summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security
diff options
context:
space:
mode:
Diffstat (limited to 'docs/smbdotconf/security')
-rw-r--r--docs/smbdotconf/security/passdbbackend.xml23
-rw-r--r--docs/smbdotconf/security/restrictanonymous.xml9
-rw-r--r--docs/smbdotconf/security/smbpasswdfile.xml8
-rw-r--r--docs/smbdotconf/security/usernamemap.xml8
4 files changed, 37 insertions, 11 deletions
diff --git a/docs/smbdotconf/security/passdbbackend.xml b/docs/smbdotconf/security/passdbbackend.xml
index d8fc6cd488..74f26b89ea 100644
--- a/docs/smbdotconf/security/passdbbackend.xml
+++ b/docs/smbdotconf/security/passdbbackend.xml
@@ -63,16 +63,27 @@
</para></listitem>
</itemizedlist>
+
</para>
-</description>
+ Examples of use are:
+<screen>
+passdb backend = tdbsam:/etc/samba/private/passdb.tdb \
+ smbpasswd:/etc/samba/smbpasswd
-<value type="default">smbpasswd</value>
+or
+
+passdb backend = ldapsam:ldaps://ldap.example.com
-<value type="example">tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd</value>
+or
-<value type="example">ldapsam:ldaps://ldap.example.com</value>
+passdb backend = ldapsam:"ldap://ldap-1.example.com \
+ ldap://ldap-2.example.com"
-<value type="example">ldapsam:"ldap://ldap-1.example.com ldap://ldap-2.example.com"</value>
+or
-<value type="example">mysql:my_plugin_args tdbsam</value>
+passdb backend = mysql:my_plugin_args tdbsam
+</screen>
+</description>
+
+<value type="default">smbpasswd</value>
</samba:parameter>
diff --git a/docs/smbdotconf/security/restrictanonymous.xml b/docs/smbdotconf/security/restrictanonymous.xml
index dad6846cee..a7aaa31b0b 100644
--- a/docs/smbdotconf/security/restrictanonymous.xml
+++ b/docs/smbdotconf/security/restrictanonymous.xml
@@ -7,9 +7,12 @@
<para>The setting of this parameter determines whether user and
group list information is returned for an anonymous connection.
and mirrors the effects of the
- <constant>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\RestrictAnonymous</constant> registry key in Windows
- 2000 and Windows NT. When set to 0, user and group list
- information is returned to anyone who asks. When set
+<screen>
+HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
+ Control\LSA\RestrictAnonymous
+</screen>
+ registry key in Windows 2000 and Windows NT. When set to 0, user
+ and group list information is returned to anyone who asks. When set
to 1, only an authenticated user can retrive user and
group list information. For the value 2, supported by
Windows 2000/XP and Samba, no anonymous connections are allowed at
diff --git a/docs/smbdotconf/security/smbpasswdfile.xml b/docs/smbdotconf/security/smbpasswdfile.xml
index 021aaf79e8..b21da8e1ae 100644
--- a/docs/smbdotconf/security/smbpasswdfile.xml
+++ b/docs/smbdotconf/security/smbpasswdfile.xml
@@ -6,8 +6,14 @@
<description>
<para>This option sets the path to the encrypted smbpasswd file. By
default the path to the smbpasswd file is compiled into Samba.</para>
+
+ <para>
+ An example of use is:
+<screen>
+smb passwd file = /etc/samba/smbpasswd
+</screen>
+ </para>
</description>
<value type="default">${prefix}/private/smbpasswd</value>
-<value type="example">/etc/samba/smbpasswd</value>
</samba:parameter>
diff --git a/docs/smbdotconf/security/usernamemap.xml b/docs/smbdotconf/security/usernamemap.xml
index 1ac393393b..1c76d31711 100644
--- a/docs/smbdotconf/security/usernamemap.xml
+++ b/docs/smbdotconf/security/usernamemap.xml
@@ -110,8 +110,14 @@ guest = *
to the fully qualified username (i.e. DOMAIN\user) only
after the user has been successfully authenticated.
</para>
+
+ <para>
+ An example of use is:
+<screen>
+username map = /usr/local/samba/lib/users.map
+</screen>
+ </para>
</description>
<value type="default"><comment>no username map</comment></value>
-<value type="example">/usr/local/samba/lib/users.map</value>
</samba:parameter>