summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/security
Commit message (Collapse)AuthorAgeFilesLines
* lib/param: Consolidate code to enable smb signing on the server, always ↵Andrew Bartlett2013-11-221-2/+7
| | | | | | | | | | | | | | | enable on AD DC This uses the code from the source4/ SMB server (the NTVFS smb server) in common, to force SMB Signing to be on when we are an AD DC. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Fri Nov 22 13:13:05 CET 2013 on sn-devel-104
* docs: remove duplicate "line" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: remove duplicate "must" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: remove duplicate "on" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: point out side-effects of global "valid users" setting.Günther Deschner2013-09-171-0/+10
| | | | | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Tue Sep 17 16:20:16 CEST 2013 on sn-devel-104
* auth: Remove "password level"Andrew Bartlett2013-06-111-48/+0
| | | | | | | | | | | We now only lowercase the password, we do not attempt to find another case combination that the password might be in. This option is already depricated, so it is now time to remove it. Andrew Bartlett Reviewed-by: Simo Sorce <idra@samba.org>
* ntdb: switch between secrets.tdb and secrets.ntdb depending on 'use ntdb'Rusty Russell2013-02-202-3/+3
| | | | | | | | | | | Since we open with dbwrap, it auto-converts old tdbs (which it will rename to secrets.tdb.bak once it's done). Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date(master): Wed Feb 20 07:09:19 CET 2013 on sn-devel-104
* docs: fix typo in serverrole.xmlSamba-JP oota2013-02-141-1/+1
| | | | | | | Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Thu Feb 14 18:43:57 CET 2013 on sn-devel-104
* Documentation fixes for bug #9462 - Users can not be given write permissions ↵Jeremy Allison2012-12-058-36/+4
| | | | | | | | | | any more by default Ensure we don't apply the masks + force modes on security setting changes, only on create. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* smb.conf(5): Mark four removed parameters as such.Jelmer Vernooij2012-10-194-2/+6
|
* smb.conf(5): Fix mixing of tabs and spaces.Jelmer Vernooij2012-10-193-4/+4
|
* smb.conf(5): Add basic documentation for 'tls dh params file'.Jelmer Vernooij2012-10-181-0/+18
|
* smb.conf(5): Add basic documentation for 'tls enabled'.Jelmer Vernooij2012-10-181-0/+11
|
* smb.conf(5): Add basic documentation for 'tls crlfile'.Jelmer Vernooij2012-10-181-0/+17
|
* smb.conf(5): Add basic documentation for 'tls certfile'.Jelmer Vernooij2012-10-181-0/+17
|
* smb.conf(5): Add basic documentation for 'tls keyfile'.Jelmer Vernooij2012-10-182-2/+18
|
* smb.conf(5): Add basic documentation for 'tls cafile'.Jelmer Vernooij2012-10-181-0/+20
|
* smb.conf(5): Add basic documentation for 'log nt token command'.Jelmer Vernooij2012-10-181-0/+14
|
* smb.conf(5): Add basic documentation for 'ntp signd socket directory'.Jelmer Vernooij2012-10-181-0/+17
|
* smb.conf(5): Add basic documentation for 'samba kcc command'.Jelmer Vernooij2012-10-181-0/+19
|
* docs: fix opening and ending tag mismatch: paraBjörn Baumbach2012-10-081-4/+4
| | | | in forcedirectorysecuritymode.xml.
* docs: fix opening and ending tag mismatch: paraBjörn Baumbach2012-10-081-4/+4
| | | | in directorysecuritymask.xml.
* Remove the parameters:Jeremy Allison2012-10-048-133/+33
| | | | | | | | | security mask force security mode directory security mask force directory security mode and update the docs.
* Correct fix for bug #9222 - smbd ignores the "server signing = no" setting ↵Jeremy Allison2012-10-031-6/+11
| | | | | | | | | | for SMB2. Signing cannot be disabled for SMB2 by design, so fix the documentation instead. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Oct 3 23:47:23 CEST 2012 on sn-devel-104
* smb.conf(5): Consistent spelling of parameter names.Jelmer Vernooij2012-09-271-1/+1
| | | | | | | This includes spacing and casing. Conflicts: source4/scripting/python/samba/tests/docs.py
* smb.conf(5): Add basic documentation for 'kpasswd port'.Jelmer Vernooij2012-09-261-0/+12
|
* smb.conf(5): Add basic documentation for 'krb5 port'.Jelmer Vernooij2012-09-261-0/+11
|
* smb.conf(5): 'write ok' is a reverse synonym for 'read only'.Jelmer Vernooij2012-09-261-0/+1
|
* docs: Remove references to security=share and security=server from the ↵Andrew Bartlett2012-09-048-83/+12
| | | | smb.conf docs
* doc: Remove all references to 'printer admin' option.Andreas Schneider2012-07-031-27/+0
|
* docs: document new server role valuesAndrew Bartlett2012-06-151-2/+24
|
* s3/doc: some spelling fixesBjörn Jacke2012-06-115-6/+6
| | | | | | | Thanks to Frans Luteijn <f.a.g.luteijn at knoware.nl> for providing the fixes! Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Mon Jun 11 23:16:26 CEST 2012 on sn-devel-104
* docs-xml: remove documentation of "SECURITY = SERVER"Stefan Metzmacher2012-05-151-32/+0
| | | | metze
* s3-loadparm: Add synonym "private directory".Karolin Seeger2012-05-111-0/+1
| | | | | | | Karolin Autobuild-User: Karolin Seeger <kseeger@samba.org> Autobuild-Date: Fri May 11 13:04:03 CEST 2012 on sn-devel-104
* s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2012-03-044-169/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
* docs-xml: remove docs for "send spnego principal"Stefan Metzmacher2012-02-161-28/+0
| | | | metze
* docs: Add documentation for server roleAndrew Bartlett2011-11-172-1/+75
|
* s3-param Make lp_passwordserver() const.Andrew Bartlett2011-06-011-8/+0
| | | | | | This means that it no longer takes % substituations, and so the documentation for this behaviour is removed from the smb.conf manpage. (This mode is only useful in security=server, which is already marked as deprecated in 3.6). Andrew Bartlett
* docs: Rewrite 'password server' documentationAndrew Bartlett2011-05-251-52/+54
| | | | | | I think this new version is more clear. Andrew Bartlett
* docs: Clarify the 'security=server' fails for NTLMv2Andrew Bartlett2011-05-251-0/+3
|
* s3-param Deprecate a number of security parameters for 3.6Andrew Bartlett2011-05-133-78/+68
| | | | | | | | | | | This follows up on the agreement on the samba-technical list in Jan 2011 to deprecate these options, and to possibly remove these in the 4.0 release after user feedback. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri May 13 19:51:41 CEST 2011 on sn-devel-104
* s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'Andrew Bartlett2010-12-102-0/+56
| | | | Andrew Bartlett
* s3-docs Explain change to NTLMv2 by default in the clientAndrew Bartlett2010-12-101-6/+7
|
* s3: Fix some typosVolker Lendecke2010-11-221-1/+1
|
* s3-auth: Remove docs about obsolete 'update encrypted' option.Andreas Schneider2010-08-161-34/+0
|
* s3-docs: Add more verbose description of "username map cache time".Volker Lendecke2010-07-191-7/+16
|
* s3: Cache the username map in gencacheVolker Lendecke2010-04-131-0/+18
| | | | This is for uses with a heavy-weight username map script
* Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or ↵Jeremy Allison2009-11-061-0/+5
| | | | | | xattrs are removed. Jeremy.
* s3:docs: Public is not a synonym for access based shareenum.Karolin Seeger2009-10-261-1/+0
| | | | | | Fix build warning. Karolin
* s3:doc: add some detail about lanman auth parameterBjörn Jacke2009-10-031-0/+7
| | | | | add interesting detail: lm passwords will be removed from databaѕe with lanman auth = no
generated by cgit (git 2.34.1) at 2025-09-25 21:12:22 +0000