diff options
Diffstat (limited to 'docs/htmldocs/smb.conf.5.html')
| -rw-r--r-- | docs/htmldocs/smb.conf.5.html | 5981 |
1 files changed, 2929 insertions, 3052 deletions
diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index 5d1cc21da71..8567b9988bd 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -1,12 +1,10 @@ -<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <HTML ><HEAD ><TITLE >smb.conf</TITLE ><META NAME="GENERATOR" -CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+ -"></HEAD +CONTENT="Modular DocBook HTML Stylesheet Version 1.57"></HEAD ><BODY CLASS="REFENTRY" BGCOLOR="#FFFFFF" @@ -16,7 +14,9 @@ VLINK="#840084" ALINK="#0000FF" ><H1 ><A -NAME="SMB.CONF">smb.conf</H1 +NAME="SMB.CONF" +>smb.conf</A +></H1 ><DIV CLASS="REFNAMEDIV" ><A @@ -123,12 +123,8 @@ NAME="AEN28" ><P >There are three special sections, [global], [homes] and [printers], which are - described under <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->special sections</I -></SPAN + described under <EM +>special sections</EM >. The following notes apply to ordinary section descriptions.</P ><P @@ -142,20 +138,12 @@ CLASS="EMPHASIS" printable services (used by the client to access print services on the host running the server).</P ><P ->Sections may be designated <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->guest</I -></SPAN +>Sections may be designated <EM +>guest</EM > services, in which case no password is required to access them. A specified - UNIX <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->guest account</I -></SPAN + UNIX <EM +>guest account</EM > is used to define access privileges in this case.</P ><P @@ -177,6 +165,12 @@ CLASS="FILENAME" >/home/bar</TT >. The share is accessed via the share name "foo":</P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD ><PRE CLASS="SCREEN" > <TT @@ -187,19 +181,24 @@ CLASS="COMPUTEROUTPUT" </TT > </PRE +></TD +></TR +></TABLE ><P >The following sample section defines a printable share. The share is readonly, but printable. That is, the only write access permitted is via calls to open, write to and close a - spool file. The <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->guest ok</I -></SPAN + spool file. The <EM +>guest ok</EM > parameter means access will be permitted as the default guest user (specified elsewhere):</P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD ><PRE CLASS="SCREEN" > <TT @@ -212,6 +211,9 @@ CLASS="COMPUTEROUTPUT" </TT > </PRE +></TD +></TR +></TABLE ></DIV ><DIV CLASS="REFSECT1" @@ -269,12 +271,8 @@ NAME="AEN53" ></LI ></UL ><P ->If you decide to use a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->path =</I -></SPAN +>If you decide to use a <EM +>path =</EM > line in your [homes] section then you may find it useful to use the %S macro. For example :</P @@ -303,6 +301,12 @@ CLASS="USERINPUT" a normal service section can specify, though some make more sense than others. The following is a typical and suitable [homes] section:</P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD ><PRE CLASS="SCREEN" > <TT @@ -312,41 +316,28 @@ CLASS="COMPUTEROUTPUT" </TT > </PRE +></TD +></TR +></TABLE ><P >An important point is that if guest access is specified in the [homes] section, all home directories will be - visible to all clients <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->without a password</I -></SPAN + visible to all clients <EM +>without a password</EM >. In the very unlikely event that this is actually desirable, it - would be wise to also specify <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" + would be wise to also specify <EM >read only - access</I -></SPAN + access</EM >.</P ><P ->Note that the <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->browseable</I -></SPAN +>Note that the <EM +>browseable</EM > flag for auto home directories will be inherited from the global browseable flag, not the [homes] browseable flag. This is useful as - it means setting <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->browseable = no</I -></SPAN + it means setting <EM +>browseable = no</EM > in the [homes] section will hide the [homes] share but make any auto home directories visible.</P @@ -406,6 +397,12 @@ NAME="AEN79" world-writeable spool directory with the sticky bit set on it. A typical [printers] entry would look like this:</P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD ><PRE CLASS="SCREEN" ><TT @@ -416,12 +413,21 @@ CLASS="COMPUTEROUTPUT" printable = yes </TT ></PRE +></TD +></TR +></TABLE ><P >All aliases given for a printer in the printcap file are legitimate printer names as far as the server is concerned. If your printing subsystem doesn't work like that, you will have to set up a pseudo-printcap. This is a file consisting of one or more lines like this:</P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="100%" +><TR +><TD ><PRE CLASS="SCREEN" > <TT @@ -430,6 +436,9 @@ CLASS="COMPUTEROUTPUT" </TT > </PRE +></TD +></TR +></TABLE ><P >Each alias should be an acceptable printer name for your printing subsystem. In the [global] section, specify @@ -461,44 +470,24 @@ NAME="AEN102" >parameters define the specific attributes of sections.</P ><P >Some parameters are specific to the [global] section - (e.g., <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->security</I -></SPAN + (e.g., <EM +>security</EM >). Some parameters are usable - in all sections (e.g., <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->create mode</I -></SPAN + in all sections (e.g., <EM +>create mode</EM >). All others are permissible only in normal sections. For the purposes of the following descriptions the [homes] and [printers] - sections will be considered normal. The letter <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->G</I -></SPAN + sections will be considered normal. The letter <EM +>G</EM > in parentheses indicates that a parameter is specific to the - [global] section. The letter <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->S</I -></SPAN + [global] section. The letter <EM +>S</EM > indicates that a parameter can be specified in a service specific - section. Note that all <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->S</I -></SPAN + section. Note that all <EM +>S</EM > parameters can also be specified in the [global] section - in which case they will define the default behavior for all services.</P @@ -602,7 +591,7 @@ CLASS="VARIABLELIST" to change your config based on what the client calls you. Your server can have a "dual personality".</P ><P ->Note that this parameter is not available when Samba listens +>Note that this paramater is not available when Samba listens on port 445, as clients no longer send this information </P ></DD ><DT @@ -618,12 +607,8 @@ CLASS="VARIABLELIST" ><P >the name of your NIS home directory server. This is obtained from your NIS auto.map entry. If you have - not compiled Samba with the <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->--with-automount</I -></SPAN + not compiled Samba with the <EM +>--with-automount</EM > option then this value will be the same as %L.</P ></DD @@ -727,18 +712,31 @@ NAME="AEN203" CLASS="VARIABLELIST" ><DL ><DT +>mangling method</DT +><DD +><P +> controls the algorithm used for the generating + the mangled names. Can take two different values, "hash" and + "hash2". "hash" is the default and is the algorithm that has been + used in Samba for many years. "hash2" is a newer and considered + a better algorithm (generates less collisions) in the names. + However, many Win32 applications store the + mangled names and so changing to the new algorithm must not be done + lightly as these applications may break unless reinstalled. + New installations of Samba may set the default to hash2. + Default <EM +>hash</EM +>.</P +></DD +><DT >mangle case = yes/no</DT ><DD ><P > controls if names that have characters that aren't of the "default" case are mangled. For example, if this is yes then a name like "Mail" would be mangled. - Default <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no</I -></SPAN + Default <EM +>no</EM >.</P ></DD ><DT @@ -747,12 +745,8 @@ CLASS="EMPHASIS" ><P >controls whether filenames are case sensitive. If they aren't then Samba must do a filename search and match on passed - names. Default <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no</I -></SPAN + names. Default <EM +>no</EM >.</P ></DD ><DT @@ -760,12 +754,8 @@ CLASS="EMPHASIS" ><DD ><P >controls what the default case is for new - filenames. Default <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->lower</I -></SPAN + filenames. Default <EM +>lower</EM >.</P ></DD ><DT @@ -774,12 +764,8 @@ CLASS="EMPHASIS" ><P >controls if new files are created with the case that the client passes, or if they are forced to be the - "default" case. Default <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->yes</I -></SPAN + "default" case. Default <EM +>yes</EM >. </P ></DD @@ -792,12 +778,8 @@ CLASS="EMPHASIS" upper case, or if they are forced to be the "default" case. This option can be use with "preserve case = yes" to permit long filenames to retain their case, while short names - are lowercased. Default <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->yes</I -></SPAN + are lowercased. Default <EM +>yes</EM >.</P ></DD ></DL @@ -809,7 +791,7 @@ CLASS="EMPHASIS" ><DIV CLASS="REFSECT1" ><A -NAME="AEN236" +NAME="AEN241" ></A ><H2 >NOTE ABOUT USERNAME/PASSWORD VALIDATION</H2 @@ -887,7 +869,7 @@ CLASS="FILENAME" ><DIV CLASS="REFSECT1" ><A -NAME="AEN255" +NAME="AEN260" ></A ><H2 >COMPLETE LIST OF GLOBAL PARAMETERS</H2 @@ -900,11 +882,11 @@ NAME="AEN255" ><LI ><P ><A -HREF="index.html#ABORTSHUTDOWNSCRIPT" +HREF="#ADDPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I ->abort shutdown script</I +>add printer command</I ></TT ></A ></P @@ -912,23 +894,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADDGROUPSCRIPT" +HREF="#ADDSHARECOMMAND" ><TT CLASS="PARAMETER" ><I ->add group script</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#ADDPRINTERCOMMAND" -><TT -CLASS="PARAMETER" -><I ->addprinter command</I +>add share command</I ></TT ></A ></P @@ -936,11 +906,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADDSHARECOMMAND" +HREF="#ADDUSERSCRIPT" ><TT CLASS="PARAMETER" ><I ->add share command</I +>add user script</I ></TT ></A ></P @@ -948,11 +918,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADDUSERSCRIPT" +HREF="#ALLOWTRUSTEDDOMAINS" ><TT CLASS="PARAMETER" ><I ->add user script</I +>allow trusted domains</I ></TT ></A ></P @@ -960,11 +930,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADDUSERTOGROUPSCRIPT" +HREF="#ANNOUNCEAS" ><TT CLASS="PARAMETER" ><I ->add user to group script</I +>announce as</I ></TT ></A ></P @@ -972,11 +942,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADDMACHINESCRIPT" +HREF="#ANNOUNCEVERSION" ><TT CLASS="PARAMETER" ><I ->add machine script</I +>announce version</I ></TT ></A ></P @@ -984,11 +954,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEGROUPSCRIPT" +HREF="#AUTOSERVICES" ><TT CLASS="PARAMETER" ><I ->delete group script</I +>auto services</I ></TT ></A ></P @@ -996,11 +966,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ADSSERVER" +HREF="#BINDINTERFACESONLY" ><TT CLASS="PARAMETER" ><I ->ads server</I +>bind interfaces only</I ></TT ></A ></P @@ -1008,11 +978,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ALGORITHMICRIDBASE" +HREF="#BROWSELIST" ><TT CLASS="PARAMETER" ><I ->algorithmic rid base</I +>browse list</I ></TT ></A ></P @@ -1020,11 +990,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ALLOWTRUSTEDDOMAINS" +HREF="#CHANGENOTIFYTIMEOUT" ><TT CLASS="PARAMETER" ><I ->allow trusted domains</I +>change notify timeout</I ></TT ></A ></P @@ -1032,11 +1002,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ANNOUNCEAS" +HREF="#CHANGESHARECOMMAND" ><TT CLASS="PARAMETER" ><I ->announce as</I +>change share command</I ></TT ></A ></P @@ -1044,11 +1014,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ANNOUNCEVERSION" +HREF="#CHARACTERSET" ><TT CLASS="PARAMETER" ><I ->announce version</I +>character set</I ></TT ></A ></P @@ -1056,11 +1026,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#AUTHMETHODS" +HREF="#CLIENTCODEPAGE" ><TT CLASS="PARAMETER" ><I ->auth methods</I +>client code page</I ></TT ></A ></P @@ -1068,11 +1038,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#AUTOSERVICES" +HREF="#CODEPAGEDIRECTORY" ><TT CLASS="PARAMETER" ><I ->auto services</I +>code page directory</I ></TT ></A ></P @@ -1080,11 +1050,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BINDINTERFACESONLY" +HREF="#CODINGSYSTEM" ><TT CLASS="PARAMETER" ><I ->bind interfaces only</I +>coding system</I ></TT ></A ></P @@ -1092,11 +1062,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BROWSELIST" +HREF="#CONFIGFILE" ><TT CLASS="PARAMETER" ><I ->browse list</I +>config file</I ></TT ></A ></P @@ -1104,11 +1074,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CHANGENOTIFYTIMEOUT" +HREF="#DEADTIME" ><TT CLASS="PARAMETER" ><I ->change notify timeout</I +>deadtime</I ></TT ></A ></P @@ -1116,11 +1086,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CHANGESHARECOMMAND" +HREF="#DEBUGHIRESTIMESTAMP" ><TT CLASS="PARAMETER" ><I ->change share command</I +>debug hires timestamp</I ></TT ></A ></P @@ -1128,11 +1098,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CONFIGFILE" +HREF="#DEBUGPID" ><TT CLASS="PARAMETER" ><I ->config file</I +>debug pid</I ></TT ></A ></P @@ -1140,11 +1110,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEADTIME" +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I ->deadtime</I +>debug timestamp</I ></TT ></A ></P @@ -1152,11 +1122,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEBUGHIRESTIMESTAMP" +HREF="#DEBUGUID" ><TT CLASS="PARAMETER" ><I ->debug hires timestamp</I +>debug uid</I ></TT ></A ></P @@ -1164,11 +1134,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEBUGPID" +HREF="#DEBUGLEVEL" ><TT CLASS="PARAMETER" ><I ->debug pid</I +>debuglevel</I ></TT ></A ></P @@ -1176,11 +1146,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEBUGTIMESTAMP" +HREF="#DEFAULT" ><TT CLASS="PARAMETER" ><I ->debug timestamp</I +>default</I ></TT ></A ></P @@ -1188,11 +1158,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEBUGUID" +HREF="#DEFAULTSERVICE" ><TT CLASS="PARAMETER" ><I ->debug uid</I +>default service</I ></TT ></A ></P @@ -1200,11 +1170,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEBUGLEVEL" +HREF="#DELETEPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I ->debuglevel</I +>delete printer command</I ></TT ></A ></P @@ -1212,11 +1182,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEFAULT" +HREF="#DELETESHARECOMMAND" ><TT CLASS="PARAMETER" ><I ->default</I +>delete share command</I ></TT ></A ></P @@ -1224,11 +1194,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEFAULTSERVICE" +HREF="#DELETEUSERSCRIPT" ><TT CLASS="PARAMETER" ><I ->default service</I +>delete user script</I ></TT ></A ></P @@ -1236,11 +1206,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEPRINTERCOMMAND" +HREF="#DFREECOMMAND" ><TT CLASS="PARAMETER" ><I ->deleteprinter command</I +>dfree command</I ></TT ></A ></P @@ -1248,11 +1218,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETESHARECOMMAND" +HREF="#DISABLESPOOLSS" ><TT CLASS="PARAMETER" ><I ->delete share command</I +>disable spoolss</I ></TT ></A ></P @@ -1260,11 +1230,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEUSERSCRIPT" +HREF="#DNSPROXY" ><TT CLASS="PARAMETER" ><I ->delete user script</I +>dns proxy</I ></TT ></A ></P @@ -1272,11 +1242,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEUSERFROMGROUPSCRIPT" +HREF="#DOMAINADMINGROUP" ><TT CLASS="PARAMETER" ><I ->delete user from group script</I +>domain admin group</I ></TT ></A ></P @@ -1284,11 +1254,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DFREECOMMAND" +HREF="#DOMAINGUESTGROUP" ><TT CLASS="PARAMETER" ><I ->dfree command</I +>domain guest group</I ></TT ></A ></P @@ -1296,11 +1266,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DISABLENETBIOS" +HREF="#DOMAINLOGONS" ><TT CLASS="PARAMETER" ><I ->disable netbios</I +>domain logons</I ></TT ></A ></P @@ -1308,11 +1278,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DISABLESPOOLSS" +HREF="#DOMAINMASTER" ><TT CLASS="PARAMETER" ><I ->disable spoolss</I +>domain master</I ></TT ></A ></P @@ -1320,11 +1290,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DISPLAYCHARSET" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I ->display charset</I +>encrypt passwords</I ></TT ></A ></P @@ -1332,11 +1302,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DNSPROXY" +HREF="#ENHANCEDBROWSING" ><TT CLASS="PARAMETER" ><I ->dns proxy</I +>enhanced browsing</I ></TT ></A ></P @@ -1344,11 +1314,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOMAINADMINGROUP" +HREF="#ENUMPORTSCOMMAND" ><TT CLASS="PARAMETER" ><I ->domain admin group</I +>enumports command</I ></TT ></A ></P @@ -1356,11 +1326,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOMAINGUESTGROUP" +HREF="#GETWDCACHE" ><TT CLASS="PARAMETER" ><I ->domain guest group</I +>getwd cache</I ></TT ></A ></P @@ -1368,11 +1338,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOMAINLOGONS" +HREF="#HIDELOCALUSERS" ><TT CLASS="PARAMETER" ><I ->domain logons</I +>hide local users</I ></TT ></A ></P @@ -1380,11 +1350,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOMAINMASTER" +HREF="#HIDEUNREADABLE" ><TT CLASS="PARAMETER" ><I ->domain master</I +>hide unreadable</I ></TT ></A ></P @@ -1392,11 +1362,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOSCHARSET" +HREF="#HOMEDIRMAP" ><TT CLASS="PARAMETER" ><I ->dos charset</I +>homedir map</I ></TT ></A ></P @@ -1404,11 +1374,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#HOSTMSDFS" ><TT CLASS="PARAMETER" ><I ->encrypt passwords</I +>host msdfs</I ></TT ></A ></P @@ -1416,11 +1386,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ENHANCEDBROWSING" +HREF="#HOSTSEQUIV" ><TT CLASS="PARAMETER" ><I ->enhanced browsing</I +>hosts equiv</I ></TT ></A ></P @@ -1428,11 +1398,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ENUMPORTSCOMMAND" +HREF="#INTERFACES" ><TT CLASS="PARAMETER" ><I ->enumports command</I +>interfaces</I ></TT ></A ></P @@ -1440,11 +1410,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#GETWDCACHE" +HREF="#KEEPALIVE" ><TT CLASS="PARAMETER" ><I ->getwd cache</I +>keepalive</I ></TT ></A ></P @@ -1452,11 +1422,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HIDELOCALUSERS" +HREF="#KERNELOPLOCKS" ><TT CLASS="PARAMETER" ><I ->hide local users</I +>kernel oplocks</I ></TT ></A ></P @@ -1464,11 +1434,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HIDEUNREADABLE" +HREF="#LANMANAUTH" ><TT CLASS="PARAMETER" ><I ->hide unreadable</I +>lanman auth</I ></TT ></A ></P @@ -1476,11 +1446,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HIDEUNWRITEABLEFILES" +HREF="#LARGEREADWRITE" ><TT CLASS="PARAMETER" ><I ->hide unwriteable files</I +>large readwrite</I ></TT ></A ></P @@ -1488,11 +1458,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOMEDIRMAP" +HREF="#LDAPADMINDN" ><TT CLASS="PARAMETER" ><I ->homedir map</I +>ldap admin dn</I ></TT ></A ></P @@ -1500,11 +1470,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOSTMSDFS" +HREF="#LDAPFILTER" ><TT CLASS="PARAMETER" ><I ->host msdfs</I +>ldap filter</I ></TT ></A ></P @@ -1512,11 +1482,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOSTNAMELOOKUPS" +HREF="#LDAPPORT" ><TT CLASS="PARAMETER" ><I ->hostname lookups</I +>ldap port</I ></TT ></A ></P @@ -1524,11 +1494,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOSTSEQUIV" +HREF="#LDAPSERVER" ><TT CLASS="PARAMETER" ><I ->hosts equiv</I +>ldap server</I ></TT ></A ></P @@ -1536,11 +1506,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#INTERFACES" +HREF="#LDAPSSL" ><TT CLASS="PARAMETER" ><I ->interfaces</I +>ldap ssl</I ></TT ></A ></P @@ -1548,11 +1518,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#KEEPALIVE" +HREF="#LDAPSUFFIX" ><TT CLASS="PARAMETER" ><I ->keepalive</I +>ldap suffix</I ></TT ></A ></P @@ -1560,11 +1530,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#KERNELOPLOCKS" +HREF="#LMANNOUNCE" ><TT CLASS="PARAMETER" ><I ->kernel oplocks</I +>lm announce</I ></TT ></A ></P @@ -1572,11 +1542,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LANMANAUTH" +HREF="#LMINTERVAL" ><TT CLASS="PARAMETER" ><I ->lanman auth</I +>lm interval</I ></TT ></A ></P @@ -1584,11 +1554,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LARGEREADWRITE" +HREF="#LOADPRINTERS" ><TT CLASS="PARAMETER" ><I ->large readwrite</I +>load printers</I ></TT ></A ></P @@ -1596,11 +1566,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPADMINDN" +HREF="#LOCALMASTER" ><TT CLASS="PARAMETER" ><I ->ldap admin dn</I +>local master</I ></TT ></A ></P @@ -1608,11 +1578,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPFILTER" +HREF="#LOCKDIR" ><TT CLASS="PARAMETER" ><I ->ldap filter</I +>lock dir</I ></TT ></A ></P @@ -1620,11 +1590,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPSSL" +HREF="#LOCKDIRECTORY" ><TT CLASS="PARAMETER" ><I ->ldap ssl</I +>lock directory</I ></TT ></A ></P @@ -1632,11 +1602,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPSUFFIX" +HREF="#LOCKSPINCOUNT" ><TT CLASS="PARAMETER" ><I ->ldap suffix</I +>lock spin count</I ></TT ></A ></P @@ -1644,11 +1614,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPUSERSUFFIX" +HREF="#LOCKSPINTIME" ><TT CLASS="PARAMETER" ><I ->ldap suffix</I +>lock spin time</I ></TT ></A ></P @@ -1656,11 +1626,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LDAPMACHINESUFFIX" +HREF="#PIDDIRECTORY" ><TT CLASS="PARAMETER" ><I ->ldap suffix</I +>pid directory</I ></TT ></A ></P @@ -1668,11 +1638,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LMANNOUNCE" +HREF="#LOGFILE" ><TT CLASS="PARAMETER" ><I ->lm announce</I +>log file</I ></TT ></A ></P @@ -1680,11 +1650,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LMINTERVAL" +HREF="#LOGLEVEL" ><TT CLASS="PARAMETER" ><I ->lm interval</I +>log level</I ></TT ></A ></P @@ -1692,11 +1662,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOADPRINTERS" +HREF="#LOGONDRIVE" ><TT CLASS="PARAMETER" ><I ->load printers</I +>logon drive</I ></TT ></A ></P @@ -1704,11 +1674,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCALMASTER" +HREF="#LOGONHOME" ><TT CLASS="PARAMETER" ><I ->local master</I +>logon home</I ></TT ></A ></P @@ -1716,11 +1686,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCKDIR" +HREF="#LOGONPATH" ><TT CLASS="PARAMETER" ><I ->lock dir</I +>logon path</I ></TT ></A ></P @@ -1728,11 +1698,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCKDIRECTORY" +HREF="#LOGONSCRIPT" ><TT CLASS="PARAMETER" ><I ->lock directory</I +>logon script</I ></TT ></A ></P @@ -1740,11 +1710,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCKSPINCOUNT" +HREF="#LPQCACHETIME" ><TT CLASS="PARAMETER" ><I ->lock spin count</I +>lpq cache time</I ></TT ></A ></P @@ -1752,11 +1722,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCKSPINTIME" +HREF="#MACHINEPASSWORDTIMEOUT" ><TT CLASS="PARAMETER" ><I ->lock spin time</I +>machine password timeout</I ></TT ></A ></P @@ -1764,11 +1734,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PIDDIRECTORY" +HREF="#MANGLEDSTACK" ><TT CLASS="PARAMETER" ><I ->pid directory</I +>mangled stack</I ></TT ></A ></P @@ -1776,11 +1746,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGFILE" +HREF="#MANGLINGMETHOD" ><TT CLASS="PARAMETER" ><I ->log file</I +>mangling method</I ></TT ></A ></P @@ -1788,11 +1758,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGLEVEL" +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I ->log level</I +>map to guest</I ></TT ></A ></P @@ -1800,11 +1770,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGONDRIVE" +HREF="#MAXDISKSIZE" ><TT CLASS="PARAMETER" ><I ->logon drive</I +>max disk size</I ></TT ></A ></P @@ -1812,11 +1782,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGONHOME" +HREF="#MAXLOGSIZE" ><TT CLASS="PARAMETER" ><I ->logon home</I +>max log size</I ></TT ></A ></P @@ -1824,11 +1794,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGONPATH" +HREF="#MAXMUX" ><TT CLASS="PARAMETER" ><I ->logon path</I +>max mux</I ></TT ></A ></P @@ -1836,11 +1806,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOGONSCRIPT" +HREF="#MAXOPENFILES" ><TT CLASS="PARAMETER" ><I ->logon script</I +>max open files</I ></TT ></A ></P @@ -1848,11 +1818,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LPQCACHETIME" +HREF="#MAXPROTOCOL" ><TT CLASS="PARAMETER" ><I ->lpq cache time</I +>max protocol</I ></TT ></A ></P @@ -1860,11 +1830,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MACHINEPASSWORDTIMEOUT" +HREF="#MAXSMBDPROCESSES" ><TT CLASS="PARAMETER" ><I ->machine password timeout</I +>max smbd processes</I ></TT ></A ></P @@ -1872,11 +1842,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLEDSTACK" +HREF="#MAXTTL" ><TT CLASS="PARAMETER" ><I ->mangled stack</I +>max ttl</I ></TT ></A ></P @@ -1884,11 +1854,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAPTOGUEST" +HREF="#MAXWINSTTL" ><TT CLASS="PARAMETER" ><I ->map to guest</I +>max wins ttl</I ></TT ></A ></P @@ -1896,11 +1866,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXDISKSIZE" +HREF="#MAXXMIT" ><TT CLASS="PARAMETER" ><I ->max disk size</I +>max xmit</I ></TT ></A ></P @@ -1908,11 +1878,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXLOGSIZE" +HREF="#MESSAGECOMMAND" ><TT CLASS="PARAMETER" ><I ->max log size</I +>message command</I ></TT ></A ></P @@ -1920,11 +1890,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXMUX" +HREF="#MINPASSWDLENGTH" ><TT CLASS="PARAMETER" ><I ->max mux</I +>min passwd length</I ></TT ></A ></P @@ -1932,11 +1902,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXOPENFILES" +HREF="#MINPASSWORDLENGTH" ><TT CLASS="PARAMETER" ><I ->max open files</I +>min password length</I ></TT ></A ></P @@ -1944,11 +1914,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXPROTOCOL" +HREF="#MINPROTOCOL" ><TT CLASS="PARAMETER" ><I ->max protocol</I +>min protocol</I ></TT ></A ></P @@ -1956,11 +1926,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXSMBDPROCESSES" +HREF="#MINWINSTTL" ><TT CLASS="PARAMETER" ><I ->max smbd processes</I +>min wins ttl</I ></TT ></A ></P @@ -1968,11 +1938,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXTTL" +HREF="#NAMERESOLVEORDER" ><TT CLASS="PARAMETER" ><I ->max ttl</I +>name resolve order</I ></TT ></A ></P @@ -1980,11 +1950,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXWINSTTL" +HREF="#NETBIOSALIASES" ><TT CLASS="PARAMETER" ><I ->max wins ttl</I +>netbios aliases</I ></TT ></A ></P @@ -1992,11 +1962,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXXMIT" +HREF="#NETBIOSNAME" ><TT CLASS="PARAMETER" ><I ->max xmit</I +>netbios name</I ></TT ></A ></P @@ -2004,11 +1974,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MESSAGECOMMAND" +HREF="#NETBIOSSCOPE" ><TT CLASS="PARAMETER" ><I ->message command</I +>netbios scope</I ></TT ></A ></P @@ -2016,11 +1986,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MINPASSWDLENGTH" +HREF="#NISHOMEDIR" ><TT CLASS="PARAMETER" ><I ->min passwd length</I +>nis homedir</I ></TT ></A ></P @@ -2028,11 +1998,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MINPASSWORDLENGTH" +HREF="#NTPIPESUPPORT" ><TT CLASS="PARAMETER" ><I ->min password length</I +>nt pipe support</I ></TT ></A ></P @@ -2040,11 +2010,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MINPROTOCOL" +HREF="#NTSMBSUPPORT" ><TT CLASS="PARAMETER" ><I ->min protocol</I +>nt smb support</I ></TT ></A ></P @@ -2052,11 +2022,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MINWINSTTL" +HREF="#NTSTATUSSUPPORT" ><TT CLASS="PARAMETER" ><I ->min wins ttl</I +>nt status support</I ></TT ></A ></P @@ -2064,11 +2034,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NAMECACHETIMEOUT" +HREF="#NULLPASSWORDS" ><TT CLASS="PARAMETER" ><I ->name cache timeout</I +>null passwords</I ></TT ></A ></P @@ -2076,11 +2046,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NAMERESOLVEORDER" +HREF="#OBEYPAMRESTRICTIONS" ><TT CLASS="PARAMETER" ><I ->name resolve order</I +>obey pam restrictions</I ></TT ></A ></P @@ -2088,11 +2058,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NETBIOSALIASES" +HREF="#OPLOCKBREAKWAITTIME" ><TT CLASS="PARAMETER" ><I ->netbios aliases</I +>oplock break wait time</I ></TT ></A ></P @@ -2100,11 +2070,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NETBIOSNAME" +HREF="#OSLEVEL" ><TT CLASS="PARAMETER" ><I ->netbios name</I +>os level</I ></TT ></A ></P @@ -2112,11 +2082,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NETBIOSSCOPE" +HREF="#OS2DRIVERMAP" ><TT CLASS="PARAMETER" ><I ->netbios scope</I +>os2 driver map</I ></TT ></A ></P @@ -2124,11 +2094,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NISHOMEDIR" +HREF="#PAMPASSWORDCHANGE" ><TT CLASS="PARAMETER" ><I ->nis homedir</I +>pam password change</I ></TT ></A ></P @@ -2136,11 +2106,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NTLMAUTH" +HREF="#PANICACTION" ><TT CLASS="PARAMETER" ><I ->ntlm auth</I +>panic action</I ></TT ></A ></P @@ -2148,11 +2118,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NONUNIXACCOUNTRANGE" +HREF="#PASSWDCHAT" ><TT CLASS="PARAMETER" ><I ->non unix account range</I +>passwd chat</I ></TT ></A ></P @@ -2160,11 +2130,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NTPIPESUPPORT" +HREF="#PASSWDCHATDEBUG" ><TT CLASS="PARAMETER" ><I ->nt pipe support</I +>passwd chat debug</I ></TT ></A ></P @@ -2172,11 +2142,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NTSTATUSSUPPORT" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I ->nt status support</I +>passwd program</I ></TT ></A ></P @@ -2184,11 +2154,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NULLPASSWORDS" +HREF="#PASSWORDLEVEL" ><TT CLASS="PARAMETER" ><I ->null passwords</I +>password level</I ></TT ></A ></P @@ -2196,11 +2166,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OBEYPAMRESTRICTIONS" +HREF="#PASSWORDSERVER" ><TT CLASS="PARAMETER" ><I ->obey pam restrictions</I +>password server</I ></TT ></A ></P @@ -2208,11 +2178,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OPLOCKBREAKWAITTIME" +HREF="#PREFEREDMASTER" ><TT CLASS="PARAMETER" ><I ->oplock break wait time</I +>prefered master</I ></TT ></A ></P @@ -2220,11 +2190,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OSLEVEL" +HREF="#PREFERREDMASTER" ><TT CLASS="PARAMETER" ><I ->os level</I +>preferred master</I ></TT ></A ></P @@ -2232,11 +2202,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OS2DRIVERMAP" +HREF="#PRELOAD" ><TT CLASS="PARAMETER" ><I ->os2 driver map</I +>preload</I ></TT ></A ></P @@ -2244,11 +2214,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PAMPASSWORDCHANGE" +HREF="#PRINTCAP" ><TT CLASS="PARAMETER" ><I ->pam password change</I +>printcap</I ></TT ></A ></P @@ -2256,11 +2226,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PANICACTION" +HREF="#PRINTCAPNAME" ><TT CLASS="PARAMETER" ><I ->panic action</I +>printcap name</I ></TT ></A ></P @@ -2268,11 +2238,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PARANOIDSERVERSECURITY" +HREF="#PRINTERDRIVERFILE" ><TT CLASS="PARAMETER" ><I ->paranoid server security</I +>printer driver file</I ></TT ></A ></P @@ -2280,11 +2250,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSDBBACKEND" +HREF="#PROTOCOL" ><TT CLASS="PARAMETER" ><I ->passdb backend</I +>protocol</I ></TT ></A ></P @@ -2292,11 +2262,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSWDCHAT" +HREF="#READBMPX" ><TT CLASS="PARAMETER" ><I ->passwd chat</I +>read bmpx</I ></TT ></A ></P @@ -2304,11 +2274,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSWDCHATDEBUG" +HREF="#READRAW" ><TT CLASS="PARAMETER" ><I ->passwd chat debug</I +>read raw</I ></TT ></A ></P @@ -2316,11 +2286,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSWDPROGRAM" +HREF="#READSIZE" ><TT CLASS="PARAMETER" ><I ->passwd program</I +>read size</I ></TT ></A ></P @@ -2328,11 +2298,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSWORDLEVEL" +HREF="#REMOTEANNOUNCE" ><TT CLASS="PARAMETER" ><I ->password level</I +>remote announce</I ></TT ></A ></P @@ -2340,11 +2310,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PASSWORDSERVER" +HREF="#REMOTEBROWSESYNC" ><TT CLASS="PARAMETER" ><I ->password server</I +>remote browse sync</I ></TT ></A ></P @@ -2352,11 +2322,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PREFEREDMASTER" +HREF="#RESTRICTANONYMOUS" ><TT CLASS="PARAMETER" ><I ->prefered master</I +>restrict anonymous</I ></TT ></A ></P @@ -2364,11 +2334,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PREFERREDMASTER" +HREF="#ROOT" ><TT CLASS="PARAMETER" ><I ->preferred master</I +>root</I ></TT ></A ></P @@ -2376,11 +2346,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRELOAD" +HREF="#ROOTDIR" ><TT CLASS="PARAMETER" ><I ->preload</I +>root dir</I ></TT ></A ></P @@ -2388,11 +2358,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTCAP" +HREF="#ROOTDIRECTORY" ><TT CLASS="PARAMETER" ><I ->printcap</I +>root directory</I ></TT ></A ></P @@ -2400,11 +2370,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTCAPNAME" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I ->printcap name</I +>security</I ></TT ></A ></P @@ -2412,11 +2382,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTERDRIVERFILE" +HREF="#SERVERSTRING" ><TT CLASS="PARAMETER" ><I ->printer driver file</I +>server string</I ></TT ></A ></P @@ -2424,11 +2394,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRIVATEDIR" +HREF="#SHOWADDPRINTERWIZARD" ><TT CLASS="PARAMETER" ><I ->private dir</I +>show add printer wizard</I ></TT ></A ></P @@ -2436,11 +2406,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PROTOCOL" +HREF="#SMBPASSWDFILE" ><TT CLASS="PARAMETER" ><I ->protocol</I +>smb passwd file</I ></TT ></A ></P @@ -2448,11 +2418,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#READBMPX" +HREF="#SOCKETADDRESS" ><TT CLASS="PARAMETER" ><I ->read bmpx</I +>socket address</I ></TT ></A ></P @@ -2460,11 +2430,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#READRAW" +HREF="#SOCKETOPTIONS" ><TT CLASS="PARAMETER" ><I ->read raw</I +>socket options</I ></TT ></A ></P @@ -2472,11 +2442,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#READSIZE" +HREF="#SOURCEENVIRONMENT" ><TT CLASS="PARAMETER" ><I ->read size</I +>source environment</I ></TT ></A ></P @@ -2484,11 +2454,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#REALM" +HREF="#SSL" ><TT CLASS="PARAMETER" ><I ->realm</I +>ssl</I ></TT ></A ></P @@ -2496,11 +2466,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#REMOTEANNOUNCE" +HREF="#SSLCACERTDIR" ><TT CLASS="PARAMETER" ><I ->remote announce</I +>ssl CA certDir</I ></TT ></A ></P @@ -2508,11 +2478,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#REMOTEBROWSESYNC" +HREF="#SSLCACERTFILE" ><TT CLASS="PARAMETER" ><I ->remote browse sync</I +>ssl CA certFile</I ></TT ></A ></P @@ -2520,11 +2490,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#RESTRICTANONYMOUS" +HREF="#SSLCIPHERS" ><TT CLASS="PARAMETER" ><I ->restrict anonymous</I +>ssl ciphers</I ></TT ></A ></P @@ -2532,11 +2502,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOT" +HREF="#SSLCLIENTCERT" ><TT CLASS="PARAMETER" ><I ->root</I +>ssl client cert</I ></TT ></A ></P @@ -2544,11 +2514,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOTDIR" +HREF="#SSLCLIENTKEY" ><TT CLASS="PARAMETER" ><I ->root dir</I +>ssl client key</I ></TT ></A ></P @@ -2556,11 +2526,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOTDIRECTORY" +HREF="#SSLCOMPATIBILITY" ><TT CLASS="PARAMETER" ><I ->root directory</I +>ssl compatibility</I ></TT ></A ></P @@ -2568,11 +2538,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SECURITY" +HREF="#SSLEGDSOCKET" ><TT CLASS="PARAMETER" ><I ->security</I +>ssl egd socket</I ></TT ></A ></P @@ -2580,11 +2550,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SERVERSTRING" +HREF="#SSLENTROPYBYTES" ><TT CLASS="PARAMETER" ><I ->server string</I +>ssl entropy bytes</I ></TT ></A ></P @@ -2592,11 +2562,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SHOWADDPRINTERWIZARD" +HREF="#SSLENTROPYFILE" ><TT CLASS="PARAMETER" ><I ->show add printer wizard</I +>ssl entropy file</I ></TT ></A ></P @@ -2604,11 +2574,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SHUTDOWNSCRIPT" +HREF="#SSLHOSTS" ><TT CLASS="PARAMETER" ><I ->shutdown script</I +>ssl hosts</I ></TT ></A ></P @@ -2616,11 +2586,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SMBPASSWDFILE" +HREF="#SSLHOSTSRESIGN" ><TT CLASS="PARAMETER" ><I ->smb passwd file</I +>ssl hosts resign</I ></TT ></A ></P @@ -2628,11 +2598,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SMBPORTS" +HREF="#SSLREQUIRECLIENTCERT" ><TT CLASS="PARAMETER" ><I ->smb ports</I +>ssl require clientcert</I ></TT ></A ></P @@ -2640,11 +2610,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SOCKETADDRESS" +HREF="#SSLREQUIRESERVERCERT" ><TT CLASS="PARAMETER" ><I ->socket address</I +>ssl require servercert</I ></TT ></A ></P @@ -2652,11 +2622,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SOCKETOPTIONS" +HREF="#SSLSERVERCERT" ><TT CLASS="PARAMETER" ><I ->socket options</I +>ssl server cert</I ></TT ></A ></P @@ -2664,11 +2634,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SOURCEENVIRONMENT" +HREF="#SSLSERVERKEY" ><TT CLASS="PARAMETER" ><I ->source environment</I +>ssl server key</I ></TT ></A ></P @@ -2676,11 +2646,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SPNEGO" +HREF="#SSLVERSION" ><TT CLASS="PARAMETER" ><I ->use spnego</I +>ssl version</I ></TT ></A ></P @@ -2688,7 +2658,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STATCACHE" +HREF="#STATCACHE" ><TT CLASS="PARAMETER" ><I @@ -2700,7 +2670,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STATCACHESIZE" +HREF="#STATCACHESIZE" ><TT CLASS="PARAMETER" ><I @@ -2712,7 +2682,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STRIPDOT" +HREF="#STRIPDOT" ><TT CLASS="PARAMETER" ><I @@ -2724,7 +2694,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SYSLOG" +HREF="#SYSLOG" ><TT CLASS="PARAMETER" ><I @@ -2736,7 +2706,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SYSLOGONLY" +HREF="#SYSLOGONLY" ><TT CLASS="PARAMETER" ><I @@ -2748,7 +2718,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TEMPLATEHOMEDIR" +HREF="#TEMPLATEHOMEDIR" ><TT CLASS="PARAMETER" ><I @@ -2760,7 +2730,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TEMPLATESHELL" +HREF="#TEMPLATESHELL" ><TT CLASS="PARAMETER" ><I @@ -2772,7 +2742,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TIMEOFFSET" +HREF="#TIMEOFFSET" ><TT CLASS="PARAMETER" ><I @@ -2784,7 +2754,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TIMESERVER" +HREF="#TIMESERVER" ><TT CLASS="PARAMETER" ><I @@ -2796,7 +2766,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TIMESTAMPLOGS" +HREF="#TIMESTAMPLOGS" ><TT CLASS="PARAMETER" ><I @@ -2808,7 +2778,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#TOTALPRINTJOBS" +HREF="#TOTALPRINTJOBS" ><TT CLASS="PARAMETER" ><I @@ -2820,31 +2790,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#UNICODE" -><TT -CLASS="PARAMETER" -><I ->unicode</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#UNIXCHARSET" -><TT -CLASS="PARAMETER" -><I ->unix charset</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#UNIXEXTENSIONS" +HREF="#UNIXEXTENSIONS" ><TT CLASS="PARAMETER" ><I @@ -2856,7 +2802,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#UNIXPASSWORDSYNC" +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I @@ -2868,7 +2814,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#UPDATEENCRYPTED" +HREF="#UPDATEENCRYPTED" ><TT CLASS="PARAMETER" ><I @@ -2880,7 +2826,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USEMMAP" +HREF="#USEMMAP" ><TT CLASS="PARAMETER" ><I @@ -2892,7 +2838,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USERHOSTS" +HREF="#USERHOSTS" ><TT CLASS="PARAMETER" ><I @@ -2904,7 +2850,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USERNAMELEVEL" +HREF="#USERNAMELEVEL" ><TT CLASS="PARAMETER" ><I @@ -2916,7 +2862,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USERNAMEMAP" +HREF="#USERNAMEMAP" ><TT CLASS="PARAMETER" ><I @@ -2928,7 +2874,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#UTMP" +HREF="#UTMP" ><TT CLASS="PARAMETER" ><I @@ -2940,7 +2886,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#UTMPDIRECTORY" +HREF="#UTMPDIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -2952,11 +2898,11 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WTMPDIRECTORY" +HREF="#VALIDCHARS" ><TT CLASS="PARAMETER" ><I ->wtmp directory</I +>valid chars</I ></TT ></A ></P @@ -2964,7 +2910,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDCACHETIME" +HREF="#WINBINDCACHETIME" ><TT CLASS="PARAMETER" ><I @@ -2976,7 +2922,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDENUMUSERS" +HREF="#WINBINDENUMUSERS" ><TT CLASS="PARAMETER" ><I @@ -2988,7 +2934,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDENUMGROUPS" +HREF="#WINBINDENUMGROUPS" ><TT CLASS="PARAMETER" ><I @@ -3000,7 +2946,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDGID" +HREF="#WINBINDGID" ><TT CLASS="PARAMETER" ><I @@ -3012,7 +2958,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDSEPARATOR" +HREF="#WINBINDSEPARATOR" ><TT CLASS="PARAMETER" ><I @@ -3024,7 +2970,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDUID" +HREF="#WINBINDUID" ><TT CLASS="PARAMETER" ><I @@ -3036,7 +2982,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINBINDUSEDEFAULTDOMAIN" +HREF="#WINBINDUSEDEFAULTDOMAIN" ><TT CLASS="PARAMETER" ><I @@ -3048,7 +2994,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINSHOOK" +HREF="#WINSHOOK" ><TT CLASS="PARAMETER" ><I @@ -3060,19 +3006,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINSPARTNERS" -><TT -CLASS="PARAMETER" -><I ->wins partners</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#WINSPROXY" +HREF="#WINSPROXY" ><TT CLASS="PARAMETER" ><I @@ -3084,7 +3018,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINSSERVER" +HREF="#WINSSERVER" ><TT CLASS="PARAMETER" ><I @@ -3096,7 +3030,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WINSSUPPORT" +HREF="#WINSSUPPORT" ><TT CLASS="PARAMETER" ><I @@ -3108,7 +3042,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WORKGROUP" +HREF="#WORKGROUP" ><TT CLASS="PARAMETER" ><I @@ -3120,7 +3054,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITERAW" +HREF="#WRITERAW" ><TT CLASS="PARAMETER" ><I @@ -3134,7 +3068,7 @@ CLASS="PARAMETER" ><DIV CLASS="REFSECT1" ><A -NAME="AEN1003" +NAME="AEN992" ></A ><H2 >COMPLETE LIST OF SERVICE PARAMETERS</H2 @@ -3147,7 +3081,7 @@ NAME="AEN1003" ><LI ><P ><A -HREF="index.html#ADMINUSERS" +HREF="#ADMINUSERS" ><TT CLASS="PARAMETER" ><I @@ -3159,7 +3093,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ALLOWHOSTS" +HREF="#ALLOWHOSTS" ><TT CLASS="PARAMETER" ><I @@ -3171,7 +3105,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#AVAILABLE" +HREF="#AVAILABLE" ><TT CLASS="PARAMETER" ><I @@ -3183,7 +3117,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BLOCKINGLOCKS" +HREF="#BLOCKINGLOCKS" ><TT CLASS="PARAMETER" ><I @@ -3195,7 +3129,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BLOCKSIZE" +HREF="#BLOCKSIZE" ><TT CLASS="PARAMETER" ><I @@ -3207,7 +3141,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BROWSABLE" +HREF="#BROWSABLE" ><TT CLASS="PARAMETER" ><I @@ -3219,7 +3153,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#BROWSEABLE" +HREF="#BROWSEABLE" ><TT CLASS="PARAMETER" ><I @@ -3231,7 +3165,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CASESENSITIVE" +HREF="#CASESENSITIVE" ><TT CLASS="PARAMETER" ><I @@ -3243,7 +3177,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CASESIGNAMES" +HREF="#CASESIGNAMES" ><TT CLASS="PARAMETER" ><I @@ -3255,7 +3189,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#COMMENT" +HREF="#COMMENT" ><TT CLASS="PARAMETER" ><I @@ -3267,7 +3201,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#COPY" +HREF="#COPY" ><TT CLASS="PARAMETER" ><I @@ -3279,7 +3213,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I @@ -3291,7 +3225,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CREATEMODE" +HREF="#CREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -3303,7 +3237,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#CSCPOLICY" +HREF="#CSCPOLICY" ><TT CLASS="PARAMETER" ><I @@ -3315,7 +3249,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEFAULTCASE" +HREF="#DEFAULTCASE" ><TT CLASS="PARAMETER" ><I @@ -3327,7 +3261,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DEFAULTDEVMODE" +HREF="#DEFAULTDEVMODE" ><TT CLASS="PARAMETER" ><I @@ -3339,7 +3273,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEREADONLY" +HREF="#DELETEREADONLY" ><TT CLASS="PARAMETER" ><I @@ -3351,7 +3285,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DELETEVETOFILES" +HREF="#DELETEVETOFILES" ><TT CLASS="PARAMETER" ><I @@ -3363,7 +3297,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DENYHOSTS" +HREF="#DENYHOSTS" ><TT CLASS="PARAMETER" ><I @@ -3375,7 +3309,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DIRECTORY" +HREF="#DIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -3387,7 +3321,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DIRECTORYMASK" +HREF="#DIRECTORYMASK" ><TT CLASS="PARAMETER" ><I @@ -3399,7 +3333,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DIRECTORYMODE" +HREF="#DIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -3411,7 +3345,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -3423,7 +3357,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DONTDESCEND" +HREF="#DONTDESCEND" ><TT CLASS="PARAMETER" ><I @@ -3435,7 +3369,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOSFILEMODE" +HREF="#DOSFILEMODE" ><TT CLASS="PARAMETER" ><I @@ -3447,7 +3381,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOSFILETIMERESOLUTION" +HREF="#DOSFILETIMERESOLUTION" ><TT CLASS="PARAMETER" ><I @@ -3459,7 +3393,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#DOSFILETIMES" +HREF="#DOSFILETIMES" ><TT CLASS="PARAMETER" ><I @@ -3471,7 +3405,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#EXEC" +HREF="#EXEC" ><TT CLASS="PARAMETER" ><I @@ -3483,7 +3417,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FAKEDIRECTORYCREATETIMES" +HREF="#FAKEDIRECTORYCREATETIMES" ><TT CLASS="PARAMETER" ><I @@ -3495,7 +3429,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FAKEOPLOCKS" +HREF="#FAKEOPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -3507,7 +3441,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FOLLOWSYMLINKS" +HREF="#FOLLOWSYMLINKS" ><TT CLASS="PARAMETER" ><I @@ -3519,7 +3453,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCECREATEMODE" +HREF="#FORCECREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -3531,7 +3465,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCEDIRECTORYMODE" +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -3543,7 +3477,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCEDIRECTORYSECURITYMODE" +HREF="#FORCEDIRECTORYSECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -3555,7 +3489,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCEGROUP" +HREF="#FORCEGROUP" ><TT CLASS="PARAMETER" ><I @@ -3567,7 +3501,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCESECURITYMODE" +HREF="#FORCESECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -3579,7 +3513,19 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FORCEUSER" +HREF="#FORCEUNKNOWNACLUSER" +><TT +CLASS="PARAMETER" +><I +>force unknown acl user</I +></TT +></A +></P +></LI +><LI +><P +><A +HREF="#FORCEUSER" ><TT CLASS="PARAMETER" ><I @@ -3591,7 +3537,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#FSTYPE" +HREF="#FSTYPE" ><TT CLASS="PARAMETER" ><I @@ -3603,7 +3549,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#GROUP" +HREF="#GROUP" ><TT CLASS="PARAMETER" ><I @@ -3615,7 +3561,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -3627,7 +3573,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#GUESTOK" +HREF="#GUESTOK" ><TT CLASS="PARAMETER" ><I @@ -3639,7 +3585,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#GUESTONLY" +HREF="#GUESTONLY" ><TT CLASS="PARAMETER" ><I @@ -3651,7 +3597,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HIDEDOTFILES" +HREF="#HIDEDOTFILES" ><TT CLASS="PARAMETER" ><I @@ -3663,7 +3609,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HIDEFILES" +HREF="#HIDEFILES" ><TT CLASS="PARAMETER" ><I @@ -3675,7 +3621,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOSTSALLOW" +HREF="#HOSTSALLOW" ><TT CLASS="PARAMETER" ><I @@ -3687,7 +3633,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#HOSTSDENY" +HREF="#HOSTSDENY" ><TT CLASS="PARAMETER" ><I @@ -3699,7 +3645,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#INCLUDE" +HREF="#INCLUDE" ><TT CLASS="PARAMETER" ><I @@ -3711,7 +3657,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#INHERITACLS" +HREF="#INHERITACLS" ><TT CLASS="PARAMETER" ><I @@ -3723,7 +3669,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#INHERITPERMISSIONS" +HREF="#INHERITPERMISSIONS" ><TT CLASS="PARAMETER" ><I @@ -3735,7 +3681,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#INVALIDUSERS" +HREF="#INVALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -3747,7 +3693,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LEVEL2OPLOCKS" +HREF="#LEVEL2OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -3759,7 +3705,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LOCKING" +HREF="#LOCKING" ><TT CLASS="PARAMETER" ><I @@ -3771,7 +3717,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LPPAUSECOMMAND" +HREF="#LPPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -3783,7 +3729,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LPQCOMMAND" +HREF="#LPQCOMMAND" ><TT CLASS="PARAMETER" ><I @@ -3795,7 +3741,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LPRESUMECOMMAND" +HREF="#LPRESUMECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -3807,7 +3753,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#LPRMCOMMAND" +HREF="#LPRMCOMMAND" ><TT CLASS="PARAMETER" ><I @@ -3819,7 +3765,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAGICOUTPUT" +HREF="#MAGICOUTPUT" ><TT CLASS="PARAMETER" ><I @@ -3831,7 +3777,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAGICSCRIPT" +HREF="#MAGICSCRIPT" ><TT CLASS="PARAMETER" ><I @@ -3843,7 +3789,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLECASE" +HREF="#MANGLECASE" ><TT CLASS="PARAMETER" ><I @@ -3855,7 +3801,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLEDMAP" +HREF="#MANGLEDMAP" ><TT CLASS="PARAMETER" ><I @@ -3867,7 +3813,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLEDNAMES" +HREF="#MANGLEDNAMES" ><TT CLASS="PARAMETER" ><I @@ -3879,7 +3825,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLINGCHAR" +HREF="#MANGLINGCHAR" ><TT CLASS="PARAMETER" ><I @@ -3891,19 +3837,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MANGLINGMETHOD" -><TT -CLASS="PARAMETER" -><I ->mangling method</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#MAPARCHIVE" +HREF="#MAPARCHIVE" ><TT CLASS="PARAMETER" ><I @@ -3915,7 +3849,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAPHIDDEN" +HREF="#MAPHIDDEN" ><TT CLASS="PARAMETER" ><I @@ -3927,7 +3861,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAPSYSTEM" +HREF="#MAPSYSTEM" ><TT CLASS="PARAMETER" ><I @@ -3939,7 +3873,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXCONNECTIONS" +HREF="#MAXCONNECTIONS" ><TT CLASS="PARAMETER" ><I @@ -3951,7 +3885,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MAXPRINTJOBS" +HREF="#MAXPRINTJOBS" ><TT CLASS="PARAMETER" ><I @@ -3963,7 +3897,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MINPRINTSPACE" +HREF="#MINPRINTSPACE" ><TT CLASS="PARAMETER" ><I @@ -3975,7 +3909,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#MSDFSROOT" +HREF="#MSDFSROOT" ><TT CLASS="PARAMETER" ><I @@ -3987,7 +3921,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#NTACLSUPPORT" +HREF="#NTACLSUPPORT" ><TT CLASS="PARAMETER" ><I @@ -3999,7 +3933,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ONLYGUEST" +HREF="#ONLYGUEST" ><TT CLASS="PARAMETER" ><I @@ -4011,7 +3945,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ONLYUSER" +HREF="#ONLYUSER" ><TT CLASS="PARAMETER" ><I @@ -4023,7 +3957,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OPLOCKCONTENTIONLIMIT" +HREF="#OPLOCKCONTENTIONLIMIT" ><TT CLASS="PARAMETER" ><I @@ -4035,7 +3969,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -4047,7 +3981,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PATH" +HREF="#PATH" ><TT CLASS="PARAMETER" ><I @@ -4059,7 +3993,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#POSIXLOCKING" +HREF="#POSIXLOCKING" ><TT CLASS="PARAMETER" ><I @@ -4071,7 +4005,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#POSTEXEC" +HREF="#POSTEXEC" ><TT CLASS="PARAMETER" ><I @@ -4083,7 +4017,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#POSTSCRIPT" +HREF="#POSTSCRIPT" ><TT CLASS="PARAMETER" ><I @@ -4095,7 +4029,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I @@ -4107,7 +4041,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PREEXECCLOSE" +HREF="#PREEXECCLOSE" ><TT CLASS="PARAMETER" ><I @@ -4119,7 +4053,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRESERVECASE" +HREF="#PRESERVECASE" ><TT CLASS="PARAMETER" ><I @@ -4131,7 +4065,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTCOMMAND" +HREF="#PRINTCOMMAND" ><TT CLASS="PARAMETER" ><I @@ -4143,7 +4077,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTOK" +HREF="#PRINTOK" ><TT CLASS="PARAMETER" ><I @@ -4155,7 +4089,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTABLE" +HREF="#PRINTABLE" ><TT CLASS="PARAMETER" ><I @@ -4167,7 +4101,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTER" +HREF="#PRINTER" ><TT CLASS="PARAMETER" ><I @@ -4179,7 +4113,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTERADMIN" +HREF="#PRINTERADMIN" ><TT CLASS="PARAMETER" ><I @@ -4191,7 +4125,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTERDRIVER" +HREF="#PRINTERDRIVER" ><TT CLASS="PARAMETER" ><I @@ -4203,7 +4137,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTERDRIVERLOCATION" +HREF="#PRINTERDRIVERLOCATION" ><TT CLASS="PARAMETER" ><I @@ -4215,7 +4149,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTERNAME" +HREF="#PRINTERNAME" ><TT CLASS="PARAMETER" ><I @@ -4227,7 +4161,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -4239,7 +4173,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#PUBLIC" +HREF="#PUBLIC" ><TT CLASS="PARAMETER" ><I @@ -4251,7 +4185,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#QUEUEPAUSECOMMAND" +HREF="#QUEUEPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -4263,7 +4197,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#QUEUERESUMECOMMAND" +HREF="#QUEUERESUMECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -4275,7 +4209,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#READLIST" +HREF="#READLIST" ><TT CLASS="PARAMETER" ><I @@ -4287,7 +4221,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#READONLY" +HREF="#READONLY" ><TT CLASS="PARAMETER" ><I @@ -4299,7 +4233,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOTPOSTEXEC" +HREF="#ROOTPOSTEXEC" ><TT CLASS="PARAMETER" ><I @@ -4311,7 +4245,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOTPREEXEC" +HREF="#ROOTPREEXEC" ><TT CLASS="PARAMETER" ><I @@ -4323,7 +4257,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#ROOTPREEXECCLOSE" +HREF="#ROOTPREEXECCLOSE" ><TT CLASS="PARAMETER" ><I @@ -4335,7 +4269,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SECURITYMASK" +HREF="#SECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -4347,7 +4281,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SETDIRECTORY" +HREF="#SETDIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -4359,7 +4293,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SHAREMODES" +HREF="#SHAREMODES" ><TT CLASS="PARAMETER" ><I @@ -4371,7 +4305,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SHORTPRESERVECASE" +HREF="#SHORTPRESERVECASE" ><TT CLASS="PARAMETER" ><I @@ -4383,7 +4317,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STATUS" +HREF="#STATUS" ><TT CLASS="PARAMETER" ><I @@ -4395,7 +4329,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STRICTALLOCATE" +HREF="#STRICTALLOCATE" ><TT CLASS="PARAMETER" ><I @@ -4407,7 +4341,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STRICTLOCKING" +HREF="#STRICTLOCKING" ><TT CLASS="PARAMETER" ><I @@ -4419,7 +4353,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#STRICTSYNC" +HREF="#STRICTSYNC" ><TT CLASS="PARAMETER" ><I @@ -4431,7 +4365,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#SYNCALWAYS" +HREF="#SYNCALWAYS" ><TT CLASS="PARAMETER" ><I @@ -4443,7 +4377,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USECLIENTDRIVER" +HREF="#USECLIENTDRIVER" ><TT CLASS="PARAMETER" ><I @@ -4455,7 +4389,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USER" +HREF="#USER" ><TT CLASS="PARAMETER" ><I @@ -4467,7 +4401,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USERNAME" +HREF="#USERNAME" ><TT CLASS="PARAMETER" ><I @@ -4479,7 +4413,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#USERS" +HREF="#USERS" ><TT CLASS="PARAMETER" ><I @@ -4491,7 +4425,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VALIDUSERS" +HREF="#VALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -4503,7 +4437,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VETOFILES" +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I @@ -4515,7 +4449,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VETOOPLOCKFILES" +HREF="#VETOOPLOCKFILES" ><TT CLASS="PARAMETER" ><I @@ -4527,19 +4461,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VFSPATH" -><TT -CLASS="PARAMETER" -><I ->vfs path</I -></TT -></A -></P -></LI -><LI -><P -><A -HREF="index.html#VFSOBJECT" +HREF="#VFSOBJECT" ><TT CLASS="PARAMETER" ><I @@ -4551,7 +4473,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VFSOPTIONS" +HREF="#VFSOPTIONS" ><TT CLASS="PARAMETER" ><I @@ -4563,7 +4485,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#VOLUME" +HREF="#VOLUME" ><TT CLASS="PARAMETER" ><I @@ -4575,7 +4497,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WIDELINKS" +HREF="#WIDELINKS" ><TT CLASS="PARAMETER" ><I @@ -4587,7 +4509,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITABLE" +HREF="#WRITABLE" ><TT CLASS="PARAMETER" ><I @@ -4599,7 +4521,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITECACHESIZE" +HREF="#WRITECACHESIZE" ><TT CLASS="PARAMETER" ><I @@ -4611,7 +4533,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITELIST" +HREF="#WRITELIST" ><TT CLASS="PARAMETER" ><I @@ -4623,7 +4545,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITEOK" +HREF="#WRITEOK" ><TT CLASS="PARAMETER" ><I @@ -4635,7 +4557,7 @@ CLASS="PARAMETER" ><LI ><P ><A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -4649,7 +4571,7 @@ CLASS="PARAMETER" ><DIV CLASS="REFSECT1" ><A -NAME="AEN1507" +NAME="AEN1492" ></A ><H2 >EXPLANATION OF EACH PARAMETER</H2 @@ -4660,57 +4582,9 @@ CLASS="VARIABLELIST" ><DL ><DT ><A -NAME="ABORTSHUTDOWNSCRIPT" -></A ->abort shutdown script (G)</DT -><DD -><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->This parameter only exists in the HEAD cvs branch</I -></SPAN -> - This a full path name to a script called by - <A -HREF="smbd.8.html" -TARGET="_top" -><B -CLASS="COMMAND" ->smbd(8)</B -></A -> that - should stop a shutdown procedure issued by the <A -HREF="index.html#SHUTDOWNSCRIPT" -><TT -CLASS="PARAMETER" -><I ->shutdown script</I -></TT -></A ->.</P -><P ->This command will be run as user.</P -><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->None</I -></SPAN ->.</P -><P ->Example: <B -CLASS="COMMAND" ->abort shutdown script = /sbin/shutdown -c</B -></P -></DD -><DT -><A NAME="ADDPRINTERCOMMAND" ></A ->addprinter command (G)</DT +>add printer command (G)</DT ><DD ><P >With the introduction of MS-RPC based printing @@ -4747,7 +4621,7 @@ CLASS="COMMAND" >The <TT CLASS="PARAMETER" ><I ->addprinter command</I +>add printer command</I ></TT > is automatically invoked with the following parameter (in @@ -4821,7 +4695,7 @@ CLASS="PARAMETER" >Once the <TT CLASS="PARAMETER" ><I ->addprinter command</I +>add printer command</I ></TT > has been executed, <B @@ -4838,15 +4712,15 @@ CLASS="COMMAND" > will return an ACCESS_DENIED error to the client.</P ><P >See also <A -HREF="index.html#DELETEPRINTERCOMMAND" +HREF="#DELETEPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I -> deleteprinter command</I +> delete printer command</I ></TT ></A >, <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -4855,7 +4729,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#SHOWADDPRINTERWIZARD" +HREF="#SHOWADDPRINTERWIZARD" ><TT CLASS="PARAMETER" ><I @@ -4865,12 +4739,8 @@ CLASS="PARAMETER" ></A ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -4977,11 +4847,11 @@ CLASS="PARAMETER" ><P > This parameter is only used for add file shares. To add printer shares, see the <A -HREF="index.html#ADDPRINTERCOMMAND" +HREF="#ADDPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I ->addprinter +>add printer command</I ></TT ></A @@ -4989,7 +4859,7 @@ CLASS="PARAMETER" </P ><P > See also <A -HREF="index.html#CHANGESHARECOMMAND" +HREF="#CHANGESHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -4998,7 +4868,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DELETESHARECOMMAND" +HREF="#DELETESHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -5009,12 +4879,8 @@ CLASS="PARAMETER" >. </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -5024,71 +4890,14 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="ADDMACHINESCRIPT" -></A ->add machine script (G)</DT -><DD -><P ->This is the full pathname to a script that will - be run by <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> when a machine is added - to it's domain using the administrator username and password method. </P -><P ->This option is only required when using sam back-ends tied to the - Unix uid method of RID calculation such as smbpasswd. This option is only - available in Samba 3.0.</P -><P ->Default: <B -CLASS="COMMAND" ->add machine script = <empty string> - </B -></P -><P ->Example: <B -CLASS="COMMAND" ->add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u - </B -></P -></DD -><DT -><A -NAME="ADSSERVER" -></A ->ads server (G)</DT -><DD -><P ->If this option is specified, samba does - not try to figure out what ads server to use itself, but - uses the specified ads server. Either one DNS name or IP - address can be used.</P -><P ->Default: <B -CLASS="COMMAND" ->ads server = </B -></P -><P ->Example: <B -CLASS="COMMAND" ->ads server = 192.168.1.2</B -></P -></DD -><DT -><A NAME="ADDUSERSCRIPT" ></A >add user script (G)</DT ><DD ><P >This is the full pathname to a script that will - be run <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN + be run <EM +>AS ROOT</EM > by <A HREF="smbd.8.html" TARGET="_top" @@ -5105,12 +4914,8 @@ HREF="smbd.8.html" TARGET="_top" >smbd</A > to create the required UNIX users - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->ON DEMAND</I -></SPAN + <EM +>ON DEMAND</EM > when a user accesses the Samba server.</P ><P >In order to use this option, <A @@ -5118,12 +4923,8 @@ HREF="smbd.8.html" TARGET="_top" >smbd</A > - must <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOT</I -></SPAN + must <EM +>NOT</EM > be set to <TT CLASS="PARAMETER" ><I @@ -5172,12 +4973,8 @@ CLASS="PARAMETER" CLASS="COMMAND" >smbd</B > will - call the specified script <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN + call the specified script <EM +>AS ROOT</EM >, expanding any <TT CLASS="PARAMETER" @@ -5195,7 +4992,7 @@ CLASS="COMMAND" match existing Windows NT accounts.</P ><P >See also <A -HREF="index.html#SECURITY" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -5203,7 +5000,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#PASSWORDSERVER" +HREF="#PASSWORDSERVER" > <TT CLASS="PARAMETER" ><I @@ -5212,7 +5009,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#DELETEUSERSCRIPT" +HREF="#DELETEUSERSCRIPT" ><TT CLASS="PARAMETER" ><I @@ -5224,7 +5021,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->add user script = <empty string> +>add user script = <empty string> </B ></P ><P @@ -5236,32 +5033,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="ADDGROUPSCRIPT" -></A ->add group script (G)</DT -><DD -><P ->This is the full pathname to a script that will - be run <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN -> by <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> when a new group is requested. It will expand any <TT -CLASS="PARAMETER" -><I ->%g</I -></TT -> to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. - </P -></DD -><DT -><A NAME="ADMINUSERS" ></A >admin users (S)</DT @@ -5275,12 +5046,8 @@ NAME="ADMINUSERS" this list will be able to do anything they like on the share, irrespective of file permissions.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no admin users</I -></SPAN +>Default: <EM +>no admin users</EM ></P ><P >Example: <B @@ -5290,58 +5057,13 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="ADDUSERTOGROUPSCRIPT" -></A ->add user to group script (G)</DT -><DD -><P ->Full path to the script that will be called when - a user is added to a group using the Windows NT domain administration - tools. It will be run by <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN ->. Any <TT -CLASS="PARAMETER" -><I ->%g</I -></TT -> will be - replaced with the group name and any <TT -CLASS="PARAMETER" -><I ->%u</I -></TT -> will - be replaced with the user name. - </P -><P ->Default: <B -CLASS="COMMAND" ->add user to group script = </B -></P -><P ->Example: <B -CLASS="COMMAND" ->add user to group script = /usr/sbin/adduser %u %g</B -></P -></DD -><DT -><A NAME="ALLOWHOSTS" ></A >allow hosts (S)</DT ><DD ><P >Synonym for <A -HREF="index.html#HOSTSALLOW" +HREF="#HOSTSALLOW" > <TT CLASS="PARAMETER" ><I @@ -5352,45 +5074,13 @@ CLASS="PARAMETER" ></DD ><DT ><A -NAME="ALGORITHMICRIDBASE" -></A ->algorithmic rid base (G)</DT -><DD -><P ->This determines how Samba will use its - algorithmic mapping from uids/gid to the RIDs needed to construct - NT Security Identifiers.</P -><P ->Setting this option to a larger value could be useful to sites - transitioning from WinNT and Win2k, as existing user and - group rids would otherwise clash with sytem users etc. - </P -><P ->All UIDs and GIDs must be able to be resolved into SIDs for - the correct operation of ACLs on the server. As such the algorithmic - mapping can't be 'turned off', but pushing it 'out of the way' should - resolve the issues. Users and groups can then be assigned 'low' RIDs - in arbitary-rid supporting backends. </P -><P ->Default: <B -CLASS="COMMAND" ->algorithmic rid base = 1000</B -></P -><P ->Example: <B -CLASS="COMMAND" ->algorithmic rid base = 100000</B -></P -></DD -><DT -><A NAME="ALLOWTRUSTEDDOMAINS" ></A >allow trusted domains (G)</DT ><DD ><P >This option only takes effect when the <A -HREF="index.html#SECURITY" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -5473,7 +5163,7 @@ NAME="ANNOUNCEVERSION" ><P >This specifies the major and minor version numbers that nmbd will use when announcing itself as a server. The default - is 4.2. Do not change this parameter unless you have a specific + is 4.5. Do not change this parameter unless you have a specific need to set a Samba server to be a downlevel server.</P ><P >Default: <B @@ -5494,7 +5184,7 @@ NAME="AUTOSERVICES" ><DD ><P >This is a synonym for the <A -HREF="index.html#PRELOAD" +HREF="#PRELOAD" > <TT CLASS="PARAMETER" ><I @@ -5505,43 +5195,6 @@ CLASS="PARAMETER" ></DD ><DT ><A -NAME="AUTHMETHODS" -></A ->auth methods (G)</DT -><DD -><P ->This option allows the administrator to chose what - authentication methods <B -CLASS="COMMAND" ->smbd</B -> will use when authenticating - a user. This option defaults to sensible values based on <A -HREF="index.html#SECURITY" -><TT -CLASS="PARAMETER" -><I -> security</I -></TT -></A ->. - - Each entry in the list attempts to authenticate the user in turn, until - the user authenticates. In practice only one method will ever actually - be able to complete the authentication. - </P -><P ->Default: <B -CLASS="COMMAND" ->auth methods = <empty string></B -></P -><P ->Example: <B -CLASS="COMMAND" ->auth methods = guest sam ntdomain</B -></P -></DD -><DT -><A NAME="AVAILABLE" ></A >available (S)</DT @@ -5553,12 +5206,8 @@ CLASS="PARAMETER" ><I >available = no</I ></TT ->, then <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->ALL</I -></SPAN +>, then <EM +>ALL</EM > attempts to connect to the service will fail. Such failures are logged.</P @@ -5594,7 +5243,7 @@ CLASS="COMMAND" >nmbd</B > to bind to ports 137 and 138 on the interfaces listed in the <A -HREF="index.html#INTERFACES" +HREF="#INTERFACES" >interfaces</A > parameter. <B CLASS="COMMAND" @@ -5648,7 +5297,7 @@ TARGET="_top" >smbd(8)</A > to bind only to the interface list given in the <A -HREF="index.html#INTERFACES" +HREF="#INTERFACES" > interfaces</A > parameter. This restricts the networks that <B @@ -5665,12 +5314,8 @@ CLASS="PARAMETER" >bind interfaces only</I ></TT > is set then - unless the network address <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->127.0.0.1</I -></SPAN + unless the network address <EM +>127.0.0.1</EM > is added to the <TT CLASS="PARAMETER" @@ -5699,12 +5344,8 @@ CLASS="COMMAND" CLASS="COMMAND" >smbpasswd</B > - by default connects to the <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->localhost - 127.0.0.1</I -></SPAN + by default connects to the <EM +>localhost - 127.0.0.1</EM > address as an SMB client to issue the password change request. If <TT @@ -5713,12 +5354,8 @@ CLASS="PARAMETER" >bind interfaces only</I ></TT > is set then unless the - network address <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->127.0.0.1</I -></SPAN + network address <EM +>127.0.0.1</EM > is added to the <TT CLASS="PARAMETER" @@ -5767,19 +5404,11 @@ CLASS="COMMAND" CLASS="COMMAND" >nmbd</B > at the address - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->127.0.0.1</I -></SPAN + <EM +>127.0.0.1</EM > to determine if they are running. - Not adding <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->127.0.0.1</I -></SPAN + Not adding <EM +>127.0.0.1</EM > will cause <B CLASS="COMMAND" > smbd</B @@ -5806,6 +5435,41 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="BLOCKSIZE" +></A +>block size (S)</DT +><DD +><P +>This parameter controls the behavior of <A +HREF="smbd.8.html" +TARGET="_top" +>smbd(8)</A +> when reporting disk free sizes. + By default, this reports a disk block size of 1024 bytes.</P +><P +>Changing this parameter may have some effect on the + efficiency of client writes, this is not yet confirmed. This + parameter was added to allow advanced administrators to change + it (usually to a higher value) and test the effect it has on + client write performance without re-compiling the code. As this + is an experimental option it may be removed in a future release. + </P +><P +>Changing this option does not change the disk free reporting + size, just the block size unit reported to the client.</P +><P +>Default: <B +CLASS="COMMAND" +>block size = 1024</B +></P +><P +>Example: <B +CLASS="COMMAND" +>block size = 65536</B +></P +></DD +><DT +><A NAME="BLOCKINGLOCKS" ></A >blocking locks (S)</DT @@ -5839,50 +5503,13 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="BLOCKSIZE" -></A ->block size (S)</DT -><DD -><P ->This parameter controls the behavior of - <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> when reporting disk free - sizes. By default, this reports a disk block size of 1024 bytes. - </P -><P ->Changing this parameter may have some effect on the - efficiency of client writes, this is not yet confirmed. This - parameter was added to allow advanced administrators to change - it (usually to a higher value) and test the effect it has on - client write performance without re-compiling the code. As this - is an experimental option it may be removed in a future release. - </P -><P ->Changing this option does not change the disk free reporting - size, just the block size unit reported to the client.</P -><P ->Default: <B -CLASS="COMMAND" ->block size = 1024</B -></P -><P ->Example: <B -CLASS="COMMAND" ->block size = 65536</B -></P -></DD -><DT -><A NAME="BROWSABLE" ></A >browsable (S)</DT ><DD ><P >See the <A -HREF="index.html#BROWSEABLE" +HREF="#BROWSEABLE" ><TT CLASS="PARAMETER" ><I @@ -5944,7 +5571,7 @@ NAME="CASESENSITIVE" ><DD ><P >See the discussion in the section <A -HREF="index.html#AEN203" +HREF="#AEN203" >NAME MANGLING</A >.</P ><P @@ -5961,7 +5588,7 @@ NAME="CASESIGNAMES" ><DD ><P >Synonym for <A -HREF="index.html#CASESENSITIVE" +HREF="#CASESENSITIVE" >case sensitive</A >.</P @@ -6105,7 +5732,7 @@ CLASS="PARAMETER" </P ><P > See also <A -HREF="index.html#ADDSHARECOMMAND" +HREF="#ADDSHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -6114,7 +5741,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DELETESHARECOMMAND" +HREF="#DELETESHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -6125,12 +5752,8 @@ CLASS="PARAMETER" >. </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -6140,6 +5763,504 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="CHARACTERSET" +></A +>character set (G)</DT +><DD +><P +>This allows <A +HREF="smbd.8.html" +TARGET="_top" +>smbd</A +> to map incoming filenames + from a DOS Code page (see the <A +HREF="#CLIENTCODEPAGE" +>client + code page</A +> parameter) to several built in UNIX character sets. + The built in code page translations are:</P +><P +></P +><UL +><LI +><P +><TT +CLASS="CONSTANT" +>ISO8859-1</TT +> : Western European + UNIX character set. The parameter <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> + <EM +>MUST</EM +> be set to code page 850 if the + <TT +CLASS="PARAMETER" +><I +>character set</I +></TT +> parameter is set to + <TT +CLASS="CONSTANT" +>ISO8859-1</TT +> in order for the conversion to the + UNIX character set to be done correctly.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>ISO8859-2</TT +> : Eastern European + UNIX character set. The parameter <TT +CLASS="PARAMETER" +><I +>client code page + </I +></TT +> <EM +>MUST</EM +> be set to code page 852 if + the <TT +CLASS="PARAMETER" +><I +> character set</I +></TT +> parameter is set + to <TT +CLASS="CONSTANT" +>ISO8859-2</TT +> in order for the conversion + to the UNIX character set to be done correctly. </P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>ISO8859-5</TT +> : Russian Cyrillic + UNIX character set. The parameter <TT +CLASS="PARAMETER" +><I +>client code page + </I +></TT +> <EM +>MUST</EM +> be set to code page + 866 if the <TT +CLASS="PARAMETER" +><I +>character set </I +></TT +> parameter is + set to <TT +CLASS="CONSTANT" +>ISO8859-5</TT +> in order for the conversion + to the UNIX character set to be done correctly. </P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>ISO8859-7</TT +> : Greek UNIX + character set. The parameter <TT +CLASS="PARAMETER" +><I +>client code page + </I +></TT +> <EM +>MUST</EM +> be set to code page + 737 if the <TT +CLASS="PARAMETER" +><I +>character set</I +></TT +> parameter is + set to <TT +CLASS="CONSTANT" +>ISO8859-7</TT +> in order for the conversion + to the UNIX character set to be done correctly.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>KOI8-R</TT +> : Alternate mapping + for Russian Cyrillic UNIX character set. The parameter + <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> <EM +>MUST</EM +> + be set to code page 866 if the <TT +CLASS="PARAMETER" +><I +>character set</I +></TT +> + parameter is set to <TT +CLASS="CONSTANT" +>KOI8-R</TT +> in order for the + conversion to the UNIX character set to be done correctly.</P +></LI +></UL +><P +><EM +>BUG</EM +>. These MSDOS code page to UNIX character + set mappings should be dynamic, like the loading of MS DOS code pages, + not static.</P +><P +>Normally this parameter is not set, meaning no filename + translation is done.</P +><P +>Default: <B +CLASS="COMMAND" +>character set = <empty string></B +></P +><P +>Example: <B +CLASS="COMMAND" +>character set = ISO8859-1</B +></P +></DD +><DT +><A +NAME="CLIENTCODEPAGE" +></A +>client code page (G)</DT +><DD +><P +>This parameter specifies the DOS code page + that the clients accessing Samba are using. To determine what code + page a Windows or DOS client is using, open a DOS command prompt + and type the command <B +CLASS="COMMAND" +>chcp</B +>. This will output + the code page. The default for USA MS-DOS, Windows 95, and + Windows NT releases is code page 437. The default for western + European releases of the above operating systems is code page 850.</P +><P +>This parameter tells <A +HREF="smbd.8.html" +TARGET="_top" +>smbd(8)</A +> + which of the <TT +CLASS="FILENAME" +>codepage.<TT +CLASS="REPLACEABLE" +><I +>XXX</I +></TT +> + </TT +> files to dynamically load on startup. These files, + described more fully in the manual page <A +HREF="make_smbcodepage.1.html" +TARGET="_top" +> <B +CLASS="COMMAND" +>make_smbcodepage(1)</B +></A +>, tell <B +CLASS="COMMAND" +> smbd</B +> how to map lower to upper case characters to provide + the case insensitivity of filenames that Windows clients expect.</P +><P +>Samba currently ships with the following code page files :</P +><P +></P +><UL +><LI +><P +>Code Page 437 - MS-DOS Latin US</P +></LI +><LI +><P +>Code Page 737 - Windows '95 Greek</P +></LI +><LI +><P +>Code Page 850 - MS-DOS Latin 1</P +></LI +><LI +><P +>Code Page 852 - MS-DOS Latin 2</P +></LI +><LI +><P +>Code Page 861 - MS-DOS Icelandic</P +></LI +><LI +><P +>Code Page 866 - MS-DOS Cyrillic</P +></LI +><LI +><P +>Code Page 932 - MS-DOS Japanese SJIS</P +></LI +><LI +><P +>Code Page 936 - MS-DOS Simplified Chinese</P +></LI +><LI +><P +>Code Page 949 - MS-DOS Korean Hangul</P +></LI +><LI +><P +>Code Page 950 - MS-DOS Traditional Chinese</P +></LI +></UL +><P +>Thus this parameter may have any of the values 437, 737, 850, 852, + 861, 932, 936, 949, or 950. If you don't find the codepage you need, + read the comments in one of the other codepage files and the + <B +CLASS="COMMAND" +>make_smbcodepage(1)</B +> man page and write one. Please + remember to donate it back to the Samba user community.</P +><P +>This parameter co-operates with the <TT +CLASS="PARAMETER" +><I +>valid + chars</I +></TT +> parameter in determining what characters are + valid in filenames and how capitalization is done. If you set both + this parameter and the <TT +CLASS="PARAMETER" +><I +>valid chars</I +></TT +> parameter + the <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> parameter + <EM +>MUST</EM +> be set before the <TT +CLASS="PARAMETER" +><I +>valid + chars</I +></TT +> parameter in the <TT +CLASS="FILENAME" +>smb.conf</TT +> + file. The <TT +CLASS="PARAMETER" +><I +>valid chars</I +></TT +> string will then + augment the character settings in the <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> + parameter.</P +><P +>If not set, <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> defaults + to 850.</P +><P +>See also : <A +HREF="#VALIDCHARS" +><TT +CLASS="PARAMETER" +><I +>valid + chars</I +></TT +></A +>, <A +HREF="#CODEPAGEDIRECTORY" +> <TT +CLASS="PARAMETER" +><I +>code page directory</I +></TT +></A +></P +><P +>Default: <B +CLASS="COMMAND" +>client code page = 850</B +></P +><P +>Example: <B +CLASS="COMMAND" +>client code page = 936</B +></P +></DD +><DT +><A +NAME="CODEPAGEDIRECTORY" +></A +>code page directory (G)</DT +><DD +><P +>Define the location of the various client code page + files.</P +><P +>See also <A +HREF="#CLIENTCODEPAGE" +><TT +CLASS="PARAMETER" +><I +>client + code page</I +></TT +></A +></P +><P +>Default: <B +CLASS="COMMAND" +>code page directory = ${prefix}/lib/codepages + </B +></P +><P +>Example: <B +CLASS="COMMAND" +>code page directory = /usr/share/samba/codepages + </B +></P +></DD +><DT +><A +NAME="CODINGSYSTEM" +></A +>coding system (G)</DT +><DD +><P +>This parameter is used to determine how incoming + Shift-JIS Japanese characters are mapped from the incoming <A +HREF="#CLIENTCODEPAGE" +><TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> + </A +> used by the client, into file names in the UNIX filesystem. + Only useful if <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> is set to + 932 (Japanese Shift-JIS). The options are :</P +><P +></P +><UL +><LI +><P +><TT +CLASS="CONSTANT" +>SJIS</TT +> - Shift-JIS. Does no + conversion of the incoming filename.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>JIS8, J8BB, J8BH, J8@B, + J8@J, J8@H </TT +> - Convert from incoming Shift-JIS to eight + bit JIS code with different shift-in, shift out codes.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>JIS7, J7BB, J7BH, J7@B, J7@J, + J7@H </TT +> - Convert from incoming Shift-JIS to seven bit + JIS code with different shift-in, shift out codes.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>JUNET, JUBB, JUBH, JU@B, JU@J, JU@H </TT +> + - Convert from incoming Shift-JIS to JUNET code with different shift-in, + shift out codes.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>EUC</TT +> - Convert an incoming + Shift-JIS character to EUC code.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>HEX</TT +> - Convert an incoming + Shift-JIS character to a 3 byte hex representation, i.e. + <TT +CLASS="CONSTANT" +>:AB</TT +>.</P +></LI +><LI +><P +><TT +CLASS="CONSTANT" +>CAP</TT +> - Convert an incoming + Shift-JIS character to the 3 byte hex representation used by + the Columbia AppleTalk Program (CAP), i.e. <TT +CLASS="CONSTANT" +>:AB</TT +>. + This is used for compatibility between Samba and CAP.</P +></LI +></UL +><P +>Default: <B +CLASS="COMMAND" +>coding system = <empty value></B +> + </P +></DD +><DT +><A NAME="COMMENT" ></A >comment (S)</DT @@ -6155,7 +6276,7 @@ CLASS="COMMAND" ><P >If you want to set the string that is displayed next to the machine name then see the <A -HREF="index.html#SERVERSTRING" +HREF="#SERVERSTRING" ><TT CLASS="PARAMETER" ><I @@ -6164,12 +6285,8 @@ CLASS="PARAMETER" ></A > parameter.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->No comment string</I -></SPAN +>Default: <EM +>No comment string</EM ></P ><P >Example: <B @@ -6226,12 +6343,8 @@ NAME="COPY" copied must occur earlier in the configuration file than the service doing the copying.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no value</I -></SPAN +>Default: <EM +>no value</EM ></P ><P >Example: <B @@ -6248,7 +6361,7 @@ NAME="CREATEMASK" ><P >A synonym for this parameter is <A -HREF="index.html#CREATEMODE" +HREF="#CREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -6262,12 +6375,8 @@ CLASS="PARAMETER" calculated according to the mapping from DOS modes to UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may be thought of as a bit-wise - MASK for the UNIX modes of a file. Any bit <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + MASK for the UNIX modes of a file. Any bit <EM +>not</EM > set here will be removed from the modes set on a file when it is created.</P @@ -6277,7 +6386,7 @@ CLASS="EMPHASIS" ><P >Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the <A -HREF="index.html#FORCECREATEMODE" +HREF="#FORCECREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -6289,7 +6398,7 @@ CLASS="PARAMETER" ><P >This parameter does not affect directory modes. See the parameter <A -HREF="index.html#DIRECTORYMODE" +HREF="#DIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -6300,7 +6409,7 @@ CLASS="PARAMETER" > for details.</P ><P >See also the <A -HREF="index.html#FORCECREATEMODE" +HREF="#FORCECREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -6310,7 +6419,7 @@ CLASS="PARAMETER" ></A > parameter for forcing particular mode bits to be set on created files. See also the <A -HREF="index.html#DIRECTORYMODE" +HREF="#DIRECTORYMODE" > <TT CLASS="PARAMETER" ><I @@ -6319,7 +6428,7 @@ CLASS="PARAMETER" ></A > parameter for masking mode bits on created directories. See also the <A -HREF="index.html#INHERITPERMISSIONS" +HREF="#INHERITPERMISSIONS" > <TT CLASS="PARAMETER" ><I @@ -6331,7 +6440,7 @@ CLASS="PARAMETER" >Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the administrator wishes to enforce a mask on access control lists also, they need to set the <A -HREF="index.html#SECURITYMASK" +HREF="#SECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -6358,7 +6467,7 @@ NAME="CREATEMODE" ><DD ><P >This is a synonym for <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I @@ -6374,13 +6483,9 @@ NAME="CSCPOLICY" >csc policy (S)</DT ><DD ><P ->This stands for <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>This stands for <EM >client-side caching - policy</I -></SPAN + policy</EM >, and specifies how clients capable of offline caching will cache the files in the share. The valid values are: manual, documents, programs, disable.</P @@ -6453,7 +6558,7 @@ NAME="DEBUGHIRESTIMESTAMP" message header when turned on.</P ><P >Note that the parameter <A -HREF="index.html#DEBUGTIMESTAMP" +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I @@ -6485,7 +6590,7 @@ TARGET="_top" to the timestamp message headers in the logfile when turned on.</P ><P >Note that the parameter <A -HREF="index.html#DEBUGTIMESTAMP" +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I @@ -6509,7 +6614,7 @@ NAME="DEBUGTIMESTAMP" ><P >Samba 2.2 debug log messages are timestamped by default. If you are running at a high <A -HREF="index.html#DEBUGLEVEL" +HREF="#DEBUGLEVEL" > <TT CLASS="PARAMETER" ><I @@ -6538,7 +6643,7 @@ NAME="DEBUGUID" in the log file if turned on.</P ><P >Note that the parameter <A -HREF="index.html#DEBUGTIMESTAMP" +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I @@ -6561,7 +6666,7 @@ NAME="DEBUGLEVEL" ><DD ><P >Synonym for <A -HREF="index.html#LOGLEVEL" +HREF="#LOGLEVEL" ><TT CLASS="PARAMETER" ><I @@ -6578,7 +6683,7 @@ NAME="DEFAULT" ><DD ><P >A synonym for <A -HREF="index.html#DEFAULTSERVICE" +HREF="#DEFAULTSERVICE" ><TT CLASS="PARAMETER" ><I @@ -6595,10 +6700,10 @@ NAME="DEFAULTCASE" ><DD ><P >See the section on <A -HREF="index.html#AEN203" +HREF="#AEN203" > NAME MANGLING</A >. Also note the <A -HREF="index.html#SHORTPRESERVECASE" +HREF="#SHORTPRESERVECASE" > <TT CLASS="PARAMETER" ><I @@ -6620,7 +6725,7 @@ NAME="DEFAULTDEVMODE" ><DD ><P >This parameter is only applicable to <A -HREF="index.html#PRINTOK" +HREF="#PRINTOK" >printable</A > services. When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba @@ -6672,12 +6777,8 @@ NAME="DEFAULTSERVICE" ><P >This parameter specifies the name of a service which will be connected to if the service actually requested cannot - be found. Note that the square brackets are <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOT</I -></SPAN + be found. Note that the square brackets are <EM +>NOT</EM > given in the parameter value (see example below).</P ><P @@ -6686,7 +6787,7 @@ CLASS="EMPHASIS" service results in an error.</P ><P >Typically the default service would be a <A -HREF="index.html#GUESTOK" +HREF="#GUESTOK" > <TT CLASS="PARAMETER" ><I @@ -6694,7 +6795,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#READONLY" +HREF="#READONLY" > <TT CLASS="PARAMETER" ><I @@ -6719,6 +6820,12 @@ CLASS="PARAMETER" ><P >Example:</P ><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD ><PRE CLASS="PROGRAMLISTING" >[global] @@ -6727,39 +6834,16 @@ CLASS="PROGRAMLISTING" [pub] path = /%S </PRE +></TD +></TR +></TABLE ></P ></DD ><DT ><A -NAME="DELETEGROUPSCRIPT" -></A ->delete group script (G)</DT -><DD -><P ->This is the full pathname to a script that will - be run <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN -> by <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> when a group is requested to be deleted. It will expand any <TT -CLASS="PARAMETER" -><I ->%g</I -></TT -> to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. - </P -></DD -><DT -><A NAME="DELETEPRINTERCOMMAND" ></A ->deleteprinter command (G)</DT +>delete printer command (G)</DT ><DD ><P >With the introduction of MS-RPC based printer @@ -6784,7 +6868,7 @@ CLASS="FILENAME" >The <TT CLASS="PARAMETER" ><I ->deleteprinter command</I +>delete printer command</I ></TT > is automatically called with only one parameter: <TT @@ -6797,7 +6881,7 @@ CLASS="PARAMETER" >Once the <TT CLASS="PARAMETER" ><I ->deleteprinter command</I +>delete printer command</I ></TT > has been executed, <B @@ -6814,15 +6898,15 @@ CLASS="COMMAND" > will return an ACCESS_DENIED error to the client.</P ><P >See also <A -HREF="index.html#ADDPRINTERCOMMAND" +HREF="#ADDPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I -> addprinter command</I +> add printer command</I ></TT ></A >, <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -6831,7 +6915,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#SHOWADDPRINTERWIZARD" +HREF="#SHOWADDPRINTERWIZARD" ><TT CLASS="PARAMETER" ><I @@ -6841,12 +6925,8 @@ CLASS="PARAMETER" ></A ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -6950,11 +7030,11 @@ CLASS="PARAMETER" ><P > This parameter is only used to remove file shares. To delete printer shares, see the <A -HREF="index.html#DELETEPRINTERCOMMAND" +HREF="#DELETEPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I ->deleteprinter +>delete printer command</I ></TT ></A @@ -6962,7 +7042,7 @@ CLASS="PARAMETER" </P ><P > See also <A -HREF="index.html#ADDSHARECOMMAND" +HREF="#ADDSHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -6971,7 +7051,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#CHANGESHARECOMMAND" +HREF="#CHANGESHARECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -6982,12 +7062,8 @@ CLASS="PARAMETER" >. </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -7003,83 +7079,142 @@ NAME="DELETEUSERSCRIPT" ><DD ><P >This is the full pathname to a script that will - be run by <A + be run <EM +>AS ROOT</EM +> by <A HREF="smbd.8.html" TARGET="_top" -><B +> <B CLASS="COMMAND" >smbd(8)</B ></A -> - when managing user's with remote RPC (NT) tools. - </P +> under special circumstances + described below.</P ><P ->This script is called when a remote client removes a user - from the server, normally using 'User Manager for Domains' or - <B +>Normally, a Samba server requires that UNIX users are + created for all users accessing files on this server. For sites + that use Windows NT account databases as their primary user database + creating these users and keeping the user list in sync with the + Windows NT PDC is an onerous task. This option allows <B CLASS="COMMAND" ->rpcclient</B ->. - </P -><P ->This script should delete the given UNIX username. - </P +> smbd</B +> to delete the required UNIX users <EM +>ON + DEMAND</EM +> when a user accesses the Samba server and the + Windows NT user no longer exists.</P ><P ->Default: <B +>In order to use this option, <B CLASS="COMMAND" ->delete user script = <empty string> - </B -></P +>smbd</B +> must be + set to <TT +CLASS="PARAMETER" +><I +>security = domain</I +></TT +> or <TT +CLASS="PARAMETER" +><I +>security = + user</I +></TT +> and <TT +CLASS="PARAMETER" +><I +>delete user script</I +></TT +> + must be set to a full pathname for a script + that will delete a UNIX user given one argument of <TT +CLASS="PARAMETER" +><I +>%u</I +></TT +>, + which expands into the UNIX user name to delete.</P ><P ->Example: <B +>When the Windows user attempts to access the Samba server, + at <EM +>login</EM +> (session setup in the SMB protocol) + time, <B CLASS="COMMAND" ->delete user script = /usr/local/samba/bin/del_user - %u</B -></P -></DD -><DT -><A -NAME="DELETEUSERFROMGROUPSCRIPT" -></A ->delete user from group script (G)</DT -><DD -><P ->Full path to the script that will be called when - a user is removed from a group using the Windows NT domain administration - tools. It will be run by <A -HREF="smbd.8.html" -TARGET="_top" ->smbd(8)</A -> - <SPAN -CLASS="emphasis" +>smbd</B +> contacts the <A +HREF="#PASSWORDSERVER" +> <TT +CLASS="PARAMETER" ><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN ->. Any <TT +>password server</I +></TT +></A +> and attempts to authenticate + the given user with the given password. If the authentication fails + with the specific Domain error code meaning that the user no longer + exists then <B +CLASS="COMMAND" +>smbd</B +> attempts to find a UNIX user in + the UNIX password database that matches the Windows user account. If + this lookup succeeds, and <TT CLASS="PARAMETER" ><I ->%g</I +>delete user script</I ></TT -> will be - replaced with the group name and any <TT +> is + set then <B +CLASS="COMMAND" +>smbd</B +> will all the specified script + <EM +>AS ROOT</EM +>, expanding any <TT CLASS="PARAMETER" ><I >%u</I ></TT -> will - be replaced with the user name. - </P +> + argument to be the user name to delete.</P +><P +>This script should delete the given UNIX username. In this way, + UNIX users are dynamically deleted to match existing Windows NT + accounts.</P +><P +>See also <A +HREF="#SECURITYEQUALSDOMAIN" +>security = domain</A +>, + <A +HREF="#PASSWORDSERVER" +><TT +CLASS="PARAMETER" +><I +>password server</I +></TT +> + </A +>, <A +HREF="#ADDUSERSCRIPT" +><TT +CLASS="PARAMETER" +><I +>add user script</I +></TT +> + </A +>.</P ><P >Default: <B CLASS="COMMAND" ->delete user from group script = </B +>delete user script = <empty string> + </B ></P ><P >Example: <B CLASS="COMMAND" ->delete user from group script = /usr/sbin/deluser %u %g</B +>delete user script = /usr/local/samba/bin/del_user + %u</B ></P ></DD ><DT @@ -7092,7 +7227,7 @@ NAME="DELETEVETOFILES" >This option is used when Samba is attempting to delete a directory that contains one or more vetoed directories (see the <A -HREF="index.html#VETOFILES" +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I @@ -7128,7 +7263,7 @@ CLASS="COMMAND" is deleted (so long as the user has permissions to do so).</P ><P >See also the <A -HREF="index.html#VETOFILES" +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I @@ -7151,7 +7286,7 @@ NAME="DENYHOSTS" ><DD ><P >Synonym for <A -HREF="index.html#HOSTSDENY" +HREF="#HOSTSDENY" ><TT CLASS="PARAMETER" ><I @@ -7196,23 +7331,15 @@ CLASS="FILENAME" third return value can give the block size in bytes. The default blocksize is 1024 bytes.</P ><P ->Note: Your script should <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOT</I -></SPAN +>Note: Your script should <EM +>NOT</EM > be setuid or setgid and should be owned by (and writeable only by) root!</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >By default internal routines for determining the disk capacity and remaining space will be used. - </I -></SPAN + </EM ></P ><P >Example: <B @@ -7223,22 +7350,40 @@ CLASS="COMMAND" ><P >Where the script dfree (which must be made executable) could be:</P ><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD ><PRE CLASS="PROGRAMLISTING" > #!/bin/sh df $1 | tail -1 | awk '{print $2" "$4}' </PRE +></TD +></TR +></TABLE ></P ><P >or perhaps (on Sys V based systems):</P ><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD ><PRE CLASS="PROGRAMLISTING" > #!/bin/sh /usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}' </PRE +></TD +></TR +></TABLE ></P ><P >Note that you may have to replace the command names @@ -7252,7 +7397,7 @@ NAME="DIRECTORY" ><DD ><P >Synonym for <A -HREF="index.html#PATH" +HREF="#PATH" ><TT CLASS="PARAMETER" ><I @@ -7277,12 +7422,8 @@ NAME="DIRECTORYMASK" calculated according to the mapping from DOS modes to UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may be thought of as a bit-wise MASK for - the UNIX modes of a directory. Any bit <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + the UNIX modes of a directory. Any bit <EM +>not</EM > set here will be removed from the modes set on a directory when it is created.</P @@ -7293,7 +7434,7 @@ CLASS="EMPHASIS" ><P >Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the <A -HREF="index.html#FORCEDIRECTORYMODE" +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -7307,7 +7448,7 @@ CLASS="PARAMETER" >Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the administrator wishes to enforce a mask on access control lists also, they need to set the <A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -7317,7 +7458,7 @@ CLASS="PARAMETER" >.</P ><P >See the <A -HREF="index.html#FORCEDIRECTORYMODE" +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -7329,7 +7470,7 @@ CLASS="PARAMETER" bits to always be set on created directories.</P ><P >See also the <A -HREF="index.html#CREATEMODE" +HREF="#CREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -7339,7 +7480,7 @@ CLASS="PARAMETER" ></A > parameter for masking mode bits on created files, and the <A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -7350,7 +7491,7 @@ CLASS="PARAMETER" > parameter.</P ><P >Also refer to the <A -HREF="index.html#INHERITPERMISSIONS" +HREF="#INHERITPERMISSIONS" ><TT CLASS="PARAMETER" ><I @@ -7377,7 +7518,7 @@ NAME="DIRECTORYMODE" ><DD ><P >Synonym for <A -HREF="index.html#DIRECTORYMASK" +HREF="#DIRECTORYMASK" ><TT CLASS="PARAMETER" ><I @@ -7408,12 +7549,8 @@ NAME="DIRECTORYSECURITYMASK" meaning a user is allowed to modify all the user/group/world permissions on a directory.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -7424,7 +7561,7 @@ CLASS="CONSTANT" >.</P ><P >See also the <A -HREF="index.html#FORCEDIRECTORYSECURITYMODE" +HREF="#FORCEDIRECTORYSECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -7432,7 +7569,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#SECURITYMASK" +HREF="#SECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -7441,7 +7578,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#FORCESECURITYMODE" +HREF="#FORCESECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -7463,37 +7600,12 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="DISABLENETBIOS" -></A ->disable netbios (G)</DT -><DD -><P ->Enabling this parameter will disable netbios support - in Samba. Netbios is the only available form of browsing in - all windows versions except for 2000 and XP. </P -><P ->Note that clients that only support netbios won't be able to - see your samba server when netbios support is disabled. - </P -><P ->Default: <B -CLASS="COMMAND" ->disable netbios = no</B -></P -><P ->Example: <B -CLASS="COMMAND" ->disable netbios = yes</B -></P -></DD -><DT -><A NAME="DISABLESPOOLSS" ></A >disable spoolss (G)</DT ><DD ><P ->Enabling this parameter will disable Samba's support +>Enabling this parameter will disables Samba's support for the SPOOLSS set of MS-RPC's and will yield identical behavior as Samba 2.0.x. Windows NT/2000 clients will downgrade to using Lanman style printing commands. Windows 9x/ME will be uneffected by @@ -7502,17 +7614,13 @@ NAME="DISABLESPOOLSS" Wizard or by using the NT printer properties dialog window. It will also disable the capability of Windows NT/2000 clients to download print drivers from the Samba host upon demand. - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Be very careful about enabling this parameter.</I -></SPAN + <EM +>Be very careful about enabling this parameter.</EM > </P ><P >See also <A -HREF="index.html#USECLIENTDRIVER" +HREF="#USECLIENTDRIVER" >use client driver</A > </P @@ -7524,31 +7632,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="DISPLAYCHARSET" -></A ->display charset (G)</DT -><DD -><P ->Specifies the charset that samba will use - to print messages to stdout and stderr and SWAT will use. - Should generally be the same as the <B -CLASS="COMMAND" ->unix charset</B ->. - </P -><P ->Default: <B -CLASS="COMMAND" ->display charset = ASCII</B -></P -><P ->Example: <B -CLASS="COMMAND" ->display charset = UTF8</B -></P -></DD -><DT -><A NAME="DNSPROXY" ></A >dns proxy (G)</DT @@ -7576,7 +7659,7 @@ CLASS="COMMAND" action.</P ><P >See also the parameter <A -HREF="index.html#WINSSUPPORT" +HREF="#WINSSUPPORT" ><TT CLASS="PARAMETER" ><I @@ -7610,7 +7693,7 @@ CLASS="FILENAME" </P ><P >See also <A -HREF="index.html#DOMAINGUESTGROUP" +HREF="#DOMAINGUESTGROUP" ><TT CLASS="PARAMETER" ><I @@ -7619,7 +7702,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DOMAINLOGONS" +HREF="#DOMAINLOGONS" ><TT CLASS="PARAMETER" ><I @@ -7630,12 +7713,8 @@ CLASS="PARAMETER" > </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no domain administrators</I -></SPAN +>Default: <EM +>no domain administrators</EM ></P ><P >Example: <B @@ -7663,7 +7742,7 @@ CLASS="FILENAME" </P ><P >See also <A -HREF="index.html#DOMAINADMINGROUP" +HREF="#DOMAINADMINGROUP" ><TT CLASS="PARAMETER" ><I @@ -7672,7 +7751,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DOMAINLOGONS" +HREF="#DOMAINLOGONS" ><TT CLASS="PARAMETER" ><I @@ -7683,12 +7762,8 @@ CLASS="PARAMETER" > </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no domain guests</I -></SPAN +>Default: <EM +>no domain guests</EM ></P ><P >Example: <B @@ -7708,7 +7783,7 @@ CLASS="CONSTANT" >true</TT >, the Samba server will serve Windows 95/98 Domain logons for the <A -HREF="index.html#WORKGROUP" +HREF="#WORKGROUP" > <TT CLASS="PARAMETER" ><I @@ -7750,7 +7825,7 @@ CLASS="COMMAND" > to claim a special domain specific NetBIOS name that identifies it as a domain master browser for its given <A -HREF="index.html#WORKGROUP" +HREF="#WORKGROUP" > <TT CLASS="PARAMETER" ><I @@ -7810,7 +7885,7 @@ CLASS="PARAMETER" strangely and may fail.</P ><P >If <A -HREF="index.html#DOMAINLOGONS" +HREF="#DOMAINLOGONS" ><B CLASS="COMMAND" >domain logons = yes</B @@ -7867,13 +7942,9 @@ CLASS="FILENAME" >. Experimentation is the best policy :-) </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >none (i.e., all directories are OK - to descend)</I -></SPAN + to descend)</EM ></P ><P >Example: <B @@ -7883,28 +7954,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="DOSCHARSET" -></A ->dos charset (G)</DT -><DD -><P ->DOS SMB clients assume the server has - the same charset as they do. This option specifies which - charset Samba should talk to DOS clients. - </P -><P ->The default depends on which charsets you have instaled. - Samba tries to use charset 850 but falls back to ASCII in - case it is not available. Run <A -HREF="testparm.1.html" -TARGET="_top" ->testparm(1) - </A -> to check the default on your system. - </P -></DD -><DT -><A NAME="DOSFILEMODE" ></A >dos filemode (S)</DT @@ -8036,8 +8085,8 @@ CLASS="COMMAND" ></A > program for information on how to set up and maintain this file), or set the <A -HREF="index.html#SECURITY" ->security = [server|domain|ads]</A +HREF="#SECURITY" +>security = [server|domain]</A > parameter which causes <B CLASS="COMMAND" @@ -8047,7 +8096,7 @@ CLASS="COMMAND" ><P >Default: <B CLASS="COMMAND" ->encrypt passwords = yes</B +>encrypt passwords = no</B ></P ></DD ><DT @@ -8117,12 +8166,8 @@ CLASS="PARAMETER" to standard output. This listing will then be used in response to the level 1 and 2 EnumPorts() RPC.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no enumports command</I -></SPAN +>Default: <EM +>no enumports command</EM ></P ><P >Example: <B @@ -8139,7 +8184,7 @@ NAME="EXEC" ><DD ><P >This is a synonym for <A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" > <TT CLASS="PARAMETER" ><I @@ -8216,7 +8261,7 @@ CLASS="COMMAND" the file.</P ><P >It is generally much better to use the real <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -8288,12 +8333,8 @@ NAME="FORCECREATEMODE" ><DD ><P >This parameter specifies a set of UNIX mode bit - permissions that will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->always</I -></SPAN + permissions that will <EM +>always</EM > be set on a file created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a file that is being created or having its @@ -8308,7 +8349,7 @@ CLASS="PARAMETER" parameter is applied.</P ><P >See also the parameter <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I @@ -8319,7 +8360,7 @@ CLASS="PARAMETER" > for details on masking mode bits on files.</P ><P >See also the <A -HREF="index.html#INHERITPERMISSIONS" +HREF="#INHERITPERMISSIONS" ><TT CLASS="PARAMETER" ><I @@ -8351,12 +8392,8 @@ NAME="FORCEDIRECTORYMODE" ><DD ><P >This parameter specifies a set of UNIX mode bit - permissions that will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->always</I -></SPAN + permissions that will <EM +>always</EM > be set on a directory created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a directory that is being created. The default for this @@ -8371,7 +8408,7 @@ CLASS="PARAMETER" applied.</P ><P >See also the parameter <A -HREF="index.html#DIRECTORYMASK" +HREF="#DIRECTORYMASK" ><TT CLASS="PARAMETER" ><I @@ -8382,7 +8419,7 @@ CLASS="PARAMETER" on created directories.</P ><P >See also the <A -HREF="index.html#INHERITPERMISSIONS" +HREF="#INHERITPERMISSIONS" ><TT CLASS="PARAMETER" ><I @@ -8409,7 +8446,8 @@ CLASS="COMMAND" ><A NAME="FORCEDIRECTORYSECURITYMODE" ></A ->force directory security mode (S)</DT +>force directory + security mode (S)</DT ><DD ><P >This parameter controls what UNIX permission bits @@ -8426,12 +8464,8 @@ NAME="FORCEDIRECTORYSECURITYMODE" allows a user to modify all the user/group/world permissions on a directory without restrictions.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -8439,7 +8473,7 @@ CLASS="EMPHASIS" it set as 0000.</P ><P >See also the <A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -8447,7 +8481,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#SECURITYMASK" +HREF="#SECURITYMASK" > <TT CLASS="PARAMETER" ><I @@ -8456,7 +8490,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#FORCESECURITYMODE" +HREF="#FORCESECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -8508,7 +8542,7 @@ CLASS="FILENAME" other users will retain their ordinary primary group.</P ><P >If the <A -HREF="index.html#FORCEUSER" +HREF="#FORCEUSER" ><TT CLASS="PARAMETER" ><I @@ -8531,7 +8565,7 @@ CLASS="PARAMETER" >.</P ><P >See also <A -HREF="index.html#FORCEUSER" +HREF="#FORCEUSER" ><TT CLASS="PARAMETER" ><I @@ -8541,12 +8575,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no forced group</I -></SPAN +>Default: <EM +>no forced group</EM ></P ><P >Example: <B @@ -8576,12 +8606,8 @@ NAME="FORCESECURITYMODE" and allows a user to modify all the user/group/world permissions on a file, with no restrictions.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -8589,7 +8615,7 @@ CLASS="EMPHASIS" this set to 0000.</P ><P >See also the <A -HREF="index.html#FORCEDIRECTORYSECURITYMODE" +HREF="#FORCEDIRECTORYSECURITYMODE" ><TT CLASS="PARAMETER" ><I @@ -8598,7 +8624,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -8607,7 +8633,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#SECURITYMASK" +HREF="#SECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -8628,6 +8654,49 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="FORCEUNKNOWNACLUSER" +></A +>force unknown acl user (S)</DT +><DD +><P +>If this parameter is set, a Windows NT ACL that contains + an unknown SID (security descriptor, or representation of a user or group id) + as the owner or group owner of the file will be silently mapped into the + current UNIX uid or gid of the currently connected user.</P +><P +>This is designed to allow Windows NT clients to copy files and + folders containing ACLs that were created locally on the client machine + and contain users local to that machine only (no domain users) to be + copied to a Samba server (usually with XCOPY /O) and have the unknown + userid and groupid of the file owner map to the current connected user. + This can only be fixed correctly when winbindd allows arbitrary mapping + from any Windows NT SID to a UNIX uid or gid.</P +><P +>Try using this parameter when XCOPY /O gives an ACCESS_DENIED error. + </P +><P +>See also <A +HREF="#FORCEGROUP" +><TT +CLASS="PARAMETER" +><I +>force group + </I +></TT +></A +></P +><P +>Default: <EM +>False</EM +></P +><P +>Example: <B +CLASS="COMMAND" +>force unknown acl user = yes</B +></P +></DD +><DT +><A NAME="FORCEUSER" ></A >force user (S)</DT @@ -8650,7 +8719,7 @@ NAME="FORCEUSER" as the primary group of the connecting user (this was a bug).</P ><P >See also <A -HREF="index.html#FORCEGROUP" +HREF="#FORCEGROUP" ><TT CLASS="PARAMETER" ><I @@ -8660,12 +8729,8 @@ CLASS="PARAMETER" ></A ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no forced user</I -></SPAN +>Default: <EM +>no forced user</EM ></P ><P >Example: <B @@ -8726,7 +8791,7 @@ NAME="GETWDCACHE" caching algorithm will be used to reduce the time taken for getwd() calls. This can have a significant impact on performance, especially when the <A -HREF="index.html#WIDELINKS" +HREF="#WIDELINKS" ><TT CLASS="PARAMETER" ><I @@ -8752,7 +8817,7 @@ NAME="GROUP" ><DD ><P >Synonym for <A -HREF="index.html#FORCEGROUP" +HREF="#FORCEGROUP" ><TT CLASS="PARAMETER" ><I @@ -8771,7 +8836,7 @@ NAME="GUESTACCOUNT" ><P >This is a username which will be used for access to services which are specified as <A -HREF="index.html#GUESTOK" +HREF="#GUESTOK" ><TT CLASS="PARAMETER" ><I @@ -8800,17 +8865,9 @@ CLASS="COMMAND" > lp(1)</B >.</P ><P ->This paramater does not accept % marcos, becouse - many parts of the system require this value to be - constant for correct operation</P -><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >specified at compile time, usually - "nobody"</I -></SPAN + "nobody"</EM ></P ><P >Example: <B @@ -8831,7 +8888,7 @@ CLASS="CONSTANT" > for a service, then no password is required to connect to the service. Privileges will be those of the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -8841,7 +8898,7 @@ CLASS="PARAMETER" >.</P ><P >See the section below on <A -HREF="index.html#SECURITY" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -8869,7 +8926,7 @@ CLASS="CONSTANT" > for a service, then only guest connections to the service are permitted. This parameter will have no effect if <A -HREF="index.html#GUESTOK" +HREF="#GUESTOK" > <TT CLASS="PARAMETER" ><I @@ -8879,7 +8936,7 @@ CLASS="PARAMETER" > is not set for the service.</P ><P >See the section below on <A -HREF="index.html#SECURITY" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -8936,7 +8993,7 @@ NAME="HIDEFILES" as they are scanned.</P ><P >See also <A -HREF="index.html#HIDEDOTFILES" +HREF="#HIDEDOTFILES" ><TT CLASS="PARAMETER" ><I @@ -8945,7 +9002,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#VETOFILES" +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I @@ -8953,7 +9010,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#CASESENSITIVE" +HREF="#CASESENSITIVE" > <TT CLASS="PARAMETER" ><I @@ -8962,12 +9019,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no file are hidden</I -></SPAN +>Default: <EM +>no file are hidden</EM ></P ><P >Example: <B @@ -9004,7 +9057,7 @@ CLASS="COMMAND" ><A NAME="HIDEUNREADABLE" ></A ->hide unreadable (G)</DT +>hide unreadable (S)</DT ><DD ><P >This parameter prevents clients from seeing the @@ -9017,30 +9070,13 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="HIDEUNWRITEABLEFILES" -></A ->hide unwriteable files (G)</DT -><DD -><P ->This parameter prevents clients from seeing - the existance of files that cannot be written to. Defaults to off. - Note that unwriteable directories are shown as usual. - </P -><P ->Default: <B -CLASS="COMMAND" ->hide unwriteable = no</B -></P -></DD -><DT -><A NAME="HOMEDIRMAP" ></A >homedir map (G)</DT ><DD ><P >If<A -HREF="index.html#NISHOMEDIR" +HREF="#NISHOMEDIR" ><TT CLASS="PARAMETER" ><I @@ -9079,17 +9115,13 @@ CLASS="COMMAND" that copes with different map formats and also Amd (another automounter) maps.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE :</I -></SPAN +><EM +>NOTE :</EM >A working NIS client is required on the system for this option to work.</P ><P >See also <A -HREF="index.html#NISHOMEDIR" +HREF="#NISHOMEDIR" ><TT CLASS="PARAMETER" ><I @@ -9098,7 +9130,7 @@ CLASS="PARAMETER" > </A >, <A -HREF="index.html#DOMAINLOGONS" +HREF="#DOMAINLOGONS" ><TT CLASS="PARAMETER" ><I @@ -9110,7 +9142,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->homedir map = <empty string></B +>homedir map = <empty string></B ></P ><P >Example: <B @@ -9137,7 +9169,7 @@ CLASS="CONSTANT" to browse Dfs trees hosted on the server.</P ><P >See also the <A -HREF="index.html#MSDFSROOT" +HREF="#MSDFSROOT" ><TT CLASS="PARAMETER" ><I @@ -9160,35 +9192,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="HOSTNAMELOOKUPS" -></A ->hostname lookups (G)</DT -><DD -><P ->Specifies whether samba should use (expensive) - hostname lookups or use the ip addresses instead. An example place - where hostname lookups are currently used is when checking - the <B -CLASS="COMMAND" ->hosts deny</B -> and <B -CLASS="COMMAND" ->hosts allow</B ->. - </P -><P ->Default: <B -CLASS="COMMAND" ->hostname lookups = yes</B -></P -><P ->Example: <B -CLASS="COMMAND" ->hostname lookups = no</B -></P -></DD -><DT -><A NAME="HOSTSALLOW" ></A >hosts allow (S)</DT @@ -9225,7 +9228,7 @@ CLASS="FILENAME" ><P >Note that the localhost address 127.0.0.1 will always be allowed access unless specifically denied by a <A -HREF="index.html#HOSTSDENY" +HREF="#HOSTSDENY" ><TT CLASS="PARAMETER" ><I @@ -9236,12 +9239,8 @@ CLASS="PARAMETER" ><P >You can also specify hosts by network/netmask pairs and by netgroup names if your system supports netgroups. The - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->EXCEPT</I -></SPAN + <EM +>EXCEPT</EM > keyword can also be used to limit a wildcard list. The following examples may provide some help:</P ><P @@ -9292,13 +9291,9 @@ CLASS="COMMAND" > for a way of testing your host access to see if it does what you expect.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >none (i.e., all hosts permitted access) - </I -></SPAN + </EM ></P ><P >Example: <B @@ -9320,12 +9315,8 @@ CLASS="PARAMETER" >hosts allow</I ></TT > - - hosts listed here are <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOT</I -></SPAN + - hosts listed here are <EM +>NOT</EM > permitted access to services unless the specific services have their own lists to override this one. Where the lists conflict, the <TT @@ -9336,13 +9327,9 @@ CLASS="PARAMETER" > list takes precedence.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >none (i.e., no hosts specifically excluded) - </I -></SPAN + </EM ></P ><P >Example: <B @@ -9364,7 +9351,7 @@ NAME="HOSTSEQUIV" </P ><P >This is not be confused with <A -HREF="index.html#HOSTSALLOW" +HREF="#HOSTSALLOW" > <TT CLASS="PARAMETER" ><I @@ -9380,12 +9367,8 @@ CLASS="PARAMETER" > may be useful for NT clients which will not supply passwords to Samba.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE :</I -></SPAN +><EM +>NOTE :</EM > The use of <TT CLASS="PARAMETER" ><I @@ -9402,21 +9385,13 @@ CLASS="PARAMETER" ></TT > option be only used if you really know what you are doing, or perhaps on a home network where you trust - your spouse and kids. And only if you <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->really</I -></SPAN + your spouse and kids. And only if you <EM +>really</EM > trust them :-).</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no host equivalences</I -></SPAN +>Default: <EM +>no host equivalences</EM ></P ><P >Example: <B @@ -9454,12 +9429,8 @@ CLASS="PARAMETER" >. </P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no file included</I -></SPAN +>Default: <EM +>no file included</EM ></P ><P >Example: <B @@ -9499,7 +9470,7 @@ NAME="INHERITPERMISSIONS" ><P >The permissions on new files and directories are normally governed by <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I @@ -9507,7 +9478,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DIRECTORYMASK" +HREF="#DIRECTORYMASK" > <TT CLASS="PARAMETER" ><I @@ -9515,7 +9486,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#FORCECREATEMODE" +HREF="#FORCECREATEMODE" ><TT CLASS="PARAMETER" ><I @@ -9524,7 +9495,7 @@ CLASS="PARAMETER" > </A > and <A -HREF="index.html#FORCEDIRECTORYMODE" +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -9541,7 +9512,7 @@ CLASS="PARAMETER" >New files inherit their read/write bits from the parent directory. Their execute bits continue to be determined by <A -HREF="index.html#MAPARCHIVE" +HREF="#MAPARCHIVE" ><TT CLASS="PARAMETER" ><I @@ -9550,7 +9521,7 @@ CLASS="PARAMETER" > </A >, <A -HREF="index.html#MAPHIDDEN" +HREF="#MAPHIDDEN" ><TT CLASS="PARAMETER" ><I @@ -9559,7 +9530,7 @@ CLASS="PARAMETER" > </A > and <A -HREF="index.html#MAPSYSTEM" +HREF="#MAPSYSTEM" ><TT CLASS="PARAMETER" ><I @@ -9569,12 +9540,8 @@ CLASS="PARAMETER" </A > as usual.</P ><P ->Note that the setuid bit is <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->never</I -></SPAN +>Note that the setuid bit is <EM +>never</EM > set via inheritance (the code explicitly prohibits this).</P ><P @@ -9583,7 +9550,7 @@ CLASS="EMPHASIS" share to be used flexibly by each user.</P ><P >See also <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" ><TT CLASS="PARAMETER" ><I @@ -9592,7 +9559,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DIRECTORYMASK" +HREF="#DIRECTORYMASK" ><TT CLASS="PARAMETER" ><I @@ -9600,7 +9567,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#FORCECREATEMODE" +HREF="#FORCECREATEMODE" > <TT CLASS="PARAMETER" ><I @@ -9608,7 +9575,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#FORCEDIRECTORYMODE" +HREF="#FORCEDIRECTORYMODE" ><TT CLASS="PARAMETER" ><I @@ -9684,7 +9651,7 @@ CLASS="COMMAND" The netmasks of the latter two interfaces would be set to 255.255.255.0.</P ><P >See also <A -HREF="index.html#BINDINTERFACESONLY" +HREF="#BINDINTERFACESONLY" ><TT CLASS="PARAMETER" ><I @@ -9694,13 +9661,9 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >all active interfaces except 127.0.0.1 - that are broadcast capable</I -></SPAN + that are broadcast capable</EM ></P ></DD ><DT @@ -9711,12 +9674,8 @@ NAME="INVALIDUSERS" ><DD ><P >This is a list of users that should not be allowed - to login to this service. This is really a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->paranoid</I -></SPAN + to login to this service. This is really a <EM +>paranoid</EM > check to absolutely ensure an improper setting does not breach your security.</P @@ -9733,7 +9692,7 @@ CLASS="EMPHASIS" so the value <TT CLASS="PARAMETER" ><I ->+&group</I +>+&group</I ></TT > means check the UNIX group database, followed by the NIS netgroup database, and @@ -9755,7 +9714,7 @@ CLASS="PARAMETER" This is useful in the [homes] section.</P ><P >See also <A -HREF="index.html#VALIDUSERS" +HREF="#VALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -9765,12 +9724,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no invalid users</I -></SPAN +>Default: <EM +>no invalid users</EM ></P ><P >Example: <B @@ -9799,7 +9754,7 @@ CLASS="PARAMETER" ><P >Keepalives should, in general, not be needed if the socket being used has the SO_KEEPALIVE attribute set on it (see <A -HREF="index.html#SOCKETOPTIONS" +HREF="#SOCKETOPTIONS" ><TT CLASS="PARAMETER" ><I @@ -9827,7 +9782,7 @@ NAME="KERNELOPLOCKS" ><DD ><P >For UNIXes that support kernel based <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -9854,12 +9809,8 @@ CLASS="COMMAND" > </A > has oplocked. This allows complete data consistency between - SMB/CIFS, NFS and local file access (and is a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->very</I -></SPAN + SMB/CIFS, NFS and local file access (and is a <EM +>very</EM > cool feature :-).</P ><P @@ -9871,7 +9822,7 @@ CLASS="CONSTANT" You should never need to touch this parameter.</P ><P >See also the <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -9880,7 +9831,7 @@ CLASS="PARAMETER" > </A > and <A -HREF="index.html#LEVEL2OPLOCKS" +HREF="#LEVEL2OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -9933,13 +9884,13 @@ TARGET="_top" with Windows 2000. Note that due to Windows 2000 client redirector bugs this requires Samba to be running on a 64-bit capable operating system such as IRIX, Solaris or a Linux 2.4 kernel. Can improve performance by 10% with - Windows 2000 clients. Defaults to on. Not as tested as some other Samba + Windows 2000 clients. Defaults to off. Not as tested as some other Samba code paths. </P ><P >Default : <B CLASS="COMMAND" ->large readwrite = yes</B +>large readwrite = no</B ></P ></DD ><DT @@ -9949,14 +9900,26 @@ NAME="LDAPADMINDN" >ldap admin dn (G)</DT ><DD ><P -> The <TT +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. + </P +><P +> The <TT CLASS="PARAMETER" ><I >ldap admin dn</I ></TT > defines the Distinguished - Name (DN) name used by Samba to contact the ldap server when retreiving - user account information. The <TT + Name (DN) name used by Samba to contact the <A +HREF="#LDAPSERVER" +>ldap + server</A +> when retreiving user account information. The <TT CLASS="PARAMETER" ><I >ldap @@ -9978,12 +9941,8 @@ CLASS="COMMAND" page for more information on how to accmplish this. </P ><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default : <EM +>none</EM ></P ></DD ><DT @@ -9993,7 +9952,16 @@ NAME="LDAPFILTER" >ldap filter (G)</DT ><DD ><P ->This parameter specifies the RFC 2254 compliant LDAP search filter. +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. + </P +><P +> This parameter specifies the RFC 2254 compliant LDAP search filter. The default is to match the login name with the <TT CLASS="CONSTANT" >uid</TT @@ -10007,7 +9975,77 @@ CLASS="CONSTANT" ><P >Default : <B CLASS="COMMAND" ->ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B +>ldap filter = (&(uid=%u)(objectclass=sambaAccount))</B +></P +></DD +><DT +><A +NAME="LDAPPORT" +></A +>ldap port (G)</DT +><DD +><P +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. + </P +><P +> This option is used to control the tcp port number used to contact + the <A +HREF="#LDAPSERVER" +><TT +CLASS="PARAMETER" +><I +>ldap server</I +></TT +></A +>. + The default is to use the stand LDAPS port 636. + </P +><P +>See Also: <A +HREF="#LDAPSSL" +>ldap ssl</A +> + </P +><P +>Default : <B +CLASS="COMMAND" +>ldap port = 636 ; if ldap ssl = on</B +></P +><P +>Default : <B +CLASS="COMMAND" +>ldap port = 389 ; if ldap ssl = off</B +></P +></DD +><DT +><A +NAME="LDAPSERVER" +></A +>ldap server (G)</DT +><DD +><P +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. + </P +><P +> This parameter should contains the FQDN of the ldap directory + server which should be queried to locate user account information. + </P +><P +>Default : <B +CLASS="COMMAND" +>ldap server = localhost</B ></P ></DD ><DT @@ -10017,16 +10055,29 @@ NAME="LDAPSSL" >ldap ssl (G)</DT ><DD ><P ->This option is used to define whether or not Samba should - use SSL when connecting to the ldap server - This is <SPAN -CLASS="emphasis" +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. + </P +><P +> This option is used to define whether or not Samba should + use SSL when connecting to the <A +HREF="#LDAPSERVER" +><TT +CLASS="PARAMETER" ><I -CLASS="EMPHASIS" ->NOT</I -></SPAN +>ldap + server</I +></TT +></A +>. This is <EM +>NOT</EM > related to - Samba's previous SSL support which was enabled by specifying the + Samba SSL support which is enabled by specifying the <B CLASS="COMMAND" >--with-ssl</B @@ -10034,7 +10085,15 @@ CLASS="COMMAND" CLASS="FILENAME" >configure</TT > - script. + script (see <A +HREF="#SSL" +><TT +CLASS="PARAMETER" +><I +>ssl</I +></TT +></A +>). </P ><P > The <TT @@ -10076,49 +10135,17 @@ NAME="LDAPSUFFIX" >ldap suffix (G)</DT ><DD ><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN -></P -></DD -><DT -><A -NAME="LDAPUSERSUFFIX" -></A ->ldap user suffix (G)</DT -><DD -><P ->It specifies where users are added to the tree. - </P -><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN -></P -></DD -><DT -><A -NAME="LDAPMACHINESUFFIX" -></A ->ldap machine suffix (G)</DT -><DD -><P ->It specifies where machines should be - added to the ldap tree. +>This parameter is only available if Samba has been + configure to include the <B +CLASS="COMMAND" +>--with-ldapsam</B +> option + at compile time. This option should be considered experimental and + under active development. </P ><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default : <EM +>none</EM ></P ></DD ><DT @@ -10152,7 +10179,7 @@ NAME="LEVEL2OPLOCKS" >For more discussions on level2 oplocks see the CIFS spec.</P ><P >Currently, if <A -HREF="index.html#KERNELOPLOCKS" +HREF="#KERNELOPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -10166,7 +10193,7 @@ CLASS="CONSTANT" >yes</TT >). Note also, the <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -10181,7 +10208,7 @@ CLASS="CONSTANT" this parameter to have any effect.</P ><P >See also the <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -10190,7 +10217,7 @@ CLASS="PARAMETER" > </A > and <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -10265,7 +10292,7 @@ CLASS="PARAMETER" >.</P ><P >See also <A -HREF="index.html#LMINTERVAL" +HREF="#LMINTERVAL" ><TT CLASS="PARAMETER" ><I @@ -10294,7 +10321,7 @@ NAME="LMINTERVAL" ><P >If Samba is set to produce Lanman announce broadcasts needed by OS/2 clients (see the <A -HREF="index.html#LMANNOUNCE" +HREF="#LMANNOUNCE" > <TT CLASS="PARAMETER" ><I @@ -10313,7 +10340,7 @@ CLASS="PARAMETER" parameter.</P ><P >See also <A -HREF="index.html#LMANNOUNCE" +HREF="#LMANNOUNCE" ><TT CLASS="PARAMETER" ><I @@ -10343,7 +10370,7 @@ NAME="LOADPRINTERS" >A boolean variable that controls whether all printers in the printcap will be loaded for browsing by default. See the <A -HREF="index.html#AEN79" +HREF="#AEN79" >printers</A > section for more details.</P @@ -10383,22 +10410,14 @@ CLASS="CONSTANT" CLASS="CONSTANT" >true</TT > doesn't - mean that Samba will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->become</I -></SPAN + mean that Samba will <EM +>become</EM > the local master browser on a subnet, just that <B CLASS="COMMAND" >nmbd</B -> will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" -> participate</I -></SPAN +> will <EM +> participate</EM > in elections for local master browser.</P ><P >Setting this value to <TT @@ -10408,12 +10427,8 @@ CLASS="CONSTANT" CLASS="COMMAND" >nmbd</B > - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->never</I -></SPAN + <EM +>never</EM > to become a local master browser.</P ><P >Default: <B @@ -10429,7 +10444,7 @@ NAME="LOCKDIR" ><DD ><P >Synonym for <A -HREF="index.html#LOCKDIRECTORY" +HREF="#LOCKDIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -10448,7 +10463,7 @@ NAME="LOCKDIRECTORY" >This option specifies the directory where lock files will be placed. The lock files are used to implement the <A -HREF="index.html#MAXCONNECTIONS" +HREF="#MAXCONNECTIONS" ><TT CLASS="PARAMETER" ><I @@ -10502,7 +10517,7 @@ NAME="LOCKSPINTIME" >The time in microseconds that smbd should pause before attempting to gain a failed lock. See <A -HREF="index.html#LOCKSPINCOUNT" +HREF="#LOCKSPINCOUNT" ><TT CLASS="PARAMETER" ><I @@ -10543,19 +10558,11 @@ CLASS="COMMAND" >, real locking will be performed by the server.</P ><P ->This option <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->may</I -></SPAN +>This option <EM +>may</EM > be useful for read-only - filesystems which <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->may</I -></SPAN + filesystems which <EM +>may</EM > not need locking (such as CDROM drives), although setting this parameter of <TT CLASS="CONSTANT" @@ -10598,14 +10605,12 @@ NAME="LOGLEVEL" >log level (G)</DT ><DD ><P ->The value of the parameter (a astring) allows +>The value of the parameter (an integer) allows the debug level (logging level) to be specified in the <TT CLASS="FILENAME" >smb.conf</TT -> file. This parameter has been - extended since 2.2.x series, now it allow to specify the debug - level for multiple debug classes. This is to give greater +> file. This is to give greater flexibility in the configuration of the system.</P ><P >The default will be the log level specified on @@ -10613,8 +10618,7 @@ CLASS="FILENAME" ><P >Example: <B CLASS="COMMAND" ->log level = 3 passdb:5 auth:10 winbind:2 - </B +>log level = 3</B ></P ></DD ><DT @@ -10626,7 +10630,7 @@ NAME="LOGONDRIVE" ><P >This parameter specifies the local path to which the home directory will be connected (see <A -HREF="index.html#LOGONHOME" +HREF="#LOGONHOME" ><TT CLASS="PARAMETER" ><I @@ -10695,7 +10699,7 @@ CLASS="COMMAND" but use the whole string when dealing with profiles.</P ><P >Note that in prior versions of Samba, the <A -HREF="index.html#LOGONPATH" +HREF="#LOGONPATH" > <TT CLASS="PARAMETER" ><I @@ -10742,7 +10746,7 @@ NAME="LOGONPATH" stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming profiles. To find out how to handle roaming profiles for Win 9X system, see the <A -HREF="index.html#LOGONHOME" +HREF="#LOGONHOME" > <TT CLASS="PARAMETER" ><I @@ -10780,12 +10784,8 @@ CLASS="FILENAME" >Thereafter, the directories and any of the contents can, if required, be made read-only. It is not advisable that the NTuser.dat file be made read-only - rename it to NTuser.man to - achieve the desired effect (a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->MAN</I -></SPAN + achieve the desired effect (a <EM +>MAN</EM >datory profile). </P ><P @@ -10826,7 +10826,7 @@ NAME="LOGONSCRIPT" ><P >The script must be a relative path to the [netlogon] service. If the [netlogon] service specifies a <A -HREF="index.html#PATH" +HREF="#PATH" > <TT CLASS="PARAMETER" ><I @@ -10875,12 +10875,8 @@ CLASS="COMMAND" >This option is only useful if Samba is set up as a logon server.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no logon script defined</I -></SPAN +>Default: <EM +>no logon script defined</EM ></P ><P >Example: <B @@ -10937,7 +10933,7 @@ CLASS="PARAMETER" in the lppause command as the PATH may not be available to the server.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -11031,7 +11027,7 @@ CLASS="COMMAND" >A value of 0 will disable caching completely.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -11115,7 +11111,7 @@ CLASS="PARAMETER" print queue listing.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -11125,17 +11121,13 @@ CLASS="PARAMETER" ></A > parameter.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >depends on the setting of <TT CLASS="PARAMETER" ><I > printing</I ></TT -></I -></SPAN +></EM ></P ><P >Example: <B @@ -11157,7 +11149,7 @@ NAME="LPRESUMECOMMAND" >This command should be a program or script which takes a printer name and job number to resume the print job. See also the <A -HREF="index.html#LPPAUSECOMMAND" +HREF="#LPPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -11191,7 +11183,7 @@ CLASS="PARAMETER" be available to the server.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -11277,7 +11269,7 @@ CLASS="PARAMETER" available to the server.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -11287,18 +11279,14 @@ CLASS="PARAMETER" ></A > parameter.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >depends on the setting of <TT CLASS="PARAMETER" ><I >printing </I ></TT -></I -></SPAN +></EM ></P ><P >Example 1: <B @@ -11322,7 +11310,7 @@ NAME="MACHINEPASSWORDTIMEOUT" ><P >If a Samba server is a member of a Windows NT Domain (see the <A -HREF="index.html#SECURITYEQUALSDOMAIN" +HREF="#SECURITYEQUALSDOMAIN" >security = domain</A >) parameter) then periodically a running <A @@ -11347,7 +11335,7 @@ CLASS="COMMAND" </B ></A >, and the <A -HREF="index.html#SECURITYEQUALSDOMAIN" +HREF="#SECURITYEQUALSDOMAIN" > security = domain</A >) parameter.</P ><P @@ -11366,7 +11354,7 @@ NAME="MAGICOUTPUT" >This parameter specifies the name of a file which will contain output created by a magic script (see the <A -HREF="index.html#MAGICSCRIPT" +HREF="#MAGICSCRIPT" ><TT CLASS="PARAMETER" ><I @@ -11387,7 +11375,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->magic output = <magic script name>.out +>magic output = <magic script name>.out </B ></P ><P @@ -11414,7 +11402,7 @@ NAME="MAGICSCRIPT" ><P >If the script generates output, output will be sent to the file specified by the <A -HREF="index.html#MAGICOUTPUT" +HREF="#MAGICOUTPUT" ><TT CLASS="PARAMETER" ><I @@ -11426,36 +11414,20 @@ CLASS="PARAMETER" >Note that some shells are unable to interpret scripts containing CR/LF instead of CR as the end-of-line marker. Magic scripts must be executable - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->as is</I -></SPAN + <EM +>as is</EM > on the host, which for some hosts and some shells will require filtering at the DOS end.</P ><P ->Magic scripts are <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->EXPERIMENTAL</I -></SPAN +>Magic scripts are <EM +>EXPERIMENTAL</EM > and - should <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOT</I -></SPAN + should <EM +>NOT</EM > be relied upon.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->None. Magic scripts disabled.</I -></SPAN +>Default: <EM +>None. Magic scripts disabled.</EM ></P ><P >Example: <B @@ -11471,7 +11443,7 @@ NAME="MANGLECASE" ><DD ><P >See the section on <A -HREF="index.html#AEN203" +HREF="#AEN203" > NAME MANGLING</A ></P ><P @@ -11522,12 +11494,8 @@ CLASS="FILENAME" > off the ends of filenames on some CDROMs (only visible under some UNIXes). To do this use a map of (*;1 *;).</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no mangled map</I -></SPAN +>Default: <EM +>no mangled map</EM ></P ><P >Example: <B @@ -11547,11 +11515,11 @@ NAME="MANGLEDNAMES" or whether non-DOS names should simply be ignored.</P ><P >See the section on <A -HREF="index.html#AEN203" +HREF="#AEN203" > NAME MANGLING</A > for details on how to control the mangling process.</P ><P ->If mangling is used then the mangling algorithm is as follows:</P +>If mangling algorithm "hash" is used then the mangling algorithm is as follows:</P ><P ></P ><UL @@ -11573,7 +11541,7 @@ HREF="index.html#AEN203" ><P >Note that the character to use may be specified using the <A -HREF="index.html#MANGLINGCHAR" +HREF="#MANGLINGCHAR" ><TT CLASS="PARAMETER" ><I @@ -11609,6 +11577,60 @@ CLASS="PARAMETER" in a directory share the same first five alphanumeric characters. The probability of such a clash is 1/1300.</P ><P +>If mangling algorithm "hash2" is used then the mangling algorithm is as follows:</P +><P +></P +><UL +><LI +><P +>The first alphanumeric character + before the rightmost dot of the filename is preserved, forced + to upper case, and appears as the first character of the mangled name. + </P +></LI +><LI +><P +>A base63 hash of 5 characters is generated and the + first 4 characters of that hash are appended to the first character. + </P +></LI +><LI +><P +>A tilde "~" is appended to the first part of the mangled + name, followed by the final character of the base36 hash of the name. + </P +><P +>Note that the character to use may be specified using + the <A +HREF="#MANGLINGCHAR" +><TT +CLASS="PARAMETER" +><I +>mangling char</I +></TT +> + </A +> option, if you don't like '~'.</P +></LI +><LI +><P +>The first three alphanumeric characters of the final + extension are preserved, forced to upper case and appear as the + extension of the mangled name. The final extension is defined as that + part of the original filename after the rightmost dot. If there are no + dots in the filename, the mangled name will have no extension (except + in the case of "hidden files" - see below).</P +></LI +><LI +><P +>Files whose UNIX name begins with a dot will be + presented as DOS hidden files. The mangled name will be created as + for other filenames, but with the leading dot removed and "___" as + its extension regardless of actual original extension (that's three + underscores).</P +></LI +></UL +><P >The name mangling (if enabled) allows a file to be copied between UNIX directories from Windows/DOS while retaining the long UNIX filename. UNIX files can be renamed to a new extension @@ -11622,33 +11644,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="MANGLINGMETHOD" -></A ->mangling method (G)</DT -><DD -><P -> controls the algorithm used for the generating - the mangled names. Can take two different values, "hash" and - "hash2". "hash" is the default and is the algorithm that has been - used in Samba for many years. "hash2" is a newer and considered - a better algorithm (generates less collisions) in the names. - However, many Win32 applications store the mangled names and so - changing to the new algorithm must not be done - lightly as these applications may break unless reinstalled. - New installations of Samba may set the default to hash2.</P -><P ->Default: <B -CLASS="COMMAND" ->mangling method = hash</B -></P -><P ->Example: <B -CLASS="COMMAND" ->mangling method = hash2</B -></P -></DD -><DT -><A NAME="MANGLEDSTACK" ></A >mangled stack (G)</DT @@ -11692,14 +11687,10 @@ NAME="MANGLINGCHAR" ><DD ><P >This controls what character is used as - the <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->magic</I -></SPAN + the <EM +>magic</EM > character in <A -HREF="index.html#AEN203" +HREF="#AEN203" >name mangling</A >. The default is a '~' but this may interfere with some software. Use this option to set @@ -11717,6 +11708,33 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="MANGLINGMETHOD" +></A +>mangling mathod(G)</DT +><DD +><P +> controls the algorithm used for the generating + the mangled names. Can take two different values, "hash" and + "hash2". "hash" is the default and is the algorithm that has been + used in Samba for many years. "hash2" is a newer and considered + a better algorithm (generates less collisions) in the names. + However, many Win32 applications store the mangled names and so + changing to the new algorithm must not be done + lightly as these applications may break unless reinstalled. + New installations of Samba may set the default to hash2.</P +><P +>Default: <B +CLASS="COMMAND" +>mangling method = hash</B +></P +><P +>Example: <B +CLASS="COMMAND" +>mangling method = hash2</B +></P +></DD +><DT +><A NAME="MAPARCHIVE" ></A >map archive (S)</DT @@ -11737,7 +11755,7 @@ CLASS="PARAMETER" > parameter to be set such that owner execute bit is not masked out (i.e. it must include 100). See the parameter <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" > <TT CLASS="PARAMETER" ><I @@ -11769,7 +11787,7 @@ CLASS="PARAMETER" > to be set such that the world execute bit is not masked out (i.e. it must include 001). See the parameter <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" > <TT CLASS="PARAMETER" ><I @@ -11801,7 +11819,7 @@ CLASS="PARAMETER" > to be set such that the group execute bit is not masked out (i.e. it must include 010). See the parameter <A -HREF="index.html#CREATEMASK" +HREF="#CREATEMASK" > <TT CLASS="PARAMETER" ><I @@ -11823,7 +11841,7 @@ NAME="MAPTOGUEST" ><DD ><P >This parameter is only useful in <A -HREF="index.html#SECURITY" +HREF="#SECURITY" > security</A > modes other than <TT CLASS="PARAMETER" @@ -11873,7 +11891,7 @@ CLASS="CONSTANT" logins with an invalid password are rejected, unless the username does not exist, in which case it is treated as a guest login and mapped into the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -11890,7 +11908,7 @@ CLASS="CONSTANT" > - Means user logins with an invalid password are treated as a guest login and mapped into the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" >guest account</A >. Note that this can cause problems as it means that any user incorrectly typing @@ -11898,12 +11916,8 @@ HREF="index.html#GUESTACCOUNT" will not know the reason they cannot access files they think they should - there will have been no message given to them that they got their password wrong. Helpdesk services will - <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->hate</I -></SPAN + <EM +>hate</EM > you if you set the <TT CLASS="PARAMETER" ><I @@ -11922,12 +11936,8 @@ CLASS="PARAMETER" ></TT > modes other than share. This is because in these modes the name of the resource being - requested is <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + requested is <EM +>not</EM > sent to the server until after the server has successfully authenticated the client so the server cannot make authentication decisions at the correct time (connection @@ -11969,7 +11979,7 @@ CLASS="PARAMETER" ><P >Record lock files are used to implement this feature. The lock files will be stored in the directory specified by the <A -HREF="index.html#LOCKDIRECTORY" +HREF="#LOCKDIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -12121,7 +12131,7 @@ CLASS="COMMAND" ></A > will remote "Out of Space" to the client. See all <A -HREF="index.html#TOTALPRINTJOBS" +HREF="#TOTALPRINTJOBS" ><TT CLASS="PARAMETER" ><I @@ -12177,12 +12187,8 @@ CLASS="CONSTANT" ><TT CLASS="CONSTANT" >LANMAN1</TT ->: First <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" -> modern</I -></SPAN +>: First <EM +> modern</EM > version of the protocol. Long filename support.</P ></LI @@ -12209,7 +12215,7 @@ CLASS="CONSTANT" the appropriate protocol.</P ><P >See also <A -HREF="index.html#MINPROTOCOL" +HREF="#MINPROTOCOL" ><TT CLASS="PARAMETER" ><I @@ -12305,7 +12311,7 @@ TARGET="_top" >nmbd(8) </A > when acting as a WINS server (<A -HREF="index.html#WINSSUPPORT" +HREF="#WINSSUPPORT" > <TT CLASS="PARAMETER" ><I @@ -12321,7 +12327,7 @@ CLASS="COMMAND" parameter. The default is 6 days (518400 seconds).</P ><P >See also the <A -HREF="index.html#MINWINSTTL" +HREF="#MINWINSTTL" ><TT CLASS="PARAMETER" ><I @@ -12385,13 +12391,9 @@ CLASS="COMMAND" CLASS="COMMAND" >xedit</B >, then - removes it afterwards. <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" + removes it afterwards. <EM >NOTE THAT IT IS VERY IMPORTANT - THAT THIS COMMAND RETURN IMMEDIATELY</I -></SPAN + THAT THIS COMMAND RETURN IMMEDIATELY</EM >. That's why I have the '&' on the end. If it doesn't return immediately then your PCs may freeze when sending messages (they should recover @@ -12457,7 +12459,7 @@ CLASS="PARAMETER" ><B CLASS="COMMAND" >message command = /bin/mail -s 'message from %f on - %m' root < %s; rm %s</B + %m' root < %s; rm %s</B ></P ><P >If you don't have a message command then the message @@ -12473,12 +12475,8 @@ CLASS="COMMAND" >message command = rm %s</B ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no message command</I -></SPAN +>Default: <EM +>no message command</EM ></P ><P >Example: <B @@ -12495,7 +12493,7 @@ NAME="MINPASSWDLENGTH" ><DD ><P >Synonym for <A -HREF="index.html#MINPASSWORDLENGTH" +HREF="#MINPASSWORDLENGTH" > <TT CLASS="PARAMETER" ><I @@ -12519,7 +12517,7 @@ CLASS="COMMAND" UNIX password changing.</P ><P >See also <A -HREF="index.html#UNIXPASSWORDSYNC" +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I @@ -12528,7 +12526,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" > <TT CLASS="PARAMETER" ><I @@ -12536,7 +12534,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#PASSWDCHATDEBUG" +HREF="#PASSWDCHATDEBUG" ><TT CLASS="PARAMETER" ><I @@ -12564,7 +12562,7 @@ NAME="MINPRINTSPACE" means a user can always spool a print job.</P ><P >See also the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I @@ -12594,7 +12592,7 @@ NAME="MINPROTOCOL" >The value of the parameter (a string) is the lowest SMB protocol dialect than Samba will support. Please refer to the <A -HREF="index.html#MAXPROTOCOL" +HREF="#MAXPROTOCOL" ><TT CLASS="PARAMETER" ><I @@ -12612,7 +12610,7 @@ CLASS="FILENAME" ><P >If you are viewing this parameter as a security measure, you should also refer to the <A -HREF="index.html#LANMANAUTH" +HREF="#LANMANAUTH" ><TT CLASS="PARAMETER" ><I @@ -12647,7 +12645,7 @@ TARGET="_top" >nmbd(8)</A > when acting as a WINS server (<A -HREF="index.html#WINSSUPPORT" +HREF="#WINSSUPPORT" ><TT CLASS="PARAMETER" ><I @@ -12698,7 +12696,7 @@ TARGET="_top" >.</P ><P >See also <A -HREF="index.html#HOSTMSDFS" +HREF="#HOSTMSDFS" ><TT CLASS="PARAMETER" ><I @@ -12715,28 +12713,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="NAMECACHETIMEOUT" -></A ->name cache timeout (G)</DT -><DD -><P ->Specifies the number of seconds it takes before - entries in samba's hostname resolve cache time out. If - the timeout is set to 0. the caching is disabled. - </P -><P ->Default: <B -CLASS="COMMAND" ->name cache timeout = 660</B -></P -><P ->Example: <B -CLASS="COMMAND" ->name cache timeout = 0</B -></P -></DD -><DT -><A NAME="NAMERESOLVEORDER" ></A >name resolve order (G)</DT @@ -12793,7 +12769,7 @@ CLASS="CONSTANT" >wins</TT > : Query a name with the IP address listed in the <A -HREF="index.html#WINSSERVER" +HREF="#WINSSERVER" ><TT CLASS="PARAMETER" ><I @@ -12810,7 +12786,7 @@ CLASS="CONSTANT" >bcast</TT > : Do a broadcast on each of the known local interfaces listed in the <A -HREF="index.html#INTERFACES" +HREF="#INTERFACES" ><TT CLASS="PARAMETER" ><I @@ -12860,7 +12836,7 @@ TARGET="_top" with these capabilities.</P ><P >See also <A -HREF="index.html#NETBIOSNAME" +HREF="#NETBIOSNAME" ><TT CLASS="PARAMETER" ><I @@ -12870,12 +12846,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->empty string (no additional names)</I -></SPAN +>Default: <EM +>empty string (no additional names)</EM ></P ><P >Example: <B @@ -12898,7 +12870,7 @@ NAME="NETBIOSNAME" advertised under.</P ><P >See also <A -HREF="index.html#NETBIOSALIASES" +HREF="#NETBIOSALIASES" ><TT CLASS="PARAMETER" ><I @@ -12908,12 +12880,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->machine DNS name</I -></SPAN +>Default: <EM +>machine DNS name</EM ></P ><P >Example: <B @@ -12957,7 +12925,7 @@ NAME="NISHOMEDIR" it will be mounted on the Samba client directly from the directory server. When Samba is returning the home share to the client, it will consult the NIS map specified in <A -HREF="index.html#HOMEDIRMAP" +HREF="#HOMEDIRMAP" > <TT CLASS="PARAMETER" ><I @@ -12978,37 +12946,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="NONUNIXACCOUNTRANGE" -></A ->non unix account range (G)</DT -><DD -><P ->The non unix account range parameter specifies - the range of 'user ids' that are allocated by the various 'non unix - account' passdb backends. These backends allow - the storage of passwords for users who don't exist in /etc/passwd. - This is most often used for machine account creation. - This range of ids should have no existing local or NIS users within - it as strange conflicts can occur otherwise.</P -><P ->NOTE: These userids never appear on the system and Samba will never - 'become' these users. They are used only to ensure that the algorithmic - RID mapping does not conflict with normal users. - </P -><P ->Default: <B -CLASS="COMMAND" ->non unix account range = <empty string> - </B -></P -><P ->Example: <B -CLASS="COMMAND" ->non unix account range = 10000-20000</B -></P -></DD -><DT -><A NAME="NTACLSUPPORT" ></A >nt acl support (S)</DT @@ -13056,6 +12993,40 @@ CLASS="COMMAND" ></DD ><DT ><A +NAME="NTSMBSUPPORT" +></A +>nt smb support (G)</DT +><DD +><P +>This boolean parameter controls whether <A +HREF="smbd.8.html" +TARGET="_top" +>smbd(8)</A +> will negotiate NT specific SMB + support with Windows NT/2k/XP clients. Although this is a developer + debugging option and should be left alone, benchmarking has discovered + that Windows NT clients give faster performance with this option + set to <TT +CLASS="CONSTANT" +>no</TT +>. This is still being investigated. + If this option is set to <TT +CLASS="CONSTANT" +>no</TT +> then Samba offers + exactly the same SMB calls that versions prior to Samba 2.0 offered. + This information may be of use if any users are having problems + with NT SMB support.</P +><P +>You should not need to ever disable this parameter.</P +><P +>Default: <B +CLASS="COMMAND" +>nt smb support = yes</B +></P +></DD +><DT +><A NAME="NTSTATUSSUPPORT" ></A >nt status support (G)</DT @@ -13116,7 +13087,7 @@ NAME="OBEYPAMRESTRICTIONS" default behavior is to use PAM for clear text authentication only and to ignore any account or session management. Note that Samba always ignores PAM for authentication in the case of <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I @@ -13157,7 +13128,7 @@ CLASS="PARAMETER" ></TT > list and is only really useful in <A -HREF="index.html#SECURITYEQUALSSHARE" +HREF="#SECURITYEQUALSSHARE" >shave level</A > security.</P @@ -13178,7 +13149,7 @@ CLASS="PARAMETER" name of the user.</P ><P >See also the <A -HREF="index.html#USER" +HREF="#USER" ><TT CLASS="PARAMETER" ><I @@ -13201,7 +13172,7 @@ NAME="ONLYGUEST" ><DD ><P >A synonym for <A -HREF="index.html#GUESTONLY" +HREF="#GUESTONLY" ><TT CLASS="PARAMETER" ><I @@ -13225,13 +13196,9 @@ NAME="OPLOCKBREAKWAITTIME" is the amount of time Samba will wait before sending an oplock break request to such (broken) clients.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE</I -></SPAN + AND UNDERSTOOD THE SAMBA OPLOCK CODE</EM >.</P ><P >Default: <B @@ -13246,12 +13213,8 @@ NAME="OPLOCKCONTENTIONLIMIT" >oplock contention limit (S)</DT ><DD ><P ->This is a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->very</I -></SPAN +>This is a <EM +>very</EM > advanced <A HREF="smbd.8.html" @@ -13274,13 +13237,9 @@ CLASS="COMMAND" > to behave in a similar way to Windows NT.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE</I -></SPAN + AND UNDERSTOOD THE SAMBA OPLOCK CODE</EM >.</P ><P >Default: <B @@ -13316,7 +13275,7 @@ CLASS="FILENAME" ><P >Oplocks may be selectively turned off on certain files with a share. See the <A -HREF="index.html#VETOOPLOCKFILES" +HREF="#VETOOPLOCKFILES" ><TT CLASS="PARAMETER" ><I @@ -13335,7 +13294,7 @@ CLASS="PARAMETER" > parameter for details.</P ><P >See also the <A -HREF="index.html#KERNELOPLOCKS" +HREF="#KERNELOPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -13344,7 +13303,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#LEVEL2OPLOCKS" +HREF="#LEVEL2OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -13360,33 +13319,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="NTLMAUTH" -></A ->ntlm auth (G)</DT -><DD -><P ->This parameter determines whether or not <A -HREF="smbd.8.html" -TARGET="_top" ->smbd</A -> will - attempt to authenticate users using the NTLM password hash. - If disabled, only the lanman password hashes will be used. - </P -><P ->Please note that at least this option or <B -CLASS="COMMAND" ->lanman auth</B -> should be enabled in order to be able to log in. - </P -><P ->Default : <B -CLASS="COMMAND" ->ntlm auth = yes</B -></P -></DD -><DT -><A NAME="OSLEVEL" ></A >os level (G)</DT @@ -13406,12 +13338,8 @@ CLASS="PARAMETER" ></TT > in the local broadcast area.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note :</I -></SPAN +><EM +>Note :</EM >By default, Samba will win a local master browsing election over all Microsoft operating systems except a Windows NT 4.0/2000 Domain Controller. This @@ -13447,8 +13375,8 @@ NAME="OS2DRIVERMAP" path to a file containing a mapping of Windows NT printer driver names to OS/2 printer driver names. The format is:</P ><P -><nt driver name> = <os2 driver - name>.<device name></P +><nt driver name> = <os2 driver + name>.<device name></P ><P >For example, a valid entry using the HP LaserJet 5 printer driver would appear as <B @@ -13473,7 +13401,7 @@ TARGET="_top" ><P >Default: <B CLASS="COMMAND" ->os2 driver map = <empty string> +>os2 driver map = <empty string> </B ></P ></DD @@ -13489,7 +13417,7 @@ NAME="PAMPASSWORDCHANGE" flag for Samba. If enabled, then PAM will be used for password changes when requested by an SMB client instead of the program listed in <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I @@ -13499,7 +13427,7 @@ CLASS="PARAMETER" >. It should be possible to enable this without changing your <A -HREF="index.html#PASSWDCHAT" +HREF="#PASSWDCHAT" ><TT CLASS="PARAMETER" ><I @@ -13537,7 +13465,7 @@ TARGET="_top" ><P >Default: <B CLASS="COMMAND" ->panic action = <empty string></B +>panic action = <empty string></B ></P ><P >Example: <B @@ -13547,223 +13475,13 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="PARANOIDSERVERSECURITY" -></A ->paranoid server security (G)</DT -><DD -><P ->Some version of NT 4.x allow non-guest - users with a bad passowrd. When this option is enabled, samba will not - use a broken NT 4.x server as password server, but instead complain - to the logs and exit. - </P -><P ->Default: <B -CLASS="COMMAND" ->paranoid server security = yes</B -></P -></DD -><DT -><A -NAME="PASSDBBACKEND" -></A ->passdb backend (G)</DT -><DD -><P ->This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both - smbpasswd and tdbsam to be used without a recompile. - Multiple backends can be specified, seperated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified. - Experimental backends must still be selected - (eg --with-tdbsam) at configure time. - </P -><P ->This parameter is in two parts, the backend's name, and a 'location' - string that has meaning only to that particular backed. These are separated - by a : character.</P -><P ->Available backends can include: - <P -></P -><UL -><LI -><P -><B -CLASS="COMMAND" ->smbpasswd</B -> - The default smbpasswd - backend. Takes a path to the smbpasswd file as an optional argument.</P -></LI -><LI -><P -><B -CLASS="COMMAND" ->smbpasswd_nua</B -> - The smbpasswd - backend, but with support for 'not unix accounts'. - Takes a path to the smbpasswd file as an optional argument.</P -><P ->See also <A -HREF="index.html#NONUNIXACCOUNTRANGE" -> <TT -CLASS="PARAMETER" -><I ->non unix account range</I -></TT -></A -></P -></LI -><LI -><P -><B -CLASS="COMMAND" ->tdbsam</B -> - The TDB based password storage - backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb - in the <A -HREF="index.html#PRIVATEDIR" -> <TT -CLASS="PARAMETER" -><I ->private dir</I -></TT -></A -> directory.</P -></LI -><LI -><P -><B -CLASS="COMMAND" ->tdbsam_nua</B -> - The TDB based password storage - backend, with non unix account support. Takes a path to the TDB as an optional argument (defaults to passdb.tdb - in the <A -HREF="index.html#PRIVATEDIR" -> <TT -CLASS="PARAMETER" -><I ->private dir</I -></TT -></A -> directory.</P -><P ->See also <A -HREF="index.html#NONUNIXACCOUNTRANGE" -> <TT -CLASS="PARAMETER" -><I ->non unix account range</I -></TT -></A -></P -></LI -><LI -><P -><B -CLASS="COMMAND" ->ldapsam</B -> - The LDAP based passdb - backend. Takes an LDAP URL as an optional argument (defaults to - <B -CLASS="COMMAND" ->ldap://localhost</B ->)</P -></LI -><LI -><P -><B -CLASS="COMMAND" ->ldapsam_nua</B -> - The LDAP based passdb - backend, with non unix account support. Takes an LDAP URL as an optional argument (defaults to - <B -CLASS="COMMAND" ->ldap://localhost</B ->)</P -><P ->See also <A -HREF="index.html#NONUNIXACCOUNTRANGE" -> <TT -CLASS="PARAMETER" -><I ->non unix account range</I -></TT -></A -></P -></LI -><LI -><P -><B -CLASS="COMMAND" ->nisplussam</B -> - The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with sun NIS+ servers. </P -></LI -><LI -><P -><B -CLASS="COMMAND" ->plugin</B -> - Allows Samba to load an - arbitary passdb backend from the .so specified as a compulsary argument. - </P -><P ->Any characters after the (optional) second : are passed to the plugin - for its own processing</P -></LI -><LI -><P -><B -CLASS="COMMAND" ->unixsam</B -> - Allows samba to map all (other) available unix users</P -><P ->This backend uses the standard unix database for retrieving users. Users included - in this pdb are NOT listed in samba user listings and users included in this pdb won't be - able to login. The use of this backend is to always be able to display the owner of a file - on the samba server - even when the user doesn't have a 'real' samba account in one of the - other passdb backends. - </P -><P ->This backend should always be the last backend listed, since it contains all users in - the unix passdb and might 'override' mappings if specified earlier. It's meant to only return - accounts for users that aren't covered by the previous backends.</P -></LI -></UL -> - </P -><P ->Default: <B -CLASS="COMMAND" ->passdb backend = smbpasswd unixsam</B -></P -><P ->Example: <B -CLASS="COMMAND" ->passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd unixsam</B -></P -><P ->Example: <B -CLASS="COMMAND" ->passdb backend = ldapsam_nua:ldaps://ldap.example.com unixsam</B -></P -><P ->Example: <B -CLASS="COMMAND" ->passdb backend = plugin:/usr/local/samba/lib/my_passdb.so:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb</B -></P -></DD -><DT -><A NAME="PASSWDCHAT" ></A >passwd chat (G)</DT ><DD ><P ->This string controls the <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->"chat"</I -></SPAN +>This string controls the <EM +>"chat"</EM > conversation that takes places between <A HREF="smbd.8.html" @@ -13777,7 +13495,7 @@ TARGET="_top" > smbd(8)</A > uses to determine what to send to the <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I @@ -13793,7 +13511,7 @@ CLASS="PARAMETER" etc).</P ><P >Note that this parameter only is only used if the <A -HREF="index.html#UNIXPASSWORDSYNC" +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I @@ -13805,18 +13523,14 @@ CLASS="PARAMETER" CLASS="CONSTANT" >yes</TT >. This - sequence is then called <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN + sequence is then called <EM +>AS ROOT</EM > when the SMB password in the smbpasswd file is being changed, without access to the old password cleartext. This means that root must be able to reset the user's password without knowing the text of the previous password. In the presence of NIS/YP, this means that the <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" >passwd program</A > must be executed on the NIS master. @@ -13852,7 +13566,7 @@ CLASS="CONSTANT" if the expect string is a full stop then no string is expected.</P ><P >If the <A -HREF="index.html#PAMPASSWORDCHANGE" +HREF="#PAMPASSWORDCHANGE" ><TT CLASS="PARAMETER" ><I @@ -13866,7 +13580,7 @@ CLASS="PARAMETER" </P ><P >See also <A -HREF="index.html#UNIXPASSWORDSYNC" +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I @@ -13875,7 +13589,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I @@ -13883,7 +13597,7 @@ CLASS="PARAMETER" ></TT ></A > ,<A -HREF="index.html#PASSWDCHATDEBUG" +HREF="#PASSWDCHATDEBUG" > <TT CLASS="PARAMETER" ><I @@ -13891,7 +13605,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#PAMPASSWORDCHANGE" +HREF="#PAMPASSWORDCHANGE" > <TT CLASS="PARAMETER" ><I @@ -13921,12 +13635,8 @@ NAME="PASSWDCHATDEBUG" ><DD ><P >This boolean specifies if the passwd chat script - parameter is run in <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->debug</I -></SPAN + parameter is run in <EM +>debug</EM > mode. In this mode the strings passed to and received from the passwd chat are printed in the <A @@ -13935,7 +13645,7 @@ TARGET="_top" >smbd(8)</A > log with a <A -HREF="index.html#DEBUGLEVEL" +HREF="#DEBUGLEVEL" ><TT CLASS="PARAMETER" ><I @@ -13962,7 +13672,7 @@ CLASS="PARAMETER" > and should be turned off after this has been done. This option has no effect if the <A -HREF="index.html#PAMPASSWORDCHANGE" +HREF="#PAMPASSWORDCHANGE" ><TT CLASS="PARAMETER" ><I @@ -13973,7 +13683,7 @@ CLASS="PARAMETER" paramter is set. This parameter is off by default.</P ><P >See also <A -HREF="index.html#PASSWDCHAT" +HREF="#PASSWDCHAT" ><TT CLASS="PARAMETER" ><I @@ -13982,7 +13692,7 @@ CLASS="PARAMETER" > </A >, <A -HREF="index.html#PAMPASSWORDCHANGE" +HREF="#PAMPASSWORDCHANGE" ><TT CLASS="PARAMETER" ><I @@ -13991,7 +13701,7 @@ CLASS="PARAMETER" > </A >, <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I @@ -14023,24 +13733,16 @@ CLASS="PARAMETER" will be replaced with the user name. The user name is checked for existence before calling the password changing program.</P ><P ->Also note that many passwd programs insist in <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Also note that many passwd programs insist in <EM >reasonable - </I -></SPAN + </EM > passwords, such as a minimum length, or the inclusion of mixed case chars and digits. This can pose a problem as some clients (such as Windows for Workgroups) uppercase the password before sending it.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that if the <TT CLASS="PARAMETER" ><I @@ -14051,12 +13753,8 @@ CLASS="PARAMETER" CLASS="CONSTANT" >true </TT -> then this program is called <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN +> then this program is called <EM +>AS ROOT</EM > before the SMB password in the <A HREF="smbpasswd.5.html" @@ -14076,19 +13774,11 @@ CLASS="PARAMETER" >unix password sync</I ></TT > parameter - is set this parameter <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->MUST USE ABSOLUTE PATHS</I -></SPAN + is set this parameter <EM +>MUST USE ABSOLUTE PATHS</EM > - for <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->ALL</I -></SPAN + for <EM +>ALL</EM > programs called, and must be examined for security implications. Note that by default <TT CLASS="PARAMETER" @@ -14102,7 +13792,7 @@ CLASS="CONSTANT" >.</P ><P >See also <A -HREF="index.html#UNIXPASSWORDSYNC" +HREF="#UNIXPASSWORDSYNC" ><TT CLASS="PARAMETER" ><I @@ -14212,7 +13902,7 @@ CLASS="FILENAME" ><P >The name of the password server is looked up using the parameter <A -HREF="index.html#NAMERESOLVEORDER" +HREF="#NAMERESOLVEORDER" ><TT CLASS="PARAMETER" ><I @@ -14227,21 +13917,13 @@ CLASS="PARAMETER" the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in user level security mode.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE:</I -></SPAN +><EM +>NOTE:</EM > Using a password server means your UNIX box (running Samba) is only as secure as your - password server. <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" + password server. <EM >DO NOT CHOOSE A PASSWORD SERVER THAT - YOU DON'T COMPLETELY TRUST</I -></SPAN + YOU DON'T COMPLETELY TRUST</EM >.</P ><P >Never point a Samba server at itself for password @@ -14298,7 +13980,7 @@ CLASS="PARAMETER" Primary or Backup Domain controllers to authenticate against by doing a query for the name <TT CLASS="CONSTANT" ->WORKGROUP<1C></TT +>WORKGROUP<1C></TT > and then contacting each server returned in the list of IP addresses from the name resolution source. </P @@ -14358,7 +14040,7 @@ CLASS="COMMAND" ></UL ><P >See also the <A -HREF="index.html#SECURITY" +HREF="#SECURITY" ><TT CLASS="PARAMETER" ><I @@ -14370,7 +14052,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->password server = <empty string></B +>password server = <empty string></B > </P ><P @@ -14421,7 +14103,7 @@ CLASS="PARAMETER" up pseudo home directories for users.</P ><P >Note that this path will be based on <A -HREF="index.html#ROOTDIR" +HREF="#ROOTDIR" > <TT CLASS="PARAMETER" ><I @@ -14430,12 +14112,8 @@ CLASS="PARAMETER" ></A > if one was specified.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none</I -></SPAN +>Default: <EM +>none</EM ></P ><P >Example: <B @@ -14512,7 +14190,7 @@ CLASS="COMMAND" ></P ><P >See also <A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I @@ -14522,19 +14200,15 @@ CLASS="PARAMETER" </A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none (no command executed)</I -></SPAN +>Default: <EM +>none (no command executed)</EM > </P ><P >Example: <B CLASS="COMMAND" >postexec = echo \"%u disconnected from %S - from %m (%I)\" >> /tmp/log</B + from %m (%I)\" >> /tmp/log</B ></P ></DD ><DT @@ -14583,7 +14257,7 @@ CLASS="COMMAND" >Of course, this could get annoying after a while :-)</P ><P >See also <A -HREF="index.html#PREEXECCLOSE" +HREF="#PREEXECCLOSE" ><TT CLASS="PARAMETER" ><I @@ -14592,7 +14266,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#POSTEXEC" +HREF="#POSTEXEC" ><TT CLASS="PARAMETER" ><I @@ -14602,18 +14276,14 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->none (no command executed)</I -></SPAN +>Default: <EM +>none (no command executed)</EM ></P ><P >Example: <B CLASS="COMMAND" >preexec = echo \"%u connected to %S from %m - (%I)\" >> /tmp/log</B + (%I)\" >> /tmp/log</B ></P ></DD ><DT @@ -14625,7 +14295,7 @@ NAME="PREEXECCLOSE" ><P >This boolean option controls whether a non-zero return code from <A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I @@ -14666,7 +14336,7 @@ CLASS="COMMAND" used in conjunction with <B CLASS="COMMAND" ><A -HREF="index.html#DOMAINMASTER" +HREF="#DOMAINMASTER" ><TT CLASS="PARAMETER" ><I @@ -14687,7 +14357,7 @@ CLASS="COMMAND" capabilities.</P ><P >See also <A -HREF="index.html#OSLEVEL" +HREF="#OSLEVEL" ><TT CLASS="PARAMETER" ><I @@ -14710,7 +14380,7 @@ NAME="PREFEREDMASTER" ><DD ><P >Synonym for <A -HREF="index.html#PREFERREDMASTER" +HREF="#PREFERREDMASTER" ><TT CLASS="PARAMETER" ><I @@ -14733,7 +14403,7 @@ NAME="PRELOAD" ><P >Note that if you just want all printers in your printcap file loaded then the <A -HREF="index.html#LOADPRINTERS" +HREF="#LOADPRINTERS" > <TT CLASS="PARAMETER" ><I @@ -14742,12 +14412,8 @@ CLASS="PARAMETER" ></A > option is easier.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no preloaded services</I -></SPAN +>Default: <EM +>no preloaded services</EM ></P ><P >Example: <B @@ -14765,7 +14431,7 @@ NAME="PRESERVECASE" > This controls if new filenames are created with the case that the client passes, or if they are forced to be the <A -HREF="index.html#DEFAULTCASE" +HREF="#DEFAULTCASE" ><TT CLASS="PARAMETER" ><I @@ -14781,7 +14447,7 @@ CLASS="COMMAND" ></P ><P >See the section on <A -HREF="index.html#AEN203" +HREF="#AEN203" >NAME MANGLING</A > for a fuller discussion.</P @@ -14823,12 +14489,8 @@ CLASS="COMMAND" >%z - the size of the spooled print job (in bytes)</P ><P ->The print command <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->MUST</I -></SPAN +>The print command <EM +>MUST</EM > contain at least one occurrence of <TT CLASS="PARAMETER" @@ -14869,7 +14531,7 @@ CLASS="CONSTANT" >nobody</TT > account. If this happens then create an alternative guest account that can print and set the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -14886,14 +14548,14 @@ CLASS="PARAMETER" ><P ><B CLASS="COMMAND" ->print command = echo Printing %s >> +>print command = echo Printing %s >> /tmp/print.log; lpr -P %p %s; rm %s</B ></P ><P >You may have to vary this command considerably depending on how you normally print files on your system. The default for the parameter varies depending on the setting of the <A -HREF="index.html#PRINTING" +HREF="#PRINTING" > <TT CLASS="PARAMETER" ><I @@ -14935,7 +14597,7 @@ CLASS="COMMAND" ><P >For printing = CUPS : If SAMBA is compiled against libcups, then <A -HREF="index.html#PRINTING" +HREF="#PRINTING" >printcap = cups</A > uses the CUPS API to @@ -14966,7 +14628,7 @@ NAME="PRINTOK" ><DD ><P >Synonym for <A -HREF="index.html#PRINTABLE" +HREF="#PRINTABLE" > <TT CLASS="PARAMETER" ><I @@ -14992,7 +14654,7 @@ CLASS="CONSTANT" >Note that a printable service will ALWAYS allow writing to the service path (user privileges permitting) via the spooling of print data. The <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -15016,7 +14678,7 @@ NAME="PRINTCAP" ><DD ><P >Synonym for <A -HREF="index.html#PRINTCAPNAME" +HREF="#PRINTCAPNAME" ><TT CLASS="PARAMETER" ><I @@ -15037,7 +14699,7 @@ NAME="PRINTCAPNAME" CLASS="FILENAME" > /etc/printcap</TT >). See the discussion of the <A -HREF="index.html#AEN79" +HREF="#AEN79" >[printers]</A > section above for reasons why you might want to do this.</P @@ -15048,7 +14710,7 @@ CLASS="COMMAND" </B >. This should be supplemented by an addtional setting <A -HREF="index.html#PRINTING" +HREF="#PRINTING" >printing = cups</A > in the [global] section. <B @@ -15086,6 +14748,12 @@ CLASS="COMMAND" ><P >A minimal printcap file would look something like this:</P ><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD ><PRE CLASS="PROGRAMLISTING" > print1|My Printer 1 @@ -15094,18 +14762,17 @@ CLASS="PROGRAMLISTING" print4|My Printer 4 print5|My Printer 5 </PRE +></TD +></TR +></TABLE ></P ><P >where the '|' separates aliases of a printer. The fact that the second alias has a space in it gives a hint to Samba that it's a comment.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE</I -></SPAN +><EM +>NOTE</EM >: Under AIX the default printcap name is <TT CLASS="FILENAME" @@ -15144,7 +14811,7 @@ NAME="PRINTERADMIN" ><P >Default: <B CLASS="COMMAND" ->printer admin = <empty string></B +>printer admin = <empty string></B > </P ><P @@ -15160,12 +14827,8 @@ NAME="PRINTERDRIVER" >printer driver (S)</DT ><DD ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note :</I -></SPAN +><EM +>Note :</EM >This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -15188,7 +14851,7 @@ TARGET="_top" sensitive) that describes the appropriate printer driver for your system. If you don't know the exact string to use then you should first try with no <A -HREF="index.html#PRINTERDRIVER" +HREF="#PRINTERDRIVER" ><TT CLASS="PARAMETER" ><I @@ -15200,7 +14863,7 @@ CLASS="PARAMETER" shown in a scroll box after you have chosen the printer manufacturer.</P ><P >See also <A -HREF="index.html#PRINTERDRIVERFILE" +HREF="#PRINTERDRIVERFILE" ><TT CLASS="PARAMETER" ><I @@ -15222,12 +14885,8 @@ NAME="PRINTERDRIVERFILE" >printer driver file (G)</DT ><DD ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note :</I -></SPAN +><EM +>Note :</EM >This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -15271,7 +14930,7 @@ CLASS="FILENAME" >.</P ><P >See also <A -HREF="index.html#PRINTERDRIVERLOCATION" +HREF="#PRINTERDRIVERLOCATION" ><TT CLASS="PARAMETER" ><I @@ -15280,12 +14939,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->None (set in compile).</I -></SPAN +>Default: <EM +>None (set in compile).</EM ></P ><P >Example: <B @@ -15301,12 +14956,8 @@ NAME="PRINTERDRIVERLOCATION" >printer driver location (S)</DT ><DD ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note :</I -></SPAN +><EM +>Note :</EM >This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -15341,7 +14992,7 @@ CLASS="FILENAME" >.</P ><P >See also <A -HREF="index.html#PRINTERDRIVERFILE" +HREF="#PRINTERDRIVERFILE" ><TT CLASS="PARAMETER" ><I @@ -15375,16 +15026,12 @@ NAME="PRINTERNAME" name given will be used for any printable service that does not have its own printer name specified.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >none (but may be <TT CLASS="CONSTANT" >lp</TT > - on many systems)</I -></SPAN + on many systems)</EM ></P ><P >Example: <B @@ -15400,7 +15047,7 @@ NAME="PRINTER" ><DD ><P >Synonym for <A -HREF="index.html#PRINTERNAME" +HREF="#PRINTERNAME" ><TT CLASS="PARAMETER" ><I @@ -15493,42 +15140,19 @@ TARGET="_top" >This option can be set on a per printer basis</P ><P >See also the discussion in the <A -HREF="index.html#AEN79" +HREF="#AEN79" > [printers]</A > section.</P ></DD ><DT ><A -NAME="PRIVATEDIR" -></A ->private dir (G)</DT -><DD -><P ->This parameters defines the directory - smbd will use for storing such files as <TT -CLASS="FILENAME" ->smbpasswd</TT -> - and <TT -CLASS="FILENAME" ->secrets.tdb</TT ->. - </P -><P ->Default :<B -CLASS="COMMAND" ->private dir = ${prefix}/private</B -></P -></DD -><DT -><A NAME="PROTOCOL" ></A >protocol (G)</DT ><DD ><P >Synonym for <A -HREF="index.html#MAXPROTOCOL" +HREF="#MAXPROTOCOL" > <TT CLASS="PARAMETER" ><I @@ -15545,7 +15169,7 @@ NAME="PUBLIC" ><DD ><P >Synonym for <A -HREF="index.html#GUESTOK" +HREF="#GUESTOK" ><TT CLASS="PARAMETER" ><I @@ -15586,18 +15210,14 @@ CLASS="PARAMETER" path in the command as the PATH may not be available to the server.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >depends on the setting of <TT CLASS="PARAMETER" ><I >printing </I ></TT -></I -></SPAN +></EM ></P ><P >Example: <B @@ -15616,7 +15236,7 @@ NAME="QUEUERESUMECOMMAND" executed on the server host in order to resume the printer queue. It is the command to undo the behavior that is caused by the previous parameter (<A -HREF="index.html#QUEUEPAUSECOMMAND" +HREF="#QUEUEPAUSECOMMAND" ><TT CLASS="PARAMETER" ><I @@ -15646,20 +15266,16 @@ CLASS="PARAMETER" path in the command as the PATH may not be available to the server.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >depends on the setting of <A -HREF="index.html#PRINTING" +HREF="#PRINTING" ><TT CLASS="PARAMETER" ><I >printing</I ></TT ></A -></I -></SPAN +></EM > </P ><P @@ -15703,7 +15319,7 @@ NAME="READLIST" >This is a list of users that are given read-only access to a service. If the connecting user is in this list then they will not be given write access, no matter what the <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -15713,7 +15329,7 @@ CLASS="PARAMETER" > option is set to. The list can include group names using the syntax described in the <A -HREF="index.html#INVALIDUSERS" +HREF="#INVALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -15723,7 +15339,7 @@ CLASS="PARAMETER" > parameter.</P ><P >See also the <A -HREF="index.html#WRITELIST" +HREF="#WRITELIST" ><TT CLASS="PARAMETER" ><I @@ -15731,7 +15347,7 @@ CLASS="PARAMETER" ></TT ></A > parameter and the <A -HREF="index.html#INVALIDUSERS" +HREF="#INVALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -15743,7 +15359,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->read list = <empty string></B +>read list = <empty string></B ></P ><P >Example: <B @@ -15759,7 +15375,7 @@ NAME="READONLY" ><DD ><P >Note that this is an inverted synonym for <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -15789,7 +15405,7 @@ NAME="READRAW" ><P >In general this parameter should be viewed as a system tuning tool and left severely alone. See also <A -HREF="index.html#WRITERAW" +HREF="#WRITERAW" > <TT CLASS="PARAMETER" ><I @@ -15846,31 +15462,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="REALM" -></A ->realm (G)</DT -><DD -><P -> This option specifies the kerberos realm to use. The realm is - used as the ADS equivalent of the NT4<B -CLASS="COMMAND" ->domain</B ->. It - is usually set to the DNS name of the kerberos server. - </P -><P ->Default: <B -CLASS="COMMAND" ->realm = </B -></P -><P ->Example: <B -CLASS="COMMAND" ->realm = mysambabox.mycompany.com</B -></P -></DD -><DT -><A NAME="REMOTEANNOUNCE" ></A >remote announce (G)</DT @@ -15903,7 +15494,7 @@ CLASS="COMMAND" to the two given IP addresses using the given workgroup names. If you leave out the workgroup name then the one given in the <A -HREF="index.html#WORKGROUP" +HREF="#WORKGROUP" ><TT CLASS="PARAMETER" ><I @@ -15928,7 +15519,7 @@ CLASS="FILENAME" ><P >Default: <B CLASS="COMMAND" ->remote announce = <empty string> +>remote announce = <empty string> </B ></P ></DD @@ -15978,7 +15569,7 @@ CLASS="COMMAND" ><P >Default: <B CLASS="COMMAND" ->remote browse sync = <empty string> +>remote browse sync = <empty string> </B ></P ></DD @@ -16034,7 +15625,7 @@ NAME="ROOT" ><DD ><P >Synonym for <A -HREF="index.html#ROOTDIRECTORY" +HREF="#ROOTDIRECTORY" > <TT CLASS="PARAMETER" ><I @@ -16051,7 +15642,7 @@ NAME="ROOTDIR" ><DD ><P >Synonym for <A -HREF="index.html#ROOTDIRECTORY" +HREF="#ROOTDIRECTORY" > <TT CLASS="PARAMETER" ><I @@ -16077,7 +15668,7 @@ CLASS="COMMAND" It may also check for, and deny access to, soft links to other parts of the filesystem, or attempts to use ".." in file names to access other directories (depending on the setting of the <A -HREF="index.html#WIDELINKS" +HREF="#WIDELINKS" ><TT CLASS="PARAMETER" ><I @@ -16101,12 +15692,8 @@ CLASS="PARAMETER" >root directory</I ></TT > - option, <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->including</I -></SPAN + option, <EM +>including</EM > some files needed for complete operation of the server. To maintain full operability of the server you will need to mirror some system files @@ -16152,7 +15739,7 @@ CLASS="PARAMETER" (such as CDROMs) after a connection is closed.</P ><P >See also <A -HREF="index.html#POSTEXEC" +HREF="#POSTEXEC" ><TT CLASS="PARAMETER" ><I @@ -16163,7 +15750,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->root postexec = <empty string> +>root postexec = <empty string> </B ></P ></DD @@ -16185,7 +15772,7 @@ CLASS="PARAMETER" connection is opened.</P ><P >See also <A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I @@ -16193,7 +15780,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#PREEXECCLOSE" +HREF="#PREEXECCLOSE" > <TT CLASS="PARAMETER" ><I @@ -16204,7 +15791,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->root preexec = <empty string> +>root preexec = <empty string> </B ></P ></DD @@ -16224,7 +15811,7 @@ CLASS="PARAMETER" > parameter except that the command is run as root.</P ><P >See also <A -HREF="index.html#PREEXEC" +HREF="#PREEXEC" ><TT CLASS="PARAMETER" ><I @@ -16232,7 +15819,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#PREEXECCLOSE" +HREF="#PREEXECCLOSE" > <TT CLASS="PARAMETER" ><I @@ -16326,7 +15913,7 @@ CLASS="COMMAND" >security = user</B >, see the <A -HREF="index.html#MAPTOGUEST" +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I @@ -16339,15 +15926,11 @@ CLASS="PARAMETER" >It is possible to use <B CLASS="COMMAND" >smbd</B -> in a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" -> hybrid mode</I -></SPAN +> in a <EM +> hybrid mode</EM > where it is offers both user and share level security under different <A -HREF="index.html#NETBIOSALIASES" +HREF="#NETBIOSALIASES" > <TT CLASS="PARAMETER" ><I @@ -16361,13 +15944,9 @@ CLASS="PARAMETER" ><A NAME="SECURITYEQUALSSHARE" ></A -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >SECURITY = SHARE - </I -></SPAN + </EM ></P ><P >When clients connect to a share level security server they @@ -16385,12 +15964,8 @@ CLASS="COMMAND" >Note that <B CLASS="COMMAND" >smbd</B -> <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->ALWAYS</I -></SPAN +> <EM +>ALWAYS</EM > uses a valid UNIX user to act on behalf of the client, even in <B @@ -16414,7 +15989,7 @@ CLASS="COMMAND" ><LI ><P >If the <A -HREF="index.html#GUESTONLY" +HREF="#GUESTONLY" ><TT CLASS="PARAMETER" ><I @@ -16424,7 +15999,7 @@ CLASS="PARAMETER" ></A > parameter is set, then all the other stages are missed and only the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" > <TT CLASS="PARAMETER" ><I @@ -16438,7 +16013,7 @@ CLASS="PARAMETER" ><P >Is a username is sent with the share connection request, then this username (after mapping - see <A -HREF="index.html#USERNAMEMAP" +HREF="#USERNAMEMAP" ><TT CLASS="PARAMETER" ><I @@ -16450,13 +16025,9 @@ CLASS="PARAMETER" ></LI ><LI ><P ->If the client did a previous <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>If the client did a previous <EM >logon - </I -></SPAN + </EM > request (the SessionSetup SMB call) then the username sent in this SMB will be added as a potential username. </P @@ -16474,7 +16045,7 @@ CLASS="EMPHASIS" ><LI ><P >Any users on the <A -HREF="index.html#USER" +HREF="#USER" ><TT CLASS="PARAMETER" ><I @@ -16511,37 +16082,29 @@ CLASS="PARAMETER" >, then this guest user will be used, otherwise access is denied.</P ><P ->Note that it can be <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->very</I -></SPAN +>Note that it can be <EM +>very</EM > confusing in share-level security as to which UNIX username will eventually be used in granting access.</P ><P >See also the section <A -HREF="index.html#AEN236" +HREF="#AEN241" > NOTE ABOUT USERNAME/PASSWORD VALIDATION</A >.</P ><P ><A NAME="SECURITYEQUALSUSER" ></A -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >SECURITY = USER - </I -></SPAN + </EM ></P ><P >This is the default security setting in Samba 2.2. With user-level security a client must first "log-on" with a valid username and password (which can be mapped using the <A -HREF="index.html#USERNAMEMAP" +HREF="#USERNAMEMAP" ><TT CLASS="PARAMETER" ><I @@ -16550,7 +16113,7 @@ CLASS="PARAMETER" ></A > parameter). Encrypted passwords (see the <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" > <TT CLASS="PARAMETER" ><I @@ -16559,7 +16122,7 @@ CLASS="PARAMETER" ></A > parameter) can also be used in this security mode. Parameters such as <A -HREF="index.html#USER" +HREF="#USER" > <TT CLASS="PARAMETER" ><I @@ -16567,7 +16130,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#GUESTONLY" +HREF="#GUESTONLY" > <TT CLASS="PARAMETER" ><I @@ -16578,24 +16141,16 @@ CLASS="PARAMETER" may change the UNIX user to use on this connection, but only after the user has been successfully authenticated.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that the name of the resource being - requested is <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + requested is <EM +>not</EM > sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -16604,7 +16159,7 @@ CLASS="PARAMETER" ></A >. See the <A -HREF="index.html#MAPTOGUEST" +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I @@ -16615,20 +16170,16 @@ CLASS="PARAMETER" > parameter for details on doing this.</P ><P >See also the section <A -HREF="index.html#AEN236" +HREF="#AEN241" > NOTE ABOUT USERNAME/PASSWORD VALIDATION</A >.</P ><P ><A NAME="SECURITYEQUALSSERVER" ></A -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >SECURITY = SERVER - </I -></SPAN + </EM ></P ><P >In this mode Samba will try to validate the username/password @@ -16653,12 +16204,8 @@ CLASS="FILENAME" > for details on how to set this up.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that from the client's point of view <B CLASS="COMMAND" @@ -16670,24 +16217,16 @@ CLASS="COMMAND" with the authentication, it does not in any way affect what the client sees.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that the name of the resource being - requested is <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + requested is <EM +>not</EM > sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -16696,7 +16235,7 @@ CLASS="PARAMETER" ></A >. See the <A -HREF="index.html#MAPTOGUEST" +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I @@ -16707,12 +16246,12 @@ CLASS="PARAMETER" > parameter for details on doing this.</P ><P >See also the section <A -HREF="index.html#AEN236" +HREF="#AEN241" > NOTE ABOUT USERNAME/PASSWORD VALIDATION</A >.</P ><P >See also the <A -HREF="index.html#PASSWORDSERVER" +HREF="#PASSWORDSERVER" ><TT CLASS="PARAMETER" ><I @@ -16721,7 +16260,7 @@ CLASS="PARAMETER" ></TT ></A > parameter and the <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I @@ -16734,13 +16273,9 @@ CLASS="PARAMETER" ><A NAME="SECURITYEQUALSDOMAIN" ></A -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +><EM >SECURITY = DOMAIN - </I -></SPAN + </EM ></P ><P >This mode will only work correctly if <A @@ -16749,7 +16284,7 @@ TARGET="_top" >smbpasswd(8)</A > has been used to add this machine into a Windows NT Domain. It expects the <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I @@ -16765,22 +16300,14 @@ CLASS="CONSTANT" it to a Windows NT Primary or Backup Domain Controller, in exactly the same way that a Windows NT Server would do.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that a valid UNIX user must still exist as well as the account on the Domain Controller to allow Samba to have a valid UNIX account to map file access to.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that from the client's point of view <B CLASS="COMMAND" @@ -16792,24 +16319,16 @@ CLASS="COMMAND" >. It only affects how the server deals with the authentication, it does not in any way affect what the client sees.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that the name of the resource being - requested is <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + requested is <EM +>not</EM > sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the <A -HREF="index.html#GUESTACCOUNT" +HREF="#GUESTACCOUNT" ><TT CLASS="PARAMETER" ><I @@ -16818,7 +16337,7 @@ CLASS="PARAMETER" ></A >. See the <A -HREF="index.html#MAPTOGUEST" +HREF="#MAPTOGUEST" ><TT CLASS="PARAMETER" ><I @@ -16828,12 +16347,8 @@ CLASS="PARAMETER" </A > parameter for details on doing this.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->BUG:</I -></SPAN +><EM +>BUG:</EM > There is currently a bug in the implementation of <B CLASS="COMMAND" @@ -16846,12 +16361,12 @@ CLASS="COMMAND" Domain Controller. This issue will be addressed in a future release.</P ><P >See also the section <A -HREF="index.html#AEN236" +HREF="#AEN241" > NOTE ABOUT USERNAME/PASSWORD VALIDATION</A >.</P ><P >See also the <A -HREF="index.html#PASSWORDSERVER" +HREF="#PASSWORDSERVER" ><TT CLASS="PARAMETER" ><I @@ -16860,7 +16375,7 @@ CLASS="PARAMETER" ></TT ></A > parameter and the <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I @@ -16902,12 +16417,8 @@ NAME="SECURITYMASK" a user to modify all the user/group/world permissions on a file. </P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Note</I -></SPAN +><EM +>Note</EM > that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone @@ -16918,7 +16429,7 @@ CLASS="CONSTANT" >.</P ><P >See also the <A -HREF="index.html#FORCEDIRECTORYSECURITYMODE" +HREF="#FORCEDIRECTORYSECURITYMODE" > <TT CLASS="PARAMETER" ><I @@ -16927,7 +16438,7 @@ CLASS="PARAMETER" ></A >, <A -HREF="index.html#DIRECTORYSECURITYMASK" +HREF="#DIRECTORYSECURITYMASK" ><TT CLASS="PARAMETER" ><I @@ -16936,7 +16447,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#FORCESECURITYMODE" +HREF="#FORCESECURITYMODE" > <TT CLASS="PARAMETER" ><I @@ -17074,12 +16585,8 @@ CLASS="CONSTANT" >This option gives full share compatibility and enabled by default.</P ><P ->You should <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NEVER</I -></SPAN +>You should <EM +>NEVER</EM > turn this parameter off as many Windows applications will break if you do so.</P ><P @@ -17099,7 +16606,7 @@ NAME="SHORTPRESERVECASE" which conform to 8.3 syntax, that is all in upper case and of suitable length, are created upper case, or if they are forced to be the <A -HREF="index.html#DEFAULTCASE" +HREF="#DEFAULTCASE" ><TT CLASS="PARAMETER" ><I @@ -17108,7 +16615,7 @@ CLASS="PARAMETER" ></TT ></A >. This option can be use with <A -HREF="index.html#PRESERVECASE" +HREF="#PRESERVECASE" ><B CLASS="COMMAND" >preserve case = yes</B @@ -17118,7 +16625,7 @@ CLASS="COMMAND" names are lowered. </P ><P >See the section on <A -HREF="index.html#AEN203" +HREF="#AEN203" > NAME MANGLING</A >.</P ><P @@ -17162,17 +16669,13 @@ CLASS="PARAMETER" ></TT > parameter will always cause the OpenPrinterEx() on the server - to fail. Thus the APW icon will never be displayed. <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" -> Note :</I -></SPAN + to fail. Thus the APW icon will never be displayed. <EM +> Note :</EM >This does not prevent the same user from having administrative privilege on an individual printer.</P ><P >See also <A -HREF="index.html#ADDPRINTERCOMMAND" +HREF="#ADDPRINTERCOMMAND" ><TT CLASS="PARAMETER" ><I @@ -17181,7 +16684,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#DELETEPRINTERCOMMAND" +HREF="#DELETEPRINTERCOMMAND" > <TT CLASS="PARAMETER" ><I @@ -17189,7 +16692,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#PRINTERADMIN" +HREF="#PRINTERADMIN" ><TT CLASS="PARAMETER" ><I @@ -17205,122 +16708,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="SHUTDOWNSCRIPT" -></A ->shutdown script (G)</DT -><DD -><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->This parameter only exists in the HEAD cvs branch</I -></SPAN -> - This a full path name to a script called by - <A -HREF="smbd.8.html" -TARGET="_top" -><B -CLASS="COMMAND" ->smbd(8)</B -></A -> that - should start a shutdown procedure.</P -><P ->This command will be run as the user connected to the - server.</P -><P ->%m %t %r %f parameters are expanded</P -><P -><TT -CLASS="PARAMETER" -><I ->%m</I -></TT -> will be substituted with the - shutdown message sent to the server.</P -><P -><TT -CLASS="PARAMETER" -><I ->%t</I -></TT -> will be substituted with the - number of seconds to wait before effectively starting the - shutdown procedure.</P -><P -><TT -CLASS="PARAMETER" -><I ->%r</I -></TT -> will be substituted with the - switch <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->-r</I -></SPAN ->. It means reboot after shutdown - for NT. - </P -><P -><TT -CLASS="PARAMETER" -><I ->%f</I -></TT -> will be substituted with the - switch <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->-f</I -></SPAN ->. It means force the shutdown - even if applications do not respond for NT.</P -><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->None</I -></SPAN ->.</P -><P ->Example: <B -CLASS="COMMAND" ->abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f</B -></P -><P ->Shutdown script example: - <PRE -CLASS="PROGRAMLISTING" -> #!/bin/bash - - $time=0 - let "time/60" - let "time++" - - /sbin/shutdown $3 $4 +$time $1 & - </PRE -> - Shutdown does not return so we need to launch it in background. - </P -><P ->See also <A -HREF="index.html#ABORTSHUTDOWNSCRIPT" -><TT -CLASS="PARAMETER" -><I ->abort shutdown script</I -></TT -></A ->.</P -></DD -><DT -><A NAME="SMBPASSWDFILE" ></A >smb passwd file (G)</DT @@ -17344,22 +16731,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="SMBPORTS" -></A ->smb ports (G)</DT -><DD -><P ->Specifies which ports the server should listen on - for SMB traffic. - </P -><P ->Default: <B -CLASS="COMMAND" ->smb ports = 445 139</B -></P -></DD -><DT -><A NAME="SOCKETADDRESS" ></A >socket address (G)</DT @@ -17464,12 +16835,8 @@ TARGET="_top" ></LI ></UL ><P ->Those marked with a <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->'*'</I -></SPAN +>Those marked with a <EM +>'*'</EM > take an integer argument. The others can optionally take a 1 or 0 argument to enable or disable the option, by default they will be enabled if you @@ -17541,12 +16908,8 @@ CLASS="COMMAND" >SAMBA_NETBIOS_NAME = myhostname</B ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->No default value</I -></SPAN +>Default: <EM +>No default value</EM ></P ><P >Examples: <B @@ -17563,19 +16926,606 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="SPNEGO" +NAME="SSL" +></A +>ssl (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This variable enables or disables the entire SSL mode. If + it is set to <TT +CLASS="CONSTANT" +>no</TT +>, the SSL-enabled Samba behaves + exactly like the non-SSL Samba. If set to <TT +CLASS="CONSTANT" +>yes</TT +>, + it depends on the variables <A +HREF="#SSLHOSTS" +><TT +CLASS="PARAMETER" +><I +> ssl hosts</I +></TT +></A +> and <A +HREF="#SSLHOSTSRESIGN" +> <TT +CLASS="PARAMETER" +><I +>ssl hosts resign</I +></TT +></A +> whether an SSL + connection will be required.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl = no</B +></P +></DD +><DT +><A +NAME="SSLCACERTDIR" +></A +>ssl CA certDir (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This variable defines where to look up the Certification + Authorities. The given directory should contain one file for + each CA that Samba will trust. The file name must be the hash + value over the "Distinguished Name" of the CA. How this directory + is set up is explained later in this document. All files within the + directory that don't fit into this naming scheme are ignored. You + don't need this variable if you don't verify client certificates.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl CA certDir = /usr/local/ssl/certs + </B +></P +></DD +><DT +><A +NAME="SSLCACERTFILE" +></A +>ssl CA certFile (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This variable is a second way to define the trusted CAs. + The certificates of the trusted CAs are collected in one big + file and this variable points to the file. You will probably + only use one of the two ways to define your CAs. The first choice is + preferable if you have many CAs or want to be flexible, the second + is preferable if you only have one CA and want to keep things + simple (you won't need to create the hashed file names). You + don't need this variable if you don't verify client certificates.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl CA certFile = /usr/local/ssl/certs/trustedCAs.pem + </B +></P +></DD +><DT +><A +NAME="SSLCIPHERS" +></A +>ssl ciphers (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This variable defines the ciphers that should be offered + during SSL negotiation. You should not set this variable unless + you know what you are doing.</P +></DD +><DT +><A +NAME="SSLCLIENTCERT" +></A +>ssl client cert (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>The certificate in this file is used by <A +HREF="smbclient.1.html" +TARGET="_top" +> <B +CLASS="COMMAND" +>smbclient(1)</B +></A +> if it exists. It's needed + if the server requires a client certificate.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl client cert = /usr/local/ssl/certs/smbclient.pem + </B +></P +></DD +><DT +><A +NAME="SSLCLIENTKEY" +></A +>ssl client key (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This is the private key for <A +HREF="smbclient.1.html" +TARGET="_top" +> <B +CLASS="COMMAND" +>smbclient(1)</B +></A +>. It's only needed if the + client should have a certificate. </P +><P +>Default: <B +CLASS="COMMAND" +>ssl client key = /usr/local/ssl/private/smbclient.pem + </B +></P +></DD +><DT +><A +NAME="SSLCOMPATIBILITY" +></A +>ssl compatibility (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This variable defines whether OpenSSL should be configured + for bug compatibility with other SSL implementations. This is + probably not desirable because currently no clients with SSL + implementations other than OpenSSL exist.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl compatibility = no</B +></P +></DD +><DT +><A +NAME="SSLEGDSOCKET" ></A ->use spnego (G)</DT +>ssl egd socket (G)</DT ><DD ><P -> This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller.</P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P ><P ->Default: <SPAN -CLASS="emphasis" +> This option is used to define the location of the communiation socket of + an EGD or PRNGD daemon, from which entropy can be retrieved. This option + can be used instead of or together with the <A +HREF="#SSLENTROPYFILE" +><TT +CLASS="PARAMETER" ><I -CLASS="EMPHASIS" ->use spnego = yes</I -></SPAN +>ssl entropy file</I +></TT +></A +> + directive. 255 bytes of entropy will be retrieved from the daemon. + </P +><P +>Default: <EM +>none</EM +></P +></DD +><DT +><A +NAME="SSLENTROPYBYTES" +></A +>ssl entropy bytes (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +> This parameter is used to define the number of bytes which should + be read from the <A +HREF="#SSLENTROPYFILE" +><TT +CLASS="PARAMETER" +><I +>ssl entropy + file</I +></TT +></A +> If a -1 is specified, the entire file will + be read. + </P +><P +>Default: <B +CLASS="COMMAND" +>ssl entropy bytes = 255</B +></P +></DD +><DT +><A +NAME="SSLENTROPYFILE" +></A +>ssl entropy file (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +> This parameter is used to specify a file from which processes will + read "random bytes" on startup. In order to seed the internal pseudo + random number generator, entropy must be provided. On system with a + <TT +CLASS="FILENAME" +>/dev/urandom</TT +> device file, the processes + will retrieve its entropy from the kernel. On systems without kernel + entropy support, a file can be supplied that will be read on startup + and that will be used to seed the PRNG. + </P +><P +>Default: <EM +>none</EM +></P +></DD +><DT +><A +NAME="SSLHOSTS" +></A +>ssl hosts (G)</DT +><DD +><P +>See <A +HREF="#SSLHOSTSRESIGN" +><TT +CLASS="PARAMETER" +><I +> ssl hosts resign</I +></TT +></A +>.</P +></DD +><DT +><A +NAME="SSLHOSTSRESIGN" +></A +>ssl hosts resign (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>These two variables define whether Samba will go + into SSL mode or not. If none of them is defined, Samba will + allow only SSL connections. If the <A +HREF="#SSLHOSTS" +> <TT +CLASS="PARAMETER" +><I +>ssl hosts</I +></TT +></A +> variable lists + hosts (by IP-address, IP-address range, net group or name), + only these hosts will be forced into SSL mode. If the <TT +CLASS="PARAMETER" +><I +> ssl hosts resign</I +></TT +> variable lists hosts, only these + hosts will <EM +>NOT</EM +> be forced into SSL mode. The syntax for these two + variables is the same as for the <A +HREF="#HOSTSALLOW" +><TT +CLASS="PARAMETER" +><I +> hosts allow</I +></TT +></A +> and <A +HREF="#HOSTSDENY" +> <TT +CLASS="PARAMETER" +><I +>hosts deny</I +></TT +></A +> pair of variables, only + that the subject of the decision is different: It's not the access + right but whether SSL is used or not. </P +><P +>The example below requires SSL connections from all hosts + outside the local net (which is 192.168.*.*).</P +><P +>Default: <B +CLASS="COMMAND" +>ssl hosts = <empty string></B +></P +><P +><B +CLASS="COMMAND" +>ssl hosts resign = <empty string></B +></P +><P +>Example: <B +CLASS="COMMAND" +>ssl hosts resign = 192.168.</B +></P +></DD +><DT +><A +NAME="SSLREQUIRECLIENTCERT" +></A +>ssl require clientcert (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>If this variable is set to <TT +CLASS="CONSTANT" +>yes</TT +>, the + server will not tolerate connections from clients that don't + have a valid certificate. The directory/file given in <A +HREF="#SSLCACERTDIR" +><TT +CLASS="PARAMETER" +><I +>ssl CA certDir</I +></TT +> + </A +> and <A +HREF="#SSLCACERTFILE" +><TT +CLASS="PARAMETER" +><I +>ssl CA certFile + </I +></TT +></A +> will be used to look up the CAs that issued + the client's certificate. If the certificate can't be verified + positively, the connection will be terminated. If this variable + is set to <TT +CLASS="CONSTANT" +>no</TT +>, clients don't need certificates. + Contrary to web applications you really <EM +>should</EM +> + require client certificates. In the web environment the client's + data is sensitive (credit card numbers) and the server must prove + to be trustworthy. In a file server environment the server's data + will be sensitive and the clients must prove to be trustworthy.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl require clientcert = no</B +></P +></DD +><DT +><A +NAME="SSLREQUIRESERVERCERT" +></A +>ssl require servercert (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>If this variable is set to <TT +CLASS="CONSTANT" +>yes</TT +>, the + <A +HREF="smbclient.1.html" +TARGET="_top" +><B +CLASS="COMMAND" +>smbclient(1)</B +> + </A +> will request a certificate from the server. Same as + <A +HREF="#SSLREQUIRECLIENTCERT" +><TT +CLASS="PARAMETER" +><I +>ssl require + clientcert</I +></TT +></A +> for the server.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl require servercert = no</B +> + </P +></DD +><DT +><A +NAME="SSLSERVERCERT" +></A +>ssl server cert (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This is the file containing the server's certificate. + The server <EM +>must</EM +> have a certificate. The + file may also contain the server's private key. See later for + how certificates and private keys are created.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl server cert = <empty string> + </B +></P +></DD +><DT +><A +NAME="SSLSERVERKEY" +></A +>ssl server key (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This file contains the private key of the server. If + this variable is not defined, the key is looked up in the + certificate file (it may be appended to the certificate). + The server <EM +>must</EM +> have a private key + and the certificate <EM +>must</EM +> + match this private key.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl server key = <empty string> + </B +></P +></DD +><DT +><A +NAME="SSLVERSION" +></A +>ssl version (G)</DT +><DD +><P +>This variable is part of SSL-enabled Samba. This + is only available if the SSL libraries have been compiled on your + system and the configure option <B +CLASS="COMMAND" +>--with-ssl</B +> was + given at configure time.</P +><P +>This enumeration variable defines the versions of the + SSL protocol that will be used. <TT +CLASS="CONSTANT" +>ssl2or3</TT +> allows + dynamic negotiation of SSL v2 or v3, <TT +CLASS="CONSTANT" +>ssl2</TT +> results + in SSL v2, <TT +CLASS="CONSTANT" +>ssl3</TT +> results in SSL v3 and + <TT +CLASS="CONSTANT" +>tls1</TT +> results in TLS v1. TLS (Transport Layer + Security) is the new standard for SSL.</P +><P +>Default: <B +CLASS="COMMAND" +>ssl version = "ssl2or3"</B ></P ></DD ><DT @@ -17745,7 +17695,7 @@ TARGET="_top" explorer shell file copies.</P ><P >See also the <A -HREF="index.html#SYNCALWAYS" +HREF="#SYNCALWAYS" ><TT CLASS="PARAMETER" ><I @@ -17767,9 +17717,11 @@ NAME="STRIPDOT" >strip dot (G)</DT ><DD ><P ->This is a boolean that controls whether to - strip trailing dots off UNIX filenames. This helps with some - CDROMs that have filenames ending in a single dot.</P +>This parameter is now unused in Samba (2.2.5 and above). + It used strip trailing dots off UNIX filenames but was not correctly implmented. + In Samba 2.2.5 and above UNIX filenames ending in a dot are invalid Windows long + filenames (as they are in Windows NT and above) and are mangled to 8.3 before + being returned to a client.</P ><P >Default: <B CLASS="COMMAND" @@ -17812,7 +17764,7 @@ CLASS="CONSTANT" any affect.</P ><P >See also the <A -HREF="index.html#STRICTSYNC" +HREF="#STRICTSYNC" ><TT CLASS="PARAMETER" ><I @@ -17982,7 +17934,7 @@ NAME="TIMESTAMPLOGS" ><DD ><P >Synonym for <A -HREF="index.html#DEBUGTIMESTAMP" +HREF="#DEBUGTIMESTAMP" ><TT CLASS="PARAMETER" ><I @@ -18011,7 +17963,7 @@ TARGET="_top" can be used to prevent a server from exceeding its capacity and is designed as a printing throttle. See also <A -HREF="index.html#MAXPRINTJOBS" +HREF="#MAXPRINTJOBS" ><TT CLASS="PARAMETER" ><I @@ -18033,39 +17985,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="UNICODE" -></A ->unicode (G)</DT -><DD -><P ->Specifies whether Samba should try - to use unicode on the wire by default. - </P -><P ->Default: <B -CLASS="COMMAND" ->unicode = yes</B -></P -></DD -><DT -><A -NAME="UNIXCHARSET" -></A ->unix charset (G)</DT -><DD -><P ->Specifies the charset the unix machine - Samba runs on uses. Samba needs to know this in order to be able to - convert text to the charsets other SMB clients use. - </P -><P ->Default: <B -CLASS="COMMAND" ->unix charset = ASCII</B -></P -></DD -><DT -><A NAME="UNIXEXTENSIONS" ></A >unix extensions(G)</DT @@ -18102,19 +18021,15 @@ CLASS="PARAMETER" >passwd program</I ></TT ->parameter is called <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->AS ROOT</I -></SPAN +>parameter is called <EM +>AS ROOT</EM > - to allow the new UNIX password to be set without access to the old UNIX password (as the SMB password change code has no access to the old password cleartext, only the new).</P ><P >See also <A -HREF="index.html#PASSWDPROGRAM" +HREF="#PASSWDPROGRAM" ><TT CLASS="PARAMETER" ><I @@ -18123,7 +18038,7 @@ CLASS="PARAMETER" ></TT ></A >, <A -HREF="index.html#PASSWDCHAT" +HREF="#PASSWDCHAT" ><TT CLASS="PARAMETER" ><I @@ -18162,7 +18077,7 @@ CLASS="CONSTANT" >.</P ><P >In order for this parameter to work correctly the <A -HREF="index.html#ENCRYPTPASSWORDS" +HREF="#ENCRYPTPASSWORDS" ><TT CLASS="PARAMETER" ><I @@ -18225,18 +18140,14 @@ CLASS="COMMAND" >If this parameter is enabled for a printer, then any attempt to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() - call to succeed. <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" + call to succeed. <EM >This parameter MUST not be able enabled on a print share which has valid print driver installed on the Samba - server.</I -></SPAN + server.</EM ></P ><P >See also <A -HREF="index.html#DISABLESPOOLSS" +HREF="#DISABLESPOOLSS" >disable spoolss</A > </P @@ -18288,12 +18199,8 @@ CLASS="FILENAME" will be read to find the names of hosts and users who will be allowed access without specifying a password.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE:</I -></SPAN +><EM +>NOTE:</EM > The use of <TT CLASS="PARAMETER" ><I @@ -18323,7 +18230,7 @@ NAME="USER" ><DD ><P >Synonym for <A -HREF="index.html#USERNAME" +HREF="#USERNAME" ><TT CLASS="PARAMETER" ><I @@ -18340,7 +18247,7 @@ NAME="USERS" ><DD ><P >Synonym for <A -HREF="index.html#USERNAME" +HREF="#USERNAME" ><TT CLASS="PARAMETER" ><I @@ -18399,7 +18306,7 @@ CLASS="PARAMETER" ><P >To restrict a service to a particular set of users you can use the <A -HREF="index.html#VALIDUSERS" +HREF="#VALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -18429,7 +18336,7 @@ CLASS="PARAMETER" search.</P ><P >See the section <A -HREF="index.html#AEN236" +HREF="#AEN241" >NOTE ABOUT USERNAME/PASSWORD VALIDATION</A > for more information on how @@ -18438,7 +18345,7 @@ HREF="index.html#AEN236" >Default: <B CLASS="COMMAND" >The guest account if a guest service, - else <empty string>.</B + else <empty string>.</B ></P ><P >Examples:<B @@ -18575,11 +18482,20 @@ CLASS="COMMAND" '!' to tell Samba to stop processing if it gets a match on that line.</P ><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD ><PRE CLASS="PROGRAMLISTING" > !sys = mary fred guest = * </PRE +></TD +></TR +></TABLE ></P ><P >Note that the remapping is applied to all occurrences @@ -18600,7 +18516,7 @@ CLASS="CONSTANT" >fred</TT >. The only exception to this is the username passed to the <A -HREF="index.html#PASSWORDSERVER" +HREF="#PASSWORDSERVER" ><TT CLASS="PARAMETER" ><I @@ -18616,12 +18532,8 @@ CLASS="PARAMETER" trouble deleting print jobs as PrintManager under WfWg will think they don't own the print job.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no username map</I -></SPAN +>Default: <EM +>no username map</EM ></P ><P >Example: <B @@ -18649,14 +18561,8 @@ CLASS="CONSTANT" connection is made to a Samba server. Sites may use this to record the user connecting to a Samba share.</P ><P ->Due to the requirements of the utmp record, we - are required to create a unique identifier for the - incoming user. Enabling this option creates an n^2 - algorithm to find this number. This may impede - performance on large installations. </P -><P >See also the <A -HREF="index.html#UTMPDIRECTORY" +HREF="#UTMPDIRECTORY" ><TT CLASS="PARAMETER" ><I @@ -18684,7 +18590,7 @@ CLASS="COMMAND" >. It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server. See also the <A -HREF="index.html#UTMP" +HREF="#UTMP" > <TT CLASS="PARAMETER" ><I @@ -18699,64 +18605,139 @@ CLASS="FILENAME" >/var/run/utmp</TT > on Linux).</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no utmp directory</I -></SPAN -></P -><P ->Example: <B -CLASS="COMMAND" ->utmp directory = /var/run/utmp</B +>Default: <EM +>no utmp directory</EM ></P ></DD ><DT ><A -NAME="WTMPDIRECTORY" +NAME="VALIDCHARS" ></A ->wtmp directory(G)</DT +>valid chars (G)</DT ><DD ><P ->This parameter is only available if Samba has - been configured and compiled with the option <B -CLASS="COMMAND" -> --with-utmp</B ->. It specifies a directory pathname that is - used to store the wtmp or wtmpx files (depending on the UNIX system) that - record user connections to a Samba server. The difference with - the utmp directory is the fact that user info is kept after a user - has logged out. - - See also the <A -HREF="index.html#UTMP" -> <TT +>The option allows you to specify additional + characters that should be considered valid by the server in + filenames. This is particularly useful for national character + sets, such as adding u-umlaut or a-ring.</P +><P +>The option takes a list of characters in either integer + or character form with spaces between them. If you give two + characters with a colon between them then it will be taken as + an lowercase:uppercase pair.</P +><P +>If you have an editor capable of entering the characters + into the config file then it is probably easiest to use this + method. Otherwise you can specify the characters in octal, + decimal or hexadecimal form using the usual C notation.</P +><P +>For example to add the single character 'Z' to the charset + (which is a pointless thing to do as it's already there) you could + do one of the following</P +><P +><TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD +><PRE +CLASS="PROGRAMLISTING" +> valid chars = Z + valid chars = z:Z + valid chars = 0132:0172 + </PRE +></TD +></TR +></TABLE +></P +><P +>The last two examples above actually add two characters, + and alter the uppercase and lowercase mappings appropriately.</P +><P +>Note that you <EM +>MUST</EM +> specify this parameter + after the <TT CLASS="PARAMETER" ><I ->utmp</I +>client code page</I ></TT -></A -> parameter. By default this is - not set, meaning the system will use whatever utmp file the - native system is set to use (usually - <TT -CLASS="FILENAME" ->/var/run/wtmp</TT -> on Linux).</P +> parameter if you + have both set. If <TT +CLASS="PARAMETER" +><I +>client code page</I +></TT +> is set after + the <TT +CLASS="PARAMETER" +><I +>valid chars</I +></TT +> parameter the <TT +CLASS="PARAMETER" +><I +>valid + chars</I +></TT +> settings will be overwritten.</P ><P ->Default: <SPAN -CLASS="emphasis" +>See also the <A +HREF="#CLIENTCODEPAGE" +><TT +CLASS="PARAMETER" ><I -CLASS="EMPHASIS" ->no wtmp directory</I -></SPAN +>client + code page</I +></TT +></A +> parameter.</P +><P +>Default: <EM +>Samba defaults to using a reasonable set + of valid characters for English systems</EM ></P ><P >Example: <B CLASS="COMMAND" ->wtmp directory = /var/log/wtmp</B +>valid chars = 0345:0305 0366:0326 0344:0304 + </B ></P +><P +>The above example allows filenames to have the Swedish + characters in them.</P +><P +><EM +>NOTE:</EM +> It is actually quite difficult to + correctly produce a <TT +CLASS="PARAMETER" +><I +>valid chars</I +></TT +> line for + a particular system. To automate the process <A +HREF="mailto:tino@augsburg.net" +TARGET="_top" +>tino@augsburg.net</A +> has written + a package called <B +CLASS="COMMAND" +>validchars</B +> which will automatically + produce a complete <TT +CLASS="PARAMETER" +><I +>valid chars</I +></TT +> line for + a given client system. Look in the <TT +CLASS="FILENAME" +>examples/validchars/ + </TT +> subdirectory of your Samba source code distribution + for this package.</P ></DD ><DT ><A @@ -18793,7 +18774,7 @@ CLASS="PARAMETER" >. This is useful in the [homes] section.</P ><P >See also <A -HREF="index.html#INVALIDUSERS" +HREF="#INVALIDUSERS" ><TT CLASS="PARAMETER" ><I @@ -18803,13 +18784,9 @@ CLASS="PARAMETER" ></A ></P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >No valid users list (anyone can login) - </I -></SPAN + </EM ></P ><P >Example: <B @@ -18831,12 +18808,8 @@ NAME="VETOFILES" or directories as in DOS wildcards.</P ><P >Each entry must be a unix path, not a DOS path and - must <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + must <EM +>not</EM > include the unix directory separator '/'.</P ><P @@ -18852,12 +18825,8 @@ CLASS="PARAMETER" is important to be aware of is Samba's behaviour when trying to delete a directory. If a directory that is to be deleted contains nothing but veto files this - deletion will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->fail</I -></SPAN + deletion will <EM +>fail</EM > unless you also set the <TT CLASS="PARAMETER" @@ -18877,7 +18846,7 @@ CLASS="PARAMETER" for a match as they are scanned.</P ><P >See also <A -HREF="index.html#HIDEFILES" +HREF="#HIDEFILES" ><TT CLASS="PARAMETER" ><I @@ -18886,7 +18855,7 @@ CLASS="PARAMETER" ></TT ></A > and <A -HREF="index.html#CASESENSITIVE" +HREF="#CASESENSITIVE" ><TT CLASS="PARAMETER" ><I @@ -18895,16 +18864,18 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >No files or directories are vetoed. - </I -></SPAN + </EM ></P ><P ->Examples:<PRE +>Examples:<TABLE +BORDER="0" +BGCOLOR="#E0E0E0" +WIDTH="90%" +><TR +><TD +><PRE CLASS="PROGRAMLISTING" >; Veto any files containing the word Security, ; any ending in .tmp, and any directory containing the @@ -18914,6 +18885,9 @@ veto files = /*Security*/*.tmp/*root*/ ; Veto the Apple specific files that a NetAtalk server ; creates. veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/</PRE +></TD +></TR +></TABLE ></P ></DD ><DT @@ -18924,7 +18898,7 @@ NAME="VETOOPLOCKFILES" ><DD ><P >This parameter is only valid when the <A -HREF="index.html#OPLOCKS" +HREF="#OPLOCKS" ><TT CLASS="PARAMETER" ><I @@ -18936,7 +18910,7 @@ CLASS="PARAMETER" to selectively turn off the granting of oplocks on selected files that match a wildcarded list, similar to the wildcarded list used in the <A -HREF="index.html#VETOFILES" +HREF="#VETOFILES" ><TT CLASS="PARAMETER" ><I @@ -18946,13 +18920,9 @@ CLASS="PARAMETER" > parameter.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" +>Default: <EM >No files are vetoed for oplock - grants</I -></SPAN + grants</EM ></P ><P >You might want to do this on files that you know will @@ -18974,31 +18944,6 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="VFSPATH" -></A ->vfs path (S)</DT -><DD -><P ->This parameter specifies the directory - to look in for vfs modules. The name of every <B -CLASS="COMMAND" ->vfs object - </B -> will be prepended by this directory - </P -><P ->Default: <B -CLASS="COMMAND" ->vfs path = </B -></P -><P ->Example: <B -CLASS="COMMAND" ->vfs path = /usr/lib/samba/vfs</B -></P -></DD -><DT -><A NAME="VFSOBJECT" ></A >vfs object (S)</DT @@ -19010,12 +18955,8 @@ NAME="VFSOBJECT" with a VFS object. The Samba VFS layer is new to Samba 2.2 and must be enabled at compile time with --with-vfs.</P ><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no value</I -></SPAN +>Default : <EM +>no value</EM ></P ></DD ><DT @@ -19029,7 +18970,7 @@ NAME="VFSOPTIONS" to the vfs layer at initialization time. The Samba VFS layer is new to Samba 2.2 and must be enabled at compile time with --with-vfs. See also <A -HREF="index.html#VFSOBJECT" +HREF="#VFSOBJECT" ><TT CLASS="PARAMETER" ><I @@ -19038,12 +18979,8 @@ CLASS="PARAMETER" ></A >.</P ><P ->Default : <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->no value</I -></SPAN +>Default : <EM +>no value</EM ></P ></DD ><DT @@ -19057,12 +18994,8 @@ NAME="VOLUME" returned for a share. Useful for CDROMs with installation programs that insist on a particular volume label.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->the name of the share</I -></SPAN +>Default: <EM +>the name of the share</EM ></P ></DD ><DT @@ -19146,12 +19079,8 @@ CLASS="COMMAND" > system call will not return any data. </P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Warning:</I -></SPAN +><EM +>Warning:</EM > Turning off user enumeration may cause some programs to behave oddly. For example, the finger program relies on having access to the @@ -19201,12 +19130,8 @@ CLASS="COMMAND" > system call will not return any data. </P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->Warning:</I -></SPAN +><EM +>Warning:</EM > Turning off group enumeration may cause some programs to behave oddly. </P @@ -19235,7 +19160,7 @@ TARGET="_top" ><P >Default: <B CLASS="COMMAND" ->winbind gid = <empty string> +>winbind gid = <empty string> </B ></P ><P @@ -19306,7 +19231,7 @@ TARGET="_top" ><P >Default: <B CLASS="COMMAND" ->winbind uid = <empty string> +>winbind uid = <empty string> </B ></P ><P @@ -19334,7 +19259,7 @@ TARGET="_top" ><P >Default: <B CLASS="COMMAND" ->winbind use default domain = <falseg> +>winbind use default domain = <falseg> </B ></P ><P @@ -19449,12 +19374,8 @@ TARGET="_top" >You should point this at your WINS server if you have a multi-subnetted network.</P ><P -><SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NOTE</I -></SPAN +><EM +>NOTE</EM >. You need to set up Samba to point to a WINS server if you have multiple subnets and wish cross-subnet browsing to work correctly.</P @@ -19465,12 +19386,8 @@ CLASS="FILENAME" > in the docs/ directory of your Samba source distribution.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not enabled</I -></SPAN +>Default: <EM +>not enabled</EM ></P ><P >Example: <B @@ -19499,12 +19416,8 @@ CLASS="CONSTANT" CLASS="COMMAND" >nmbd</B > to be your WINS server. - Note that you should <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->NEVER</I -></SPAN + Note that you should <EM +>NEVER</EM > set this to <TT CLASS="CONSTANT" >true</TT @@ -19526,7 +19439,7 @@ NAME="WORKGROUP" >This controls what workgroup your server will appear to be in when queried by clients. Note that this parameter also controls the Domain name used with the <A -HREF="index.html#SECURITYEQUALSDOMAIN" +HREF="#SECURITYEQUALSDOMAIN" ><B CLASS="COMMAND" >security = domain</B @@ -19534,12 +19447,8 @@ CLASS="COMMAND" > setting.</P ><P ->Default: <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->set at compile time to WORKGROUP</I -></SPAN +>Default: <EM +>set at compile time to WORKGROUP</EM ></P ><P >Example: <B @@ -19555,7 +19464,7 @@ NAME="WRITABLE" ><DD ><P >Synonym for <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -19573,12 +19482,8 @@ NAME="WRITECACHESIZE" ><P >If this integer parameter is set to non-zero value, Samba will create an in-memory cache for each oplocked file - (it does <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->not</I -></SPAN + (it does <EM +>not</EM > do this for non-oplocked files). All writes that the client does not request to be flushed directly to disk will be stored in this cache if possible. @@ -19618,7 +19523,7 @@ NAME="WRITELIST" >This is a list of users that are given read-write access to a service. If the connecting user is in this list then they will be given write access, no matter what the <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -19633,7 +19538,7 @@ CLASS="PARAMETER" write list then they will be given write access.</P ><P >See also the <A -HREF="index.html#READLIST" +HREF="#READLIST" ><TT CLASS="PARAMETER" ><I @@ -19645,7 +19550,7 @@ CLASS="PARAMETER" ><P >Default: <B CLASS="COMMAND" ->write list = <empty string> +>write list = <empty string> </B ></P ><P @@ -19657,37 +19562,13 @@ CLASS="COMMAND" ></DD ><DT ><A -NAME="WINSPARTNERS" -></A ->wins partners (G)</DT -><DD -><P ->A space separated list of partners' IP addresses for - WINS replication. WINS partners are always defined as push/pull - partners as defining only one way WINS replication is unreliable. - WINS replication is currently experimental and unreliable between - samba servers. - </P -><P ->Default: <B -CLASS="COMMAND" ->wins partners = </B -></P -><P ->Example: <B -CLASS="COMMAND" ->wins partners = 192.168.0.1 172.16.1.2</B -></P -></DD -><DT -><A NAME="WRITEOK" ></A >write ok (S)</DT ><DD ><P >Synonym for <A -HREF="index.html#WRITEABLE" +HREF="#WRITEABLE" ><TT CLASS="PARAMETER" ><I @@ -19720,7 +19601,7 @@ NAME="WRITEABLE" ><DD ><P >An inverted synonym is <A -HREF="index.html#READONLY" +HREF="#READONLY" > <TT CLASS="PARAMETER" ><I @@ -19740,12 +19621,8 @@ CLASS="CONSTANT" CLASS="COMMAND" >printable = yes</B >) - will <SPAN -CLASS="emphasis" -><I -CLASS="EMPHASIS" ->ALWAYS</I -></SPAN + will <EM +>ALWAYS</EM > allow writing to the directory (user privileges permitting), but only via spooling operations.</P ><P @@ -19760,7 +19637,7 @@ CLASS="COMMAND" ><DIV CLASS="REFSECT1" ><A -NAME="AEN6109" +NAME="AEN6208" ></A ><H2 >WARNINGS</H2 @@ -19790,7 +19667,7 @@ TARGET="_top" ><DIV CLASS="REFSECT1" ><A -NAME="AEN6115" +NAME="AEN6214" ></A ><H2 >VERSION</H2 @@ -19801,7 +19678,7 @@ NAME="AEN6115" ><DIV CLASS="REFSECT1" ><A -NAME="AEN6118" +NAME="AEN6217" ></A ><H2 >SEE ALSO</H2 @@ -19880,7 +19757,7 @@ CLASS="COMMAND" ><DIV CLASS="REFSECT1" ><A -NAME="AEN6138" +NAME="AEN6237" ></A ><H2 >AUTHOR</H2 |