summaryrefslogtreecommitdiffstats
path: root/docs-xml/smbdotconf/security
Commit message (Collapse)AuthorAgeFilesLines
* lib/param: Add new parameter "old password allowed period"Andrew Bartlett2014-04-021-0/+13
| | | | | | Change-Id: I46228b492ba71ba4f3fee380a1ccadb328e3ade1 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* param: remove special cases for tls filesGarming Sam2014-02-125-5/+10
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for tls keyfile parameter - mark do not generate functionGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for tls dh params file parameter - mark do not ↵Garming Sam2014-02-031-0/+1
| | | | | | | | generate function Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for tls crlfile parameter - mark do not generate functionGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for tls certfile parameter - mark do not generate ↵Garming Sam2014-02-031-0/+1
| | | | | | | | function Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data for tls cafile parameter - mark do not generate functionGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into writeable for marking a synonymGarming Sam2014-02-031-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for samba kcc command parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for server schannel parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for krb5 port parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for client signing parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for client schannel parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for create mask parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for password server parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for passdb backend parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for force directory mode parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: fix type for directory mask parameterGarming Sam2014-02-021-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into server role parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into security parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into smb passwd file parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into private dir parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into passdb backend parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into ntp signd socket directory parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into dedicated keytab file parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into password server parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: insert meta data into guest account parameterGarming Sam2014-02-021-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default of samba kcc command to use an entityAndrew Bartlett2014-01-311-1/+1
| | | | | | Change-Id: I63c10ca0efc83496ffcd720edc00bd711ce53eac Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default of ntp signd socket directory to use an entityAndrew Bartlett2014-01-311-1/+1
| | | | | | Change-Id: Id66dcd5b587c4c355961d8e9d10cdf0d1e17a6ad Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default in private directory to use an entityGarming Sam2014-01-311-1/+1
| | | | | | | Change-Id: I4d015f2a75d8f404e0db64382b6d71bb9b59b8e3 Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: change default in smb passwd file to use an entityGarming Sam2014-01-311-1/+1
| | | | | | | Change-Id: Ia81d677657ec0013c9cc7bfaecc2d88faf50f07c Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* param: fixup security default to AUTO to permit server role = domain memberGarming Sam2014-01-311-1/+1
| | | | | | | | When this is set to AUTO, it behaves as security = user unless server role = domain member has been set. Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* param: pad permissions to 3 digits and update docs to be consistentGarming Sam2014-01-302-2/+2
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* docs: adjust default for kerberos method to match testparm outputGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: Change client signing default in docs to match s3 and lib/paramAndrew Bartlett2014-01-281-2/+2
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: Change smb encrypt default in docs to match s3 and lib/paramAndrew Bartlett2014-01-281-2/+2
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: fix and explain defaults for tls parametersAndrew Bartlett2014-01-285-6/+16
| | | | | | | These parameters are relative to the private directory if it does not start with a / Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: update check password script to be consistent with testparmGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: change default string slightly for passwd chat to match source codeGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: change default root directory to blankGarming Sam2014-01-281-1/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: include the type attribute for force create modeGarming Sam2014-01-281-0/+1
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs: fix rename user script to be of the correct type (string)Garming Sam2014-01-281-2/+2
| | | | | | Signed-off-by: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* docs-xml: explain the interaction of 'client schannel' with 'require strong ↵Stefan Metzmacher2014-01-071-0/+5
| | | | | | | key = yes' Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: explain the interaction between security = ads and other options.Stefan Metzmacher2014-01-071-1/+4
| | | | | | | It implies 'require strong key = yes' and 'client schannel = yes'. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* lib/param: Consolidate code to enable smb signing on the server, always ↵Andrew Bartlett2013-11-221-2/+7
| | | | | | | | | | | | | | | enable on AD DC This uses the code from the source4/ SMB server (the NTVFS smb server) in common, to force SMB Signing to be on when we are an AD DC. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Fri Nov 22 13:13:05 CET 2013 on sn-devel-104
* docs: remove duplicate "line" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: remove duplicate "must" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: remove duplicate "on" from smb.conf manpage.Günther Deschner2013-11-191-1/+1
| | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: point out side-effects of global "valid users" setting.Günther Deschner2013-09-171-0/+10
| | | | | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Tue Sep 17 16:20:16 CEST 2013 on sn-devel-104
* auth: Remove "password level"Andrew Bartlett2013-06-111-48/+0
| | | | | | | | | | | We now only lowercase the password, we do not attempt to find another case combination that the password might be in. This option is already depricated, so it is now time to remove it. Andrew Bartlett Reviewed-by: Simo Sorce <idra@samba.org>