From 99bde6889d3d8b7a9e950c86c30e82662e1dacdd Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Tue, 9 Sep 2003 02:58:53 +0000 Subject: syncing files from 3.0 into HEAD again (This used to be commit bca0bba209255d0effbae6a3d3b6d298f0952c3a) --- docs/docbook/manpages/editreg.1.xml | 9 +- docs/docbook/manpages/findsmb.1.xml | 9 +- docs/docbook/manpages/lmhosts.5.xml | 9 +- docs/docbook/manpages/log2pcap.1.xml | 138 +++++++++++++++ docs/docbook/manpages/mount.cifs.8.xml | 302 +++++++++++++++++++++++++++++++++ docs/docbook/manpages/net.8.xml | 73 ++++---- docs/docbook/manpages/nmbd.8.xml | 30 ++-- docs/docbook/manpages/nmblookup.1.xml | 9 +- docs/docbook/manpages/ntlm_auth.1.xml | 9 +- docs/docbook/manpages/pdbedit.8.xml | 11 +- docs/docbook/manpages/profiles.1.xml | 9 +- docs/docbook/manpages/rpcclient.1.xml | 12 +- docs/docbook/manpages/samba.7.xml | 17 +- docs/docbook/manpages/smbcacls.1.xml | 13 +- docs/docbook/manpages/smbclient.1.xml | 26 +-- docs/docbook/manpages/smbcontrol.1.xml | 9 +- docs/docbook/manpages/smbcquotas.1.xml | 11 +- docs/docbook/manpages/smbd.8.xml | 27 ++- docs/docbook/manpages/smbmnt.8.xml | 9 +- docs/docbook/manpages/smbmount.8.xml | 9 +- docs/docbook/manpages/smbpasswd.5.xml | 17 +- docs/docbook/manpages/smbpasswd.8.xml | 16 +- docs/docbook/manpages/smbsh.1.xml | 11 +- docs/docbook/manpages/smbspool.8.xml | 9 +- docs/docbook/manpages/smbstatus.1.xml | 10 +- docs/docbook/manpages/smbtar.1.xml | 15 +- docs/docbook/manpages/smbtree.1.xml | 9 +- docs/docbook/manpages/smbumount.8.xml | 9 +- docs/docbook/manpages/swat.8.xml | 9 +- docs/docbook/manpages/tdbbackup.8.xml | 9 +- docs/docbook/manpages/testparm.1.xml | 11 +- docs/docbook/manpages/testprns.1.xml | 11 +- docs/docbook/manpages/vfstest.1.xml | 9 +- docs/docbook/manpages/wbinfo.1.xml | 246 ++++++++++++++++----------- docs/docbook/manpages/winbindd.8.xml | 53 +++--- 35 files changed, 812 insertions(+), 373 deletions(-) create mode 100644 docs/docbook/manpages/log2pcap.1.xml create mode 100644 docs/docbook/manpages/mount.cifs.8.xml (limited to 'docs/docbook/manpages') diff --git a/docs/docbook/manpages/editreg.1.xml b/docs/docbook/manpages/editreg.1.xml index 3427552356..0a6b36bcf0 100644 --- a/docs/docbook/manpages/editreg.1.xml +++ b/docs/docbook/manpages/editreg.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/findsmb.1.xml b/docs/docbook/manpages/findsmb.1.xml index e5ec26c4df..8a89b2ce24 100644 --- a/docs/docbook/manpages/findsmb.1.xml +++ b/docs/docbook/manpages/findsmb.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/lmhosts.5.xml b/docs/docbook/manpages/lmhosts.5.xml index 12d69a7e56..7e1988c121 100644 --- a/docs/docbook/manpages/lmhosts.5.xml +++ b/docs/docbook/manpages/lmhosts.5.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/log2pcap.1.xml b/docs/docbook/manpages/log2pcap.1.xml new file mode 100644 index 0000000000..2a336dc326 --- /dev/null +++ b/docs/docbook/manpages/log2pcap.1.xml @@ -0,0 +1,138 @@ + + %globalentities; +]> + + + + log2pcap + 1 + + + + + log2pcap + Extract network traces from Samba log files + + + + + log2pcap + -h + -q + logfile + pcap_file + + + + + DESCRIPTION + + This tool is part of the Samba + 7 suite. + + log2pcap reads in a + samba log file and generates a pcap file (readable + by most sniffers, such as ethereal or tcpdump) based on the packet + dumps in the log file. + + The log file must have a log level + of at least 5 to get the SMB header/parameters + right, 10 to get the first 512 data bytes of the + packet and 50 to get the whole packet. + + + + + OPTIONS + + + + -h + If this parameter is + specified the output file will be a + hex dump, in a format that is readable + by the text2pcap utility. + + + + -q + Be quiet. No warning messages about missing + or incomplete data will be given. + + + + logfile + + Samba log file. log2pcap will try to read the log from stdin + if the log file is not specified. + + + + + pcap_file + + Name of the output file to write the pcap (or hexdump) data to. + If this argument is not specified, output data will be written + to stdout. + + + + &stdarg.help; + + + + + + EXAMPLES + + Extract all network traffic from all samba log files: + + + $ cat /var/log/* | log2pcap > trace.pcap + + + Convert to pcap using text2pcap: + + + $ log2pcap -h samba.log | text2pcap -T 139,139 - trace.pcap + + + + + VERSION + + This man page is correct for version 3.0 of the Samba suite. + + + + BUGS + + Only SMB data is extracted from the samba logs, no LDAP, + NetBIOS lookup or other data. + + The generated TCP and IP headers don't contain a valid + checksum. + + + + + + SEE ALSO + text2pcap + 1, ethereal1 + + + + AUTHOR + + The original Samba software and related utilities + were created by Andrew Tridgell. Samba is now developed + by the Samba Team as an Open Source project similar + to the way the Linux kernel is developed. + + This manpage was written by Jelmer Vernooij. + + + diff --git a/docs/docbook/manpages/mount.cifs.8.xml b/docs/docbook/manpages/mount.cifs.8.xml new file mode 100644 index 0000000000..99bd6b23d5 --- /dev/null +++ b/docs/docbook/manpages/mount.cifs.8.xml @@ -0,0 +1,302 @@ + + %globalentities; +]> + + + + mount.cifs + 8 + + + + + mount.cifs + mount using the Common Internet File System (CIFS) + + + + + + mount.cifs + service + mount-point + -o options + + + + + DESCRIPTION + + This tool is part of the Samba + 7 suite. + + mount.cifs mounts a Linux CIFS filesystem. It +is usually invoked indirectly by +the mount8 command when using the +"-t cifs" option. This command only works in Linux, and the kernel must +support the cifs filesystem. The CIFS protocol is the successor to the +SMB protocol and is supported by most Windows servers and many other +commercial servers and Network Attached Storage appliances as well as +by the popular Open Source server Samba. + + + + The mount.cifs utility attaches the UNC name (exported network resource) to + the local directory mount-point. It is possible to set the mode for mount.cifs to +setuid root to allow non-root users to mount shares to directories for which they +have write permission. + + + + Options to mount.cifs are specified as a comma-separated +list of key=value pairs. It is possible to send options other +than those listed here, assuming that cifs supports them. If +you get mount failures, check your kernel log for errors on +unknown options. + + + mount.cifs is a daemon. After mounting it keeps running until + the mounted resource is unmounted (usually via the umount utility) + + + + + + OPTIONS + + username=arg + + specifies the username to connect as. If + this is not given, then the environment variable USER is used. This option can also take the +form "user%password" or "user/workgroup" or +"user/workgroup%password" to allow the password and workgroup +to be specified as part of the username. + + + + password=arg + + specifies the CIFS password. If this +option is not given then the environment variable +PASSWD is used. If it can find +no password mount.cifs will prompt +for a passeword, unless the guest option is +given. + + +Note that password which contain the arguement delimiter +character (i.e. a comma ',') will failed to be parsed correctly +on the command line. However, the same password defined +in the PASSWD environment variable or a credentials file (see +below) will be read correctly. + + + + credentials=filename + + + specifies a file that contains a username + and/or password. The format of the file is: + + + +.nf + username = value + password = value +.fi + + + +This is preferred over having passwords in plaintext in a +shared file, such as /etc/fstab. Be sure to protect any +credentials file properly. + + + + + uid=arg + + sets the uid that will own all files on + the mounted filesystem. + It may be specified as either a username or a numeric uid. + This parameter is ignored when the target server supports + the CIFS Unix extensions. + + + + gid=arg + + sets the gid that will own all files on +the mounted filesystem. +It may be specified as either a groupname or a numeric +gid. This parameter is ignored when the target server supports +the CIFS Unix extensions. + + + + + port=arg + + sets the port number on the server to attempt to contact to negotiate +CIFS support. If the CIFS server is not listening on this port or +if it is not specified, the default ports will be tried i.e. +port 445 is tried and if no response then port 139 is tried. + + + + + file_mode=arg + + If the server does not support the CIFS Unix extensions this + overrides default file mode which will be used locally. + + + + dir_mode=arg + + If the server does not support the CIFS Unix extensions this + overrides the default mode for directories. + + + + ip=arg + + sets the destination host or IP address. + + + + domain=arg + + sets the domain (workgroup) of the user + + + + guest + + don't prompt for a password + + + + + ro + + mount read-only + + + + + rw + mount read-write + + + + rsize + default network read size + + + + wsize + + default network write size + + + + + + + ENVIRONMENT VARIABLES + + + The variable USER may contain the username of the +person using the client. This information is used only if the +protocol level is high enough to support session-level +passwords. The variable can be used to set both username and +password by using the format username%password. + + + + The variable PASSWD may contain the password of the +person using the client. This information is used only if the +protocol level is high enough to support session-level +passwords. + + + + The variable PASSWD_FILE may contain the pathname +of a file to read the password from. A single line of input is +read and used as the password. + + + + + + NOTES + + This command may be used only by root. + + + + CONFIGURATION + +The primary mechanism for making configuration changes and for reading +debug information for the cifs vfs is via the Linux /proc filesystem. +In the directory /proc/fs/cifs are various configuration files and +pseudo files which can display debug information. For more +information see the kernel file fs/cifs/README + + + + + BUGS + + Passwords and other options containing , can not be handled. +For passwords an alternative way of passing them is in a credentials +file or in the PASSWD environment. + + The credentials file does not handle usernames or passwords with + leading space. + + +Note that the typical response to a bug report is suggestion +to try the latest version first. So please try doing that first, +and always include which versions you use of relevant software +when reporting bugs (minimum: samba, kernel, distribution) + + + + + + + VERSION + + This man page is correct for version 3.0 of + the Samba suite. + + + + SEE ALSO + + Documentation/filesystems/cifs.txt and fs/cifs/README in the linux kernel + source tree may contain additional options and information. + + + + + AUTHOR + + Steve French + + The syntax and manpage were loosely based on that of smbmount. It + was converted to Docbook/XML by Jelmer Vernooij. + + The current maintainer of the Linux cifs vfs and the userspace + tool mount.cifs is Steve French. + The SAMBA Mailing list + is the preferred place to ask questions regarding these programs. + + + + + diff --git a/docs/docbook/manpages/net.8.xml b/docs/docbook/manpages/net.8.xml index 9787f4e0b0..21dc54d452 100644 --- a/docs/docbook/manpages/net.8.xml +++ b/docs/docbook/manpages/net.8.xml @@ -1,34 +1,8 @@ - - %globalentities; - - - --r - -Reboot after shutdown. - - - - --f - -Force shutting down all applications. - - - - --t timeout - -Timeout before system will be shut down. An interactive -user of the system can use this time to cancel the shutdown. - -'> + + %globalentities; ]> - @@ -157,6 +131,20 @@ user of the system can use this time to cancel the shutdown. COMMANDS + +CHANGESECRETPW + +This command allows the Samba machine account password to be set from an external application +to a machine account password that has already been stored in Active Directory. DO NOT USE this command +unless you know exactly what you are doing. The use of this command requires that the force flag (-f) +be used also. There will be NO command prompt. Whatever information is piped into stdin, either by +typing at the command line or otherwise, will be stored as the literal machine password. Do NOT use +this without care and attention as it will overwrite a legitimate machine password without warning. +YOU HAVE BEEN WARNED. + + + + TIME @@ -175,7 +163,7 @@ displays the time on the remote server. TIME SYSTEM - Displays the time on the remote server in a format ready for /bin/date +Displays the time on the remote server in a format ready for /bin/date @@ -754,7 +742,28 @@ Interdomain account must already be created on the remote PDC. Shut down the remote server. -&net.arg.shutdown; + +-r + +Reboot after shutdown. + + + + +-f + +Force shutting down all applications. + + + + +-t timeout + +Timeout before system will be shut down. An interactive +user of the system can use this time to cancel the shutdown. + +'> + -C message Display the specified message on the screen to diff --git a/docs/docbook/manpages/nmbd.8.xml b/docs/docbook/manpages/nmbd.8.xml index a98d189839..056c12e342 100644 --- a/docs/docbook/manpages/nmbd.8.xml +++ b/docs/docbook/manpages/nmbd.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -134,8 +133,7 @@ NetBIOS lmhosts file. The lmhosts file is a list of NetBIOS names to IP addresses that is loaded by the nmbd server and used via the name - resolution mechanism name resolve - order described in smb.conf + resolution mechanism name resolve order described in smb.conf 5 to resolve any NetBIOS name queries needed by the server. Note that the contents of this file are NOT @@ -174,9 +172,7 @@ If the server is to be run by the inetd meta-daemon, this file must contain suitable startup information for the - meta-daemon. See the install document - for details. + meta-daemon. @@ -187,9 +183,7 @@ If running the server as a daemon at startup, this file will need to contain an appropriate startup - sequence for the server. See the "How to Install and Test SAMBA" document - for details. + sequence for the server. @@ -198,8 +192,7 @@ meta-daemon inetd, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp). - See the "How to Install and Test SAMBA" - document for details. + @@ -212,7 +205,7 @@ and /etc/samba/smb.conf. When run as a WINS server (see the - wins support + wins support parameter in the smb.conf 5 man page), nmbd @@ -221,8 +214,7 @@ wherever Samba was configured to install itself. If nmbd is acting as a - browse master (see the local master + browse master (see the local master parameter in the smb.conf 5 man page, nmbd will store the browsing database in the file browse.dat @@ -278,7 +270,7 @@ 1, and the Internet RFC's rfc1001.txt, rfc1002.txt. In addition the CIFS (formerly SMB) specification is available - as a link from the Web page + as a link from the Web page http://samba.org/cifs/. diff --git a/docs/docbook/manpages/nmblookup.1.xml b/docs/docbook/manpages/nmblookup.1.xml index 3da0649dd5..14df0066f5 100644 --- a/docs/docbook/manpages/nmblookup.1.xml +++ b/docs/docbook/manpages/nmblookup.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/ntlm_auth.1.xml b/docs/docbook/manpages/ntlm_auth.1.xml index a37b5b3b7d..77794f0f3f 100644 --- a/docs/docbook/manpages/ntlm_auth.1.xml +++ b/docs/docbook/manpages/ntlm_auth.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/pdbedit.8.xml b/docs/docbook/manpages/pdbedit.8.xml index 8f7582dcb5..8647631f63 100644 --- a/docs/docbook/manpages/pdbedit.8.xml +++ b/docs/docbook/manpages/pdbedit.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -31,6 +30,7 @@ -p profile -a -m + -r -x -i passdb-backend -e passdb-backend @@ -40,6 +40,7 @@ -s configfile -P account-policy -C value + -c account-control diff --git a/docs/docbook/manpages/profiles.1.xml b/docs/docbook/manpages/profiles.1.xml index 1dbff39efa..3ae823f634 100644 --- a/docs/docbook/manpages/profiles.1.xml +++ b/docs/docbook/manpages/profiles.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/rpcclient.1.xml b/docs/docbook/manpages/rpcclient.1.xml index 688eef14e8..98795f1775 100644 --- a/docs/docbook/manpages/rpcclient.1.xml +++ b/docs/docbook/manpages/rpcclient.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -58,8 +57,7 @@ server NetBIOS name of Server to which to connect. The server can be any SMB/CIFS server. The name is - resolved using the - name resolve order line from smb.conf + resolved using the name resolve order line from smb.conf 5. diff --git a/docs/docbook/manpages/samba.7.xml b/docs/docbook/manpages/samba.7.xml index 1339f0bb87..35fd15dbf5 100644 --- a/docs/docbook/manpages/samba.7.xml +++ b/docs/docbook/manpages/samba.7.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -240,6 +239,14 @@ + + log2pcap + 1 + log2pcap is a utility + for generating pcap trace files from Samba log + files. + + vfstest 1 diff --git a/docs/docbook/manpages/smbcacls.1.xml b/docs/docbook/manpages/smbcacls.1.xml index ab4fe517eb..78980a6aec 100644 --- a/docs/docbook/manpages/smbcacls.1.xml +++ b/docs/docbook/manpages/smbcacls.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -24,7 +23,7 @@ filename -D acls -M acls - -A acls + -a acls -S acls -C name -G name @@ -56,7 +55,7 @@ - -A acls + -a acls Add the ACLs specified to the ACL list. Existing access control entries are unchanged. diff --git a/docs/docbook/manpages/smbclient.1.xml b/docs/docbook/manpages/smbclient.1.xml index 8e52e878dd..d3b0bb45cd 100644 --- a/docs/docbook/manpages/smbclient.1.xml +++ b/docs/docbook/manpages/smbclient.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -221,23 +220,6 @@ - - -l logfilename - If specified, logfilename specifies a base filename - into which operational data from the running client will be - logged. - - The default base name is specified at compile time. - - The base name is used to generate actual log file names. - For example, if the name specified was "log", the debug file - would be log.client. - - The log file generated is never removed by the client. - - - - &stdarg.help; diff --git a/docs/docbook/manpages/smbcontrol.1.xml b/docs/docbook/manpages/smbcontrol.1.xml index 7bcb7420ba..af6054de58 100644 --- a/docs/docbook/manpages/smbcontrol.1.xml +++ b/docs/docbook/manpages/smbcontrol.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/smbcquotas.1.xml b/docs/docbook/manpages/smbcquotas.1.xml index 90166beaf1..53735b76d1 100644 --- a/docs/docbook/manpages/smbcquotas.1.xml +++ b/docs/docbook/manpages/smbcquotas.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -177,7 +176,7 @@ by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. - smbcacls was written by Stefan Metzmacher. + smbcquotas was written by Stefan Metzmacher. diff --git a/docs/docbook/manpages/smbd.8.xml b/docs/docbook/manpages/smbd.8.xml index 0566c67fcb..ded41f995f 100644 --- a/docs/docbook/manpages/smbd.8.xml +++ b/docs/docbook/manpages/smbd.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -144,8 +143,8 @@ file will be created for informational and debug messages from the running server. The log file generated is never removed by the server although - its size may be controlled by the max log size + its size may be controlled by the + max log size option in the smb.conf 5 file. Beware: If the directory specified does not exist, smbd @@ -192,8 +191,7 @@ If the server is to be run by the inetd meta-daemon, this file must contain suitable startup information for the - meta-daemon. See the "How to Install and Test SAMBA" - document for details. + meta-daemon. @@ -204,8 +202,7 @@ If running the server as a daemon at startup, this file will need to contain an appropriate startup - sequence for the server. See the "How to Install and Test SAMBA" - document for details. + sequence for the server. @@ -214,8 +211,7 @@ meta-daemon inetd, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp). - See the "How to Install and Test SAMBA" - document for details. + @@ -265,8 +261,7 @@ Samba uses PAM for authentication (when presented with a plaintext password), for account checking (is this account disabled?) and for session management. The degree too which samba supports PAM is restricted - by the limitations of the SMB protocol and the obey - pam restricions smb.conf + by the limitations of the SMB protocol and the obey pam restrictions smb.conf 5 paramater. When this is set, the following restrictions apply: @@ -352,7 +347,7 @@ 1, and the Internet RFC's rfc1001.txt, rfc1002.txt. In addition the CIFS (formerly SMB) specification is available - as a link from the Web page + as a link from the Web page http://samba.org/cifs/. diff --git a/docs/docbook/manpages/smbmnt.8.xml b/docs/docbook/manpages/smbmnt.8.xml index 86596f3ded..0495fa5be0 100644 --- a/docs/docbook/manpages/smbmnt.8.xml +++ b/docs/docbook/manpages/smbmnt.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/smbmount.8.xml b/docs/docbook/manpages/smbmount.8.xml index f3f7d1a99b..0017c99cd5 100644 --- a/docs/docbook/manpages/smbmount.8.xml +++ b/docs/docbook/manpages/smbmount.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/smbpasswd.5.xml b/docs/docbook/manpages/smbpasswd.5.xml index c3bd654564..cb6a6070bd 100644 --- a/docs/docbook/manpages/smbpasswd.5.xml +++ b/docs/docbook/manpages/smbpasswd.5.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -140,9 +139,9 @@ account has no password (the passwords in the fields LANMAN Password Hash and NT Password Hash are ignored). Note that this will only allow users to log on with no password if the - null passwords parameter is set in the smb.conf - 5 config file. + null passwords parameter is set in the + smb.conf + 5 config file. D - This means the account is disabled and no SMB/CIFS logins will be allowed for this user. @@ -199,7 +198,7 @@ The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at + excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 diff --git a/docs/docbook/manpages/smbpasswd.8.xml b/docs/docbook/manpages/smbpasswd.8.xml index 37f617e46a..3ee3a9e12e 100644 --- a/docs/docbook/manpages/smbpasswd.8.xml +++ b/docs/docbook/manpages/smbpasswd.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -318,8 +317,7 @@ has been configured to use the experimental --with-ldapsam option. The -w switch is used to specify the password to be used with the - ldap admin - dn. Note that the password is stored in + ldap admin dn. Note that the password is stored in the secrets.tdb and is keyed off of the admin's DN. This means that if the value of ldap admin dn ever changes, the password will need to be @@ -370,9 +368,7 @@ allow "localhost" access to the smbd. In addition, the smbpasswd command is only useful if Samba - has been set up to use encrypted passwords. See the document - "LanMan and NT Password Encryption in Samba" in the docs directory for details - on how to do this. + has been set up to use encrypted passwords. diff --git a/docs/docbook/manpages/smbsh.1.xml b/docs/docbook/manpages/smbsh.1.xml index 1bd29917b9..73eb04d4c6 100644 --- a/docs/docbook/manpages/smbsh.1.xml +++ b/docs/docbook/manpages/smbsh.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -14,7 +13,7 @@ smbsh - Allows access to Windows NT filesystem + Allows access to remote SMB shares using UNIX commands diff --git a/docs/docbook/manpages/smbspool.8.xml b/docs/docbook/manpages/smbspool.8.xml index 340c7ffff2..ec62a0d5df 100644 --- a/docs/docbook/manpages/smbspool.8.xml +++ b/docs/docbook/manpages/smbspool.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/smbstatus.1.xml b/docs/docbook/manpages/smbstatus.1.xml index 657175bf48..1e96b39263 100644 --- a/docs/docbook/manpages/smbstatus.1.xml +++ b/docs/docbook/manpages/smbstatus.1.xml @@ -1,10 +1,8 @@ - - %globalentities; + + %globalentities; ]> - diff --git a/docs/docbook/manpages/smbtar.1.xml b/docs/docbook/manpages/smbtar.1.xml index 40c915f1f6..c773937844 100644 --- a/docs/docbook/manpages/smbtar.1.xml +++ b/docs/docbook/manpages/smbtar.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -222,13 +221,13 @@ by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. - Ricky Poulten +Ricky Poulten wrote the tar extension and this man page. The smbtar - script was heavily rewritten and improved by Martin Kraemer. Many thanks to everyone who suggested extensions, improvements, bug fixes, etc. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at + excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for diff --git a/docs/docbook/manpages/smbtree.1.xml b/docs/docbook/manpages/smbtree.1.xml index 05f0256b87..9ed2ed4ed8 100644 --- a/docs/docbook/manpages/smbtree.1.xml +++ b/docs/docbook/manpages/smbtree.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/smbumount.8.xml b/docs/docbook/manpages/smbumount.8.xml index 665ffdceb3..d8feb8e938 100644 --- a/docs/docbook/manpages/smbumount.8.xml +++ b/docs/docbook/manpages/smbumount.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/swat.8.xml b/docs/docbook/manpages/swat.8.xml index ad6829c3a6..c0579a9f1f 100644 --- a/docs/docbook/manpages/swat.8.xml +++ b/docs/docbook/manpages/swat.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/tdbbackup.8.xml b/docs/docbook/manpages/tdbbackup.8.xml index c8c5b7e33d..e5f060b101 100644 --- a/docs/docbook/manpages/tdbbackup.8.xml +++ b/docs/docbook/manpages/tdbbackup.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/testparm.1.xml b/docs/docbook/manpages/testparm.1.xml index 085a645a88..84ead17234 100644 --- a/docs/docbook/manpages/testparm.1.xml +++ b/docs/docbook/manpages/testparm.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -182,7 +181,7 @@ The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at + excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 diff --git a/docs/docbook/manpages/testprns.1.xml b/docs/docbook/manpages/testprns.1.xml index 2afeba22d3..50584f5a18 100644 --- a/docs/docbook/manpages/testprns.1.xml +++ b/docs/docbook/manpages/testprns.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -138,7 +137,7 @@ The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at + excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 diff --git a/docs/docbook/manpages/vfstest.1.xml b/docs/docbook/manpages/vfstest.1.xml index baf45fb0e4..28b543dd81 100644 --- a/docs/docbook/manpages/vfstest.1.xml +++ b/docs/docbook/manpages/vfstest.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> diff --git a/docs/docbook/manpages/wbinfo.1.xml b/docs/docbook/manpages/wbinfo.1.xml index 075ce140cc..728e4f166a 100644 --- a/docs/docbook/manpages/wbinfo.1.xml +++ b/docs/docbook/manpages/wbinfo.1.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -20,24 +19,31 @@ wbinfo - -u - -g - -N netbios-name + -a user%password + -c username + -C groupname + --domain domain -I ip - -n name -s sid + -u -U uid + -g + --get-auth-user -G gid - -S sid - -Y sid - -t -m - --sequence + -n name + -N netbios-name + -o user:group + -O user:group + -p -r user - -a user%password --set-auth-user user%password - --get-auth-user - -p + --sequence + -S sid + -t + -x username + -X groupname + -Y sid @@ -60,18 +66,36 @@ OPTIONS - + - -u - This option will list all users available - in the Windows NT domain for which the winbindd - 8 daemon is operating in. Users in all trusted domains - will also be listed. Note that this operation does not assign - user ids to any users that have not already been seen by - winbindd8 - . + -a username%password + Attempt to authenticate a user via winbindd. + This checks both authenticaion methods and reports its results. + + + + + -c user + Create a local winbind user. + + + -C group + Create a local winbindd group. + + + + + --domain name + This parameter sets the domain on which any specified + operations will performed. If special domain name '.' is used to represent + the current domain to which winbindd belongs. Currently only the + , + , and options honor this parameter. + + + -g This option will list all groups available @@ -82,18 +106,22 @@ seen by winbindd 8. + + + --get-auth-user + Print username and password used by winbindd + during session setup to a domain controller. Username + and password can be set using '-A'. Only available for + root. + - -N name - The -N option - queries winbindd - 8 to query the WINS - server for the IP address associated with the NetBIOS name - specified by the name parameter. - + -G gid + Try to convert a UNIX group id to a Windows + NT SID. If the gid specified does not refer to one within + the idmap gid range then the operation will fail. - - + -I ip The -I option @@ -105,6 +133,16 @@ + + -m + Produce a list of domains trusted by the + Windows NT server winbindd + 8 contacts + when resolving names. This list does not include the Windows + NT domain the server is a Primary Domain Controller for. + + + -n name The -n option @@ -118,8 +156,46 @@ 5 workgroup parameter. + + + -N name + The -N option + queries winbindd + 8 to query the WINS + server for the IP address associated with the NetBIOS name + specified by the name parameter. + + + + -o user:group + Add a winbindd local group as a secondary group + for the specified winbindd local user. + + + + + -O user:group + Remove a winbindd local group as a secondary group + for the specified winbindd local user. + + + + + -p + Check whether winbindd is still alive. + Prints out either 'succeeded' or 'failed'. + + + + -r username + Try to obtain the list of UNIX group ids + to which the user belongs. This only works for users + defined on a Domain Controller. + + + -s sid Use -s to resolve @@ -129,23 +205,22 @@ S-1-5-21-1455342024-3071081365-2475485837-500. - - -U uid - Try to convert a UNIX user id to a Windows NT - SID. If the uid specified does not refer to one within - the winbind uid range then the operation will fail. + --set-auth-user username%password + Store username and password used by winbindd + during session setup to a domain controller. This enables + winbindd to operate in a Windows 2000 domain with Restrict + Anonymous turned on (a.k.a. Permissions compatiable with + Windows 2000 servers only). + - - -G gid - Try to convert a UNIX group id to a Windows - NT SID. If the gid specified does not refer to one within - the winbind gid range then the operation will fail. + --sequence + Show sequence numbers of + all known domains - -S sid Convert a SID to a UNIX user id. If the SID @@ -154,17 +229,6 @@ then the operation will fail. - - - -Y sid - Convert a SID to a UNIX group id. If the SID - does not correspond to a UNIX group mapped by - winbindd8 then - the operation will fail. - - - - -t Verify that the workstation trust account @@ -172,64 +236,44 @@ domain is working. - - -m - Produce a list of domains trusted by the - Windows NT server winbindd - 8 contacts - when resolving names. This list does not include the Windows - NT domain the server is a Primary Domain Controller for. - - - - - --sequence - Show sequence numbers of - all known domains + -u + This option will list all users available + in the Windows NT domain for which the winbindd + 8 daemon is operating in. Users in all trusted domains + will also be listed. Note that this operation does not assign + user ids to any users that have not already been seen by + winbindd8 + . - + - -r username - Try to obtain the list of UNIX group ids - to which the user belongs. This only works for users - defined on a Domain Controller. - + -U uid + Try to convert a UNIX user id to a Windows NT + SID. If the uid specified does not refer to one within + the idmap uid range then the operation will fail. - - + - -a username%password - Attempt to authenticate a user via winbindd. - This checks both authenticaion methods and reports its results. + -x user + Delete an existing local winbind user. - - + - --set-auth-user username%password - Store username and password used by winbindd - during session setup to a domain controller. This enables - winbindd to operate in a Windows 2000 domain with Restrict - Anonymous turned on (a.k.a. Permissions compatiable with - Windows 2000 servers only). + -X group + Delete an existing local winbindd group. - + - --get-auth-user - Print username and password used by winbindd - during session setup to a domain controller. Username - and password can be set using '-A'. Only available for - root. + -Y sid + Convert a SID to a UNIX group id. If the SID + does not correspond to a UNIX group mapped by + winbindd8 then + the operation will fail. - - -p - Check whether winbindd is still alive. - Prints out either 'succeeded' or 'failed'. - - &stdarg.version; &stdarg.help; diff --git a/docs/docbook/manpages/winbindd.8.xml b/docs/docbook/manpages/winbindd.8.xml index d41620b707..b13ec718cf 100644 --- a/docs/docbook/manpages/winbindd.8.xml +++ b/docs/docbook/manpages/winbindd.8.xml @@ -1,8 +1,7 @@ - - %globalentities; + + %globalentities; ]> @@ -207,24 +206,24 @@ group: files winbind [global] section of smb.conf. - - winbind separator - - winbind uid - - winbind gid - - winbind cache time - - winbind enum users - - winbind enum groups - - template homedir - - template shell - - winbind use default domain + + winbind separator + + idmap uid + + idmap gid + + winbind cache time + + winbind enum users + + winbind enum groups + + template homedir + + template shell + + winbind use default domain @@ -287,8 +286,8 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok winbind cache time = 10 template shell = /bin/bash template homedir = /home/%D/%U - winbind uid = 10000-20000 - winbind gid = 10000-20000 + idmap uid = 10000-20000 + idmap gid = 10000-20000 workgroup = DOMAIN security = domain password server = * @@ -350,8 +349,8 @@ auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok - SIGUSR1 - The SIGUSR1 signal will cause + SIGUSR2 + The SIGUSR2 signal will cause winbindd to write status information to the winbind log file including information about the number of user and group ids allocated by winbindd. -- cgit