P ><P >Example: <B CLASS="COMMAND" ->printer name = laserwriter</B +>printer admin = admin, @staff</B ></P ></DD ><DT @@ -11522,9 +13281,26 @@ NAME="PRINTERDRIVER" >printer driver (S)</DT ><DD ><P +><I +CLASS="EMPHASIS" +>Note :</I +>This is a depreciated + parameter and will be removed in the next major release + following version 2.2. Please see the instructions in + <TT +CLASS="FILENAME" +>PRINTER_DRIVER2.txt</TT +> in the <TT +CLASS="FILENAME" +>docs + </TT +> of the Samba distribution for more information + on the new method of loading printer drivers onto a Samba server. + </P +><P >This option allows you to control the string that clients receive when they ask the server for the printer driver - associated with a printer. If you are using Windows95 or WindowsNT + associated with a printer. If you are using Windows95 or Windows NT then you can use this to automate the setup of printers on your system.</P ><P @@ -11541,7 +13317,7 @@ CLASS="PARAMETER" ></A > option set and the client will give you a list of printer drivers. The appropriate strings are - shown in a scrollbox after you have chosen the printer manufacturer.</P + shown in a scroll box after you have chosen the printer manufacturer.</P ><P >See also <A HREF="#PRINTERDRIVERFILE" @@ -11566,6 +13342,23 @@ NAME="PRINTERDRIVERFILE" >printer driver file (G)</DT ><DD ><P +><I +CLASS="EMPHASIS" +>Note :</I +>This is a depreciated + parameter and will be removed in the next major release + following version 2.2. Please see the instructions in + <TT +CLASS="FILENAME" +>PRINTER_DRIVER2.txt</TT +> in the <TT +CLASS="FILENAME" +>docs + </TT +> of the Samba distribution for more information + on the new method of loading printer drivers onto a Samba server. + </P +><P >This parameter tells Samba where the printer driver definition file, used when serving drivers to Windows 95 clients, is to be found. If this is not set, the default is :</P @@ -11624,6 +13417,23 @@ NAME="PRINTERDRIVERLOCATION" >printer driver location (S)</DT ><DD ><P +><I +CLASS="EMPHASIS" +>Note :</I +>This is a depreciated + parameter and will be removed in the next major release + following version 2.2. Please see the instructions in + <TT +CLASS="FILENAME" +>PRINTER_DRIVER2.txt</TT +> in the <TT +CLASS="FILENAME" +>docs + </TT +> of the Samba distribution for more information + on the new method of loading printer drivers onto a Samba server. + </P +><P >This parameter tells clients of a particular printer share where to find the printer driver files for the automatic installation of drivers for Windows 95 machines. If Samba is set up @@ -11673,12 +13483,40 @@ NAME="PRINTERNAME" >printer name (S)</DT ><DD ><P +>This parameter specifies the name of the printer + to which print jobs spooled through a printable service will be sent.</P +><P +>If specified in the [global] section, the printer + name given will be used for any printable service that does + not have its own printer name specified.</P +><P +>Default: <I +CLASS="EMPHASIS" +>none (but may be <TT +CLASS="CONSTANT" +>lp</TT +> + on many systems)</I +></P +><P +>Example: <B +CLASS="COMMAND" +>printer name = laserwriter</B +></P +></DD +><DT +><A +NAME="PRINTER" +></A +>printer (S)</DT +><DD +><P >Synonym for <A -HREF="#PRINTER" +HREF="#PRINTERNAME" ><TT CLASS="PARAMETER" ><I -> printer</I +> printer name</I ></TT ></A >.</P @@ -11773,107 +13611,20 @@ HREF="#AEN78" ></DD ><DT ><A -NAME="PRIVATEDIR" +NAME="PROTOCOL" ></A ->private dir(G)</DT +>protocol (G)</DT ><DD ><P ->The <TT +>Synonym for <A +HREF="#MAXPROTOCOL" +> <TT CLASS="PARAMETER" ><I ->private dir</I +>max protocol</I ></TT -> parameter - allows an administator to define a directory path used to hold the - various databases Samba will use to store things like a the machine - trust account information when acting as a domain member (i.e. where - the secrets.tdb file will be located), where the passdb.tbd file - will stored in the case of using the experiemental tdbsam support, - etc...</P -><P ->Default: <B -CLASS="COMMAND" ->private dir = <compile time location - of smbpasswd></B -></P -><P ->Example: <B -CLASS="COMMAND" ->private dir = /etc/smbprivate</B -></P -></DD -><DT -><A -NAME="PROTOCOL" ></A ->protocol (G)</DT -><DD -><P ->The value of the parameter (a string) is the highest - protocol level that will be supported by the server.</P -><P ->Possible values are :</P -><P -></P -><UL -><LI -><P -><TT -CLASS="CONSTANT" ->CORE</TT ->: Earliest version. No - concept of user names.</P -></LI -><LI -><P -><TT -CLASS="CONSTANT" ->COREPLUS</TT ->: Slight improvements on - CORE for efficiency.</P -></LI -><LI -><P -><TT -CLASS="CONSTANT" ->LANMAN1</TT ->: First <I -CLASS="EMPHASIS" -> modern</I -> version of the protocol. Long filename - support.</P -></LI -><LI -><P -><TT -CLASS="CONSTANT" ->LANMAN2</TT ->: Updates to Lanman1 protocol. - </P -></LI -><LI -><P -><TT -CLASS="CONSTANT" ->NT1</TT ->: Current up to date version of - the protocol. Used by Windows NT. Known as CIFS.</P -></LI -></UL -><P ->Normally this option should not be set as the automatic - negotiation phase in the SMB protocol takes care of choosing - the appropriate protocol.</P -><P ->Default: <B -CLASS="COMMAND" ->protocol = NT1</B -></P -><P ->Example: <B -CLASS="COMMAND" ->protocol = LANMAN1</B -></P +>.</P ></DD ><DT ><A @@ -12299,10 +14050,10 @@ NAME="RESTRICTANONYMOUS" but it doesn't. Setting it to true will force these anonymous connections to be denied, and the client will be required to always supply a username and password when connecting. Use of this parameter - is only recommened for homogenous NT client environments.</P + is only recommended for homogeneous NT client environments.</P ><P >This parameter makes the use of macro expansions that rely - on the username (%U, %G, etc) consistant. NT 4.0 + on the username (%U, %G, etc) consistent. NT 4.0 likes to use anonymous connections when refreshing the share list, and this is a way to work around that.</P ><P @@ -12452,6 +14203,12 @@ CLASS="PARAMETER" ></TT ></A >.</P +><P +>Default: <B +CLASS="COMMAND" +>root postexec = <empty string> + </B +></P ></DD ><DT ><A @@ -12467,8 +14224,8 @@ CLASS="PARAMETER" ></TT > parameter except that the command is run as root. This - is useful for mounting filesystems - (such as cdroms) after a connection is closed.</P + is useful for mounting filesystems (such as cdroms) after a + connection is closed.</P ><P >See also <A HREF="#PREEXEC" @@ -12487,6 +14244,12 @@ CLASS="PARAMETER" ></TT ></A >.</P +><P +>Default: <B +CLASS="COMMAND" +>root preexec = <empty string> + </B +></P ></DD ><DT ><A @@ -12520,6 +14283,11 @@ CLASS="PARAMETER" ></TT ></A >.</P +><P +>Default: <B +CLASS="COMMAND" +>root preexec close = no</B +></P ></DD ><DT ><A @@ -12631,7 +14399,7 @@ CLASS="PARAMETER" >The different settings will now be explained.</P ><P ><A -NAME="SECURITYEQUALSHARE" +NAME="SECURITYEQUALSSHARE" ></A ><I CLASS="EMPHASIS" @@ -12787,7 +14555,7 @@ HREF="#AEN234" >.</P ><P ><A -NAME="SECURITYEQUALUSER" +NAME="SECURITYEQUALSUSER" ></A ><I CLASS="EMPHASIS" @@ -12871,7 +14639,7 @@ HREF="#AEN234" >.</P ><P ><A -NAME="SECURITYEQUALSERVER" +NAME="SECURITYEQUALSSERVER" ></A ><I CLASS="EMPHASIS" @@ -13313,45 +15081,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="SHAREDMEMSIZE" -></A ->shared mem size (G)</DT -><DD -><P ->It specifies the size of the shared memory (in - bytes) to use between <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> - processes. This parameter defaults to one megabyte of shared - memory. It is possible that if you have a large erver with many - files open simultaneously that you may need to increase this - parameter. Signs that this parameter is set too low are users - reporting strange problems trying to save files (locking errors) - and error messages in the smbd log looking like <I -CLASS="EMPHASIS" ->ERROR - smb_shm_alloc : alloc of XX bytes failed</I ->.</P -><P ->If your OS refuses the size that Samba asks for then - Samba will try a smaller size, reducing by a factor of 0.8 until - the OS accepts it.</P -><P ->Default: <B -CLASS="COMMAND" ->shared mem size = 1048576</B -></P -><P ->Example: <B -CLASS="COMMAND" ->shared mem size = 5242880 ; Set to 5mb for a - large number of files.</B -></P -></DD -><DT -><A NAME="SHORTPRESERVECASE" ></A >short preserve case (S)</DT @@ -13391,58 +15120,97 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="SMBPASSWDFILE" +NAME="SHOWADDPRINTERWIZARD" ></A ->smb passwd file (G)</DT +>show add printer wizard (G)</DT ><DD ><P ->This option sets the path to the encrypted - smbpasswd file. By default the path to the smbpasswd file - is compiled into Samba.</P +>With the introduction of MS-RPC based printing support + for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will + appear on Samba hosts in the share listing. Normally this folder will + contain an icon for the MS Add Printer Wizard (APW). However, it is + possible to disable this feature regardless of the level of privilege + of the connected user.</P ><P ->Default: <B -CLASS="COMMAND" ->smb passwd file= <compiled - default></B +>Under normal circumstances, the Windows NT/2000 client will + open a handle on the printer server with OpenPrinterEx() asking for + Administrator privileges. If the user does not have administrative + access on the print server (i.e is not root or a member of the + <TT +CLASS="PARAMETER" +><I +>printer admin</I +></TT +> group), the OpenPrinterEx() + call fails and the clients another open call with a request for + a lower privilege level. This should succeed, however the APW + icon will not be displayed.</P +><P +>Disabling the <TT +CLASS="PARAMETER" +><I +>show add printer wizard</I +></TT +> + parameter will always cause the OpenPrinterEx() on the server + to fail. Thus the APW icon will never be displayed. <I +CLASS="EMPHASIS" +> Note :</I +>This does not prevent the same user from having + administrative privilege on an individual printer.</P +><P +>See also <A +HREF="#ADDPRINTERCOMMAND" +><TT +CLASS="PARAMETER" +><I +>addprinter + command</I +></TT +></A +>, <A +HREF="#DELETEPRINTERCOMMAND" +> <TT +CLASS="PARAMETER" +><I +>deleteprinter command</I +></TT +></A +>, <A +HREF="#PRINTERADMIN" +><TT +CLASS="PARAMETER" +><I +>printer admin</I +></TT +></A ></P ><P ->Example: <B +>Default :<B CLASS="COMMAND" ->smb passwd file = /usr/samba/private/smbpasswd - </B +>show add printer wizard = yes</B ></P ></DD ><DT ><A -NAME="SMBRUN" +NAME="SMBPASSWDFILE" ></A ->smbrun (G)</DT +>smb passwd file (G)</DT ><DD ><P ->This sets the full path to the <B -CLASS="COMMAND" ->smbrun - </B -> binary. This defaults to the value in the <TT -CLASS="FILENAME" -> Makefile</TT ->.</P -><P ->You must get this path right for many services - to work correctly.</P -><P ->You should not need to change this parameter so - long as Samba is installed correctly.</P +>This option sets the path to the encrypted + smbpasswd file. By default the path to the smbpasswd file + is compiled into Samba.</P ><P >Default: <B CLASS="COMMAND" ->smbrun=<compiled default> +>smb passwd file = ${prefix}/private/smbpasswd </B ></P ><P >Example: <B CLASS="COMMAND" ->smbrun = /usr/local/samba/bin/smbrun +>smb passwd file = /etc/samba/smbpasswd </B ></P ></DD @@ -14509,7 +16277,7 @@ CLASS="CONSTANT" > LOG_DEBUG</TT >.</P ><P ->This paramter sets the threshold for sending messages +>This parameter sets the threshold for sending messages to syslog. Only messages with debug level less than this value will be sent to syslog.</P ><P @@ -14661,6 +16429,42 @@ CLASS="PARAMETER" ></DD ><DT ><A +NAME="TOTALPRINTJOBS" +></A +>total print jobs (G)</DT +><DD +><P +>This parameter accepts an integer value which defines + a limit on the maximum number of print jobs that will be accepted + system wide at any given time. If a print job is submitted + by a client which will exceed this number, then smbd will return an + error indicating that no space is available on the server. The + default value of 0 means that no such limit exists. This parameter + can be used to prevent a server from exceeding its capacity and is + designed as a printing throttle. See also + <A +HREF="#MAXPRINTJOBS" +><TT +CLASS="PARAMETER" +><I +>max print jobs</I +></TT +></A +>. + </P +><P +>Default: <B +CLASS="COMMAND" +>total print jobs = 0</B +></P +><P +>Example: <B +CLASS="COMMAND" +>total print jobs = 5000</B +></P +></DD +><DT +><A NAME="UNIXPASSWORDSYNC" ></A >unix password sync (G)</DT @@ -14709,23 +16513,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="UNIXREALNAME" -></A ->unix realname (G)</DT -><DD -><P ->This boolean parameter when set causes samba - to supply the real name field from the unix password file to - the client. This isuseful for setting up mail clients and WWW - browsers on systems used by more than one person.</P -><P ->Default: <B -CLASS="COMMAND" ->unix realname = no</B -></P -></DD -><DT -><A NAME="UPDATEENCRYPTED" ></A >update encrypted (G)</DT @@ -14928,7 +16715,7 @@ CLASS="PARAMETER" of all users in the netgroup group of that name.</P ><P >Note that searching though a groups database can take - quite some time, snd some clients may time out during the + quite some time, and some clients may time out during the search.</P ><P >See the section <A @@ -14941,7 +16728,7 @@ HREF="#AEN234" >Default: <B CLASS="COMMAND" >The guest account if a guest service, - else the name of the service.</B + else <empty string>.</B ></P ><P >Examples:<B @@ -14965,7 +16752,7 @@ NAME="USERNAMELEVEL" ><P >If this parameter is set to non-zero the behavior changes. This parameter is a number that specifies the number of uppercase - combinations to try whilst trying to determine the UNIX user name. The + combinations to try while trying to determine the UNIX user name. The higher the number the more combinations will be tried, but the slower the discovery of usernames will be. Use this parameter when you have strange usernames on your UNIX machine, such as <TT @@ -15197,99 +16984,6 @@ CLASS="EMPHASIS" ></DD ><DT ><A -NAME="WINBINDCACHETIME" -></A ->winbind cache time</DT -><DD -><P -><I -CLASS="EMPHASIS" ->NOTE:</I -> this parameter is only - available in Samba 3.0.</P -><P ->This parameter specifies the number of seconds the - <A -HREF="winbindd.8.html" -TARGET="_top" ->winbindd(8)</A -> daemon will cache - user and group information before querying a Windows NT server - again.</P -><P ->Default: <B -CLASS="COMMAND" ->winbind cache type = 15</B -></P -></DD -><DT -><A -NAME="WINBINDGID" -></A ->winbind gid</DT -><DD -><P -><I -CLASS="EMPHASIS" ->NOTE:</I -> this parameter is only - available in Samba 3.0.</P -><P ->The winbind gid parameter specifies the range of group - ids that are allocated by the <A -HREF="winbindd.8.html" -TARGET="_top" -> winbindd(8)</A -> daemon. This range of group ids should have no - existing local or nis groups within it as strange conflicts can - occur otherwise.</P -><P ->Default: <B -CLASS="COMMAND" ->winbind gid = <empty string> - </B -></P -><P ->Example: <B -CLASS="COMMAND" ->winbind gid = 10000-20000</B -></P -></DD -><DT -><A -NAME="WINBINDUID" -></A ->winbind uid</DT -><DD -><P -><I -CLASS="EMPHASIS" ->NOTE:</I -> this parameter is only - available in Samba 3.0.</P -><P ->The winbind gid parameter specifies the range of group - ids that are allocated by the <A -HREF="winbindd.8.html" -TARGET="_top" -> winbindd(8)</A -> daemon. This range of ids should have no - existing local or nis users within it as strange conflicts can - occur otherwise.</P -><P ->Default: <B -CLASS="COMMAND" ->winbind uid = <empty string> - </B -></P -><P ->Example: <B -CLASS="COMMAND" ->winbind uid = 10000-20000</B -></P -></DD -><DT -><A NAME="VALIDCHARS" ></A >valid chars (G)</DT @@ -15603,6 +17297,49 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="VFSOBJECT" +></A +>vfs object (S)</DT +><DD +><P +>This parameter specifies a shared object file that + is used for Samba VFS I/O operations. By default, normal + disk I/O operations are used but these can be overloaded + with a VFS object. The Samba VFS layer is new to Samba 2.2 and + must be enabled at compile time with --with-vfs.</P +><P +>Default : <I +CLASS="EMPHASIS" +>no value</I +></P +></DD +><DT +><A +NAME="VFSOPTIONS" +></A +>vfs options (S)</DT +><DD +><P +>This parameter allows parameters to be passed + to the vfs layer at initialisation time. The Samba VFS layer + is new to Samba 2.2 and must be enabled at compile time + with --with-vfs. See also <A +HREF="#VFSOBJECT" +><TT +CLASS="PARAMETER" +><I +> vfs object</I +></TT +></A +>.</P +><P +>Default : <I +CLASS="EMPHASIS" +>no value</I +></P +></DD +><DT +><A NAME="VOLUME" ></A >volume (S)</DT @@ -15641,66 +17378,141 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="WINSPROXY" +NAME="WINBINDCACHETIME" ></A ->wins proxy (G)</DT +>winbind cache time</DT ><DD ><P ->This is a boolean that controls if <A -HREF="nmbd.8.html" +><I +CLASS="EMPHASIS" +>NOTE:</I +> this parameter is only + available in Samba 3.0.</P +><P +>This parameter specifies the number of seconds the + <A +HREF="winbindd.8.html" TARGET="_top" ->nmbd(8)</A -> will respond to broadcast name - queries on behalf of other hosts. You may need to set this - to <TT -CLASS="CONSTANT" ->yes</TT -> for some older clients.</P +>winbindd(8)</A +> daemon will cache + user and group information before querying a Windows NT server + again.</P ><P >Default: <B CLASS="COMMAND" ->wins proxy = no</B +>winbind cache type = 15</B ></P ></DD ><DT ><A -NAME="WINSSERVER" +NAME="WINBINDGID" ></A ->wins server (G)</DT +>winbind gid</DT ><DD ><P ->This specifies the IP address (or DNS name: IP - address for preference) of the WINS server that <A -HREF="nmbd.8.html" +><I +CLASS="EMPHASIS" +>NOTE:</I +> this parameter is only + available in Samba 3.0.</P +><P +>The winbind gid parameter specifies the range of group + ids that are allocated by the <A +HREF="winbindd.8.html" TARGET="_top" -> nmbd(8)</A -> should register with. If you have a WINS server on - your network then you should set this to the WINS server's IP.</P +> winbindd(8)</A +> daemon. This range of group ids should have no + existing local or nis groups within it as strange conflicts can + occur otherwise.</P ><P ->You should point this at your WINS server if you have a - multi-subnetted network.</P +>Default: <B +CLASS="COMMAND" +>winbind gid = <empty string> + </B +></P +><P +>Example: <B +CLASS="COMMAND" +>winbind gid = 10000-20000</B +></P +></DD +><DT +><A +NAME="WINBINDSEPARATOR" +></A +>winbind separator</DT +><DD ><P ><I CLASS="EMPHASIS" ->NOTE</I ->. You need to set up Samba to point - to a WINS server if you have multiple subnets and wish cross-subnet - browsing to work correctly.</P +>NOTE:</I +> this parameter is only + available in Samba 3.0.</P ><P ->See the documentation file <TT +>This parameter allows an admin to define the character + used when listing a username of the form of <TT +CLASS="REPLACEABLE" +><I +>DOMAIN + </I +></TT +>\<TT +CLASS="REPLACEABLE" +><I +>user</I +></TT +>. This parameter + is only applicable when using the <TT CLASS="FILENAME" ->BROWSING.txt</TT -> - in the docs/ directory of your Samba source distribution.</P +>pam_winbind.so</TT +> + and <TT +CLASS="FILENAME" +>nss_winbind.so</TT +> modules for UNIX services. + </P ><P ->Default: <I +>Example: <B +CLASS="COMMAND" +>winbind separator = \</B +></P +><P +>Example: <B +CLASS="COMMAND" +>winbind separator = +</B +></P +></DD +><DT +><A +NAME="WINBINDUID" +></A +>winbind uid</DT +><DD +><P +><I CLASS="EMPHASIS" ->not enabled</I +>NOTE:</I +> this parameter is only + available in Samba 3.0.</P +><P +>The winbind gid parameter specifies the range of group + ids that are allocated by the <A +HREF="winbindd.8.html" +TARGET="_top" +> winbindd(8)</A +> daemon. This range of ids should have no + existing local or nis users within it as strange conflicts can + occur otherwise.</P +><P +>Default: <B +CLASS="COMMAND" +>winbind uid = <empty string> + </B ></P ><P >Example: <B CLASS="COMMAND" ->wins server = 192.9.200.1</B +>winbind uid = 10000-20000</B ></P ></DD ><DT @@ -15770,6 +17582,70 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="WINSPROXY" +></A +>wins proxy (G)</DT +><DD +><P +>This is a boolean that controls if <A +HREF="nmbd.8.html" +TARGET="_top" +>nmbd(8)</A +> will respond to broadcast name + queries on behalf of other hosts. You may need to set this + to <TT +CLASS="CONSTANT" +>yes</TT +> for some older clients.</P +><P +>Default: <B +CLASS="COMMAND" +>wins proxy = no</B +></P +></DD +><DT +><A +NAME="WINSSERVER" +></A +>wins server (G)</DT +><DD +><P +>This specifies the IP address (or DNS name: IP + address for preference) of the WINS server that <A +HREF="nmbd.8.html" +TARGET="_top" +> nmbd(8)</A +> should register with. If you have a WINS server on + your network then you should set this to the WINS server's IP.</P +><P +>You should point this at your WINS server if you have a + multi-subnetted network.</P +><P +><I +CLASS="EMPHASIS" +>NOTE</I +>. You need to set up Samba to point + to a WINS server if you have multiple subnets and wish cross-subnet + browsing to work correctly.</P +><P +>See the documentation file <TT +CLASS="FILENAME" +>BROWSING.txt</TT +> + in the docs/ directory of your Samba source distribution.</P +><P +>Default: <I +CLASS="EMPHASIS" +>not enabled</I +></P +><P +>Example: <B +CLASS="COMMAND" +>wins server = 192.9.200.1</B +></P +></DD +><DT +><A NAME="WINSSUPPORT" ></A >wins support (G)</DT @@ -15807,7 +17683,7 @@ NAME="WORKGROUP" >This controls what workgroup your server will appear to be in when queried by clients. Note that this parameter also controls the Domain name used with the <A -HREF="#WORKGROUP" +HREF="#SECURITYEQUALSDOMAIN" ><B CLASS="COMMAND" >security=domain</B @@ -15844,6 +17720,47 @@ CLASS="PARAMETER" ></DD ><DT ><A +NAME="WRITECACHESIZE" +></A +>write cache size (S)</DT +><DD +><P +>If this integer parameter is set to non-zero value, + Samba will create an in-memory cache for each oplocked file + (it does <I +CLASS="EMPHASIS" +>not</I +> do this for + non-oplocked files). All writes that the client does not request + to be flushed directly to disk will be stored in this cache if possible. + The cache is flushed onto disk when a write comes in whose offset + would not fit into the cache or when the file is closed by the client. + Reads for the file are also served from this cache if the data is stored + within it.</P +><P +>This cache allows Samba to batch client writes into a more + efficient write size for RAID disks (ie. writes may be tuned to + be the RAID stripe size) and can improve performance on systems + where the disk subsystem is a bottleneck but there is free + memory for userspace programs.</P +><P +>The integer parameter specifies the size of this cache + (per oplocked file) in bytes.</P +><P +>Default: <B +CLASS="COMMAND" +>write cache size = 0</B +></P +><P +>Example: <B +CLASS="COMMAND" +>write cache size = 262144</B +></P +><P +>for a 256k cache size per file.</P +></DD +><DT +><A NAME="WRITELIST" ></A >write list (S)</DT @@ -15891,47 +17808,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="WRITECACHESIZE" -></A ->write cache size (S)</DT -><DD -><P ->This integer parameter (new with Samba 2.0.7) - if set to non-zero causes Samba to create an in-memory cache for - each oplocked file (it does <I -CLASS="EMPHASIS" ->not</I -> do this for - non-oplocked files). All writes that the client does not request - to be flushed directly to disk will be stored in this cache if possible. - The cache is flushed onto disk when a write comes in whose offset - would not fit into the cache or when the file is closed by the client. - Reads for the file are also served from this cache if the data is stored - within it.</P -><P ->This cache allows Samba to batch client writes into a more - efficient write size for RAID disks (ie. writes may be tuned to - be the RAID stripe size) and can improve performance on systems - where the disk subsystem is a bottleneck but there is free - memory for userspace programs.</P -><P ->The integer parameter specifies the size of this cache - (per oplocked file) in bytes.</P -><P ->Default: <B -CLASS="COMMAND" ->write cache size = 0</B -></P -><P ->Example: <B -CLASS="COMMAND" ->write cache size = 262144</B -></P -><P ->for a 256k cache size per file.</P -></DD -><DT -><A NAME="WRITEOK" ></A >write ok (S)</DT @@ -16008,7 +17884,7 @@ CLASS="COMMAND" ><DIV CLASS="REFSECT1" ><A -NAME="AEN5053" +NAME="AEN5643" ></A ><H2 >WARNINGS</H2 @@ -16038,7 +17914,7 @@ TARGET="_top" ><DIV CLASS="REFSECT1" ><A -NAME="AEN5059" +NAME="AEN5649" ></A ><H2 >VERSION</H2 @@ -16049,7 +17925,7 @@ NAME="AEN5059" ><DIV CLASS="REFSECT1" ><A -NAME="AEN5062" +NAME="AEN5652" ></A ><H2 >SEE ALSO</H2 @@ -16128,7 +18004,7 @@ CLASS="COMMAND" ><DIV CLASS="REFSECT1" ><A -NAME="AEN5082" +NAME="AEN5672" ></A ><H2 >AUTHOR</H2 |