cifs.upcall — Userspace upcall helper for Common Internet File System (CIFS)
cifs.upcall [--trust-dns|-t] [--version|-v] {keyid}
This tool is part of the samba(7) suite.
cifs.upcall is a userspace helper program for the linux CIFS client +
cifs.upcall — Userspace upcall helper for Common Internet File System (CIFS)
cifs.upcall [--trust-dns|-t] [--version|-v] {keyid}
This tool is part of the samba(7) suite.
cifs.upcall is a userspace helper program for the linux CIFS client filesystem. There are a number of activities that the kernel cannot easily do itself. This program is a callout program that does these things for the kernel and then returns the result.
cifs.upcall is generally intended to be run when the kernel calls request-key(8) for a particular key type. While it can be run directly from the command-line, it's not generally intended -to be run that way.
This option is deprecated and is currently ignored. +to be run that way.
This option is deprecated and is currently ignored.
With krb5 upcalls, the name used as the host portion of the service principal defaults to the hostname portion of the UNC. This option allows the upcall program to reverse resolve the network address of the server in order to get the hostname.
This is less secure than not trusting DNS. When using this option, it's possible that an attacker could get control of DNS and trick the client into mounting a different server altogether. It's preferable to instead add server principals to the KDC for every possible hostname, but this option exists for cases where that isn't possible. The default is to not trust reverse hostname lookups in this fashion.
Print version number and exit. -
cifs.upcall is designed to be called from the kernel via the request-key callout program. This requires that request-key be told where and how to call this program. The current cifs.upcall program handles two different key types: @@ -20,10 +20,10 @@ create dns_resolver * * /usr/local/sbin/cifs.upcall %k
See request-key.conf(5) for more info on each field. -
Igor Mammedov wrote the cifs.upcall program.
Jeff Layton authored this manpage.
The maintainer of the Linux CIFS VFS is Steve French.
The Linux +
Igor Mammedov wrote the cifs.upcall program.
Jeff Layton authored this manpage.
The maintainer of the Linux CIFS VFS is Steve French.
The Linux CIFS Mailing list is the preferred place to ask questions regarding these programs.
eventlogadm — push records into the Samba event log store
eventlogadm [-d] [-h] -o
+
eventlogadm — push records into the Samba event log store
eventlogadm [-d] [-h] -o
addsource
EVENTLOG
SOURCENAME
@@ -6,10 +6,10 @@
eventlogadm [-d] [-h] -o
write
EVENTLOG
-
This tool is part of the samba(1) suite.
eventlogadm is a filter that accepts
formatted event log records on standard input and writes them
to the Samba event log store. Windows client can then manipulate
- these record using the usual administration tools.
-d+ these record using the usual administration tools.
For the write operation, eventlogadm
expects to be able to read structured records from standard
input. These records are a sequence of lines, with the record key
and data separated by a colon character. Records are separated
- by at least one or more blank line.
The event log record field are:
+ by at least one or more blank line.
The event log record field are:
LEN - This field should be 0, since eventlogadm will calculate this value.
-
+
RS1 - This must be the value 1699505740.
-
+
RCN - This field should be 0.
-
+
TMG - The time the eventlog record
was generated; format is the number of seconds since
00:00:00 January 1, 1970, UTC.
-
+
TMW - The time the eventlog record was
written; format is the number of seconds since 00:00:00
January 1, 1970, UTC.
-
+
EID - The eventlog ID.
-
+
ETP - The event type -- one of
"INFO",
"ERROR", "WARNING", "AUDIT
SUCCESS" or "AUDIT FAILURE".
-
+
ECT - The event category; this depends
on the message file. It is primarily used as a means of
filtering in the eventlog viewer.
-
+
RS2 - This field should be 0.
-
+
CRN - This field should be 0.
-
+
USL - This field should be 0.
-
+
SRC - This field contains the source
name associated with the event log. If a message file is
used with an event log, there will be a registry entry
for associating this source name with a message file DLL.
-
+
SRN - The name of the machine on
which the eventlog was generated. This is typically the
host name.
-
+
STR - The text associated with the
eventlog. There may be more than one string in a record.
-
+
DAT - This field should be left unset.
-
findsmb — list info about machines that respond to SMB - name queries on a subnet
findsmb [subnet broadcast address]
This perl script is part of the samba(7) +
findsmb — list info about machines that respond to SMB + name queries on a subnet
findsmb [subnet broadcast address]
This perl script is part of the samba(7) suite.
findsmb is a perl script that
prints out several pieces of information about machines
on a subnet that respond to SMB name query requests.
It uses nmblookup(1)
and smbclient(1)
to obtain this information.
-
Controls whether findsmb takes
+
Controls whether findsmb takes
bugs in Windows95 into account when trying to find a Netbios name
registered of the remote machine. This option is disabled by default
because it is specific to Windows 95 and Windows 95 machines only.
@@ -16,7 +16,7 @@
findsmb(1)
is run. This value is passed to
nmblookup(1)
- as part of the -B option.
The output of findsmb lists the following
information for all machines that respond to the initial
nmblookup for any name: IP address, NetBIOS name,
Workgroup name, operating system, and SMB server version.
There will be a '+' in front of the workgroup name for @@ -48,10 +48,10 @@ 192.168.35.88 SCNT2 +[MVENGR] [Windows NT 4.0] [NT LAN Manager 4.0] 192.168.35.93 FROGSTAR-PC [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager] 192.168.35.97 HERBNT1 *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0] -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
The original Samba man pages were written by Karl Auer. diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_ad.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_ad.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_ad.8.html 2010-01-14 11:20:10.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_ad.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,10 +1,10 @@ -
idmap_ad — Samba's idmap_ad Backend for Winbind
The idmap_ad plugin provides a way for Winbind to read +
idmap_ad — Samba's idmap_ad Backend for Winbind
The idmap_ad plugin provides a way for Winbind to read id mappings from an AD server that uses RFC2307/SFU schema extensions. This module implements only the "idmap" API, and is READONLY. Mappings must be provided in advance by the administrator by adding the posixAccount/posixGroup classes and relative attribute/value pairs to the user and - group objects in the AD.
+ group objects in the AD.
Defines the available matching UID and GID range for which the backend is authoritative. Note that the range acts as a filter. If specified any UID or GID stored in AD that fall outside the @@ -16,7 +16,7 @@ Active Directory regarding user and group information. This can be either the RFC2307 schema support included in Windows 2003 R2 or the Service for Unix (SFU) schema. -
The following example shows how to retrieve idmappings from our principal and and trusted AD domains. If trusted domains are present id conflicts must be resolved beforehand, there is no @@ -32,7 +32,7 @@ idmap config CORP : backend = ad idmap config CORP : range = 1000-999999 -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_adex.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_adex.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_adex.8.html 2010-01-14 11:20:11.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_adex.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,4 +1,4 @@ -
idmap_adex — Samba's idmap_adex Backend for Winbind
+
idmap_adex — Samba's idmap_adex Backend for Winbind
The idmap_adex plugin provides a way for Winbind to read id mappings from an AD server that uses RFC2307 schema extensions. This module implements both the idmap and nss_info @@ -13,7 +13,7 @@ attributes to the partial attribute set of the forest global catalog servers. This can be done using the Active Directory Schema Management MMC plugin (schmmgmt.dll). -
+
The nss_info plugin supports reading the unixHomeDirectory, gidNumber, loginShell, and uidNumber attributes from the user object and the gidNumber attribute from the group object to @@ -25,7 +25,7 @@ Username aliases are implement by setting the uid attribute on the user object. While group name aliases are implemented by reading the displayname attribute from the group object. -
The following example shows how to retrieve idmappings and NSS data from our principal and trusted AD domains.
@@ -36,7 +36,7 @@ winbind nss info = adex winbind normalize names = yes -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_hash.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_hash.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_hash.8.html 2010-01-14 11:20:12.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_hash.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,16 +1,16 @@ -
idmap_hash — Samba's idmap_hash Backend for Winbind
The idmap_hash plugin implements a hashing algorithm used +
idmap_hash — Samba's idmap_hash Backend for Winbind
The idmap_hash plugin implements a hashing algorithm used map SIDs for domain users and groups to a 31-bit uid and gid. This plugin also implements the nss_info API and can be used to support a local name mapping files if enabled via the "winbind normlaize names" and "winbind nss info" parameters in smb.conf. -
+
The following example utilizes the idmap_hash plugin for the idmap and nss_info information.
[global] @@ -21,7 +21,7 @@ winbind nss info = hash winbind normalize names = yes idmap_hash:name_map = /etc/samba/name_map.cfg -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_ldap.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_ldap.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_ldap.8.html 2010-01-14 11:20:14.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_ldap.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,4 +1,4 @@ -
idmap_ldap — Samba's idmap_ldap Backend for Winbind
The idmap_ldap plugin provides a means for Winbind to +
idmap_ldap — Samba's idmap_ldap Backend for Winbind
The idmap_ldap plugin provides a means for Winbind to store and retrieve SID/uid/gid mapping tables in an LDAP directory service.
@@ -19,7 +19,7 @@ any explicitly configured domain with idmap backend ldap should have the same range as the default range, since it needs to use the global uid / gid allocator. See the example below. -
+
Defines the directory base suffix to use when searching for SID/uid/gid mapping entries. If not defined, idmap_ldap will default to using the "ldap idmap suffix" option from smb.conf. @@ -36,7 +36,7 @@ If the parameter is absent, Winbind fails over to use the "idmap uid" and "idmap gid" options from smb.conf. -
Defines the directory base suffix under which new SID/uid/gid mapping entries should be stored. If not defined, idmap_ldap will default to using the "ldap idmap suffix" option from smb.conf. @@ -47,7 +47,7 @@ Specifies the LDAP server to which modify/add/delete requests should be sent. If not defined, idmap_ldap will assume that ldap://localhost/ should be used. -
The follow sets of a LDAP configuration which uses two LDAP directories, one for storing the ID mappings and one for retrieving new IDs. @@ -60,12 +60,12 @@ idmap alloc backend = ldap idmap alloc config : ldap_url = ldap://id-master/ idmap alloc config : ldap_base_dn = ou=idmap,dc=example,dc=com -
In order to use authentication against ldap servers you may +
In order to use authentication against ldap servers you may need to provide a DN and a password. To avoid exposing the password in plain text in the configuration file we store it into a security store. The "net idmap " command is used to store a secret for the DN specified in a specific idmap domain. -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_nss.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_nss.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_nss.8.html 2010-01-14 11:20:15.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_nss.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,10 +1,10 @@ -
idmap_nss — Samba's idmap_nss Backend for Winbind
The idmap_nss plugin provides a means to map Unix users and groups +
idmap_nss — Samba's idmap_nss Backend for Winbind
The idmap_nss plugin provides a means to map Unix users and groups to Windows accounts and obseletes the "winbind trusted domains only" smb.conf option. This provides a simple means of ensuring that the SID for a Unix user named jsmith is reported as the one assigned to DOMAIN\jsmith which is necessary for reporting ACLs on files and printers stored on a Samba member server. -
This example shows how to use idmap_nss to check the local accounts for its own domain while using allocation to create new mappings for trusted domains
@@ -15,7 +15,7 @@ idmap config SAMBA : backend = nss idmap config SAMBA : range = 1000-999999 -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_rid.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_rid.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_rid.8.html 2010-01-14 11:20:16.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_rid.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,6 +1,6 @@ -
idmap_rid — Samba's idmap_rid Backend for Winbind
The idmap_rid backend provides a way to use an algorithmic +
idmap_rid — Samba's idmap_rid Backend for Winbind
The idmap_rid backend provides a way to use an algorithmic mapping scheme to map UIDs/GIDs and SIDs. No database is required - in this case as the mapping is deterministic.
+ in this case as the mapping is deterministic.
Defines the available matching uid and gid range for which the backend is authoritative. Note that the range acts as a filter. If algorithmically determined UID or GID fall outside the @@ -15,7 +15,7 @@ ID = RID - BASE_RID + LOW RANGE ID.
Use of this parameter is deprecated. -
This example shows how to configure a domain with idmap_rid
[global] idmap backend = tdb idmap uid = 1000000-1999999 @@ -23,7 +23,7 @@ idmap config TRUSTED : backend = rid idmap config TRUSTED : range = 50000 - 99999 -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_tdb2.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_tdb2.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_tdb2.8.html 2010-01-14 11:20:17.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_tdb2.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,4 +1,4 @@ -
idmap_tdb2 — Samba's idmap_tdb2 Backend for Winbind
+
idmap_tdb2 — Samba's idmap_tdb2 Backend for Winbind
The idmap_tdb2 plugin is a substitute for the default idmap_tdb backend used by winbindd for storing SID/uid/gid mapping tables in clustered environments with Samba and CTDB. @@ -20,13 +20,13 @@ any explicitly configured domain with idmap backend tdb2 should have the same range as the default range, since it needs to use the global uid / gid allocator. See the example below. -
+
The tdb2 idmap backend supports a script for performing id mappings
through the smb.conf option idmap : script.
The script should accept the following command line options.
@@ -47,7 +47,7 @@
that can be passed in for SID to Unix ID mapping, since otherwise
SIDs unmapped by the script might get mapped to IDs that had
previously been mapped by the script.
-
This example shows how tdb2 is used as a the default idmap backend. It configures the idmap range through the global options for all domains encountered. This same range is used for uid/gid allocation. @@ -56,7 +56,7 @@ idmap backend = tdb2 idmap uid = 1000000-2000000 idmap gid = 1000000-2000000 -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/idmap_tdb.8.html samba-3.3.11//docs/htmldocs/manpages/idmap_tdb.8.html --- samba-3.3.10//docs/htmldocs/manpages/idmap_tdb.8.html 2010-01-14 11:20:19.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/idmap_tdb.8.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,4 +1,4 @@ -
idmap_tdb — Samba's idmap_tdb Backend for Winbind
+
idmap_tdb — Samba's idmap_tdb Backend for Winbind
The idmap_tdb plugin is the default backend used by winbindd for storing SID/uid/gid mapping tables.
@@ -19,13 +19,13 @@ any explicitly configured domain with idmap backend tdb should have the same range as the default range, since it needs to use the global uid / gid allocator. See the example below. -
+
This example shows how tdb is used as a the default idmap backend. It configures the idmap range through the global options for all domains encountered. This same range is used for uid/gid allocation. @@ -53,7 +53,7 @@ idmap config DOM1 : backend = tdb idmap config DOM1 : range = 1000000-2000000 -
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/index.html samba-3.3.11//docs/htmldocs/manpages/index.html --- samba-3.3.10//docs/htmldocs/manpages/index.html 2010-01-14 11:23:42.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/index.html 2010-02-22 16:53:36.000000000 +0100 @@ -1,4 +1,4 @@ -
Userspace upcall helper for Common Internet File System (CIFS) +
Userspace upcall helper for Common Internet File System (CIFS)
push records into the Samba event log store
list info about machines that respond to SMB name queries on a subnet diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldb.3.html samba-3.3.11//docs/htmldocs/manpages/ldb.3.html --- samba-3.3.10//docs/htmldocs/manpages/ldb.3.html 2010-01-14 11:20:20.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldb.3.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,4 +1,4 @@ -
ldbThe Samba Project — A light-weight database library
#include <ldb.h>
+
ldb
The Samba Project
— A light-weight database library#include <ldb.h>
ldb is a light weight embedded database library and API. With a programming interface that is very similar to LDAP, ldb can store its data either in a tdb(3) database or in a real LDAP database. @@ -34,97 +34,97 @@ for ldbsearch(1) and ldbedit(1), and experimenting with a local database. Then I suggest you look at the ldb_connect(3) and ldb_search(3) manual pages. -
+
ldbsearch(1) - command line ldb search utility -
+
ldbedit(1) - edit all or part of a ldb database using your favourite editor -
+
ldbadd(1) - add records to a ldb database using LDIF formatted input -
+
ldbdel(1) - delete records from a ldb database -
+
ldbmodify(1) - modify records in a ldb database using LDIF formatted input -
ldb_connect(3)
- connect to a ldb backend
-
+
ldb_search(3)
- perform a database search
-
+
ldb_add(3)
- add a record to the database
-
+
ldb_delete(3)
- delete a record from the database
-
+
ldb_modify(3)
- modify a record in the database
-
+
ldb_errstring(3)
- retrieve extended error information from the last operation
-
+
ldb_ldif_write(3)
- write a LDIF formatted message
-
+
ldb_ldif_write_file(3)
- write a LDIF formatted message to a file
-
+
ldb_ldif_read(3)
- read a LDIF formatted message
-
+
ldb_ldif_read_free(3)
- free the result of a ldb_ldif_read()
-
+
ldb_ldif_read_file(3)
- read a LDIF message from a file
-
+
ldb_ldif_read_string(3)
- read a LDIF message from a string
-
+
ldb_msg_find_element(3)
- find an element in a ldb_message
-
+
ldb_val_equal_exact(3)
- compare two ldb_val structures
-
+
ldb_msg_find_val(3)
- find an element by value
-
+
ldb_msg_add_empty(3)
- add an empty message element to a ldb_message
-
+
ldb_msg_add(3)
- add a non-empty message element to a ldb_message
-
+
ldb_msg_element_compare(3)
- compare two ldb_message_element structures
-
+
ldb_msg_find_int(3)
- return an integer value from a ldb_message
-
+
ldb_msg_find_uint(3)
- return an unsigned integer value from a ldb_message
-
+
ldb_msg_find_double(3)
- return a double value from a ldb_message
-
+
ldb_msg_find_string(3)
- return a string value from a ldb_message
-
+
ldb_set_alloc(3)
- set the memory allocation function to be used by ldb
-
+
ldb_set_debug(3)
- set a debug handler to be used by ldb
-
+
ldb_set_debug_stderr(3)
- set a debug handler for stderr output
-
ldb was written by Andrew Tridgell.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbadd.1.html samba-3.3.11//docs/htmldocs/manpages/ldbadd.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbadd.1.html 2010-01-14 11:20:21.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbadd.1.html 2010-02-22 16:53:36.000000000 +0100 @@ -1,13 +1,13 @@ -
ldbadd — Command-line utility for adding records to an LDB
ldbadd [-h] [-H LDB-URL] [ldif-file1] [ldif-file2] [...]
ldbadd adds records to an ldb(7) database. It reads +
ldbadd — Command-line utility for adding records to an LDB
ldbadd [-h] [-H LDB-URL] [ldif-file1] [ldif-file2] [...]
ldbadd adds records to an ldb(7) database. It reads the ldif(5) files specified on the command line and adds the records from these files to the LDB database, which is specified by the -H option or the LDB_URL environment variable.
If - is specified as a ldb file, the ldif input is read from - standard input.
+ standard input.
ldb was written by Andrew Tridgell.
If you wish to report a problem or make a suggestion then please see diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbdel.1.html samba-3.3.11//docs/htmldocs/manpages/ldbdel.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbdel.1.html 2010-01-14 11:20:23.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbdel.1.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,12 +1,12 @@ -
ldbdel — Command-line program for deleting LDB records
ldbdel [-h] [-H LDB-URL] [dn] [...]
ldbdel deletes records from an ldb(7) database. +
ldbdel — Command-line program for deleting LDB records
ldbdel [-h] [-H LDB-URL] [dn] [...]
ldbdel deletes records from an ldb(7) database. It deletes the records identified by the dn's specified on the command-line.
ldbdel uses either the database that is specified with the -H option or the database specified by the LDB_URL environment - variable.
+ variable.
ldb was written by Andrew Tridgell.
If you wish to report a problem or make a suggestion then please see diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbedit.1.html samba-3.3.11//docs/htmldocs/manpages/ldbedit.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbedit.1.html 2010-01-14 11:20:24.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbedit.1.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,8 +1,8 @@ -
ldbedit — Edit LDB databases using your preferred editor
ldbedit [-?] [--usage] [-s base|one|sub] [-b basedn] [-a] [-e editor] [-H LDB-URL] [expression] [attributes...]
ldbedit is a utility that allows you to edit LDB entries (in +
ldbedit — Edit LDB databases using your preferred editor
ldbedit [-?] [--usage] [-s base|one|sub] [-b basedn] [-a] [-e editor] [-H LDB-URL] [expression] [attributes...]
ldbedit is a utility that allows you to edit LDB entries (in tdb files, sqlite files or LDAP servers) using your preferred editor. ldbedit generates an LDIF file based on your query, allows you to edit the LDIF, and then merges that LDIF back into the LDB backend. -
+
Show list of available options, and a phrase describing what that option does.
@@ -34,14 +34,14 @@ operations that are being performed. Without this option, ldbedit will only provide a summary change line. -
ldb was written by Andrew Tridgell.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbmodify.1.html samba-3.3.11//docs/htmldocs/manpages/ldbmodify.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbmodify.1.html 2010-01-14 11:20:25.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbmodify.1.html 2010-02-22 16:53:36.000000000 +0100 @@ -1,11 +1,11 @@ -
ldbmodify — Modify records in a LDB database
ldbmodify [-H LDB-URL] [ldif-file]
+
ldbmodify — Modify records in a LDB database
ldbmodify [-H LDB-URL] [ldif-file]
ldbmodify changes, adds and deletes records in a LDB database. The changes that should be made to the LDB database are read from the specified LDIF-file. If - is specified as the filename, input is read from stdin. -
For now, see ldapmodify(1) for details on the LDIF file format.
ldb was written by Andrew Tridgell.
If you wish to report a problem or make a suggestion then please see diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbrename.1.html samba-3.3.11//docs/htmldocs/manpages/ldbrename.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbrename.1.html 2010-01-14 11:20:27.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbrename.1.html 2010-02-22 16:53:36.000000000 +0100 @@ -1,13 +1,13 @@ -
ldbrename — Edit LDB databases using your favorite editor
ldbrename [-h] [-o options] {olddn} {newdb}
ldbrename is a utility that allows you to rename trees in +
ldbrename — Edit LDB databases using your favorite editor
ldbrename [-h] [-o options] {olddn} {newdb}
ldbrename is a utility that allows you to rename trees in an LDB database based by DN. This utility takes two arguments: the original DN name of the top element and the DN to change it to. -
+
ldb was written by Andrew Tridgell.
If you wish to report a problem or make a suggestion then please see diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ldbsearch.1.html samba-3.3.11//docs/htmldocs/manpages/ldbsearch.1.html --- samba-3.3.10//docs/htmldocs/manpages/ldbsearch.1.html 2010-01-14 11:20:28.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/ldbsearch.1.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,12 +1,12 @@ -
ldbsearch — Search for records in a LDB database
ldbsearch [-h] [-s base|one|sub] [-b basedn] [-i] [-H LDB-URL] [expression] [attributes]
ldbsearch searches a LDB database for records matching the +
ldbsearch — Search for records in a LDB database
ldbsearch [-h] [-s base|one|sub] [-b basedn] [-i] [-H LDB-URL] [expression] [attributes]
ldbsearch searches a LDB database for records matching the specified expression (see the ldapsearch(1) manpage for a description of the expression format). For each record, the specified attributes are printed. -
+
ldb was written by Andrew Tridgell.
If you wish to report a problem or make a suggestion then please see diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/libsmbclient.7.html samba-3.3.11//docs/htmldocs/manpages/libsmbclient.7.html --- samba-3.3.10//docs/htmldocs/manpages/libsmbclient.7.html 2010-01-14 11:20:29.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/libsmbclient.7.html 2010-02-22 16:53:37.000000000 +0100 @@ -1,8 +1,8 @@ -
libsmbclient — An extension library for browsers and that can be used as a generic browsing API.
+
libsmbclient — An extension library for browsers and that can be used as a generic browsing API.
Browser URL:
smb://[[[domain:]user[:password@]]server[/share[/path[/file]]]] [?options]
-
This tool is part of the samba(7) suite.
libsmbclient is a library toolset that permits applications to manipulate CIFS/SMB network
@@ -14,7 +14,7 @@
libsmbclient can not be used directly from the command line, instead it provides an
extension of the capabilities of tools such as file managers and browsers. This man page describes the
configuration options for this tool so that the user may obtain greatest utility of use.
-
What the URLs mean:
Shows all workgroups or domains that are visible in the network. The behavior matches
@@ -46,11 +46,11 @@
libsmbclient will check the users shell environment for the USER
parameter and will use its value when if the user parameter was not included
in the URL.
-
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/lmhosts.5.html samba-3.3.11//docs/htmldocs/manpages/lmhosts.5.html --- samba-3.3.10//docs/htmldocs/manpages/lmhosts.5.html 2010-01-14 11:20:31.000000000 +0100 +++ samba-3.3.11//docs/htmldocs/manpages/lmhosts.5.html 2010-02-22 16:53:36.000000000 +0100 @@ -1,11 +1,11 @@ -
lmhosts — The Samba NetBIOS hosts file
lmhosts is the samba(7) NetBIOS name to IP address mapping file.
This file is part of the samba(7) suite.
lmhosts — The Samba NetBIOS hosts file This file is part of the samba(7) suite. It is an ASCII file containing one line for NetBIOS name.
+ to the NetBIOS naming format. It is an ASCII file containing one line for NetBIOS name.
The two fields on each line are separated from each other by
white space. Any entry beginning with '#' is ignored. Each line
- in the lmhosts file contains the following information: IP Address - in dotted decimal format. NetBIOS Name - This name format is a
+ in the lmhosts file contains the following information: IP Address - in dotted decimal format. NetBIOS Name - This name format is a
maximum fifteen character host name, with an optional
trailing '#' character followed by the NetBIOS name type
as two hexadecimal digits. If the trailing '#' is omitted then the given IP
@@ -25,10 +25,10 @@
the NetBIOS name requested. The second mapping will be returned only when the "0x20" name
type for a name "NTSERVER" is queried. Any other name type will not
be resolved. The default location of the lmhosts is loaded from the configuration directory. This is
+ is in the same directory as the smb.conf(5) file. lmhosts is loaded from the configuration directory. This is
usually The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/log2pcap.1.html samba-3.3.11//docs/htmldocs/manpages/log2pcap.1.html
--- samba-3.3.10//docs/htmldocs/manpages/log2pcap.1.html 2010-01-14 11:20:32.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/log2pcap.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,11 +1,11 @@
- log2pcap — Extract network traces from Samba log files This tool is part of the samba(7) suite. log2pcap — Extract network traces from Samba log files This tool is part of the samba(7) suite. The log file must have a If this parameter is
+ If this parameter is
specified the output file will be a
hex dump, in a format that is readable
by the text2pcap utility. Be quiet. No warning messages about missing
@@ -17,13 +17,13 @@
If this argument is not specified, output data will be written
to stdout.
Print a summary of command line options.
- Extract all network traffic from all samba log files: Convert to pcap using text2pcap: mount.cifs — mount using the Common Internet File System (CIFS) This tool is part of the samba(7) suite. mount.cifs mounts a Linux CIFS filesystem. It
+ mount.cifs — mount using the Common Internet File System (CIFS) This tool is part of the samba(7) suite. mount.cifs mounts a Linux CIFS filesystem. It
is usually invoked indirectly by
the mount(8) command when using the
"-t cifs" option. This command only works in Linux, and the kernel must
@@ -23,12 +23,12 @@
mount.cifs causes the cifs vfs to launch a thread named cifsd. After mounting it keeps running until
the mounted resource is unmounted (usually via the umount utility).
- specifies the username to connect as. If
+ specifies the username to connect as. If
this is not given, then the environment variable USER is used. This option can also take the
form "user%password" or "workgroup/user" or
"workgroup/user%password" to allow the password and workgroup
to be specified as part of the username.
-
+
The cifs vfs accepts the parameter specifies the CIFS password. If this
option is not given then the environment variable
@@ -166,9 +166,9 @@
module. POSIX ACL support can be disabled on a per mount basis by specifying
"noacl" on mount. Request case insensitive path name matching (case
sensitive is the default if the server suports it).
- Security mode. Allowed values are: none attempt to connection as a null user (no name) krb5 Use Kerberos version 5 authentication krb5i Use Kerberos authentication and packet signing ntlm Use NTLM password hashing (default) ntlmi Use NTLM password hashing with signing (if
+ Security mode. Allowed values are: none attempt to connection as a null user (no name) krb5 Use Kerberos version 5 authentication krb5i Use Kerberos authentication and packet signing ntlm Use NTLM password hashing (default) ntlmi Use NTLM password hashing with signing (if
/proc/fs/cifs/PacketSigningEnabled on or if
- server requires signing also can be the default) ntlmv2 Use NTLMv2 password hashing ntlmv2i Use NTLMv2 password hashing with packet signing [NB This [sec parameter] is under development and expected to be available in cifs kernel module 1.40 and later]
+ server requires signing also can be the default) ntlmv2 Use NTLMv2 password hashing ntlmv2i Use NTLMv2 password hashing with packet signing [NB This [sec parameter] is under development and expected to be available in cifs kernel module 1.40 and later]
Do not send byte range lock requests to the server.
This is necessary for certain applications that break
with cifs style mandatory byte range locks (and most
@@ -218,11 +218,11 @@
default network write size (default 57344)
maximum wsize currently allowed by CIFS is 57344 (fourteen
- 4096 byte pages) Print additional debugging information for the mount. Note that this parameter must be specified before the -o. For example: mount -t cifs //server/share /mnt --verbose -o user=username
It's generally preferred to use forward slashes (/) as a delimiter in service names. They are considered to be the "universal delimiter" since they are generally not allowed to be embedded within path components on Windows machines and the client can convert them to blackslashes (\) unconditionally. Conversely, backslash characters are allowed by POSIX to be part of a path component, and can't be automatically converted in the same way.
mount.cifs will attempt to convert backslashes to forward slashes where it's able to do so, but it cannot do so in any path component following the sharename.
-
The variable USER may contain the username of the
person to be used to authenticate to the server.
The variable can be used to set both username and
@@ -234,7 +234,7 @@
The variable PASSWD_FILE may contain the pathname
of a file to read the password from. A single line of input is
read and used as the password.
- This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled. This command may be used only by root, unless installed setuid, in which case the noeexec and nosuid mount flags are enabled.
The primary mechanism for making configuration changes and for reading
debug information for the cifs vfs is via the Linux /proc filesystem.
In the directory Mounting using the CIFS URL specification is currently not supported.
The credentials file does not handle usernames or passwords with
leading space.
Note that the typical response to a bug report is a suggestion
@@ -253,11 +253,11 @@
and always include which versions you use of relevant software
when reporting bugs (minimum: mount.cifs (try mount.cifs -V), kernel (see /proc/version) and
server type you are trying to contact.
- This man page is correct for version 1.52 of
- the cifs vfs filesystem (roughly Linux kernel 2.6.24). This man page is correct for version 1.52 of
+ the cifs vfs filesystem (roughly Linux kernel 2.6.24).
Documentation/filesystems/cifs.txt and fs/cifs/README in the linux kernel
source tree may contain additional options and information.
- Steve French The syntax and manpage were loosely based on that of smbmount. It
was converted to Docbook/XML by Jelmer Vernooij. The maintainer of the Linux cifs vfs and the userspace
tool mount.cifs is Steve French.
The Linux CIFS Mailing list
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/net.8.html samba-3.3.11//docs/htmldocs/manpages/net.8.html
--- samba-3.3.10//docs/htmldocs/manpages/net.8.html 2010-01-14 11:20:37.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/net.8.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,13 +1,13 @@
- net — Tool for administration of Samba and remote
+ net — Tool for administration of Samba and remote
CIFS servers.
- This tool is part of the samba(7) suite. The Samba net utility is meant to work just like the net utility
+ This tool is part of the samba(7) suite. The Samba net utility is meant to work just like the net utility
available for windows and DOS. The first argument should be used
to specify the protocol to use when executing a certain command.
ADS is used for ActiveDirectory, RAP is using for old (Win9x/NT3)
clients and RPC can be used for NT4 and Windows 2000. If this
argument is omitted, net will try to determine it automatically.
Not all commands are available on all protocols.
- Print a summary of command line options.
+ Print a summary of command line options.
Sets target workgroup or domain. You have to specify
either this option or the IP address or the name of a server.
@@ -57,18 +57,18 @@
use only by developers and generate HUGE amounts of log
data, most of which is extremely cryptic. Note that specifying this parameter here will
override the parameter
-in the This command allows the Samba machine account password to be set from an external application
to a machine account password that has already been stored in Active Directory. DO NOT USE this command
unless you know exactly what you are doing. The use of this command requires that the force flag (-f)
be used also. There will be NO command prompt. Whatever information is piped into stdin, either by
typing at the command line or otherwise, will be stored as the literal machine password. Do NOT use
this without care and attention as it will overwrite a legitimate machine password without warning.
YOU HAVE BEEN WARNED.
- The The
Join a domain. If the account already exists on the server, and
[TYPE] is MEMBER, the machine will attempt to join automatically.
(Assuming that the machine has been created in server manager)
@@ -85,81 +85,81 @@
a '/'. Please note that '\' is used for escape by both the shell
and ldap, so it may need to be doubled or quadrupled to pass through,
and it is not used as a delimiter.
- Join a domain. Use the OLDJOIN option to join the domain
using the old style of domain joining - you need to create a trust
-account in server manager first. Enumerates all exported resources (network shares) on target server. Adds a share from a server (makes the export active). Maxusers
+account in server manager first. Enumerates all exported resources (network shares) on target server.
Validate whether the specified user can log in to the
remote server. If the password is not specified on the commandline, it
will be prompted.
- Currently NOT implemented. Execute the specified Currently NOT implemented. Samba uses a general caching interface called 'gencache'. It
can be controlled using 'NET CACHE'. All the timeout parameters support the suffixes:
-
+
- Prints the SID of the specified domain, or if the parameter is
-omitted, the SID of the local server. Manage the mappings between Windows group SIDs and UNIX groups.
-Common options include: unixgroup - Name of the UNIX group ntgroup - Name of the Windows NT group (must be
- resolvable to a SID rid - Unsigned 32-bit integer sid - Full SID in the form of "S-1-..." type - Type of the group; either 'domain', 'local',
- or 'builtin' comment - Freeform text description of the group Prints the SID of the specified domain, or if the parameter is
+omitted, the SID of the local server. Manage the mappings between Windows group SIDs and UNIX groups.
+Common options include: unixgroup - Name of the UNIX group ntgroup - Name of the Windows NT group (must be
+ resolvable to a SID rid - Unsigned 32-bit integer sid - Full SID in the form of "S-1-..." type - Type of the group; either 'domain', 'local',
+ or 'builtin' comment - Freeform text description of the group
Add a new group mapping entry:
- Delete a group mapping entry. If more than one group name matches, the first entry found is deleted. net groupmap delete {ntgroup=string|sid=SID} Delete a group mapping entry. If more than one group name matches, the first entry found is deleted. net groupmap delete {ntgroup=string|sid=SID} Prints out the highest RID currently in use on the local
server (by the active 'passdb backend').
- Print information about the domain of the remote server,
such as domain name, domain sid and number of users and groups.
- Add a interdomain trust account for Remove interdomain trust account for
Shut down the remote server.
+can be found in the Samba-HOWTO-Collection. Shut down the remote server.
Reboot after shutdown.
Force shutting down all applications.
@@ -167,23 +167,23 @@
Timeout before system will be shut down. An interactive
user of the system can use this time to cancel the shutdown.
Display the specified message on the screen to
-announce the shutdown. Print out sam database of remote server. You need
+to run this against the PDC, from a Samba machine joined as a BDC. Export users, aliases and groups from remote server to
local server. You need to run this against the PDC, from a Samba machine joined as a BDC.
- Print out status of machine account of the local machine in ADS.
Prints out quite some debug info. Aimed at developers, regular
-users should use Perform a raw LDAP search on a ADS server and dump the results. The
expression is a standard LDAP search expression, and the
attributes are a list of LDAP fields to show in the results. Example:
Perform a raw LDAP search on a ADS server and dump the results. The
DN standard LDAP DN, and the attributes are a list of LDAP fields
to show in the result.
- Example:
+ Example:
(Re)Create a BUILTIN group.
Only a wellknown set of BUILTIN groups can be created with this command.
This is the list of currently recognized group names: Administrators,
@@ -193,84 +193,84 @@
This command requires a running Winbindd with idmap allocation properly
configured. The group gid will be allocated out of the winbindd range.
-
Create a LOCAL group (also known as Alias).
This command requires a running Winbindd with idmap allocation properly
configured. The group gid will be allocated out of the winbindd range.
-
Map an existing Unix group and make it a Domain Group, the domain group
will have the same name.
-
Add a member to a Local group. The group can be specified only by name,
the member can be specified by name or SID.
-
Remove a member from a Local group. The group and the member must be
specified by name.
-
List the specified set of accounts by name. If verbose is specified,
the rid and description is also provided for each account.
-
Set the workstations a user account is allowed to log in from.
-
Set or unset the "password must change" flag for a user account.
-
Set a value for the account policy.
Valid values can be: "forever", "never", "off", or a number.
-
Only available if ldapsam:editposix is set and winbindd is running.
Properly populates the ldap tree with the basic accounts (Administrator)
and groups (Domain Users, Domain Admins, Domain Guests) on the ldap tree.
-
Dumps the mappings contained in the local tdb file specified.
This command is useful to dump only the mappings produced by the idmap_tdb backend.
-
Store a secret for the specified domain, used primarily for domains
that use idmap_ldap as a backend. In this case the secret is used
as the password for the user DN used to bind to the ldap server.
- Starting with version 3.0.23, a Samba server now supports the ability for
non-root users to add user defined shares to be exported using the "net usershare"
commands.
@@ -297,9 +297,9 @@
can create user defined shares on demand using the commands below.
The usershare commands are:
-
+
-
+
Add or replace a new user defined share, with name "sharename".
"path" specifies the absolute pathname on the system to be exported.
@@ -336,11 +336,11 @@
you wish. The Samba smbd daemon notices user defined share modifications
at connect time so will see the change immediately, there is no need
to restart smbd on adding, deleting or changing a user defined share.
-
Deletes the user defined share by name. The Samba smbd daemon
immediately notices this change, although it will not disconnect
any users currently connected to the deleted share.
-
Get info on user defined shares owned by the current user matching the given pattern, or all users.
net usershare info on its own dumps out info on the user defined shares that were
@@ -359,7 +359,7 @@
And is a list of the current settings of the user defined share that can be
modified by the "net usershare add" command.
-
List all the user defined shares owned by the current user matching the given pattern, or all users.
net usershare list on its own list out the names of the user defined shares that were
@@ -367,28 +367,28 @@
wildcard pattern ('*' matches one or more characters, '?' matches only one character).
If the '-l' or '--long' option is also given, it includes the names of user defined
shares created by other users.
- Starting with version 3.2.0, a Samba server can be configured by data
stored in registry. This configuration data can be edited with the new "net
conf" commands.
The deployment of this configuration data can be activated in two levels from the
smb.conf file: Share definitions from registry are
activated by setting The conf commands are:
-
-
+
Print the configuration data stored in the registry in a smb.conf-like format to
standard output.
-
This command imports configuration from a file in smb.conf format.
If a section encountered in the input file is present in registry,
its contents is replaced. Sections of registry configuration that have
@@ -398,30 +398,30 @@
import command to that specific section. A test mode is enabled by specifying
the parameter "-T" on the commandline. In test mode, no changes are made to the
registry, and the resulting configuration is printed to standard output instead.
-
Show the definition of the share or section specified. It is valid to specify
"global" as sharename to retrieve the global configuration options from
registry.
- Create a new share definition in registry.
+ Create a new share definition in registry.
The sharename and path have to be given. The share name may
not be "global". Optionally, values for the very
common options "writeable", "guest ok" and a "comment" may be specified.
The same result may be obtained by a sequence of "net conf setparm"
commands.
-
Store a parameter in registry. The section may be global or a sharename.
The section is created if it does not exist yet.
-
Get the list of includes for the provided section (global or share).
Note that due to the nature of the registry database and the nature of include directives,
@@ -437,36 +437,36 @@
Further note that currently, only files can be included from registry
configuration. In the future, there will be the ability to include configuration
data from other registry keys.
- Starting with version 3.2.0 Samba has support for remote join and unjoin APIs, both client and server-side. Windows supports remote join capabilities since Windows 2000.
+ Starting with version 3.2.0 Samba has support for remote join and unjoin APIs, both client and server-side. Windows supports remote join capabilities since Windows 2000.
In order for Samba to be joined or unjoined remotely an account must be used that is either member of the Domain Admins group, a member of the local Administrators group or a user that is granted the SeMachineAccountPrivilege privilege.
The client side support for remote join is implemented in the net dom commands which are:
-
-
+
+
Joins a computer into a domain. This command supports the following additional parameters:
-
+
Note that you also need to use standard net parameters to connect and authenticate to the remote machine that you want to join. These additional parameters include: -S computer and -U user.
Example:
net dom join -S xp -U XP\\administrator%secret domain=MYDOM account=MYDOM\\administrator password=topsecret reboot.
This example would connect to a computer named XP as the local administrator using password secret, and join the computer into a domain called MYDOM using the MYDOM domain administrator account and password topsecret. After successful join, the computer would reboot.
-
Unjoins a computer from a domain. This command supports the following additional parameters:
-
+
Note that you also need to use standard net parameters to connect and authenticate to the remote machine that you want to unjoin. These additional parameters include: -S computer and -U user.
Example:
net dom unjoin -S xp -U XP\\administrator%secret account=MYDOM\\administrator password=topsecret reboot.
This example would connect to a computer named XP as the local administrator using password secret, and unjoin the computer from the domain using the MYDOM domain administrator account and password topsecret. After successful unjoin, the computer would reboot.
- The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The net manpage was written by Jelmer Vernooij. nmbd — NetBIOS name server to provide NetBIOS
- over IP naming services to clients This program is part of the samba(7) suite. nmbd — NetBIOS name server to provide NetBIOS
+ over IP naming services to clients This program is part of the samba(7) suite. In addition, If specified, this parameter causes
+ server. If specified, this parameter causes
If the server is to be run by the
To shut down an
inetd(8), smbd(8), smb.conf(5), smbclient(1), testparm(1), testprns(1), and the Internet
RFC's The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/nmblookup.1.html samba-3.3.11//docs/htmldocs/manpages/nmblookup.1.html
--- samba-3.3.10//docs/htmldocs/manpages/nmblookup.1.html 2010-01-14 11:20:40.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/nmblookup.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,9 +1,9 @@
- nmblookup — NetBIOS over TCP/IP client used to lookup NetBIOS
- names This tool is part of the samba(7) suite. nmblookup — NetBIOS over TCP/IP client used to lookup NetBIOS
+ names This tool is part of the samba(7) suite. Searches for a master browser by looking
+ are done over UDP. Searches for a master browser by looking
up the NetBIOS name For example, running : would query the WINS server samba.org for the domain
- master browser (1B name type) for the IRIX workgroup. The original Samba software and related utilities
+ master browser (1B name type) for the IRIX workgroup. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/ntlm_auth.1.html samba-3.3.11//docs/htmldocs/manpages/ntlm_auth.1.html
--- samba-3.3.10//docs/htmldocs/manpages/ntlm_auth.1.html 2010-01-14 11:20:41.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/ntlm_auth.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,18 +1,18 @@
- ntlm_auth — tool to allow external access to Winbind's NTLM authentication function This tool is part of the samba(7) suite. ntlm_auth — tool to allow external access to Winbind's NTLM authentication function This tool is part of the samba(7) suite.
The winbindd(8) daemon must be operational
for many of these commands to function. Some of these commands also require access to the directory
+ security reasons, this directory should not be world-accessable.
Operate as a stdio-based helper. Valid helper protocols are:
Server-side helper for use with Squid 2.4's basic (plaintext)
@@ -60,37 +60,37 @@
finished supplying data to the other. (Which in turn
could cause the helper to authenticate the
user). Curently implemented parameters from the
- external program to the helper are: The username, expected to be in
Samba's unix charset.
- The user's domain, expected to be in
+ The user's domain, expected to be in
Samba's unix charset.
- The fully qualified username, expected to be in
+ The fully qualified username, expected to be in
Samba's unix charset and qualified with the
winbind separator.
- The 8 byte The 8 byte The 24 byte The 24 byte The >= 24 byte The >= 24 byte The user's password. This would be
+ The user's password. This would be
provided by a network client, if the helper is being
used in a legacy situation that exposes plaintext
passwords in this way.
- Apon sucessful authenticaiton, return
+ Apon sucessful authenticaiton, return
the user session key associated with the login.
- Apon sucessful authenticaiton, return
+ Apon sucessful authenticaiton, return
the LANMAN session key associated with the login.
-
+
Specify username of user to authenticate
Specify domain of user to authenticate
@@ -128,7 +128,7 @@
Print a summary of command line options.
- To setup ntlm_auth for use by squid 2.5, with both basic and
NTLMSSP authentication, the following
should be placed in the This example assumes that ntlm_auth has been installed into your
+ This example assumes that ntlm_auth has been installed into your
path, and that the group permissions on
To setup ntlm_auth for use by squid 2.5 with group limitation in addition to the above
example, the following should be added to the If you're experiencing problems with authenticating Internet Explorer running
under MS Windows 9X or Millenium Edition against ntlm_auth's NTLMSSP authentication
helper (--helper-protocol=squid-2.5-ntlmssp), then please read
the Microsoft Knowledge Base article #239869 and follow instructions described there.
- The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The ntlm_auth manpage was written by Jelmer Vernooij and
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/pam_winbind.8.html samba-3.3.11//docs/htmldocs/manpages/pam_winbind.8.html
--- samba-3.3.10//docs/htmldocs/manpages/pam_winbind.8.html 2010-01-14 11:20:43.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/pam_winbind.8.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,6 +1,6 @@
- pam_winbind — PAM module for Winbind This tool is part of the samba(7) suite.
+ pam_winbind — PAM module for Winbind This tool is part of the samba(7) suite.
pam_winbind is a PAM module that can authenticate users against the local domain by talking to the Winbind daemon.
-
Edit the PAM system config /etc/pam.d/service and modify it as the following example shows:
pam_winbind supports several options which can either be set in
the PAM configuration files or in the pam_winbind configuration
@@ -82,7 +82,7 @@
going to expire. Defaults to 14 days.
- This section describes the data exported in the PAM stack which could be used in other PAM modules.
+ This section describes the data exported in the PAM stack which could be used in other PAM modules.
This is the Windows Home Directory set in the profile tab in the user settings
on the Active Directory Server. This could be a local path or a directory on a
share mapped to a drive.
@@ -95,7 +95,7 @@
This is the profile path set in the profile tab in the user settings. Noramlly
the home directory is synced with this directory on a share.
- pdbedit — manage the SAM database (Database of Samba Users) This tool is part of the samba(7) suite. The pdbedit program is used to manage the users accounts
+ pdbedit — manage the SAM database (Database of Samba Users) This tool is part of the samba(7) suite. The pdbedit program is used to manage the users accounts
stored in the sam database and can only be run by root. The pdbedit tool uses the passdb modular interface and is
independent from the kind of users database used (currently there
are smbpasswd, ldap, nis+ and tdb based and more can be added
without changing the tool). There are five main ways to use pdbedit: adding a user account,
removing a user account, modifing a user account, listing user
- accounts, importing users accounts. This option lists all the user accounts
+ accounts, importing users accounts. This option lists all the user accounts
present in the users database.
This option prints a list of user/uid pairs separated by
the ':' character. Example: Example: This option can be used while adding or modifying a user
account. It will specify the users' account control property. Possible flags are listed below.
- N: No password required D: Account disabled H: Home directory required T: Temporary duplicate of other account U: Regular user account M: MNS logon user account W: Workstation Trust Account S: Server Trust Account L: Automatic Locking X: Password does not expire I: Domain Trust Account
+ N: No password required D: Account disabled H: Home directory required T: Temporary duplicate of other account U: Regular user account M: MNS logon user account W: Workstation Trust Account S: Server Trust Account L: Automatic Locking X: Password does not expire I: Domain Trust Account
Example: This option is used to add a user into the
database. This command needs a user name specified with
the -u switch. When adding a new user, pdbedit will also
@@ -77,7 +77,7 @@
- pdbedit does not call the unix password syncronisation
+ pdbedit does not call the unix password syncronisation
script if unix password sync
has been set. It only updates the data in the Samba
user database.
@@ -144,8 +144,8 @@
compile time. Base directory name for log/debug files. The extension
profiles — A utility to report and change SIDs in registry files
- This tool is part of the samba(7) suite. profiles — A utility to report and change SIDs in registry files
+ This tool is part of the samba(7) suite. rpcclient — tool for executing client side
- MS-RPC functions This tool is part of the samba(7) suite. rpcclient — tool for executing client side
+ MS-RPC functions This tool is part of the samba(7) suite. NetBIOS name of Server to which to connect.
+ their UNIX workstation. NetBIOS name of Server to which to connect.
The server can be any SMB/CIFS server. The name is
resolved using the name resolve order line from smb.conf(5). execute semicolon separated commands (listed
below))
Try to authenticate with kerberos. Only useful in
an Active Directory environment.
+
+Try to use the credentials cached by winbind.
This option allows
you to specify a file from which to read the username and
password used in the connection. The format of the file is
@@ -89,11 +91,11 @@
socket. See the socket options parameter in
the Print a summary of command line options.
- Query info policy Resolve a list
of SIDs to usernames.
Resolve a list
of usernames to SIDs.
- Enumerate trusted domains Enumerate privileges Get the privilege name Enumerate the LSA SIDS Enumerate the privileges of an SID Enumerate the rights of an SID Enumerate accounts with a right Add rights to an account Remove rights from an account Get a privilege value given its name Query LSA security object Get Primary Domain Information DFS Query DFS support Add a DFS share Remove a DFS share Query DFS share info Enumerate dfs shares Server query info Enumerate shares Enumerate open files Fetch remote time of day Query user info Query group info Query user groups Query group membership Query alias membership Query display info Query domain info Enumerate domain users Enumerate domain groups Enumerate alias groups Create domain user Look up names Look up names Delete domain user Query SAMR security object Retrieve domain password info Look up domain
+ Enumerate trusted domains Enumerate privileges Get the privilege name Enumerate the LSA SIDS Enumerate the privileges of an SID Enumerate the rights of an SID Enumerate accounts with a right Add rights to an account Remove rights from an account Get a privilege value given its name Query LSA security object Get Primary Domain Information DFS Query DFS support Add a DFS share Remove a DFS share Query DFS share info Enumerate dfs shares Server query info Enumerate shares Enumerate open files Fetch remote time of day Query user info Query group info Query user groups Query group membership Query alias membership Query display info Query domain info Enumerate domain users Enumerate domain groups Enumerate alias groups Create domain user Look up names Look up names Delete domain user Query SAMR security object Retrieve domain password info Look up domain
Execute an AddPrinterDriver() RPC to install the printer driver
information on the server. Note that the driver files should
already exist in the directory returned by
@@ -178,11 +180,11 @@
already be correctly installed on the print server. See also the Add form Set form Get form Delete form Enumerate form Set printer comment Set REG_SZ printer data Set printer name Rffpcnex test Logon Control 2 Logon Control Sam Synchronisation Query Sam Deltas Sam Logon From Luke Leighton's original rpcclient man page: WARNING! The MSRPC over SMB code has
@@ -195,8 +197,8 @@
versions of smbd(8) and rpcclient(1) that are incompatible for some commands or services. Additionally,
the developers are sending reports to Microsoft, and problems found
or reported to Microsoft are fixed in Service Packs, which may
- result in incompatibilities. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original rpcclient man page was written by Matthew
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/samba.7.html samba-3.3.11//docs/htmldocs/manpages/samba.7.html
--- samba-3.3.10//docs/htmldocs/manpages/samba.7.html 2010-01-14 11:20:49.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/samba.7.html 2010-02-22 16:53:36.000000000 +0100
@@ -1,4 +1,4 @@
- samba — A Windows SMB/CIFS fileserver for UNIX The Samba software suite is a collection of programs
+ samba — A Windows SMB/CIFS fileserver for UNIX The Samba software suite is a collection of programs
that implements the Server Message Block (commonly abbreviated
as SMB) protocol for UNIX systems. This protocol is sometimes
also referred to as the Common Internet File System (CIFS). For a
@@ -63,7 +63,7 @@
smbmnt(8) The Samba suite is made up of several components. Each
component is described in a separate manual page. It is strongly
recommended that you read the documentation that comes with Samba
and the manual pages of those components that you use. If the
@@ -72,7 +72,7 @@
for information on how to file a bug report or submit a patch. If you require help, visit the Samba webpage at
http://www.samba.org/ and
explore the many option available to you.
- The Samba software suite is licensed under the
GNU Public License(GPL). A copy of that license should
have come with the package in the file COPYING. You are
encouraged to distribute copies of the Samba suite, but
@@ -86,14 +86,14 @@
the README file that comes with Samba. If you have access to a WWW viewer (such as Mozilla
or Konqueror) then you will also find lots of useful information,
including back issues of the Samba mailing list, at
- http://lists.samba.org. If you wish to contribute to the Samba project,
then I suggest you join the Samba mailing list at
http://lists.samba.org.
If you have patches to submit, visit
http://devel.samba.org/
for information on how to do it properly. We prefer patches
- in Contributors to the project are now too numerous
to mention here but all deserve the thanks of all Samba
users. To see a full list, look at the
The original Samba software and related utilities
+ Samba. The project would have been unmanageable without it. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/sharesec.1.html samba-3.3.11//docs/htmldocs/manpages/sharesec.1.html
--- samba-3.3.10//docs/htmldocs/manpages/sharesec.1.html 2010-01-14 11:20:50.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/sharesec.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,5 +1,5 @@
- sharesec — Set or get share ACLs This tool is part of the samba(7) suite. The The following options are available to the sharesec — Set or get share ACLs This tool is part of the samba(7) suite. The The following options are available to the Add the ACEs specified to the ACL list.
Delete the entire security descriptor.
Force storing the ACL.
@@ -33,7 +33,7 @@
compile time. Base directory name for log/debug files. The extension
The format of an ACL is one or more ACL entries separated by
either commas or newlines. An ACL entry is one of the following: The mask is a value which expresses the access right
granted to the SID. It can be given as a decimal or hexadecimal value,
or by using one of the following text strings which map to the NT
- file permissions of the same name. R - Allow read access W - Allow write access X - Execute permission on the object D - Delete the object P - Change permissions O - Take ownership The following combined permissions can be specified: READ - Equivalent to 'RX'
- permissions CHANGE - Equivalent to 'RXWD' permissions
- FULL - Equivalent to 'RWXDPO'
- permissions The R - Allow read access W - Allow write access X - Execute permission on the object D - Delete the object P - Change permissions O - Take ownership The following combined permissions can be specified: READ - Equivalent to 'RX'
+ permissions CHANGE - Equivalent to 'RXWD' permissions
+ FULL - Equivalent to 'RWXDPO'
+ permissions The If the operation succeeded, sharesec returns and exit
status of 0. If smbcacls — Set or get ACLs on an NT file or directory names This tool is part of the samba(7) suite. The The following options are available to the smbcacls — Set or get ACLs on an NT file or directory names This tool is part of the samba(7) suite. The The following options are available to the Add the ACLs specified to the ACL list. Existing
access control entries are unchanged. Modify the mask value (permissions) for the ACLs
specified on the command line. An error will be printed for each
@@ -52,7 +52,7 @@
compile time. Base directory name for log/debug files. The extension
The format of an ACL is one or more ACL entries separated by
either commas or newlines. An ACL entry is one of the following: The type can be either ALLOWED or DENIED to allow/deny access
to the SID. The flags values are generally zero for file ACLs and
- either 9 or 2 for directory ACLs. Some common flags are: At present flags can only be specified as decimal or
+ either 9 or 2 for directory ACLs. Some common flags are: At present flags can only be specified as decimal or
hexadecimal values. The mask is a value which expresses the access right
granted to the SID. It can be given as a decimal or hexadecimal value,
or by using one of the following text strings which map to the NT
- file permissions of the same name. R - Allow read access W - Allow write access X - Execute permission on the object D - Delete the object P - Change permissions O - Take ownership The following combined permissions can be specified: READ - Equivalent to 'RX'
- permissions CHANGE - Equivalent to 'RXWD' permissions
- FULL - Equivalent to 'RWXDPO'
- permissions The R - Allow read access W - Allow write access X - Execute permission on the object D - Delete the object P - Change permissions O - Take ownership The following combined permissions can be specified: READ - Equivalent to 'RX'
+ permissions CHANGE - Equivalent to 'RXWD' permissions
+ FULL - Equivalent to 'RWXDPO'
+ permissions The If the operation succeeded, smbcacls returns and exit
status of 0. If The original Samba software and related utilities
+ arguments, an exit status of 2 is returned. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. smbclient — ftp-like client to access SMB/CIFS resources
- on servers This tool is part of the samba(7) suite. smbclient — ftp-like client to access SMB/CIFS resources
+ on servers This tool is part of the samba(7) suite. servicename is the name of the service
+ and so on. servicename is the name of the service
you want to use on the server. A service name takes the form
The options are :"lmhosts", "host", "wins" and "bcast". They
- cause names to be resolved as follows:
Try to authenticate with kerberos. Only useful in
an Active Directory environment.
+
+Try to use the credentials cached by winbind.
This option allows
you to specify a file from which to read the username and
password used in the connection. The format of the file is
@@ -204,48 +206,48 @@
options. smbclient may be used to create Tar Long File Names command string is a semicolon-separated list of
commands to be executed instead of prompting from stdin. This is particularly useful in scripts and for printing stdin
- to the server, e.g. Once the client is running, the user is presented with
a prompt : The backslash ("\\") indicates the current working directory
on the server, and will change if the current working directory
is changed. The prompt indicates that the client is ready and waiting to
@@ -468,14 +470,14 @@
Changes the currently used vuid in the protocol to
the given arbitrary number. Without an argument prints out the current
vuid being used. Used for internal Samba testing purposes.
- Some servers are fussy about the case of supplied usernames,
passwords, share names (AKA service names) and machine names.
If you fail to connect try giving all parameters in uppercase.
It is often necessary to use the -n option when connecting
to some types of servers. For example OS/2 LanManager insists
on a valid NetBIOS name being used, so you need to supply a valid
name that would be known to the server. smbclient supports long file names where the server
- supports the LANMAN2 protocol or above. The variable The variable The location of the client program is a matter for
individual system administrators. The following are thus
suggestions only. It is recommended that the smbclient software be installed
in the To test the client, you will need to know the name of a
running SMB/CIFS server. It is possible to run smbd(8) as an ordinary user - running that server as a daemon
on a user-accessible port (typically any port number over 1024)
- would provide a suitable test server. Most diagnostics issued by the client are logged in a
+ would provide a suitable test server. Most diagnostics issued by the client are logged in a
specified log file. The log file name is specified at compile time,
but may be overridden on the command line. The number and nature of diagnostics available depends
on the debug level used by the client. If you have problems,
- set the debug level to 3 and peruse the log files. The original Samba software and related utilities
+ set the debug level to 3 and peruse the log files. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smb.conf.5.html samba-3.3.11//docs/htmldocs/manpages/smb.conf.5.html
--- samba-3.3.10//docs/htmldocs/manpages/smb.conf.5.html 2010-01-14 11:21:10.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smb.conf.5.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,9 +1,9 @@
- smb.conf — The configuration file for the Samba suite
+ smb.conf — The configuration file for the Samba suite
The
The file consists of sections and parameters. A section begins with the name of the section in square brackets
and continues until the next section begins. Sections contain parameters of the form:
- Any line beginning with a semicolon (“;”) or a hash (“#”)
+ Any line beginning with a semicolon (“;”) or a hash (“#”)
character is ignored, as are lines containing only whitespace.
- Any line ending in a “
The values following the equals sign in parameters are all either a string (no quotes needed) or a boolean,
which may be given as yes/no, 1/0 or true/false. Case is not significant in boolean values, but is preserved
in string values. Some items such as create masks are numeric.
-
Each section in the configuration file (except for the [global] section) describes a shared resource (known as
- a “share”). The section name is the name of the shared resource and the parameters within the
+ a “share”). The section name is the name of the shared resource and the parameters within the
section define the shares attributes.
There are three special sections, [global], [homes] and [printers], which are described under
@@ -69,10 +69,10 @@
printable = yes
guest ok = yes
-
Parameters in this section apply to the server as a whole, or are defaults for sections that do not
specifically define certain items. See the notes under PARAMETERS for more information.
-
If a section called [homes] is included in the configuration file, services connecting clients
to their home directories can be created on the fly by the server.
@@ -82,9 +82,9 @@
[homes] section.
Some modifications are then made to the newly created share:
-
+
The share name is changed from homes to the located username.
-
+
If no path was given, the path is set to the user's home directory.
If you decide to use a path = line in your [homes] section, it may be useful
@@ -97,7 +97,7 @@
This is a fast and simple way to give a large number of clients access to their home directories with a minimum
of fuss.
- A similar process occurs if the requested section name is “homes”, except that the share
+ A similar process occurs if the requested section name is “homes”, except that the share
name is not changed to that of the requesting user. This method of using the [homes] section works well if
different users share a client PC.
@@ -115,7 +115,7 @@
The browseable flag for auto home directories will be inherited from the global browseable
flag, not the [homes] browseable flag. This is useful as it means setting browseable = no in
the [homes] section will hide the [homes] share but make any auto home directories visible.
-
This section works like [homes], but for printers.
If a [printers] section occurs in the configuration file, users are able to connect to any printer
@@ -128,7 +128,7 @@
[printers] section.
A few modifications are then made to the newly created share:
- The share name is set to the located printer name If no printer name was given, the printer name is set to the located printer name If the share does not permit guest access and no username was given, the username is set
+ The share name is set to the located printer name If no printer name was given, the printer name is set to the located printer name If the share does not permit guest access and no username was given, the username is set
to the located printer name.
The [printers] service MUST be printable - if you specify otherwise, the server will refuse
to load the configuration file.
@@ -156,11 +156,11 @@
An alias, by the way, is defined as any component of the first entry of a printcap record. Records are separated by newlines,
components (if there are more than one) are separated by vertical bar symbols (
+
On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use
Starting with Samba version 3.0.23 the capability for non-root users to add, modify, and delete
their own share definitions has been added. This capability is called usershares and
is controlled by a set of parameters in the [global] section of the smb.conf.
The relevant parameters are :
@@ -184,7 +184,7 @@
to the global
section of your To create or modify (overwrite) a user defined share. To delete a user defined share. To list user defined shares. To print information about user defined shares. Parameters define the specific attributes of sections.
+ using the following commands. To create or modify (overwrite) a user defined share. To delete a user defined share. To list user defined shares. To print information about user defined shares. Parameters define the specific attributes of sections.
Some parameters are specific to the [global] section (e.g., security). Some parameters
are usable in all sections (e.g., create mask). All others are permissible only in normal
sections. For the purposes of the following descriptions the [homes] and [printers] sections will be
@@ -196,9 +196,9 @@
Parameters are arranged here in alphabetical order - this may not create best bedfellows, but at least you can
find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred
synonym.
-
Many of the strings that are settable in the config file can take substitutions. For example the option
- “path = /tmp/%u” is interpreted as “path = /tmp/john” if the user connected with the
+ “path = /tmp/%u” is interpreted as “path = /tmp/john” if the user connected with the
username john.
These substitutions are mostly noted in the descriptions below, but there are some general substitutions
@@ -210,7 +210,7 @@
139. This will cause Samba to not listen on port 445 and will permit include
functionality to function as it did with Samba 2.x.
the NetBIOS name of the server. This allows you to change your config based on what
- the client calls you. Your server can have a “dual personality”.
+ the client calls you. Your server can have a “dual personality”.
the Internet name of the client machine.
the selected protocol level after protocol negotiation. It can be one of CORE, COREPLUS,
LANMAN1, LANMAN2 or NT1. the process id of the current server
@@ -238,7 +238,7 @@
auto.map entry is split up as
There are some quite creative things that can be done with these substitutions and other
Samba supports
@@ -276,50 +276,50 @@
options are set as follows, "case sensitive = yes", "case preserve = no", "short preserve case = no"
then the "default case" option will be applied and will modify all filenames sent from the client
when accessing this share.
-
There are a number of ways in which a user can connect to a service. The server uses the following steps
in determining if it will allow a connection to a specified service. If all the steps fail, the connection
request is rejected. However, if one of the steps succeeds, the following steps are not checked.
- If the service is marked “guest only = yes” and the server is running with share-level
- security (“security = share”, steps 1 to 5 are skipped.
-
+ If the service is marked “guest only = yes” and the server is running with share-level
+ security (“security = share”, steps 1 to 5 are skipped.
+
If the client has passed a username/password pair and that username/password pair is validated by the UNIX
system's password programs, the connection is made as that username. This includes the
+
If the client has previously registered a username with the system and now supplies a correct password for that
username, the connection is allowed.
-
+
The client's NetBIOS name and any previously used usernames are checked against the supplied password. If
they match, the connection is allowed as the corresponding user.
-
+
If the client has previously validated a username/password pair with the server and the client has passed
the validation token, that username is used.
-
+
If a
+
If the service is a guest service, a connection is made as the username given in the
Starting with Samba version 3.2.0, the capability to
store Samba configuration in the registry is available.
The configuration is stored in the registry key
Share definitions stored in registry are used.
+ Share definitions stored in registry are used.
This is triggered by setting the global
parameter The registry shares are loaded not at startup but
on demand at runtime by smbd.
Shares defined in smb.conf take
priority over shares of the same name defined in
- registry. Global smb.conf
+ registry. Global smb.conf
options stored in registry are used. This can be activated
in two different ways: Firstly, a registry only configuration is triggered
by setting
@@ -360,19 +360,19 @@
registry based configuration locally, i.e. directly
accessing the database file, circumventing the
server.
- This a full path name to a script called by smbd(8) that
should stop a shutdown procedure issued by the shutdown script. If the connected user posseses the Default: Example: This boolean parameter controls what smbd(8)does on receiving a protocol request of "open for delete"
+ This boolean parameter controls what smbd(8)does on receiving a protocol request of "open for delete"
from a Windows client. If a Windows client doesn't have permissions to delete a file then they
expect this to be denied at open time. POSIX systems normally only detect restrictions on delete by
actually attempting to delete the file or directory. As Windows clients can (and do) "back out" a
@@ -392,10 +392,10 @@
with slightly different semantics was introduced in 3.0.20. That older version is not documented here.
Default: This parameter specifies what OS ACL semantics should
be compatible with. Possible values are winnt for Windows NT 4,
win2k for Windows 2000 and above and auto.
If you specify auto, the value for this parameter
@@ -404,10 +404,10 @@
Example:
In a POSIX filesystem, only the owner of a file or directory and the superuser can modify the permissions
and ACLs on a file. If this parameter is set, then Samba overrides this restriction, and also allows the
primary group owner of a file or directory to modify the permissions and ACLs
@@ -434,10 +434,10 @@
Default:
This boolean parameter controls whether smbd(8)maps a POSIX ACE entry of "rwx" (read/write/execute), the maximum
allowed POSIX permission set, into a Windows ACL of "FULL CONTROL". If this parameter is set to true any POSIX
ACE entry of "rwx" will be returned in a Windows ACL as "FULL CONTROL", is this parameter is set to false any
@@ -445,10 +445,10 @@
execute.
Default:
This is the full pathname to a script that will be run AS ROOT by smbd(8) when a new group is requested. It
will expand any Example:
This is the full pathname to a script that will be run by
smbd(8) when a machine is
added to Samba's domain and a Unix account matching the machine's name appended with a "$" does not
@@ -472,22 +472,22 @@
Example: Samba 3.0.23 introduced support for adding printer ports
remotely using the Windows "Add Standard TCP/IP Port Wizard".
This option defines an external program to be executed when
smbd receives a request to add a new Port to the system.
- The script is passed two parameters: The deviceURI is in the for of socket://<hostname>[:<portnumber>]
+ The script is passed two parameters: The deviceURI is in the for of socket://<hostname>[:<portnumber>]
or lpd://<hostname>/<queuename>. Default: Example: With the introduction of MS-RPC based printing
support for Windows NT/2000 clients in Samba 2.2, The MS Add
Printer Wizard (APW) icon is now also available in the
"Printers..." folder displayed a share listing. The APW
@@ -501,7 +501,7 @@
to the The All parameters are filled in from the PRINTER_INFO_2 structure sent
+ order): All parameters are filled in from the PRINTER_INFO_2 structure sent
by the Windows NT/2000 client with one exception. The "Windows 9x
driver location" parameter is included for backwards compatibility
only. The remaining fields in the structure are generated from answers
@@ -518,10 +518,10 @@
Example:
Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
Manager. The
When executed, Example:
This is the full pathname to a script that will be run AS ROOT by
smbd(8)
under special circumstances described below.
@@ -591,10 +591,10 @@
Example:
Full path to the script that will be called when a user is added to a group using the Windows NT domain administration
tools. It will be run by smbd(8)
AS ROOT. Any Example: If this parameter is set to See the section below on security for more
information about this option. Default: This is a list of users who will be granted
administrative privileges on the share. This means that they
will do all file operations as the super-user (root). You should use this option very carefully, as any user in
this list will be able to do anything they like on the share,
@@ -628,20 +628,20 @@
Example: This parameter controls whether special AFS features are enabled
for this share. If enabled, it assumes that the directory exported via
the Default: If you are using the fake kaserver AFS feature, you might
want to hand-craft the usernames you are creating tokens for.
For example this is necessary if you have users from several domain
in your AFS Protection Database. One possible scheme to code users
@@ -651,10 +651,10 @@
Example: If Samba has been built with asynchronous I/O support and this
integer parameter is set to non-zero value,
Samba will read from file asynchronously when size of request is bigger
than this value. Note that it happens only for non-chained and non-chaining
@@ -665,10 +665,10 @@
# Use asynchronous I/O for reads bigger than 16KB
request size
- If Samba has been built with asynchronous I/O support,
Samba will not wait until write requests are finished before returning
the result to the client for files listed in this parameter.
Instead, Samba will immediately return that the write
@@ -683,10 +683,10 @@
Example: If Samba has been built with asynchronous I/O support and this
integer parameter is set to non-zero value,
Samba will write to file asynchronously when size of request is bigger
than this value. Note that it happens only for non-chained and non-chaining
@@ -697,10 +697,10 @@
# Use asynchronous I/O for writes bigger than 16KB
request size
- This determines how Samba will use its
algorithmic mapping from uids/gid to the RIDs needed to construct
NT Security Identifiers.
Setting this option to a larger value could be useful to sites
@@ -715,10 +715,10 @@
Example: This parameter allows an administrator to tune the
allocation size reported to Windows clients. The default
size of 1Mb generally results in improved Windows client
performance. However, rounding the allocation size may cause
@@ -730,10 +730,10 @@
Example:
This option only takes effect when the security option is set to
Default: This specifies what type of server nmbd(8) will announce itself as, to a network neighborhood browse
+ This specifies what type of server nmbd(8) will announce itself as, to a network neighborhood browse
list. By default this is set to Windows NT. The valid options
are : "NT Server" (which can also be written as "NT"),
"NT Workstation", "Win95" or "WfW" meaning Windows NT Server,
@@ -763,20 +763,20 @@
Example: This specifies the major and minor version numbers
that nmbd will use when announcing itself as a server. The default
is 4.9. Do not change this parameter unless you have a specific
need to set a Samba server to be a downlevel server. Default: Example:
This option allows the administrator to chose what authentication methods Example: This parameter lets you "turn off" a service. If
Default: This global parameter allows the Samba admin
to limit what interfaces on a machine will serve SMB requests. It
affects file service smbd(8) and name service nmbd(8) in a slightly different ways.
For name service it causes Default: This parameter controls the behavior
of smbd(8) when given a request by a client
to obtain a byte range lock on a region of an open file, and the
request has a time limit associated with it. If this parameter is set and the lock range requested
@@ -863,10 +863,10 @@
will fail the lock request immediately if the lock range
cannot be obtained. Default: This parameter controls the behavior of smbd(8) when reporting disk free
sizes. By default, this reports a disk block size of 1024 bytes.
Changing this parameter may have some effect on the
efficiency of client writes, this is not yet confirmed. This
@@ -880,42 +880,42 @@
Example: This controls whether this share is seen in
the list of available shares in a net view and in the browse list. Default: This controls whether smbd(8) will serve a browse list to
a client doing a Default: This parameter specifies whether Samba should reply
to a client's file change notify requests.
You should never need to change this parameter Default:
Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
Manager. The
When executed, Example: The name of a program that can be used to check password
complexity. The password is sent to the program's standard input. The program must return 0 on a good password, or any other value
if the password is bad.
In case the password is considered weak (the program does not return 0) the
@@ -962,10 +962,10 @@
Example: This parameter determines whether or not smbclient(8) and other samba client
tools will attempt to authenticate itself to servers using the
weaker LANMAN password hash. If disabled, only server which support NT
password hashes (e.g. Windows NT/2000, Samba, etc... but not
@@ -976,10 +976,10 @@
auth parameter is enabled, then only NTLMv2 logins will be
attempted. Default:
The client ldap sasl wrapping defines whether
ldap traffic will be signed or signed and encrypted (sealed).
Possible values are plain, sign
@@ -1007,10 +1007,10 @@
seal.
Default: This parameter determines whether or not smbclient(8) will attempt to
authenticate itself to servers using the NTLMv2 encrypted password
response. If enabled, only an NTLMv2 and LMv2 response (both much more
secure than earlier versions) will be sent. Many servers
@@ -1022,16 +1022,16 @@
those following 'best practice' security polices) only allow NTLMv2
responses, and not the weaker LM or NTLM. Default: Specifies whether a client should send a plaintext
password if the server does not support encrypted passwords. Default:
This controls whether the client offers or even demands the use of the netlogon schannel.
client schannel = no does not offer the schannel,
client schannel = auto offers the schannel but does not
@@ -1041,10 +1041,10 @@
Example: This controls whether the client is allowed or required to use SMB signing. Possible values
are auto, mandatory
and disabled.
When set to auto, SMB signing is offered, but not enforced.
@@ -1052,19 +1052,19 @@
to disabled, SMB signing is not offered either.
Default: This variable controls whether Samba clients will try
to use Simple and Protected NEGOciation (as specified by rfc2478) with
supporting servers (including WindowsXP, Windows2000 and Samba
3.0) to agree upon an authentication
mechanism. This enables Kerberos authentication in particular. Default: With this parameter you can add additional addresses
nmbd will register with a WINS server. These addresses are not
necessarily present on all nodes simultaneously, but they will
be registered with the WINS server so that clients can contact
@@ -1073,20 +1073,20 @@
Example: This parameter specifies whether Samba should contact
ctdb for accessing its tdb files and use ctdb as a backend
for its messaging backend.
Set this parameter to Default: This is a text field that is seen next to a share
when a client does a queries the server, either via the network
neighborhood or via If you want to set the string that is displayed next to the
@@ -1095,10 +1095,10 @@
Example:
This controls the backend for storing the configuration.
Possible values are file (the default)
and registry.
@@ -1116,10 +1116,10 @@
Example: This allows you to override the config file
to use, instead of the default (usually For this reason, if the name of the config file has changed
@@ -1129,10 +1129,10 @@
(allowing you to special case the config files of just a few
clients). No default Example: This parameter allows you to "clone" service
entries. The specified service is simply duplicated under the
current service's name. Any parameters specified in the current
section will override those in the section being copied. This feature lets you set up a 'template' service and
@@ -1142,13 +1142,13 @@
Example:
When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to
UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may
be thought of as a bit-wise MASK for the UNIX modes of a file. Any bit not set here will
@@ -1169,10 +1169,10 @@
Example:
This stands for client-side caching policy, and specifies how clients capable of offline
caching will cache the files in the share. The valid values are: manual, documents, programs, disable.
@@ -1184,10 +1184,10 @@
Example: If you set Example:
This parameter is only applicable if printing is set to
If set, this option specifies the number of seconds that smbd will wait
@@ -1208,10 +1208,10 @@
Example:
This parameter is only applicable if printing is
set to Example:
This parameter is only applicable if printing is set to
If set, this option overrides the ServerName option in the CUPS Example: The value of the parameter (a decimal integer)
represents the number of minutes of inactivity before a connection
is considered dead, and it is disconnected. The deadtime only takes
effect if the number of open files is zero. This is useful to stop a server's resources being
@@ -1265,10 +1265,10 @@
Example:
With this boolean parameter enabled, the debug class (DBGC_CLASS)
will be displayed in the debug header.
@@ -1276,20 +1276,20 @@
section about log level.
Default:
Sometimes the timestamps in the log messages are needed with a resolution of higher that seconds, this
boolean parameter adds microsecond resolution to the timestamp message header when turned on.
Note that the parameter debug timestamp must be on for this to have an effect.
Default:
When using only one log file for more then one forked smbd(8)-process there may be hard to follow which process outputs which
message. This boolean parameter is adds the process-id to the timestamp message headers in the
logfile when turned on.
@@ -1297,10 +1297,10 @@
Note that the parameter debug timestamp must be on for this to have an effect.
Default:
With this option enabled, the timestamp message header is prefixed to the debug message without the
filename and function information that is included with the debug timestamp
parameter. This gives timestamps to the messages without adding an additional line.
@@ -1308,38 +1308,38 @@
Note that this parameter overrides the debug timestamp parameter.
Default:
Samba debug log messages are timestamped by default. If you are running at a high
debug level these timestamps can be distracting. This
boolean parameter allows timestamping to be turned off.
Default:
Samba is sometimes run as root and sometime run as the connected user, this boolean parameter inserts the
current euid, egid, uid and gid to the timestamp message headers in the log file if turned on.
Note that the parameter debug timestamp must be on for this to have an effect.
Default: See the section on name mangling.
Also note the short preserve case parameter. Default: This parameter is only applicable to printable services.
When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba
server has a Device Mode which defines things such as paper size and
orientation and duplex settings. The device mode can only correctly be
@@ -1362,13 +1362,13 @@
see the MSDN documentation.
Default: This parameter specifies the name of a service
which will be connected to if the service actually requested cannot
be found. Note that the square brackets are NOT
given in the parameter value (see example below). There is no default value for this parameter. If this
@@ -1382,10 +1382,10 @@
Example:
Windows allows specifying how a file will be shared with
other processes when it is opened. Sharing violations occur when
a file is opened by a different process using options that violate
@@ -1398,19 +1398,19 @@
designed to enable Samba to more correctly emulate Windows.
Default: This is the full pathname to a script that will
be run AS ROOT smbd(8) when a group is requested to be deleted.
It will expand any Default: With the introduction of MS-RPC based printer
support for Windows NT/2000 clients in Samba 2.2, it is now
possible to delete a printer at run time by issuing the
DeletePrinter() RPC call. For a Samba host this means that the printer must be
@@ -1428,18 +1428,18 @@
Example: This parameter allows readonly files to be deleted.
This is not normal DOS semantics, but is allowed by UNIX. This option may be useful for running applications such
as rcs, where UNIX file ownership prevents changing file
permissions, and DOS semantics prevent deletion of a read only file. Default:
Samba 2.2.0 introduced the ability to dynamically add and delete shares via the Windows NT 4.0 Server
Manager. The
When executed,
This parameter is only used to remove file shares. To delete printer shares,
@@ -1465,10 +1465,10 @@
Example: Full path to the script that will be called when
a user is removed from a group using the Windows NT domain administration
tools. It will be run by smbd(8) AS ROOT.
Any Example: This is the full pathname to a script that will
be run by smbd(8) when managing users
with remote RPC (NT) tools.
This script is called when a remote client removes a user
@@ -1489,10 +1489,10 @@
Example: This option is used when Samba is attempting to
delete a directory that contains one or more vetoed directories
(see the veto files
option). If this option is set to Default:
The No default Example:
The No default Example: This parameter is the octal modes which are
used when converting DOS modes to UNIX modes when creating UNIX
directories. When a directory is created, the necessary permissions are
calculated according to the mapping from DOS modes to UNIX permissions,
@@ -1587,10 +1587,10 @@
Example: This parameter controls what UNIX permission bits
will be set when a Windows NT client is manipulating the UNIX
permission on a directory using the native NT security dialog
box.
@@ -1610,19 +1610,19 @@
Example: Enabling this parameter will disable netbios support
in Samba. Netbios is the only available form of browsing in
- all windows versions except for 2000 and XP. Clients that only support netbios won't be able to
+ all windows versions except for 2000 and XP. Clients that only support netbios won't be able to
see your samba server when netbios support is disabled.
Default: Enabling this parameter will disable Samba's support
for the SPOOLSS set of MS-RPC's and will yield identical behavior
as Samba 2.0.x. Windows NT/2000 clients will downgrade to using
Lanman style printing commands. Windows 9x/ME will be unaffected by
@@ -1634,10 +1634,10 @@
Be very careful about enabling this parameter.
Default:
Specifies the charset that samba will use to print messages to stdout and stderr.
The default value is "LOCALE", which means automatically set, depending on the
current locale. The value should generally be the same as the value of the parameter
@@ -1646,10 +1646,10 @@
Example: This parameter specifies whether Samba should use DMAPI to
determine whether a file is offline or not. This would typically
be used in conjunction with a hierarchical storage system that
automatically migrates files to tape.
@@ -1664,10 +1664,10 @@
Default: Specifies that nmbd(8) when acting as a WINS server and
finding that a NetBIOS name has not been registered, should treat the
NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server
for that name on behalf of the name-querying client. Note that the maximum length for a NetBIOS name is 15
@@ -1676,10 +1676,10 @@
DNS name lookup requests, as doing a name lookup is a blocking
action. Default:
If set to Default:
Tell smbd(8) to enable
WAN-wide browse list collation. Setting this option causes Default: There are certain directories on some systems
(e.g., the Example: DOS SMB clients assume the server has
the same charset as they do. This option specifies which
charset Samba should talk to DOS clients.
The default depends on which charsets you have installed.
Samba tries to use charset 850 but falls back to ASCII in
- case it is not available. Run testparm(1) to check the default on your system. No default No default The default behavior in Samba is to provide
UNIX-like behavior where only the owner of a file/directory is
able to change the permissions on it. However, this behavior
is often confusing to DOS/Windows users. Enabling this parameter
@@ -1754,10 +1754,10 @@
the group is only granted read access. Ownership of the
file/directory may also be changed. Default: Under the DOS and Windows FAT filesystem, the finest
granularity on time resolution is two seconds. Setting this parameter
for a share causes Samba to round the reported time down to the
nearest two second boundary when a query call that requires one second
@@ -1772,10 +1772,10 @@
this option causes the two timestamps to match, and Visual C++ is
happy. Default: Under DOS and Windows, if a user can write to a
file they can change the timestamp on it. Under POSIX semantics,
only the owner of the file or root may change the timestamp. By
default, Samba runs with POSIX semantics and refuses to change the
@@ -1789,20 +1789,20 @@
shared between users.
Default: This boolean parameter controls whether smbd(8) will allow clients to attempt to store OS/2 style Extended
+ This boolean parameter controls whether smbd(8) will allow clients to attempt to store OS/2 style Extended
attributes on a share. In order to enable this parameter the underlying filesystem exported by
the share must support extended attributes (such as provided on XFS and EXT3 on Linux, with the
correct kernel patches). On Linux the filesystem must have been mounted with the mount
option user_xattr in order for extended attributes to work, also
extended attributes must be compiled into the Linux kernel. Default: Hosts running the "Advanced Server for Unix (ASU)" product
require some special accomodations such as creating a builtin [ADMIN$]
share that only supports IPC connections. The has been the default
behavior in smbd for many years. However, certain Microsoft applications
@@ -1810,20 +1810,20 @@
an [ADMIN$} file share. Disabling this parameter allows for creating
an [ADMIN$] file share in smb.conf. Default: This parameter specifies whether core dumps should be written
on internal exits. Normally set to Default: Example:
This parameter controls whether or not smbd will honor privileges assigned to specific SIDs via either
Default: This boolean controls whether encrypted passwords
will be negotiated with the client. Note that Windows NT 4.0 SP3 and
above and also Windows 98 will by default expect encrypted passwords
unless a registry entry is changed. To use encrypted passwords in
@@ -1862,10 +1862,10 @@
causes Default: This option enables a couple of enhancements to
cross-subnet browse propagation that have been added in Samba
but which are not standard in Microsoft implementations.
The first enhancement to browse propagation consists of a regular
@@ -1878,10 +1878,10 @@
to stay around forever which can be annoying. In general you should leave this option enabled as it makes
cross-subnet browse propagation much more reliable. Default: The concept of a "port" is fairly foreign
to UNIX hosts. Under Windows NT/2000 print servers, a port
is associated with a port monitor and generally takes the form of
a local port (i.e. LPT1:, COM1:, FILE:) or a remote port
@@ -1898,10 +1898,10 @@
Example: This option defines a list of log names that Samba will
report to the Microsoft EventViewer utility. The listed
eventlogs will be associated with tdb file on disk in the
Example: NTFS and Windows VFAT file systems keep a create
time for all files and directories. This is not the same as the
ctime - status change time - that Unix keeps, so Samba by default
reports the earliest of the various times Unix does keep. Setting
@@ -1939,10 +1939,10 @@
ensures directories always predate their contents and an NMAKE build
will proceed as expected. Default: Oplocks are the way that SMB clients get permission
from a server to locally cache file operations. If a server grants
an oplock (opportunistic lock) then the client is free to assume
that it is the only one accessing the file and it will aggressively
@@ -1958,10 +1958,10 @@
files read-write at the same time you can get data corruption. Use
this option carefully! Default:
This parameter allows the Samba administrator to stop smbd(8) from following symbolic links in a particular share. Setting this
parameter to Default: This parameter specifies a set of UNIX mode bit
permissions that will always be set on a
file created by Samba. This is done by bitwise 'OR'ing these bits onto
the mode bits of a file that is being created. The default for this parameter is (in octal)
@@ -1986,10 +1986,10 @@
Example: This parameter specifies a set of UNIX mode bit
permissions that will always be set on a directory
created by Samba. This is done by bitwise 'OR'ing these bits onto the
mode bits of a directory that is being created. The default for this
@@ -2002,10 +2002,10 @@
Example:
This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
the UNIX permission on a directory using the native NT security dialog box.
@@ -2018,7 +2018,7 @@
If not set explicitly this parameter is 0000, which allows a user to modify all the user/group/world
permissions on a directory without restrictions.
-
+
Users who can access the Samba server through other means can easily bypass this restriction, so it is
primarily useful for standalone "appliance" systems. Administrators of most normal systems will
probably want to leave it set as 0000.
@@ -2026,13 +2026,13 @@
Example: This specifies a UNIX group name that will be
assigned as the default primary group for all users connecting
to this service. This is useful for sharing files by ensuring
that all access to files on service will use the named group for
@@ -2056,10 +2056,10 @@
Example: When printing from Windows NT (or later),
each printer in Default:
This parameter controls what UNIX permission bits can be modified when a Windows NT client is manipulating
the UNIX permission on a file using the native NT security dialog box.
@@ -2105,10 +2105,10 @@
Example:
If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or
representation of a user or group id) as the owner or group owner of the file will be silently
mapped into the current UNIX uid or gid of the currently connected user.
@@ -2122,10 +2122,10 @@
Try using this parameter when XCOPY /O gives an ACCESS_DENIED error.
Default: This specifies a UNIX user name that will be
assigned as the default user for all users connecting to this service.
This is useful for sharing files. You should also use it carefully
as using it incorrectly can cause security problems. This user name only gets used once a connection is established.
@@ -2139,10 +2139,10 @@
Example:
This parameter allows the administrator to configure the string that specifies the type of filesystem a share
is using that is reported by smbd(8)
when a client queries the filesystem type for a share. The default type is Example: The This option is only available you have compiled Samba with the
This parameter should specify the path to a script that
queries the quota information for the specified
user/group for the partition that
- the specified directory is on. Such a script should take 3 arguments: directory type of query uid of user or gid of group The type of query can be one of : 1 - user quotas 2 - user default quotas (uid = -1) 3 - group quotas 4 - group default quotas (gid = -1) This script should print one line as output with spaces between the arguments. The arguments are:
- Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced) Arg 2 - number of currently used blocks Arg 3 - the softlimit number of blocks Arg 4 - the hardlimit number of blocks Arg 5 - currently used number of inodes Arg 6 - the softlimit number of inodes Arg 7 - the hardlimit number of inodes Arg 8(optional) - the number of bytes in a block(default is 1024) Default: Such a script should take 3 arguments: directory type of query uid of user or gid of group The type of query can be one of : 1 - user quotas 2 - user default quotas (uid = -1) 3 - group quotas 4 - group default quotas (gid = -1) This script should print one line as output with spaces between the arguments. The arguments are:
+ Arg 1 - quota flags (0 = no quotas, 1 = quotas enabled, 2 = quotas enabled and enforced) Arg 2 - number of currently used blocks Arg 3 - the softlimit number of blocks Arg 4 - the hardlimit number of blocks Arg 5 - currently used number of inodes Arg 6 - the softlimit number of inodes Arg 7 - the hardlimit number of inodes Arg 8(optional) - the number of bytes in a block(default is 1024) Default: Example: This is a tuning option. When this is enabled a
caching algorithm will be used to reduce the time taken for getwd()
calls. This can have a significant impact on performance, especially
when the wide smbconfoptions parameter is set to Default: This is a username which will be used for access
to services which are specified as guest ok (see below). Whatever privileges this
user has will be available to any client connecting to the guest service.
This user must exist in the password file, but does not require
@@ -2197,40 +2197,40 @@
Example: If this parameter is This paramater nullifies the benifits of setting
restrict anonymous = 2
See the section below on security for more information about this option.
Default: This is a boolean parameter that controls whether
files starting with a dot appear as hidden files. Default: This is a list of files or directories that are not
visible but are accessible. The DOS 'hidden' attribute is applied
to any files or directories that match. Each entry in the list must be separated by a '/',
which allows spaces to be included in the entry. '*'
@@ -2252,32 +2252,32 @@
Default:
This parameter prevents clients from seeing special files such as sockets, devices and
fifo's in directory listings.
Default: This parameter prevents clients from seeing the
existance of files that cannot be read. Defaults to off. Default:
This parameter prevents clients from seeing the existance of files that cannot be written to.
Defaults to off. Note that unwriteable directories are shown as usual.
Default:
If nis homedir is
and the program will extract the servername from before the first ':'. There should probably be a better parsing system
that copes with different map formats and also Amd (another automounter) maps.
-
+
A working NIS client is required on the system for this option to work.
Default: Example:
If set to
@@ -2303,10 +2303,10 @@
setting up a Dfs tree on Samba, refer to the MSFDS chapter in the book Samba3-HOWTO.
Default: Specifies whether samba should use (expensive)
hostname lookups or use the ip addresses instead. An example place
where hostname lookups are currently used is when checking
the Example: A synonym for this parameter is allow hosts. This parameter is a comma, space, or tab delimited
set of hosts which are permitted to access a service. If specified in the [global] section then it will
apply to all services, regardless of whether the individual
service has a different setting. You can specify the hosts by name or IP number. For
@@ -2334,19 +2334,19 @@
by netgroup names if your system supports netgroups. The
EXCEPT keyword can also be used to limit a
wildcard list. The following examples may provide some help: Example 1: allow all IPs in 150.203.*.*; except one Example 2: allow hosts that match the given network/netmask Example 3: allow a couple of hosts Example 4: allow only hosts in NIS netgroup "foonet", but
- deny access from one particular host Note that access still requires suitable user-level passwords. See testparm(1) for a way of testing your host access
+ deny access from one particular host Note that access still requires suitable user-level passwords. See testparm(1) for a way of testing your host access
to see if it does what you expect. Default: Example: The opposite of Example:
The idmap alloc backend provides a plugin interface for Winbind to use
when allocating Unix uids/gids for Windows SIDs. This option refers
to the name of the idmap module which will provide the id allocation
@@ -2380,18 +2380,18 @@
Also refer to the idmap alloc config option.
No default Example:
The idmap alloc config prefix provides a means of managing settings
for the backend defined by the idmap alloc backend
parameter. Refer to the man page for each idmap plugin regarding
specific configuration details.
- No default
The idmap backend provides a plugin interface for Winbind to use
varying backends to store SID/uid/gid mapping tables.
@@ -2412,17 +2412,17 @@
and ad (idmap_ad(8)).
Default: This parameter specifies the number of seconds that Winbind's
idmap interface will cache positive SID/uid/gid query results.
Default:
The idmap config prefix provides a means of managing each trusted
domain separately. The idmap config prefix should be followed by the
name of the domain, a colon, and a setting specific to the chosen
@@ -2454,13 +2454,13 @@
idmap config CORP : backend = ad
idmap config CORP : range = 1000-999999
- No default The idmap gid parameter specifies the range of group ids
that are allocated for the purpose of mapping UNX groups to NT group
SIDs. This range of group ids should have no
existing local or NIS groups within it as strange conflicts can
@@ -2470,20 +2470,20 @@
Example: This parameter specifies the number of seconds that Winbind's
idmap interface will cache negative SID/uid/gid query results.
Default:
The idmap uid parameter specifies the range of user ids that are
allocated for use in mapping UNIX users to NT user SIDs. This
range of ids should have no existing local
@@ -2493,10 +2493,10 @@
Example:
This allows you to include one config file inside another. The file is included literally, as though typed
in place.
@@ -2514,10 +2514,10 @@
Example: This parameter can be used to ensure that if default acls
exist on parent directories, they are always honored when creating a
new file or subdirectory in these parent directories. The default
behavior is to use the unix mode specified when creating the directory.
@@ -2525,10 +2525,10 @@
default directory acls are propagated.
Default: The ownership of new files and directories
is normally governed by effective uid of the connected user.
This option allows the Samba administrator to specify that
the ownership for new files and directories should be controlled
@@ -2537,10 +2537,10 @@
delete them and to ensure that newly create files in a user's
roaming profile directory are actually owner by the user. Default:
The permissions on new files and directories are normally governed by create mask,
directory mask, force create mode and force directory mode but the boolean inherit permissions parameter overrides this.
New directories inherit the mode of the parent directory,
@@ -2552,10 +2552,10 @@
many users, perhaps several thousand, to allow a single [homes]
share to be used flexibly by each user. Default:
This parameter takes a list of host names, addresses or networks for
which the initial samlogon reply should be delayed (so other DCs get
preferred by XP workstations if there are any).
@@ -2566,28 +2566,28 @@
Example:
This parameter specifies a delay in milliseconds for the hosts configured
for delayed initial samlogon with
init logon delayed hosts.
Default: This option allows you to override the default
network interfaces list that Samba will use for browsing, name
registration and other NetBIOS over TCP/IP (NBT) traffic. By default Samba will query
the kernel for the list of all active interfaces and use any
interfaces except 127.0.0.1 that are broadcast capable. The option takes a list of interface strings. Each string
- can be in any of the following forms: a network interface name (such as eth0).
+ can be in any of the following forms: a network interface name (such as eth0).
This may include shell-like wildcards so eth* will match
- any interface starting with the substring "eth" an IP address. In this case the netmask is
+ any interface starting with the substring "eth" an IP address. In this case the netmask is
determined from the list of interfaces obtained from the
- kernel an IP/mask pair. a broadcast/mask pair. The "mask" parameters can either be a bit length (such
+ kernel an IP/mask pair. a broadcast/mask pair. The "mask" parameters can either be a bit length (such
as 24 for a C class network) or a full netmask in dotted
decimal form. The "IP" parameters above can either be a full dotted
decimal IP address or a hostname which will be looked up via
@@ -2602,10 +2602,10 @@
Example: This is a list of users that should not be allowed
to login to this service. This is really a paranoid
check to absolutely ensure an improper setting does not breach
your security. A name starting with a '@' is interpreted as an NIS
@@ -2625,10 +2625,10 @@
Example:
This parameter is only applicable if printing is set to
If set, this option overrides the ServerName option in the CUPS Example: The value of the parameter (an integer) represents
the number of seconds between Example: This parameter specifies whether Samba should ask the
kernel for change notifications in directories so that
SMB clients can refresh whenever the data on the server changes.
This parameter is only used when your kernel supports
change notification to user programs using the inotify interface.
Default: For UNIXes that support kernel based oplocks
(currently only IRIX and the Linux 2.4 kernel), this parameter
allows the use of them to be turned on or off. Kernel oplocks support allows Samba Default: This parameter determines whether or not smbd(8) will attempt to
authenticate users or permit password changes
using the LANMAN password hash. If disabled, only clients which support NT
password hashes (e.g. Windows NT/2000 clients, smbclient, but not
@@ -2693,22 +2693,22 @@
permited. Not all clients support NTLMv2, and most will require
special configuration to use it. Default: This parameter determines whether or not
smbd(8) supports the new 64k
- streaming read and write varient SMB requests introduced with
+ streaming read and write variant SMB requests introduced with
Windows 2000. Note that due to Windows 2000 client redirector bugs
this requires Samba to be running on a 64-bit capable operating
system such as IRIX, Solaris or a Linux 2.4 kernel. Can improve
performance by 10% with Windows 2000 clients. Defaults to on. Not as
tested as some other Samba code paths. Default:
The ldap admin dn defines the Distinguished Name (DN) name used by Samba to contact
the ldap server when retreiving user account information. The ldap admin dn is used
in conjunction with the admin dn password stored in the
The ldap admin dn requires a fully specified DN. The ldap suffix is not appended to the ldap admin dn.
- No default
This parameter tells the LDAP library calls which timeout in seconds
they should honor during initial connection establishments to LDAP servers.
It is very useful in failover scenarios in particular. If one or more LDAP
@@ -2731,10 +2731,10 @@
and not establishing an initial connection.
Default:
This parameter controls the debug level of the LDAP library
calls. In the case of OpenLDAP, it is the same
bit-field as understood by the server and documented in the
@@ -2751,10 +2751,10 @@
Example:
This parameter controls the Samba debug level at which
the ldap library debug output is
printed in the Samba logs. See the description of
@@ -2763,28 +2763,28 @@
Example: This parameter specifies whether a delete
operation in the ldapsam deletes the complete entry or only the attributes
specific to Samba.
Default: This parameter specifies the suffix that is
used for groups when these are added to the LDAP directory.
If this parameter is unset, the value of ldap suffix will be used instead. The suffix string is pre-pended to the
ldap suffix string so use a partial DN. Default: Example:
This parameters specifies the suffix that is used when storing idmap mappings. If this parameter
is unset, the value of ldap suffix will be used instead. The suffix
string is pre-pended to the ldap suffix string so use a partial DN.
@@ -2792,10 +2792,10 @@
Example:
It specifies where machines should be added to the ldap tree. If this parameter is unset, the value of
ldap suffix will be used instead. The suffix string is pre-pended to the
ldap suffix string so use a partial DN.
@@ -2803,10 +2803,10 @@
Example:
This parameter specifies the number of entries per page.
If the LDAP server supports paged results, clients can
request subsets of search results (pages) instead of the entire list.
@@ -2815,24 +2815,24 @@
Example:
This option is used to define whether or not Samba should sync the LDAP password with the NT
and LM hashes for normal accounts (NOT for workstation, server or domain trusts) on a password
change via SAMBA.
The ldap passwd sync can be set to one of three values:
- Default:
When Samba is asked to write to a read-only LDAP replica, we are redirected to talk to the read-write master server.
This server then replicates our changes back to the 'local' server, however the replication might take some seconds,
especially over slow links. Certain client activities, particularly domain joins, can become confused by the 'success'
@@ -2845,10 +2845,10 @@
The value is specified in milliseconds, the maximum value is 5000 (5 seconds).
Default:
Editposix is an option that leverages ldapsam:trusted to make it simpler to manage a domain controller
eliminating the need to set up custom scripts to add and manage the posix users and groups. This option
will instead directly manipulate the ldap tree to create, remove and modify user and group entries.
@@ -2926,10 +2926,10 @@
Default:
By default, Samba as a Domain Controller with an LDAP backend needs to use the Unix-style NSS subsystem to
access user and group information. Due to the way Unix stores user information in /etc/passwd and /etc/group
this inevitably leads to inefficiencies. One important question a user needs to know is the list of groups he
@@ -2947,10 +2947,10 @@
is easily achieved.
Default: This option is used to define whether or not Samba should
use SSL when connecting to the ldap server using
ads methods.
Rpc methods are not affected by this parameter. Please note, that
@@ -2960,10 +2960,10 @@
for more information on ldap ssl.
Default: This option is used to define whether or not Samba should
use SSL when connecting to the ldap server
This is NOT related to
Samba's previous SSL support which was enabled by specifying the
@@ -2974,8 +2974,8 @@
The ldap ssl can be set to one of
- two values:
Please note that this parameter does only affect rpc
@@ -2988,10 +2988,10 @@
for more information on ldap ssl ads.
Default: Specifies the base for all ldap suffixes and for storing the sambaDomain object.
The ldap suffix will be appended to the values specified for the ldap user suffix,
ldap group suffix, ldap machine suffix, and the
ldap idmap suffix. Each of these should be given only a DN relative to the
@@ -3000,17 +3000,17 @@
Example:
This parameter defines the number of seconds that Samba should use as timeout for LDAP operations.
Default:
This parameter specifies where users are added to the tree. If this parameter is unset,
the value of ldap suffix will be used instead. The suffix
string is pre-pended to the ldap suffix string so use a partial DN.
@@ -3018,10 +3018,10 @@
Example: This parameter controls whether Samba supports
level2 (read-only) oplocks on a share. Level2, or read-only oplocks allow Windows NT clients
that have an oplock on a file to downgrade from a read-write oplock
to a read-only oplock once a second client opens the file (instead
@@ -3041,10 +3041,10 @@
parameter must be set to Default: This parameter determines if nmbd(8) will produce Lanman announce
broadcasts that are needed by OS/2 clients in order for them to see
the Samba server in their browse list. This parameter can have three
values, Example: If Samba is set to produce Lanman announce
broadcasts needed by OS/2 clients (see the
lm announce parameter) then this
parameter defines the frequency in seconds with which they will be
@@ -3073,18 +3073,18 @@
Example: A boolean variable that controls whether all
printers in the printcap will be loaded for browsing by default.
See the printers section for
more details. Default: This option allows nmbd(8) to try and become a local master browser
on a subnet. If set to Setting this value to Default: This option specifies the directory where lock
files will be placed. The lock files are used to implement the
max connections option.
@@ -3110,10 +3110,10 @@
Example: This controls whether or not locking will be
performed by the server in response to lock requests from the
client. If Be careful about disabling locking either globally or in a
specific service, as lack of locking may result in data corruption.
- You should never need to set this parameter. No default This parameter has been made inoperative in Samba 3.0.24.
The functionality it contolled is now controlled by the parameter
lock spin time.
Default: The time in microseconds that smbd should
keep waiting to see if a failed lock request can
be granted. This parameter has changed in default
value from Samba 3.0.23 from 10 to 200. The associated
@@ -3142,36 +3142,36 @@
no longer used in Samba 3.0.24. You should not need
to change the value of this parameter. Default:
This option allows you to override the name of the Samba log file (also known as the debug file).
This option takes the standard substitutions, allowing you to have separate log files for each user or machine.
No default Example:
The value of the parameter (a astring) allows the debug level (logging level) to be specified in the
This parameter has been extended since the 2.2.x
series, now it allows to specify the debug level for multiple
debug classes. This is to give greater flexibility in the configuration
of the system. The following debug classes are currently implemented:
- Default: Default: Example:
This parameter specifies the local path to which the home directory will be
connected (see logon home) and is only used by NT
Workstations.
@@ -3181,10 +3181,10 @@
Example:
This parameter specifies the home directory location when a Win95/98 or NT Workstation logs into a Samba PDC.
It allows you to do
@@ -3215,10 +3215,10 @@
Example:
This parameter specifies the directory where roaming profiles (Desktop, NTuser.dat, etc) are
stored. Contrary to previous versions of these manual pages, it has nothing to do with Win 9X roaming
profiles. To find out how to handle roaming profiles for Win 9X system, see the
@@ -3240,8 +3240,8 @@
this parameter to \\%N\homes\profile_path will cause problems).
This option takes the standard substitutions, allowing you to have separate logon scripts for each user or machine.
-
- Do not quote the value. Setting this as “\\%N\profile\%U”
+
+ Do not quote the value. Setting this as “\\%N\profile\%U”
will break profile handling. Where the tdbsam or ldapsam passdb backend
is used, at the time the user account is created the value configured
for this parameter is written to the passdb backend and that value will
@@ -3262,10 +3262,10 @@
Default:
This parameter specifies the batch file ( Example: This parameter specifies the command to be
executed on the server host in order to stop printing or spooling
a specific print job. This command should be a program or script which takes
a printer name and job number to pause the print job. One way
@@ -3323,10 +3323,10 @@
Example: This controls how long lpq info will be cached
for to prevent the Example: This parameter specifies the command to be
executed on the server host in order to obtain This command should be a program or script which
takes a printer name as its only parameter and outputs printer
@@ -3364,10 +3364,10 @@
Example: This parameter specifies the command to be
executed on the server host in order to restart or continue
printing or spooling a specific print job. This command should be a program or script which takes
a printer name and job number to resume the print job. See
@@ -3380,10 +3380,10 @@
parameter is or if the value of the No default Example: This parameter specifies the command to be
executed on the server host in order to delete a print job. This command should be a program or script which takes
a printer name and job number, and deletes the print job. If a
Default:
If a Samba server is a member of a Windows NT Domain (see the security = domain parameter) then periodically a running smbd process will try and change
the MACHINE ACCOUNT PASSWORD stored in the TDB called Default:
This parameter specifies the name of a file which will contain output created by a magic script (see the
magic script parameter below).
- If two clients use the same If two clients use the same Default: Example: This parameter specifies the name of a file which,
if opened, will be executed by the server when the file is closed.
This allows a UNIX script to be sent to the Samba host and
executed on behalf of the connected user. Scripts executed in this way will be deleted upon
@@ -3444,23 +3444,23 @@
Example: This controls whether non-DOS names under UNIX
should be mapped to DOS-compatible names ("mangled") and made visible,
or whether non-DOS names should simply be ignored. See the section on name mangling for
- details on how to control the mangling process. If mangling is used then the mangling algorithm is as follows: The first (up to) five alphanumeric characters
+ details on how to control the mangling process. If mangling is used then the mangling algorithm is as follows: The first (up to) five alphanumeric characters
before the rightmost dot of the filename are preserved, forced
to upper case, and appear as the first (up to) five characters
- of the mangled name. A tilde "~" is appended to the first part of the mangled
+ of the mangled name. A tilde "~" is appended to the first part of the mangled
name, followed by a two-character unique sequence, based on the
original root name (i.e., the original filename minus its final
extension). The final extension is included in the hash calculation
only if it contains any upper case characters or is longer than three
characters. Note that the character to use may be specified using
the mangling char
- option, if you don't like '~'. Files whose UNIX name begins with a dot will be
+ option, if you don't like '~'. Files whose UNIX name begins with a dot will be
presented as DOS hidden files. The mangled name will be created as
for other filenames, but with the leading dot removed and "___" as
its extension regardless of actual original extension (that's three
@@ -3472,10 +3472,10 @@
from Windows/DOS and will retain the same basename. Mangled names
do not change between sessions. Default: controls the number of prefix
characters from the original name used when generating
the mangled names. A larger value will give a weaker
hash and therefore more name collisions. The minimum
@@ -3485,20 +3485,20 @@
Example: This controls what character is used as
the magic character in name mangling. The
default is a '~' but this may interfere with some software. Use this option to set
it to whatever you prefer. This is effective only when mangling method is hash. Default: Example: controls the algorithm used for the generating
the mangled names. Can take two different values, "hash" and
"hash2". "hash" is the algorithm that was used
used in Samba for many years and was the default in Samba 2.2.x "hash2" is
@@ -3509,10 +3509,10 @@
Example: This boolean parameter controls whether smbd(8) will attempt to map the 'inherit' and 'protected'
access control entry flags stored in Windows ACLs into an extended attribute
called user.SAMBA_PAI. This parameter only takes effect if Samba is being run
on a platform that supports extended attributes (Linux and IRIX so far) and
@@ -3520,10 +3520,10 @@
POSIX ACL mapping code.
Default:
This controls whether the DOS archive attribute
should be mapped to the UNIX owner execute bit. The DOS archive bit
is set when a file has been modified since its last backup. One
@@ -3536,26 +3536,26 @@
create mask for details.
Default:
This controls whether DOS style hidden files should be mapped to the UNIX world execute bit.
Note that this requires the create mask to be set such that the world execute
bit is not masked out (i.e. it must include 001). See the parameter create mask
for details.
- No default
This controls how the DOS read only attribute should be mapped from a UNIX filesystem.
This parameter can take three different values, which tell smbd(8) how to display the read only attribute on files, where either
store dos attributes is set to The three settings are :
+ The three settings are :
+
+
Default:
This controls whether DOS style system files should be mapped to the UNIX group execute bit.
Note that this requires the create mask to be set such that the group
@@ -3584,20 +3584,20 @@
create mask for details.
Default: This parameter is only useful in SECURITY =
security modes other than This parameter can take four different values, which tell
smbd(8) what to do with user
- login requests that don't match a valid UNIX user in some way. The four settings are : The four settings are : Example: This option allows the number of simultaneous connections to a service to be limited.
If Record lock files are used to implement this feature. The lock files will be stored in
@@ -3640,10 +3640,10 @@
Example: This option allows you to put an upper limit
on the apparent size of disks. If you set this option to 100
then all shares will appear to be not larger than 100 MB in
size. Note that this option does not limit the amount of
@@ -3657,10 +3657,10 @@
Example:
This option (an integer in kilobytes) specifies the max size the log file should grow to.
Samba periodically checks the size and if it is exceeded it will rename the file, adding
a Example: This option controls the maximum number of
outstanding simultaneous SMB operations that Samba tells the client
it will allow. You should never need to set this parameter. Default: This parameter limits the maximum number of
open files that one smbd(8) file
serving process may have open for a client at any one time. The
default for this parameter is set very high (10,000) as Samba uses
@@ -3687,38 +3687,38 @@
by the UNIX per-process file descriptor limit rather than
this parameter so you should never need to touch this parameter. Default: This parameter limits the maximum number of
jobs allowable in a Samba printer queue at any given moment.
If this number is exceeded, smbd(8) will remote "Out of Space" to the client.
Default: Example: The value of the parameter (a string) is the highest
- protocol level that will be supported by the server. Possible values are : The value of the parameter (a string) is the highest
+ protocol level that will be supported by the server. Possible values are : Normally this option should not be set as the automatic
negotiation phase in the SMB protocol takes care of choosing
the appropriate protocol. Default: Example:
This parameter limits the maximum number of jobs displayed in a port monitor for
Samba printer queue at any given moment. If this number is exceeded, the excess
jobs will not be shown. A value of zero means there is no limit on the number of
@@ -3727,10 +3727,10 @@
Example: This parameter limits the maximum number of smbd(8) processes concurrently running on a system and is intended
+ This parameter limits the maximum number of smbd(8) processes concurrently running on a system and is intended
as a stopgap to prevent degrading service to clients in the event that the server has insufficient
resources to handle more than this number of connections. Remember that under normal operating
conditions, each user will have an smbd(8) associated with him or her to handle connections to all
@@ -3738,10 +3738,10 @@
Example: This parameter limits the size in memory of any
Example: This option tells nmbd(8) what the default 'time to live'
of NetBIOS names should be (in seconds) when Default: This option tells smbd(8) when acting as a WINS server
(wins support = yes) what the maximum
'time to live' of NetBIOS names that Default: This option controls the maximum packet size
that will be negotiated by Samba. The default is 16644, which
matches the behavior of Windows 2000. A value below 2048 is likely to cause problems.
You should never need to change this parameter from its default value.
@@ -3780,10 +3780,10 @@
Example: This specifies what command to run when the
server receives a WinPopup style message. This would normally be a command that would
deliver the message somehow. How this is to be done is
up to your imagination. An example is:
@@ -3799,9 +3799,9 @@
The command takes the standard substitutions, although Apart from the standard substitutions, some additional
- ones apply. In particular: You could make this command send mail, or whatever else
takes your fancy. Please let us know of any really interesting
ideas you have.
@@ -3822,20 +3822,20 @@
Example: This sets the minimum amount of free disk
space that must be available before a user will be able to spool
a print job. It is specified in kilobytes. The default is 0, which
means a user can always spool a print job. Default: Example: The value of the parameter (a string) is the
lowest SMB protocol dialect than Samba will support. Please refer
to the max protocol
parameter for a list of valid protocol names and a brief description
@@ -3847,10 +3847,10 @@
Example: This option changes the behavior of smbd(8) when processing SMBwriteX calls. Any incoming
SMBwriteX call on a non-signed SMB/CIFS connection greater than this value will not be processed in the normal way but will
be passed to any underlying kernel recvfile or splice system call (if there is no such
call Samba will emulate in user space). This allows zero-copy writes directly from network
@@ -3859,19 +3859,19 @@
normal way. To enable POSIX large write support (SMB/CIFS writes up to 16Mb) this option must be
nonzero. The maximum value is 128k. Values greater than 128k will be silently set to 128k. Note this option will have NO EFFECT if set on a SMB signed connection. The default is zero, which diables this option. Default: This option tells nmbd(8)
when acting as a WINS server (wins support = yes) what the minimum 'time to live'
of NetBIOS names that Default: This parameter indicates that the share is a
stand-in for another CIFS share whose location is specified by
the value of the parameter. When clients attempt to connect to
this share, they are redirected to the proxied share using
@@ -3879,10 +3879,10 @@
msdfs root and host msdfs
options to find out how to set up a Dfs root share. No default Example: If set to Default: Specifies the number of seconds it takes before
entries in samba's hostname resolve cache time out. If
the timeout is set to 0. the caching is disabled.
Default: Example: This option is used by the programs in the Samba
suite to determine what naming services to use and in what order
to resolve host names to IP addresses. Its main purpose to is to
control how netbios name resolution is performed. The option takes a space
separated string of name resolution options. The options are: "lmhosts", "host",
"wins" and "bcast". They cause names to be
- resolved as follows:
+ resolved as follows:
+
Example: This is a list of NetBIOS names that nmbd will
advertise as additional names by which the Samba server is known. This allows one machine
to appear in browse lists under multiple names. If a machine is acting as a browse server
or logon server none of these names will be advertised as either browse server or logon
@@ -3947,10 +3947,10 @@
Example:
This sets the NetBIOS name by which a Samba server is known. By default it is the same as the first component
of the host's DNS name. If a machine is a browse server or logon server this name (or the first component of
the hosts DNS name) will be the name that these services are advertised under.
@@ -3963,17 +3963,17 @@
Example: This sets the NetBIOS scope that Samba will
operate under. This should not be set unless every machine
on your LAN also sets this value. Default: Get the home share server from a NIS map. For
UNIX systems that use an automounter, the user's home directory
will often be mounted on a workstation on demand from a remote
server. When the Samba logon server is not the actual home directory
@@ -3992,20 +3992,20 @@
NIS system and the Samba server with this option must also
be a logon server. Default: This boolean parameter controls whether smbd(8) will attempt to map
UNIX permissions into Windows NT access control lists. The UNIX
permissions considered are the the traditional UNIX owner and
group permissions, as well as POSIX ACLs set on any files or
directories. This parameter was formally a global parameter in
releases prior to 2.2.2. Default: This parameter determines whether or not smbd(8) will attempt to
authenticate users using the NTLM encrypted password response.
If disabled, either the lanman password hash or an NTLMv2 response
will need to be sent by the client. If this option, and Default: This boolean parameter controls whether
smbd(8) will allow Windows NT
clients to connect to the NT SMB specific Default: This boolean parameter controls whether smbd(8) will negotiate NT specific status
support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone.
If this option is set to You should not need to ever disable this parameter. Default: Allow or disallow client access to accounts that have null passwords. See also smbpasswd(5). Default: Allow or disallow client access to accounts that have null passwords. See also smbpasswd(5). Default: When Samba 3.0 is configured to enable PAM support
(i.e. --with-pam), this parameter will control whether or not Samba
should obey PAM's account and session management directives. The
default behavior is to use PAM for clear text authentication only
@@ -4049,10 +4049,10 @@
authentication mechanism needed in the presence of SMB password encryption.
Default: This is a boolean option that controls whether
connections with usernames not in the Default:
This is a tuning parameter added due to bugs in both Windows 9x and WinNT. If Samba responds to a client too
quickly when that client issues an SMB that can cause an oplock break request, then the network client can
fail and not respond to the break request. This tuning parameter (which is set in milliseconds) is the amount
of time Samba will wait before sending an oplock break request to such (broken) clients.
-
+
DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.
Default:
This is a very advanced smbd(8) tuning option to improve the efficiency of the
granting of oplocks under multiple client contention for the same file.
@@ -4088,14 +4088,14 @@
approximate number of clients contending for an oplock on the same file goes over this
limit. This causes
+
DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ AND UNDERSTOOD THE SAMBA OPLOCK CODE.
Default:
This boolean option tells Default: The parameter is used to define the absolute
path to a file containing a mapping of Windows NT printer driver
names to OS/2 printer driver names. The format is: <nt driver name> = <os2 driver name>.<device name> For example, a valid entry using the HP LaserJet 5
printer driver would appear as Default: With the addition of better PAM support in Samba 2.2,
this parameter, it is possible to use PAM's password change control
flag for Samba. If enabled, then PAM will be used for password
changes when requested by an SMB client instead of the program listed in
@@ -4157,20 +4157,20 @@
It should be possible to enable this without changing your
passwd chat parameter for most setups. Default: Some version of NT 4.x allow non-guest
users with a bad passowrd. When this option is enabled, samba will not
use a broken NT 4.x server as password server, but instead complain
to the logs and exit.
@@ -4178,19 +4178,19 @@
this check, which involves deliberatly attempting a
bad logon to the remote server. Default: This option allows the administrator to chose which backend
will be used for storing user and possibly group information. This allows
you to swap between different storage mechanisms without recompile. The parameter value is divided into two parts, the backend's name, and a 'location'
string that has meaning only to that particular backed. These are separated
by a : character. Available backends can include:
- LDAP connections should be secured where possible. This may be done using either
Start-TLS (see ldap ssl) or by
@@ -4214,19 +4214,19 @@
passdb backend = ldapsam:"ldap://ldap-1.example.com ldap-2.example.com"
Default:
This parameter controls whether Samba substitutes %-macros in the passdb fields if they are explicitly set. We
used to expand macros here, but this turned out to be a bug because the Windows client can expand a variable
%G_osver% in which %G would have been substituted by the user's primary group.
Default: This boolean specifies if the passwd chat script
parameter is run in debug mode. In this mode the
strings passed to and received from the passwd chat are printed
in the smbd(8) log with a
@@ -4239,18 +4239,18 @@
pam password change
parameter is set. This parameter is off by default. Default: This integer specifies the number of seconds smbd will wait for an initial
answer from a passwd chat script being run. Once the initial answer is received
the subsequent answers must be received in one tenth of this time. The default it
two seconds. Default: This string controls the "chat"
conversation that takes places between smbd(8) and the local password changing
program to change the user's password. The string describes a
sequence of response-receive pairs that smbd(8) uses to determine what to send to the
@@ -4281,10 +4281,10 @@
Example: The name of a program that can be used to set
UNIX user passwords. Any occurrences of Also note that many passwd programs insist in reasonable
@@ -4305,10 +4305,10 @@
Example: Some client/server combinations have difficulty
with mixed-case passwords. One offending client is Windows for
Workgroups, which for some reason forces passwords to upper
case when using the LANMAN1 protocol, but leaves them alone when
@@ -4330,10 +4330,10 @@
Example: By specifying the name of another SMB server
or Active Directory domain controller with this option,
and using The password server must be a machine capable of using
the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in
- user level security mode. Using a password server means your UNIX box (running
+ user level security mode. Using a password server means your UNIX box (running
Samba) is only as secure as your password server. DO NOT
CHOOSE A PASSWORD SERVER THAT YOU DON'T COMPLETELY TRUST.
Never point a Samba server at itself for password serving.
@@ -4377,13 +4377,13 @@
this list by locating the closest DC. If the You may list several password servers in
+ suffer from: You may list several password servers in
the If you are using a Windows NT server as your
+ mode and cannot be fixed in Samba. If you are using a Windows NT server as your
password server then you will have to ensure that your users
are able to login from the Samba server, as when in Example: This parameter specifies a directory to which
the user of the service is to be given access. In the case of
printable services, this is where print data will spool prior to
being submitted to the host for printing. For a printable service offering guest access, the service
@@ -4416,19 +4416,19 @@
Example:
This option specifies the directory where pid files will be placed.
Default: Example:
The smbd(8)
daemon maintains an database of file locks obtained by SMB clients. The default behavior is
to map this internal database to POSIX locks. This means that file locks obtained by SMB clients are
@@ -4436,10 +4436,10 @@
method (e.g. NFS or local file access). You should never need to disable this parameter.
Default: This option specifies a command to be run
whenever the service is disconnected. It takes the usual
substitutions. The command may be run as the root on some
systems. An interesting example may be to unmount server
@@ -4447,21 +4447,21 @@
Example:
This boolean option controls whether a non-zero return code from preexec
should close the service being connected to.
Default: This option specifies a command to be run whenever
the service is connected to. It takes the usual substitutions. An interesting example is to send the users a welcome
message every time they log in. Maybe a message of the day? Here
is an example:
@@ -4473,13 +4473,13 @@
Example:
This boolean parameter controls if nmbd(8) is a preferred master browser for its workgroup.
If this is set to Default: This is a list of paths to modules that should
be loaded into smbd before a client connects. This improves
the speed of smbd when reacting to new connections somewhat. Default: Example: This is a list of services that you want to be
automatically added to the browse lists. This is most useful
for homes and printers services that would otherwise not be
visible.
@@ -4519,33 +4519,33 @@
Example:
This controls if new filenames are created with the case that the client passes, or if
they are forced to be the default case.
See the section on NAME MANGLING for a fuller discussion.
Default: If this parameter is Note that a printable service will ALWAYS allow writing
to the service path (user privileges permitting) via the spooling
of print data. The read only parameter controls only non-printing access to
the resource. Default: This option specifies the number of seconds before the printing
subsystem is again asked for the known printers. If the value
is greater than 60 the initial waiting time is set to 60 seconds
to allow an earlier first rescan of the printing subsystem.
@@ -4555,13 +4555,13 @@
Example:
This parameter may be used to override the compiled-in default printcap name used by the server (usually
@@ -4589,17 +4589,17 @@
where the '|' separates aliases of a printer. The fact that the second alias has a space in
it gives a hint to Samba that it's a comment.
-
+
Under AIX the default printcap name is Default: Example: After a print job has finished spooling to
a service, this command will be used via a No default Example:
This lists users who can do anything to printers
via the remote administration interfaces offered
by MS-RPC (usually using a NT workstation).
@@ -4660,13 +4660,13 @@
Example:
This parameter specifies the name of the printer to which print jobs spooled through a printable service
will be sent.
@@ -4679,10 +4679,10 @@
Example: This parameters controls how printer status information is
interpreted on your system. It also affects the default values for
the Currently nine printing styles are supported. They are
@@ -4699,27 +4699,27 @@
[printers] section. Default: This parameter specifies which user information will be
passed to the printing system. Usually, the username is sent,
but in some cases, e.g. the domain prefix is useful, too. Default: Example: This parameters defines the directory
smbd will use for storing such files as Default:
This boolean parameter was added to fix the problems that people have been
having with storing user profiles on Samba shares from Windows 2000 or
Windows XP clients. New versions of Windows 2000 or Windows XP service
@@ -4747,10 +4747,10 @@
tree to the owning user.
Default: This parameter specifies the command to be
executed on the server host in order to pause the printer queue. This command should be a program or script which takes
a printer name as its only parameter and stops the printer queue,
such that no longer jobs are submitted to the printer. This command is not supported by Windows for Workgroups,
@@ -4761,10 +4761,10 @@
path in the command as the PATH may not be available to the
server. No default Example: This parameter specifies the command to be
executed on the server host in order to resume the printer queue. It
is the command to undo the behavior that is caused by the
previous parameter (queuepause command). This command should be a program or script which takes
@@ -4779,10 +4779,10 @@
Example:
This is a list of users that are given read-only access to a service. If the connecting user is in this list
then they will not be given write access, no matter what the read only option is set
to. The list can include group names using the syntax described in the invalid users
@@ -4792,19 +4792,19 @@
Example: An inverted synonym is writeable. If this parameter is Note that a printable service ( Default: This parameter controls whether or not the server
will support the raw read SMB requests when transferring data
to clients. If enabled, raw reads allow reads of 65535 bytes in
one packet. This typically provides a major performance benefit.
@@ -4813,20 +4813,20 @@
sizes, and for these clients you may need to disable raw reads. In general this parameter should be viewed as a system tuning
tool and left severely alone. Default: This option specifies the kerberos realm to use. The realm is
used as the ADS equivalent of the NT4 Default: Example:
This turns on or off support for share definitions read from
registry. Shares defined in smb.conf take
precedence over shares with the same name defined in
@@ -4841,10 +4841,10 @@
Example:
This option allows you to setup nmbd(8) to periodically announce itself
to arbitrary IP addresses with an arbitrary workgroup name.
@@ -4868,10 +4868,10 @@
See the chapter on Network Browsing in the Samba-HOWTO book.
Default:
This option allows you to setup nmbd(8) to periodically request
synchronization of browse lists with the master browser of a Samba
server that is on a remote segment. This option will allow you to
@@ -4903,17 +4903,17 @@
each network has its own WINS server.
Default:
This is the full pathname to a script that will be run as root by smbd(8) under special circumstances described below.
When a user with admin authority or SeAddUserPrivilege rights renames a user (e.g.: from the NT4 User Manager
for Domains), this script will be run to rename the POSIX user. Two variables,
+
The script has all responsibility to rename all the necessary data that is accessible in this posix method.
This can mean different requirements for different backends. The tdbsam and smbpasswd backends will take care
of the contents of their respective files, so the script is responsible only for changing the POSIX username, and
@@ -4924,10 +4924,10 @@
needs to change for other applications using the same directory.
Default:
This boolean option controls whether an incoming session setup
should kill other connections coming from the same IP. This matches
the default Windows 2003 behaviour.
@@ -4946,10 +4946,10 @@
Default: The setting of this parameter determines whether user and
group list information is returned for an anonymous connection.
and mirrors the effects of the
+
The security advantage of using restrict anonymous = 2 is removed
by setting guest ok = yes on any share.
Default: The server will Example:
This is the same as the Default: This is the same as the Default:
This is the same as the Default:
This parameter controls what UNIX permission bits will be set when a Windows NT client is manipulating the
UNIX permission on a file using the native NT security dialog box.
@@ -5050,10 +5050,10 @@
Example: This option affects how clients respond to
Samba and is one of the most important settings in the The option sets the "security mode bit" in replies to
protocol negotiations with smbd(8) to turn share level security on or off. Clients decide
@@ -5092,19 +5092,19 @@
in share level security, A list of possible UNIX usernames to match with the given
- client password is constructed using the following methods : If the guest only parameter is set, then all the other
+ client password is constructed using the following methods : If the guest only parameter is set, then all the other
stages are missed and only the guest account username is checked.
- Is a username is sent with the share connection
+ Is a username is sent with the share connection
request, then this username (after mapping - see username map),
is added as a potential username.
- If the client did a previous logon
+ If the client did a previous logon
request (the SessionSetup SMB call) then the
username sent in this SMB will be added as a potential username.
- The name of the service the client requested is
+ The name of the service the client requested is
added as a potential username.
- The NetBIOS name of the client is added to
+ The NetBIOS name of the client is added to
the list as a potential username.
- Any users on the user list are added as potential usernames.
+ Any users on the user list are added as potential usernames.
If the This mode of operation has
+ This mode of operation has
significant pitfalls since it is more vulnerable to
man-in-the-middle attacks and server impersonation. In particular,
this mode of operation can cause significant resource consuption on
@@ -5158,7 +5158,7 @@
of the user's session. Furthermore, if this connection is lost,
there is no way to reestablish it, and futher authentications to the
Samba server may fail (from a single client, till it disconnects).
- From the client's point of
+ From the client's point of
view, Example:
This controls whether the server offers or even demands the use of the netlogon schannel.
server schannel = no does not offer the schannel, server schannel = auto offers the schannel but does not enforce it, and server schannel = yes denies access if the client is not able to speak netlogon schannel.
This is only the case for Windows NT4 before SP4.
@@ -5191,20 +5191,20 @@
Example: This controls whether the client is allowed or required to use SMB signing. Possible values
are auto, mandatory
and disabled.
When set to auto, SMB signing is offered, but not enforced.
When set to mandatory, SMB signing is required and if set
to disabled, SMB signing is not offered either. Default: This controls what string will show up in the printer comment box in print
manager and next to the IPC connection in It also sets what will appear in browse lists next
to the machine name. A Example:
If
@@ -5225,10 +5225,10 @@
for details.
Default: Thanks to the Posix subsystem in NT a Windows User has a
primary group in addition to the auxiliary groups. This script
sets the primary group in the unix userdatase when an
administrator sets the primary group from the windows user
@@ -5240,23 +5240,23 @@
Example: The This option is only available if Samba was configured with the argument This parameter should specify the path to a script that
- can set quota for the specified arguments. The specified script should take the following arguments: 1 - quota type
- 1 - user quotas 2 - user default quotas (uid = -1) 3 - group quotas 4 - group default quotas (gid = -1) 2 - id (uid for user, gid for group, -1 if N/A) 3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce) 4 - block softlimit 5 - block hardlimit 6 - inode softlimit 7 - inode hardlimit 8(optional) - block size, defaults to 1024 The script should output at least one line of data on success. And nothing on failure. Default: The specified script should take the following arguments: 1 - quota type
+ 1 - user quotas 2 - user default quotas (uid = -1) 3 - group quotas 4 - group default quotas (gid = -1) 2 - id (uid for user, gid for group, -1 if N/A) 3 - quota state (0 = disable, 1 = enable, 2 = enable and enforce) 4 - block softlimit 5 - block hardlimit 6 - inode softlimit 7 - inode hardlimit 8(optional) - block size, defaults to 1024 The script should output at least one line of data on success. And nothing on failure. Default: Example: This enables or disables the honoring of
the This is a deprecated option from old versions of
@@ -5268,20 +5268,20 @@
by default. You should NEVER turn this parameter
off as many Windows applications will break if you do so. Default:
This boolean parameter controls if new files which conform to 8.3 syntax, that is all in upper case and of
suitable length, are created upper case, or if they are forced to be the default case.
This option can be use with preserve case = yes to permit long filenames
to retain their case, while short names are lowered.
See the section on NAME MANGLING. Default: With the introduction of MS-RPC based printing support
for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will
appear on Samba hosts in the share listing. Normally this folder will
contain an icon for the MS Add Printer Wizard (APW). However, it is
@@ -5296,21 +5296,21 @@
icon will not be displayed. Disabling the This does not prevent the same user from having
+ This does not prevent the same user from having
administrative privilege on an individual printer. Default: This a full path name to a script called by
smbd(8) that should
start a shutdown procedure. If the connected user posseses the The %z %t %r %f variables are expanded as follows: The %z %t %r %f variables are expanded as follows: Shutdown script example:
Example: This is a new feature introduced with Samba 3.2 and above. It is an
extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions.
SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt
and sign every request/response in a SMB protocol stream. When
@@ -5359,10 +5359,10 @@
When set to mandatory, SMB encryption is required and if set
to disabled, SMB encryption can not be negotiated. Default: This option sets the path to the encrypted smbpasswd file. By
default the path to the smbpasswd file is compiled into Samba.
An example of use is:
Default: This option allows you to control what
address Samba will listen for connections on. This is used to
support multiple virtual interfaces on the one server, each
with a different configuration. Setting this option should never be necessary on usual Samba
@@ -5387,10 +5387,10 @@
Example: This option allows you to set socket options
to be used when talking with the client. Socket options are controls on the networking layer
of the operating systems which allow the connection to be
tuned. This option will typically be used to tune your Samba server
@@ -5406,7 +5406,7 @@
send the patch to
samba-technical@samba.org. Any of the supported socket options may be combined
in any way you like, as long as your OS allows it. This is the list of socket options currently settable
- using this option: SO_KEEPALIVE SO_REUSEADDR SO_BROADCAST TCP_NODELAY IPTOS_LOWDELAY IPTOS_THROUGHPUT SO_SNDBUF * SO_RCVBUF * SO_SNDLOWAT * SO_RCVLOWAT * Those marked with a '*' take an integer
+ using this option: SO_KEEPALIVE SO_REUSEADDR SO_BROADCAST TCP_NODELAY IPTOS_LOWDELAY IPTOS_THROUGHPUT SO_SNDBUF * SO_RCVBUF * SO_SNDLOWAT * SO_RCVLOWAT * Those marked with a '*' take an integer
argument. The others can optionally take a 1 or 0 argument to enable
or disable the option, by default they will be enabled if you
don't specify 1 or 0. To specify an argument use the syntax SOME_OPTION = VALUE
@@ -5418,17 +5418,17 @@
Example: This parameter determines if smbd(8) will use a cache in order to
speed up case insensitive name mappings. You should never need
to change this parameter. Default:
If this parameter is set Samba attempts to first read DOS attributes (SYSTEM, HIDDEN, ARCHIVE or
READ-ONLY) from a filesystem extended attribute, before mapping DOS attributes to UNIX permission bits (such
as occurs with map hidden and map readonly). When set, DOS
@@ -5440,10 +5440,10 @@
extended attributes to work, also extended attributes must be compiled into the Linux kernel.
Default: This is a boolean that controls the handling of
disk space allocation in the server. When this is set to Default:
This is an enumerated type that controls the handling of file locking in the server. When this is set to Default: Many Windows applications (including the Windows 98 explorer
shell) seem to confuse flushing buffer contents to disk with doing
a sync to disk. Under UNIX, a sync call forces the process to be
suspended until the kernel has ensured that all outstanding data in
@@ -5491,10 +5491,10 @@
addition, this fixes many performance problems that people have
reported with the new Windows98 explorer shell file copies. Default: This option defines a list of init scripts that smbd
will use for starting and stopping Unix services via the Win32
ServiceControl API. This allows Windows administrators to
utilize the MS Management Console plug-ins to manage a
@@ -5507,10 +5507,10 @@
Example: This is a boolean parameter that controls
whether writes will always be written to stable storage before
the write call returns. If this is Default:
If this parameter is set then Samba debug messages are logged into the system
syslog only, and not to the debug log files. There still will be some
logging to log.[sn]mbd even if syslog only is enabled.
Default:
This parameter maps how Samba debug messages are logged onto the system syslog logging levels.
Samba debug level zero maps onto syslog Default: When filling out the user information for a Windows NT
user, the winbindd(8) daemon uses this
parameter to fill in the home directory for that user. If the
string Default: When filling out the user information for a Windows NT
user, the winbindd(8) daemon uses this
- parameter to fill in the login shell for that user. No default This parameter is a setting in minutes to add
to the normal GMT to local time conversion. This is useful if
you are serving a lot of PCs that have incorrect daylight
saving time handling. Default: Example: This parameter determines if nmbd(8) advertises itself as a time server to Windows
clients. Default: Specifies the charset the unix machine
Samba runs on uses. Samba needs to know this in order to be able to
convert text to the charsets other SMB clients use.
This is also the charset Samba will use when specifying arguments
@@ -5588,20 +5588,23 @@
Example: This boolean parameter controls whether Samba
implements the CIFS UNIX extensions, as defined by HP.
These extensions enable Samba to better serve UNIX CIFS clients
by supporting features such as symbolic links, hard links, etc...
These extensions require a similarly enabled client, and are of
- no current use to Windows clients. Default:
+ Note if this parameter is turned on, the wide links
+ parameter will automatically be disabled.
+ Default: This boolean parameter controls whether Samba
attempts to synchronize the UNIX password with the SMB password
when the encrypted SMB password in the smbpasswd file is changed.
If this is set to Default:
This boolean parameter allows a user logging on with a plaintext password to have their encrypted (hashed)
password in the smbpasswd file to be updated automatically as they log on. This option allows a site to
migrate from plaintext password authentication (users authenticate with plaintext password over the
@@ -5631,10 +5634,10 @@
passwords.
Default: This parameter applies only to Windows NT/2000
clients. It has no effect on Windows 95/98/ME clients. When
serving a printer to Windows NT/2000 clients without first installing
a valid printer driver on the Samba host, the client will be required
@@ -5659,10 +5662,10 @@
on a print share which has valid print driver installed on the Samba
server. Default:
Specifies whether Samba should attempt to maintain service principals in the systems
keytab file for
@@ -5674,10 +5677,10 @@
Default: This global parameter determines if the tdb internals of Samba can
depend on mmap working correctly on the running system. Samba requires a coherent
mmap/read-write system memory cache. Currently only HPUX does not have such a
coherent cache, and so this parameter is set to Default: This option helps Samba to try and 'guess' at
the real UNIX username, as many DOS clients send an all-uppercase
username. By default Samba tries all lowercase, followed by the
username with the first letter capitalized, and fails if the
@@ -5704,10 +5707,10 @@
Example: This script is a mutually exclusive alternative to the
username map parameter. This parameter
specifies and external program or script that must accept a single
command line option (the username transmitted in the authentication
@@ -5718,10 +5721,10 @@
Example:
This option allows you to specify a file containing a mapping of usernames from the clients to the server.
This can be used for several purposes. The most common is to map usernames that users use on DOS or Windows
machines to those that the UNIX box uses. The other is to map multiple users to a single username so that they
@@ -5805,16 +5808,16 @@
Default: Multiple users may be specified in a comma-delimited
list, in which case the supplied password will be tested against
each username in turn (left to right). The Example: This parameter controls whether user defined shares are allowed
to be accessed by non-authenticated users or not. It is the equivalent
of allowing people who can create a share the option of setting
Default: This parameter specifies the number of user defined shares
that are allowed to be created by users belonging to the group owning the
usershare directory. If set to zero (the default) user defined shares are ignored.
Default: This parameter controls whether the pathname exported by
a user defined shares must be owned by the user creating the
user defined share or not. If set to True (the default) then
smbd checks that the directory path being shared is owned by
@@ -5883,10 +5886,10 @@
regardless of who owns it.
Default: This parameter specifies the absolute path of the directory on the
filesystem used to store the user defined share definition files.
This directory must be owned by root, and have no access for
other, and be writable only by the group owner. In addition the
@@ -5907,10 +5910,10 @@
In this case, only members of the group "power_users" can create user defined shares.
Default: This parameter specifies a list of absolute pathnames
the root of which are allowed to be exported by user defined share definitions.
If the pathname to be exported doesn't start with one of the strings in this
list, the user defined share will not be allowed. This allows the Samba
@@ -5925,10 +5928,10 @@
Example: This parameter specifies a list of absolute pathnames
the root of which are NOT allowed to be exported by user defined share definitions.
If the pathname exported starts with one of the strings in this
list the user defined share will not be allowed. Any pathname not
@@ -5944,10 +5947,10 @@
Example: User defined shares only have limited possible parameters
such as path, guest ok, etc. This parameter allows usershares to
"cloned" from an existing share. If "usershare template share"
is set to the name of an existing share, then all usershares
@@ -5962,10 +5965,10 @@
Example: If this parameter is Default: This variable controls controls whether samba will try
to use Simple and Protected NEGOciation (as specified by rfc2478) with
WindowsXP and Windows2000 clients to agree upon an authentication mechanism.
@@ -5985,10 +5988,10 @@
implementation, there is no reason this should ever be
disabled. Default: This parameter is only available if Samba has
been configured and compiled with the option Example:
This boolean parameter is only available if Samba has been configured and compiled
with the option Default:
This is a list of users that should be allowed to login to this service. Names starting with
'@', '+' and '&' are interpreted using the same rules as described in the
Example: This parameter indicates whether a share is
valid and thus can be used. When this parameter is set to false,
the share will be in no way visible nor accessible.
@@ -6046,10 +6049,10 @@
Samba uses this option internally to mark shares as deleted.
Default:
This is a list of files and directories that are neither visible nor accessible. Each entry in
the list must be separated by a '/', which allows spaces to be included in the entry. '*' and '?'
can be used to specify multiple files or directories as in DOS wildcards.
@@ -6080,10 +6083,10 @@
Default:
This parameter is only valid when the oplocks
parameter is turned on for a share. It allows the Samba administrator
to selectively turn off the granting of oplocks on selected files that
@@ -6104,42 +6107,47 @@
Default: This parameter specifies the backend names which
are used for Samba VFS I/O operations. By default, normal
disk I/O operations are used but these can be overloaded
with one or more VFS objects. Default: Example: This allows you to override the volume label
returned for a share. Useful for CDROMs with installation programs
that insist on a particular volume label. Default: This parameter controls whether or not links
in the UNIX file system may be followed by the server. Links
that point to areas within the directory tree exported by the
server are always allowed; this parameter controls access only
- to areas that are outside the directory tree being exported. Note that setting this parameter can have a negative
- effect on your server performance due to the extra system calls
- that Samba has to do in order to perform the link checks. Default: Note: Turning this parameter on when UNIX extensions are enabled
+ will allow UNIX clients to create symbolic links on the share that
+ can point to files or directories outside restricted path exported
+ by the share definition. This can cause access to areas outside of
+ the share. Due to this problem, this parameter will be automatically
+ disabled (with a message in the log file) if the
+ unix extensions option is on.
+ Default: This parameter specifies the number of
seconds the winbindd(8) daemon will cache
user and group information before querying a Windows NT server
again.
@@ -6147,36 +6155,36 @@
evaluated in real time unless the winbind offline logon option has been enabled.
Default: On large installations using winbindd(8) it may be necessary to suppress
the enumeration of groups through the Turning off group enumeration may cause some programs to behave oddly. Default: Turning off group enumeration may cause some programs to behave oddly. Default: On large installations using winbindd(8) it may be
necessary to suppress the enumeration of users through the Turning off user
+ will not return any data. Turning off user
enumeration may cause some programs to behave oddly. For
example, the finger program relies on having access to the
full user list when searching for matching
usernames. Default: This option controls the maximum depth that winbindd
will traverse when flattening nested group memberships
of Windows domain groups. This is different from the
winbind nested groups option
@@ -6188,10 +6196,10 @@
must perform the group unrolling and will be unable to answer
incoming NSS or authentication requests during this time. Default: If set to yes, this parameter activates the support for nested
groups. Nested groups are also called local groups or
aliases. They work like their counterparts in Windows: Nested
groups are defined locally on any machine (they are shared
@@ -6199,10 +6207,10 @@
global groups from any trusted SAM. To be able to use nested
groups, you need to run nss_winbind. Default: This parameter controls whether winbindd will replace
whitespace in user and group names with an underscore (_) character.
For example, whether the name "Space Kadet" should be
replaced with the string "space_kadet".
@@ -6216,23 +6224,23 @@
version. Please refer to the manpage for the configured
idmap and nss_info plugin for the specifics on how to configure
name aliasing for a specific configuration. Name aliasing takes
- precendence (and is mutually exclusive) over the whitespace
+ precedence (and is mutually exclusive) over the whitespace
replacement mechanism discussed previsouly.
Default: Example: This parameter is designed to control how Winbind retrieves Name
Service Information to construct a user's home directory and login shell.
Currently the following settings are available:
- Example: This parameter is designed to control whether Winbind should
allow to login with the Example: This parameter specifies the number of
seconds the winbindd(8) daemon will wait between
attempts to contact a Domain controller for a domain that is
determined to be down or not contactable. Default: This parameter is designed to control whether Winbind should refresh Kerberos Tickets
retrieved using the Default: Example:
Setting this parameter to Default: This parameter allows an admin to define the character
used when listing a username of the form of Example:
This parameter is designed to allow Samba servers that are members
of a Samba controlled domain to use UNIX accounts distributed via NIS,
rsync, or LDAP as the uid's for winbindd users in the hosts primary domain.
@@ -6313,10 +6321,10 @@
Refer to the idmap_nss(8) man page for more information.
Default: This parameter specifies whether the
winbindd(8) daemon should operate on users
without domain component in their username. Users without a domain
component are treated as is part of the winbindd server's own
@@ -6326,48 +6334,48 @@
Example: When Samba is running as a WINS server this
allows you to call an external program for all changes to the
WINS database. The primary use for this option is to allow the
dynamic update of external name resolution databases such as
dynamic DNS. The wins hook parameter specifies the name of a script
- or executable that will be called as follows: The first argument is the operation and is
+ or executable that will be called as follows: The first argument is the operation and is
one of "add", "delete", or
"refresh". In most cases the operation
can be ignored as the rest of the parameters
provide sufficient information. Note that
"refresh" may sometimes be called when
the name has not previously been added, in that
- case it should be treated as an add. The second argument is the NetBIOS name. If the
+ case it should be treated as an add. The second argument is the NetBIOS name. If the
name is not a legal name then the wins hook is not called.
Legal names contain only letters, digits, hyphens, underscores
- and periods. The third argument is the NetBIOS name
- type as a 2 digit hexadecimal number. The fourth argument is the TTL (time to live)
- for the name in seconds. The fifth and subsequent arguments are the IP
+ and periods. The third argument is the NetBIOS name
+ type as a 2 digit hexadecimal number. The fourth argument is the TTL (time to live)
+ for the name in seconds. The fifth and subsequent arguments are the IP
addresses currently registered for that name. If this list is
empty then the name should be deleted. An example script that calls the BIND dynamic DNS update
program No default This is a boolean that controls if nmbd(8) will respond to broadcast name
queries on behalf of other hosts. You may need to set this
to Default: This specifies the IP address (or DNS name: IP
address for preference) of the WINS server that nmbd(8) should register with. If you have a WINS server on
your network then you should set this to the WINS server's IP. You should point this at your WINS server if you have a
multi-subnetted network. If you want to work in multiple namespaces, you can
give every wins server a 'tag'. For each tag, only one
(working) server will be queried for a name. The tag should be
separated from the ip address by a colon.
- You need to set up Samba to point
+ You need to set up Samba to point
to a WINS server if you have multiple subnets and wish cross-subnet
browsing to work correctly. See the chapter in the Samba3-HOWTO on Network Browsing. Default: Example: This boolean controls if the nmbd(8) process in Samba will act as a WINS server. You should
not set this to Default: This controls what workgroup your server will
appear to be in when queried by clients. Note that this parameter
also controls the Domain name used with
the security = domain
@@ -6399,18 +6407,18 @@
Example: If this integer parameter is set to non-zero value,
Samba will create an in-memory cache for each oplocked file
(it does not do this for
non-oplocked files). All writes that the client does not request
@@ -6428,10 +6436,10 @@
Example:
This is a list of users that are given read-write access to a service. If the
connecting user is in this list then they will be given write access, no matter
what the read only option is set to. The list can
@@ -6446,17 +6454,17 @@
Example: This parameter controls whether or not the server
will support raw write SMB's when transferring data from clients.
You should never need to change this parameter. Default:
This parameter is only available if Samba has been configured and compiled with the option Example:
Although the configuration file permits service names to contain spaces, your client software may not.
Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility.
@@ -6481,8 +6489,8 @@
for an administrator easy, but the various combinations of default attributes can be tricky. Take extreme
care when designing these sections. In particular, ensure that the permissions on spool directories are
correct.
-
- samba(7), smbpasswd(8), swat(8), smbd(8), nmbd(8), smbclient(1), nmblookup(1), testparm(1), testprns(1).
+ samba(7), smbpasswd(8), swat(8), smbd(8), nmbd(8), smbclient(1), nmblookup(1), testparm(1), testprns(1).
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbcontrol.1.html samba-3.3.11//docs/htmldocs/manpages/smbcontrol.1.html
--- samba-3.3.10//docs/htmldocs/manpages/smbcontrol.1.html 2010-01-14 11:21:11.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbcontrol.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,5 +1,5 @@
- smbcontrol — send messages to smbd, nmbd or winbindd processes This tool is part of the samba(7) suite. Print a summary of command line options.
+ smbcontrol — send messages to smbd, nmbd or winbindd processes This tool is part of the samba(7) suite. Print a summary of command line options.
The file specified contains the
configuration details required by the server. The
information in this file includes server-specific
@@ -22,7 +22,7 @@
If a single process ID is given, the message is sent
to only that process. Type of message to send. See
the section any parameters required for the message-type Available message types are: Order smbd to close the client
+ any parameters required for the message-type Available message types are: Order smbd to close the client
connections to the named share. Note that this doesn't affect client
connections to any other shares. This message-type takes an argument of the
share name for which client connections will be closed, or the
@@ -57,7 +57,7 @@
Note that this message only sends notification that an
event has occured. It doesn't actually cause the
event to happen.
- This message can only be sent to Order smbd to synchronise sam database from PDC (being BDC). Can only be sent to Not working at the moment Send sam replication message, with specified serial. Can only be sent to Set a mark for dmalloc. Can be sent to both smbd and nmbd. Only available if samba is built with dmalloc support.
+ This message can only be sent to Order smbd to synchronise sam database from PDC (being BDC). Can only be sent to Not working at the moment Send sam replication message, with specified serial. Can only be sent to Set a mark for dmalloc. Can be sent to both smbd and nmbd. Only available if samba is built with dmalloc support.
Dump the pointers that have changed since the mark set by dmalloc-mark.
Can be sent to both smbd and nmbd. Only available if samba is built with dmalloc support. Shut down specified daemon. Can be sent to both smbd and nmbd. Print a human-readable description of all
talloc(pool) memory usage by the specified daemon/process. Available
@@ -65,8 +65,8 @@
to update their local version of the driver. Can only be
sent to smbd. Force daemon to reload smb.conf configuration file. Can be sent
to The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbcquotas.1.html samba-3.3.11//docs/htmldocs/manpages/smbcquotas.1.html
--- samba-3.3.10//docs/htmldocs/manpages/smbcquotas.1.html 2010-01-14 11:21:12.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbcquotas.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,4 +1,4 @@
- smbcquotas — Set or get QUOTAs of NTFS 5 shares This tool is part of the samba(7) suite. The The following options are available to the Specifies the user of whom the quotas are get or set.
+ smbcquotas — Set or get QUOTAs of NTFS 5 shares This tool is part of the samba(7) suite. The The following options are available to the Specifies the user of whom the quotas are get or set.
By default the current user's username will be used. Lists all quota records of the share. Show the share quota status and default limits. This command sets/modifies quotas for a user or on the share,
depending on the QUOTA_SET_COMMAND parameter which is described later. This option displays all QUOTA information in numeric
format. The default is to convert SIDs to names and QUOTA limits
@@ -40,6 +40,8 @@
be silently ingnored and no password will be used.
Try to authenticate with kerberos. Only useful in
an Active Directory environment.
+
+Try to use the credentials cached by winbind.
This option allows
you to specify a file from which to read the username and
password used in the connection. The format of the file is
@@ -62,7 +64,7 @@
many systems the command line of a running process may be seen
via the The format of an the QUOTA_SET_COMMAND is an operation
name followed by a set of parameters specific to that operation.
To set user quotas for the user specified by -u or for the
current username: All limits are specified as a number of bytes. The All limits are specified as a number of bytes. The If the operation succeeded, smbcquotas returns an exit
status of 0. If smbd — server to provide SMB/CIFS services to clients This program is part of the samba(7) suite. smbd — server to provide SMB/CIFS services to clients This program is part of the samba(7) suite. If specified, this parameter causes
+ disconnect from the service, or If specified, this parameter causes
the server to operate as a daemon. That is, it detaches
itself and runs in the background, fielding requests
on the appropriate port. Operating the server as a
@@ -44,7 +44,7 @@
than a file. If this parameter is specified it causes the
server to run "interactively", not as a daemon, even if the
server is executed on the command line of a shell. Setting this
- parameter negates the implicit deamon mode when run from the
+ parameter negates the implicit daemon mode when run from the
command line. If the server is to be run by the
This is the default location of the smb.conf(5) server configuration file. Other common places that systems
install this file are This file describes all the services the server
- is to make available to clients. See smb.conf(5) for more information. On some systems On some systems If no printer name is specified to
+ similar. Samba uses PAM for authentication (when presented with a plaintext
password), for account checking (is this account disabled?) and for
session management. The degree too which samba supports PAM is restricted
by the limitations of the SMB protocol and the obey pam restrictions smb.conf(5) paramater. When this is set, the following restrictions apply:
- Account Validation: All accesses to a
+ Account Validation: All accesses to a
samba server are checked
against PAM to see if the account is vaild, not disabled and is permitted to
login at this time. This also applies to encrypted logins.
- Session Management: When not using share
+ Session Management: When not using share
level secuirty, users must pass PAM's session checks before access
is granted. Note however, that this is bypassed in share level secuirty.
Note also that some older pam configuration files may need a line
added for session support.
- Most diagnostics issued by the server are logged
in a specified log file. The log file name is specified
at compile time, but may be overridden on the command line. The number and nature of diagnostics available depends
on the debug level used by the server. If you have problems, set
@@ -129,10 +129,10 @@
available in the source code to warrant describing each and every
diagnostic. At this stage your best bet is still to grep the
source code and inspect the conditions that gave rise to the
- diagnostics you are seeing. Samba stores it's data in several TDB (Trivial Database) files, usually located in
+ diagnostics you are seeing. Samba stores it's data in several TDB (Trivial Database) files, usually located in
(*) information persistent across restarts (but not
necessarily important to backup).
- NT account policy settings such as pw expiration, etc... byte range locks browse lists share connections (used to enforce max connections, etc...) generic caching db group mapping information share modes & oplocks bad pw attempts Samba messaging system cache of user net_info_3 struct from net_samlogon() request (as a domain member) installed printer drivers installed printer forms installed printer information directory containing tdb per print queue of cached lpq output Windows registry skeleton (connect via regedit.exe) session information (e.g. support for 'utmp = yes') share acls winbindd's cache of user lists, etc... winbindd's local idmap db wins database when 'wins support = yes' Sending the NT account policy settings such as pw expiration, etc... byte range locks browse lists share connections (used to enforce max connections, etc...) generic caching db group mapping information share modes & oplocks bad pw attempts Samba messaging system cache of user net_info_3 struct from net_samlogon() request (as a domain member) installed printer drivers installed printer forms installed printer information directory containing tdb per print queue of cached lpq output Windows registry skeleton (connect via regedit.exe) session information (e.g. support for 'utmp = yes') share acls winbindd's cache of user lists, etc... winbindd's local idmap db wins database when 'wins support = yes' Sending the To shut down a user's hosts_access(5), inetd(8), nmbd(8), smb.conf(5), smbclient(1), testparm(1), testprns(1), and the
+ them after, however this would affect performance. hosts_access(5), inetd(8), nmbd(8), smb.conf(5), smbclient(1), testparm(1), testprns(1), and the
Internet RFC's The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbget.1.html samba-3.3.11//docs/htmldocs/manpages/smbget.1.html
--- samba-3.3.10//docs/htmldocs/manpages/smbget.1.html 2010-01-14 11:21:15.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbget.1.html 2010-02-22 16:53:36.000000000 +0100
@@ -1,14 +1,14 @@
- smbget — wget-like utility for download files over SMB This tool is part of the samba(7) suite. smbget is a simple utility with wget-like semantics, that can download files from SMB servers. You can specify the files you would like to download on the command-line.
+ smbget — wget-like utility for download files over SMB This tool is part of the samba(7) suite. smbget is a simple utility with wget-like semantics, that can download files from SMB servers. You can specify the files you would like to download on the command-line.
The files should be in the smb-URL standard, e.g. use smb://host/share/file
for the UNC path \\\\HOST\\SHARE\\file.
- Work as user guest Automatically resume aborted files Recursively download files Username to use Password to use Workgroup to use (optional) Don't ask anything (non-interactive) Debuglevel to use Show dots as progress indication Set same permissions on local file as are set on remote file. Write the file that is being download to the specified file. Can not be used together with -R. Use specified rcfile. This will be loaded in the order it was specified - e.g. if you specify any options before this one, they might get overriden by the contents of the rcfile. Be quiet Be verbose Number of bytes to download in a block. Defaults to 64000. Show help message Display brief usage message Work as user guest Automatically resume aborted files Recursively download files Username to use Password to use Workgroup to use (optional) Don't ask anything (non-interactive) Debuglevel to use Show dots as progress indication Set same permissions on local file as are set on remote file. Write the file that is being download to the specified file. Can not be used together with -R. Use specified rcfile. This will be loaded in the order it was specified - e.g. if you specify any options before this one, they might get overriden by the contents of the rcfile. Be quiet Be verbose Number of bytes to download in a block. Defaults to 64000. Show help message Display brief usage message SMB URL's should be specified in the following format: smbgetrc — configuration file for smbget
+ smbgetrc — configuration file for smbget
This manual page documents the format and options of the smbgetrc
file. This is the configuration file used by the smbget(1)
utility. The file contains of key-value pairs, one pair on each line. The key
and value should be separated by a space.
By default, smbget reads its configuration from $HOME/.smbgetrc, though
- other locations can be specified using the command-line options.
The following keys can be set:
Whether aborted downloads should be automatically resumed.
Whether directories should be downloaded recursively Username to use when logging in to the remote server. Use an empty string for anonymous access.
- Password to use when logging in. Workgroup to use when logging in Turns off asking for username and password. Useful for scripts. (Samba) debuglevel to run at. Useful for tracking down protocol level problems. Whether a single dot should be printed for each block that has been downloaded, instead of the default progress indicator. Number of bytes to put in a block. The original Samba software and related utilities
+ Password to use when logging in. Workgroup to use when logging in Turns off asking for username and password. Useful for scripts. (Samba) debuglevel to run at. Useful for tracking down protocol level problems. Whether a single dot should be printed for each block that has been downloaded, instead of the default progress indicator. Number of bytes to put in a block. smbpasswd — The Samba encrypted password file This tool is part of the samba(7) suite. smbpasswd is the Samba encrypted password file. It contains
+ smbpasswd — The Samba encrypted password file This tool is part of the samba(7) suite. smbpasswd is the Samba encrypted password file. It contains
the username, Unix user id and the SMB hashed passwords of the
user, as well as account flag information and the time the
password was last changed. This file format has been evolving with
- Samba and has had several different formats in the past. The format of the smbpasswd file used by Samba 2.2
+ Samba and has had several different formats in the past. The format of the smbpasswd file used by Samba 2.2
is very similar to the familiar Unix U - This means
- this is a "User" account, i.e. an ordinary user. N - This means the
+ U - This means
+ this is a "User" account, i.e. an ordinary user. N - This means the
account has no password (the passwords in the fields LANMAN
Password Hash and NT Password Hash are ignored). Note that this
will only allow users to log on with no password if the D - This means the account
- is disabled and no SMB/CIFS logins will be allowed for this user. X - This means the password
- does not expire. W - This means this account
+ smb.conf(5) config file. D - This means the account
+ is disabled and no SMB/CIFS logins will be allowed for this user. X - This means the password
+ does not expire. W - This means this account
is a "Workstation Trust" account. This kind of account is used
in the Samba PDC code stream to allow Windows NT Workstations
and Servers to join a Domain hosted by a Samba PDC. Other flags may be added as the code is extended in future.
@@ -76,10 +76,10 @@
last modified. It consists of the characters 'LCT-' (standing for
"Last Change Time") followed by a numeric encoding of the UNIX time
in seconds since the epoch (1970) that the last change was made.
- All other colon separated fields are ignored at this time. All other colon separated fields are ignored at this time. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbpasswd.8.html samba-3.3.11//docs/htmldocs/manpages/smbpasswd.8.html
--- samba-3.3.10//docs/htmldocs/manpages/smbpasswd.8.html 2010-01-14 11:21:19.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbpasswd.8.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,4 +1,4 @@
- smbpasswd — change a user's SMB password This tool is part of the samba(7) suite. The smbpasswd program has several different
+ smbpasswd — change a user's SMB password This tool is part of the samba(7) suite. The smbpasswd program has several different
functions, depending on whether it is run by the root user
or not. When run as a normal user it allows the user to change
the password used for their SMB sessions on any machines that store
@@ -25,7 +25,7 @@
the attributes of the user in this file to be made. When run by root,
+ running.
This option specifies that the username following should be added to the local smbpasswd file, with the new
password typed (type <Enter> for the old password). This option is ignored if the username following
already exists in the smbpasswd file and it is treated like a regular change password command. Note that the
@@ -92,20 +92,20 @@
specifying a Win95/98 machine as remote machine target. This option allows the user of smbpasswd to determine
what name resolution services to use when looking up the NetBIOS
name of the host being connected to. The options are :"lmhosts", "host", "wins" and "bcast". They
- cause names to be resolved as follows: Since In addition, the smbpasswd command is only useful if Samba
- has been set up to use encrypted passwords. The original Samba software and related utilities
+ has been set up to use encrypted passwords. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer.
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbspool.8.html samba-3.3.11//docs/htmldocs/manpages/smbspool.8.html
--- samba-3.3.10//docs/htmldocs/manpages/smbspool.8.html 2010-01-14 11:21:21.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbspool.8.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,29 +1,29 @@
- smbspool — send a print file to an SMB printer This tool is part of the samba(7) suite. smbspool is a very small print spooling program that
+ smbspool — send a print file to an SMB printer This tool is part of the samba(7) suite. smbspool is a very small print spooling program that
sends a print file to an SMB printer. The command-line arguments
are position-dependent for compatibility with the Common UNIX
Printing System, but you can use smbspool with any printing system
or from a program or script. DEVICE URI smbspool specifies the destination using a Uniform Resource
Identifier ("URI") with a method of "smb". This string can take
- a number of forms: smb://server[:port]/printer smb://workgroup/server[:port]/printer smb://username:password@server[:port]/printer smb://username:password@workgroup/server[:port]/printer smbspool tries to get the URI from the environment variable
+ a number of forms: smb://server[:port]/printer smb://workgroup/server[:port]/printer smb://username:password@server[:port]/printer smb://username:password@workgroup/server[:port]/printer smbspool tries to get the URI from the environment variable
Programs using the The job argument (argv[1]) contains the
+ running smbspool. The job argument (argv[1]) contains the
job ID number and is presently not used by smbspool.
- The user argument (argv[2]) contains the
+ The user argument (argv[2]) contains the
print user's name and is presently not used by smbspool.
- The title argument (argv[3]) contains the
+ The title argument (argv[3]) contains the
job title string and is passed as the remote file name
- when sending the print job. The copies argument (argv[4]) contains
+ when sending the print job. The copies argument (argv[4]) contains
the number of copies to be printed of the named file. If
no filename is provided then this argument is not used by
- smbspool. The options argument (argv[5]) contains
+ smbspool. The options argument (argv[5]) contains
the print options in a single string and is currently
- not used by smbspool. The filename argument (argv[6]) contains the
+ not used by smbspool. The filename argument (argv[6]) contains the
name of the file to print. If this argument is not specified
- then the print file is read from the standard input. The original Samba software and related utilities
were created by Andrew Tridgell. Samba is now developed
by the Samba Team as an Open Source project similar
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbstatus.1.html samba-3.3.11//docs/htmldocs/manpages/smbstatus.1.html
--- samba-3.3.10//docs/htmldocs/manpages/smbstatus.1.html 2010-01-14 11:21:22.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbstatus.1.html 2010-02-22 16:53:36.000000000 +0100
@@ -1,5 +1,5 @@
- smbstatus — report on current Samba connections This tool is part of the samba(7) suite.lmhosts is the Samba
+Name
Synopsis
lmhosts is the samba(7) NetBIOS name to IP address mapping file.DESCRIPTION
lmhosts is the Samba
NetBIOS name to IP address mapping file. It
is very similar to the /etc/hosts file
format, except that the hostname component must correspond
- to the NetBIOS naming format.FILE FORMAT
FILE FORMAT
lmhosts file
- is in the same directory as the smb.conf(5) file.FILES
FILES
/etc/samba or /usr/local/samba/lib.
- AUTHOR
Name
Synopsis
log2pcap [-h] [-q] [logfile] [pcap_file]DESCRIPTION
log2pcap reads in a
+Name
Synopsis
log2pcap [-h] [-q] [logfile] [pcap_file]DESCRIPTION
log2pcap reads in a
samba log file and generates a pcap file (readable
by most sniffers, such as ethereal or tcpdump) based on the packet
dumps in the log file.log level
of at least 5 to get the SMB header/parameters
right, 10 to get the first 512 data bytes of the
packet and 50 to get the whole packet.
- OPTIONS
OPTIONS
EXAMPLES
$ log2pcap < /var/log/* > trace.pcap
$ log2pcap -h samba.log | text2pcap -T 139,139 - trace.pcap
- Name
Synopsis
mount.cifs {service} {mount-point} [-o options]DESCRIPTION
Name
Synopsis
mount.cifs {service} {mount-point} [-o options]DESCRIPTION
OPTIONS
argOPTIONS
argNote
Note
user=, or for users familiar with smbfs it accepts the longer form of the parameter username=. Similarly the longer smbfs style parameter names may be accepted as synonyms for the shorter cifs parameters pass=,dom= and cred=.
argargSERVICE FORMATTING AND DELIMITERS
ENVIRONMENT VARIABLES
NOTES
NOTES
CONFIGURATION
/proc/fs/cifs are various
@@ -245,7 +245,7 @@
cifs.ko which will list the options that may be passed to cifs during module
installation (device driver load).
For more information see the kernel file fs/cifs/README.
-BUGS
VERSION
VERSION
SEE ALSO
AUTHOR
Name
Name
Synopsis
net {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V] [--request-timeout seconds]DESCRIPTION
Synopsis
net {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-d debuglevel] [-V] [--request-timeout seconds]DESCRIPTION
OPTIONS
OPTIONS
smb.conf file.COMMANDS
CHANGESECRETPW
TIME
NET TIME command allows you to view the time on a remote server
- or synchronise the time on the local server with the time on the remote server.TIME
NET TIME command allows you to view the time on a remote server
+ or synchronise the time on the local server with the time on the remote server.[RPC|ADS] JOIN [TYPE] [-U username[%password]] [createupn=UPN] [createcomputer=OU] [options]
[RPC] OLDJOIN [options]
[RAP|RPC] SHARE
[RAP|RPC] SHARE [misc. options] [targets]
[RAP|RPC] SHARE ADD
name=serverpath [-C comment] [-M maxusers] [targets][RAP|RPC] SHARE
[RAP|RPC] SHARE [misc. options] [targets]
[RPC|RAP] FILE
SESSION
SESSION
RAP VALIDATE
user [password]Note
RAP ADMIN
commandcommand on
the remote server. Only works with OS/2 servers.
-Note
RAP SERVICE
RAP SERVICE
LOOKUP
CACHE
s - Seconds m - Minutes h - Hours d - Days w - Weeks s - Seconds m - Minutes h - Hours d - Days w - Weeks GETLOCALSID [DOMAIN]
GROUPMAP
GETLOCALSID [DOMAIN]
GROUPMAP
GROUPMAP ADD
net groupmap add {rid=int|sid=string} unixgroup=string \
[type={domain|local}] [ntgroup=string] [comment=string]
GROUPMAP DELETE
GROUPMAP DELETE
MAXRID
RPC INFO
RPC TRUSTDOM
RPC TRUSTDOM
RPC TRUSTDOM ADD
DOMAINDOMAIN.
This is in fact a Samba account named DOMAIN$
with the account flag 'I' (interdomain trust account).
If the command is used against localhost it has the same effect as
smbpasswd -a -i DOMAIN. Please note that both commands
expect a appropriate UNIX account.
-RPC TRUSTDOM DEL
DOMAINDOMAIN. If it is used against localhost
it has the same effect as smbpasswd -x DOMAIN$.
-RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]
RPC SHUTDOWN [-t timeout] [-r] [-f] [-C message]
RPC SAMDUMP
RPC VAMPIRE
ADS STATUS
NET ADS TESTJOIN.ADS PRINTER
ADS PRINTER
ADS SEARCH
EXPRESSION ATTRIBUTES...net ads search '(objectCategory=group)' sAMAccountName
-ADS DN
DN (attributes)net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountNameSAM CREATEBUILTINGROUP <NAME>
net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountNameSAM CREATEBUILTINGROUP <NAME>
SAM CREATELOCALGROUP <NAME>
SAM MAPUNIXGROUP <NAME>
SAM ADDMEM <GROUP> <MEMBER>
SAM DELMEM <GROUP> <MEMBER>
SAM LIST <users|groups|localgroups|builtin|workstations> [verbose]
SAM SET WORKSTATIONS <NAME> <WORKSTATIONS>
SAM SET PWDMUSTCHANGENOW <NAME> [yes|no]
SAM POLICY SET <account policy> <value>
SAM PROVISION
IDMAP DUMP <local tdb file name>
IDMAP SECRET <DOMAIN>|ALLOC <secret>
USERSHARE
net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] - to add or change a user defined share. net usershare delete sharename - to delete a user defined share. net usershare info [-l|--long] [wildcard sharename] - to print info about a user defined share. net usershare list [-l|--long] [wildcard sharename] - to list user defined shares. net usershare add sharename path [comment] [acl] [guest_ok=[y|n]] - to add or change a user defined share. net usershare delete sharename - to delete a user defined share. net usershare info [-l|--long] [wildcard sharename] - to print info about a user defined share. net usershare list [-l|--long] [wildcard sharename] - to list user defined shares. USERSHARE ADD
sharename path [comment] [acl] [guest_ok=[y|n]]USERSHARE ADD
sharename path [comment] [acl] [guest_ok=[y|n]]USERSHARE DELETE
sharenameUSERSHARE INFO
[-l|--long] [wildcard sharename]USERSHARE LIST
[-l|--long] wildcard sharenameCONF
registry shares to
-“yes” in the [global] section and global configuration options are
+“yes” in the [global] section and global configuration options are
activated by setting include = registry in
the [global] section for a mixed configuration or by setting
config backend = registry in the [global]
section for a registry-only configuration.
See the smb.conf(5) manpage for details.
net conf list - Dump the complete configuration in smb.conf like
+ net conf list - Dump the complete configuration in smb.conf like
format. net conf import - Import configuration from file in smb.conf
format. net conf listshares - List the registry shares. net conf drop - Delete the complete configuration from
registry. net conf showshare - Show the definition of a registry share. net conf addshare - Create a new registry share. net conf delshare - Delete a registry share. net conf setparm - Store a parameter. net conf getparm - Retrieve the value of a parameter. net conf delparm - Delete a parameter. net conf getincludes - Show the includes of a share definition. net conf setincludes - Set includes for a share. net conf delincludes - Delete includes from a share definition. CONF LIST
CONF LIST
CONF IMPORT
[--test|-T] filename [section]CONF SHOWSHARE
sharenameCONF ADDSHARE
sharename path [writeable={y|N} [guest_ok={y|N} [comment]]] CONF ADDSHARE
sharename path [writeable={y|N} [guest_ok={y|N} [comment]]] CONF SETPARM
section parameter valueCONF GETINCLUDES
sectionDOM
DOM
net dom join - Join a remote computer into a domain. net dom unjoin - Unjoin a remote computer from a domain. DOM JOIN
domain=DOMAIN ou=OU account=ACCOUNT password=PASSWORD rebootnet dom join - Join a remote computer into a domain. net dom unjoin - Unjoin a remote computer from a domain. DOM JOIN
domain=DOMAIN ou=OU account=ACCOUNT password=PASSWORD rebootDOMAIN can be a NetBIOS domain name (also known as short domain name) or a DNS domain name for Active Directory Domains. As in Windows, it is also possible to control which Domain Controller to use. This can be achieved by appending the DC name using the \ separator character. Example: MYDOM\MYDC. The DOMAIN parameter cannot be NULL.OU can be set to a RFC 1779 LDAP DN, like ou=mymachines,cn=Users,dc=example,dc=com in order to create the machine account in a non-default LDAP containter. This optional parameter is only supported when joining Active Directory Domains.ACCOUNT defines a domain account that will be used to join the machine to the domain. This domain account needs to have sufficient privileges to join machines.PASSWORD defines the password for the domain account defined with ACCOUNT.REBOOT is an optional parameter that can be set to reboot the remote machine after successful join to the domain.DOMAIN can be a NetBIOS domain name (also known as short domain name) or a DNS domain name for Active Directory Domains. As in Windows, it is also possible to control which Domain Controller to use. This can be achieved by appending the DC name using the \ separator character. Example: MYDOM\MYDC. The DOMAIN parameter cannot be NULL.OU can be set to a RFC 1779 LDAP DN, like ou=mymachines,cn=Users,dc=example,dc=com in order to create the machine account in a non-default LDAP containter. This optional parameter is only supported when joining Active Directory Domains.ACCOUNT defines a domain account that will be used to join the machine to the domain. This domain account needs to have sufficient privileges to join machines.PASSWORD defines the password for the domain account defined with ACCOUNT.REBOOT is an optional parameter that can be set to reboot the remote machine after successful join to the domain.DOM UNJOIN
account=ACCOUNT password=PASSWORD rebootACCOUNT defines a domain account that will be used to unjoin the machine from the domain. This domain account needs to have sufficient privileges to unjoin machines.PASSWORD defines the password for the domain account defined with ACCOUNT.REBOOT is an optional parameter that can be set to reboot the remote machine after successful unjoin from the domain.ACCOUNT defines a domain account that will be used to unjoin the machine from the domain. This domain account needs to have sufficient privileges to unjoin machines.PASSWORD defines the password for the domain account defined with ACCOUNT.REBOOT is an optional parameter that can be set to reboot the remote machine after successful unjoin from the domain.AUTHOR
Name
Synopsis
nmbd [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-p <port number>] [-s <configuration file>]DESCRIPTION
nmbd is a server that understands
+Name
Synopsis
nmbd [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-p <port number>] [-s <configuration file>]DESCRIPTION
nmbd is a server that understands
and can reply to NetBIOS over IP name service requests, like
those produced by SMB/CIFS clients such as Windows 95/98/ME,
Windows NT, Windows 2000, Windows XP and LanManager clients. It also
@@ -22,7 +22,7 @@
replying to queries from clients for these names.nmbd can act as a WINS
proxy, relaying broadcast queries from clients that do
not understand how to talk the WINS protocol to a WINS
- server.OPTIONS
OPTIONS
nmbd to operate as a daemon. That is,
it detaches itself and runs in the background, fielding
requests on the appropriate port. By default, nmbd
@@ -88,7 +88,7 @@
This option changes the default UDP port number (normally 137)
that nmbd responds to name queries on. Don't
use this option unless you are an expert, in which case you
- won't need help!FILES
/etc/inetd.confinetd meta-daemon, this file
must contain suitable startup information for the
meta-daemon.
@@ -115,7 +115,7 @@
will store the browsing database in the file browse.dat
in the var/locks directory
configured under wherever Samba was configured to install itself.
- SIGNALS
nmbd process it is recommended
that SIGKILL (-9) NOT be used, except as a last
resort, as this may leave the name database in an inconsistent state.
The correct way to terminate nmbd is to send it
@@ -129,13 +129,13 @@
using smbcontrol(1) (SIGUSR[1|2] signals
are no longer used since Samba 2.2). This is to allow
transient problems to be diagnosed, whilst still running
- at a normally low log level.SEE ALSO
rfc1001.txt, rfc1002.txt.
In addition the CIFS (formerly SMB) specification is available
as a link from the Web page
- http://samba.org/cifs/.AUTHOR
Name
Synopsis
nmblookup [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}DESCRIPTION
nmblookup is used to query NetBIOS names
+Name
Synopsis
nmblookup [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}DESCRIPTION
nmblookup is used to query NetBIOS names
and map them to IP addresses in a network using NetBIOS over TCP/IP
queries. The options allow the name queries to be directed at a
particular IP broadcast area or to a particular machine. All queries
- are done over UDP.OPTIONS
OPTIONS
name with a
type of 0x1d. If
name is "-" then it does a lookup on the special name
@@ -88,12 +88,12 @@
If a NetBIOS name then the different name types may be specified
by appending '#<type>' to the name. This name may also be
'*', which will return all registered names within a broadcast
- area.EXAMPLES
nmblookup can be used to query
a WINS server (in the same way nslookup is
used to query DNS servers). To query a WINS server, nmblookup
must be called like this:nmblookup -U server -R 'name'nmblookup -U samba.org -R 'IRIX#1B'AUTHOR
AUTHOR
Name
Synopsis
ntlm_auth [-d debuglevel] [-l logdir] [-s <smb config file>]DESCRIPTION
ntlm_auth is a helper utility that authenticates
+Name
Synopsis
ntlm_auth [-d debuglevel] [-l logdir] [-s <smb config file>]DESCRIPTION
ntlm_auth is a helper utility that authenticates
users using NT/LM authentication. It returns 0 if the users is authenticated
successfully and 1 if access was denied. ntlm_auth uses winbind to access
the user and authentication data for a domain. This utility
- is only indended to be used by other programs (currently
+ is only intended to be used by other programs (currently
Squid
and mod_ntlm_winbind)
- OPERATIONAL REQUIREMENTS
winbindd_privileged in
$LOCKDIR. This should be done either by running
this command as root or providing group access
to the winbindd_privileged directory. For
- security reasons, this directory should not be world-accessable. OPTIONS
OPTIONS
Warning
Implementors should take care to base64 encode
+ external program to the helper are:Warning
Implementors should take care to base64 encode
any data (such as usernames/passwords) that may contain malicous user data, such as
a newline. They may also need to decode strings from
the helper, which likewise may have been base64 encoded.LANMAN Challenge value,
+ LANMAN Challenge value,
generated randomly by the server, or (in cases such as
MSCHAPv2) generated in some way by both the server and
the client.
- LANMAN Response value,
+ LANMAN Response value,
calculated from the user's password and the supplied
LANMAN Challenge. Typically, this
is provided over the network by a client wishing to authenticate.
- NT Response
+ NT Response
calculated from the user's password and the supplied
LANMAN Challenge. Typically, this is
provided over the network by a client wishing to authenticate.
- ".progname" will be appended (e.g. log.smbclient,
log.smbd, etc...). The log file is never removed by the client.
EXAMPLE SETUP
squid.conf file.
@@ -137,20 +137,20 @@
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
-
Note
Note
winbindd_privileged are as described above.squid.conf file.
auth_param ntlm program ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of='WORKGROUP\Domain Users'
auth_param basic program ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of='WORKGROUP\Domain Users'
-
TROUBLESHOOTING
AUTHOR
Name
DESCRIPTION
Name
DESCRIPTION
SYNOPSIS
...
@@ -19,7 +19,7 @@
Make sure that pam_winbind is one of the first modules in the session part. It may retrieve
kerberos tickets which are needed by other modules.
-
OPTIONS
PAM DATA EXPORTS
PAM DATA EXPORTS
Name
Synopsis
pdbedit [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-t, --password-from-stdin] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control] [-y]DESCRIPTION
Name
Synopsis
pdbedit [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-t, --password-from-stdin] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control] [-y]DESCRIPTION
OPTIONS
OPTIONS
pdbedit -L
@@ -69,7 +69,7 @@
rid.
-U S-1-5-21-2447931902-1787058256-3961074038-5004-c "[X ]"new password:
retype new password
Note
Note
".progname" will be appended (e.g. log.smbclient,
log.smbd, etc...). The log file is never removed by the client.
-Name
Synopsis
profiles [-v] [-c SID] [-n SID] {file}DESCRIPTION
profiles is a utility that
+Name
Synopsis
profiles [-v] [-c SID] [-n SID] {file}DESCRIPTION
profiles is a utility that
reports and changes SIDs in windows registry files. It currently only
supports NT.
- Name
Synopsis
rpcclient [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logdir] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}DESCRIPTION
rpcclient is a utility initially developed
+Name
Synopsis
rpcclient [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logdir] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}DESCRIPTION
rpcclient is a utility initially developed
to test MS-RPC functionality in Samba itself. It has undergone
several stages of development and stability. Many system administrators
have now written scripts around it to manage Windows NT clients from
- their UNIX workstation. OPTIONS
OPTIONS
IP address is the address of the server to connect to.
@@ -48,6 +48,8 @@
be silently ingnored and no password will be used.smb.conf manual page for the list of valid
options. COMMANDS
COMMANDS
LSARPC
LSARPC-DS
SRVSVC
SAMR
SPOOLSS
LSARPC-DS
SRVSVC
SAMR
SPOOLSS
enumprinters and
enumdrivers commands for obtaining a list of
of installed printers and drivers.NETLOGON
BUGS
rpcclient is designed as a developer testing tool
and may not be robust in certain areas (such as command line parsing).
It has been known to generate a core dump upon failures when invalid
parameters where passed to the interpreter. AUTHOR
Name
Synopsis
sambaDESCRIPTION
Name
Synopsis
sambaDESCRIPTION
smbmount,smbumount and smbmnt are commands that can be used to
mount CIFS/SMB shares on Linux.
smbcquotas is a tool that
- can set remote QUOTA's on server with NTFS 5. COMPONENTS
AVAILABILITY
CONTRIBUTIONS
diff -u format.CONTRIBUTORS
change-log in the source package
@@ -101,7 +101,7 @@
http://cvs.samba.org/
for the contributors to Samba post-CVS. CVS is the Open Source
source code control system used by the Samba Team to develop
- Samba. The project would have been unmanageable without it.AUTHOR
AUTHOR
Name
Synopsis
sharesec {sharename} [-r, --remove=ACL] [-m, --modify=ACL] [-a, --add=ACL] [-R, --replace=ACLs] [-D, --delete] [-v, --view] [-M, --machine-sid] [-F, --force] [-d, --debuglevel=DEBUGLEVEL] [-s, --configfile=CONFIGFILE] [-l, --log-basename=LOGFILEBASE] [-V, --version] [-?, --help] [--usage]DESCRIPTION
sharesec program manipulates share permissions
- on SMB file shares.OPTIONS
sharesec program.
+Name
Synopsis
sharesec {sharename} [-r, --remove=ACL] [-m, --modify=ACL] [-a, --add=ACL] [-R, --replace=ACLs] [-D, --delete] [-v, --view] [-M, --machine-sid] [-F, --force] [-d, --debuglevel=DEBUGLEVEL] [-s, --configfile=CONFIGFILE] [-l, --log-basename=LOGFILEBASE] [-V, --version] [-?, --help] [--usage]DESCRIPTION
sharesec program manipulates share permissions
+ on SMB file shares.OPTIONS
sharesec program.
The format of ACLs is described in the section ACL FORMAT ".progname" will be appended (e.g. log.smbclient,
log.smbd, etc...). The log file is never removed by the client.
-ACL FORMAT
REVISION:<revision number>
OWNER:<sid or name>
@@ -54,16 +54,16 @@
EXIT STATUS
sharesec program sets the exit status
+ file permissions of the same name.EXIT STATUS
sharesec program sets the exit status
depending on the success or otherwise of the operations performed.
The exit status may be one of the following values. sharesec couldn't connect to the specified server,
or there was an error getting or setting the ACLs, an exit status
of 1 is returned. If there was an error parsing any command line
- arguments, an exit status of 2 is returned. Name
Synopsis
smbcacls {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]DESCRIPTION
smbcacls program manipulates NT Access Control
- Lists (ACLs) on SMB file shares. OPTIONS
smbcacls program.
+Name
Synopsis
smbcacls {//server/share} {filename} [-D acls] [-M acls] [-a acls] [-S acls] [-C name] [-G name] [--numeric] [-t] [-U username] [-h] [-d]DESCRIPTION
smbcacls program manipulates NT Access Control
+ Lists (ACLs) on SMB file shares. OPTIONS
smbcacls program.
The format of ACLs is described in the section ACL FORMAT ".progname" will be appended (e.g. log.smbclient,
log.smbd, etc...). The log file is never removed by the client.
-ACL FORMAT
REVISION:<revision number>
OWNER:<sid or name>
@@ -70,20 +70,20 @@
resides. The type, flags and mask values determine the type of
access granted to the SID.
#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4#define SEC_ACE_FLAG_INHERIT_ONLY 0x8#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4#define SEC_ACE_FLAG_INHERIT_ONLY 0x8EXIT STATUS
smbcacls program sets the exit status
+ file permissions of the same name. EXIT STATUS
smbcacls program sets the exit status
depending on the success or otherwise of the operations performed.
The exit status may be one of the following values. smbcacls couldn't connect to the specified server,
or there was an error getting or setting the ACLs, an exit status
of 1 is returned. If there was an error parsing any command line
- arguments, an exit status of 2 is returned. AUTHOR
AUTHOR
smbcacls was written by Andrew Tridgell
diff -u -r --new-file --exclude .svn --exclude CVS samba-3.3.10//docs/htmldocs/manpages/smbclient.1.html samba-3.3.11//docs/htmldocs/manpages/smbclient.1.html
--- samba-3.3.10//docs/htmldocs/manpages/smbclient.1.html 2010-01-14 11:20:53.000000000 +0100
+++ samba-3.3.11//docs/htmldocs/manpages/smbclient.1.html 2010-02-22 16:53:37.000000000 +0100
@@ -1,11 +1,11 @@
-Name
Synopsis
smbclient [-b <buffer size>] [-d debuglevel] [-e] [-L <netbios name>] [-U username] [-I destinationIP] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-g] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-k] [-P] [-c <command>]smbclient {servicename} [password] [-b <buffer size>] [-d debuglevel] [-e] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-g] [-l log-basename] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan] [-k]DESCRIPTION
smbclient is a client that can
+Name
Synopsis
smbclient [-b <buffer size>] [-d debuglevel] [-e] [-L <netbios name>] [-U username] [-I destinationIP] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-g] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-k] [-P] [-c <command>]smbclient {servicename} [password] [-b <buffer size>] [-d debuglevel] [-e] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-g] [-l log-basename] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan] [-k]DESCRIPTION
smbclient is a client that can
'talk' to an SMB/CIFS server. It offers an interface
similar to that of the ftp program (see ftp(1)).
Operations include things like getting files from the server
to the local machine, putting files from the local machine to
the server, retrieving directory information from the server
- and so on. OPTIONS
OPTIONS
//server/service where server
is the NetBIOS name of the SMB/CIFS server
@@ -40,21 +40,21 @@
suite to determine what naming services and in what order to resolve
host names to IP addresses. The option takes a space-separated
string of different name resolution options.lmhosts: Lookup an IP
+ cause names to be resolved as follows:lmhosts: Lookup an IP
address in the Samba lmhosts file. If the line in lmhosts has
no name type attached to the NetBIOS name (see
the lmhosts(5) for details) then
- any name type matches for lookup.host: Do a standard host
+ any name type matches for lookup.host: Do a standard host
name to IP address resolution, using the system /etc/hosts
, NIS, or DNS lookups. This method of name resolution
is operating system dependent, for instance on IRIX or Solaris this
may be controlled by the /etc/nsswitch.conf
file). Note that this method is only used if the NetBIOS name
type being queried is the 0x20 (server) name type, otherwise
- it is ignored.wins: Query a name with
+ it is ignored.wins: Query a name with
the IP address listed in the wins server
parameter. If no WINS server has
- been specified this method will be ignored.bcast: Do a broadcast on
+ been specified this method will be ignored.bcast: Do a broadcast on
each of the known local interfaces listed in the
interfaces
parameter. This is the least reliable of the name resolution
@@ -161,6 +161,8 @@
be silently ingnored and no password will be used.tar(1)
compatible backups of all the files on an SMB/CIFS
share. The secondary tar flags that can be given to this option
- are : c - Create a tar file on UNIX.
+ are : c - Create a tar file on UNIX.
Must be followed by the name of a tar file, tape device
or "-" for standard output. If using standard output you must
turn the log level to its lowest value -d0 to avoid corrupting
your tar file. This flag is mutually exclusive with the
- x flag. x - Extract (restore) a local
+ x flag. x - Extract (restore) a local
tar file back to a share. Unless the -D option is given, the tar
files will be restored from the top level of the share. Must be
followed by the name of the tar file, device or "-" for standard
input. Mutually exclusive with the c flag.
Restored files have their creation times (mtime) set to the
date saved in the tar file. Directories currently do not get
- their creation dates restored properly. I - Include files and directories.
+ their creation dates restored properly. I - Include files and directories.
Is the default behavior when filenames are specified above. Causes
files to be included in an extract or create (and therefore
everything else to be excluded). See example below. Filename globbing
- works in one of two ways. See r below. X - Exclude files and directories.
+ works in one of two ways. See r below. X - Exclude files and directories.
Causes files to be excluded from an extract or create. See
example below. Filename globbing works in one of two ways now.
- See r below. F - File containing a list of files and directories.
+ See r below. F - File containing a list of files and directories.
The F causes the name following the tarfile to
create to be read as a filename that contains a list of files and directories to
be included in an extract or create (and therefore everything else to be excluded).
See example below. Filename globbing works in one of two ways.
See r below.
- b - Blocksize. Must be followed
+ b - Blocksize. Must be followed
by a valid (greater than zero) blocksize. Causes tar file to be
written out in blocksize*TBLOCK (usually 512 byte) blocks.
- g - Incremental. Only back up
+ g - Incremental. Only back up
files that have the archive bit set. Useful only with the
- c flag. q - Quiet. Keeps tar from printing
+ c flag. q - Quiet. Keeps tar from printing
diagnostics as it works. This is the same as tarmode quiet.
- r - Regular expression include
+ r - Regular expression include
or exclude. Uses regular expression matching for
excluding or excluding files if compiled with HAVE_REGEX_H.
However this mode can be very slow. If not compiled with
HAVE_REGEX_H, does a limited wildcard match on '*' and '?'.
- N - Newer than. Must be followed
+ N - Newer than. Must be followed
by the name of a file whose date is compared against files found
on the share during a create. Only files newer than the file
specified are backed up to the tar file. Useful only with the
- c flag. a - Set archive bit. Causes the
+ c flag. a - Set archive bit. Causes the
archive bit to be reset when a file is backed up. Useful with the
g and c flags.
smbclient's tar option now supports long
@@ -270,7 +272,7 @@
only of any use with the tar -T option.
-N is implied by -c.-c 'print -'. OPERATIONS
smb:\> NOTES
ENVIRONMENT VARIABLES
USER may contain the
username of the person using the client. This information is
used only if the protocol level is high enough to support
session-level passwords.PASSWD may contain
@@ -485,7 +487,7 @@
the path, executed with system(), which the client should connect
to instead of connecting to a server. This functionality is primarily
intended as a development aid, and works best when using a LMHOSTS
- fileINSTALLATION
/usr/local/samba/bin/ or
@@ -496,11 +498,11 @@
and writeable only by the user. DIAGNOSTICS
DIAGNOSTICS
AUTHOR
AUTHOR
Name
SYNOPSIS
Name
SYNOPSIS
smb.conf file is a configuration file for the Samba suite. smb.conf contains runtime configuration information for the Samba programs. The
smb.conf file is designed to be configured and administered by the
swat(8) program. The
complete description of the file format and possible parameters held within are here for reference purposes.
- FILE FORMAT
@@ -18,17 +18,17 @@
and trailing whitespace in a parameter value is discarded. Internal whitespace within a parameter value is
retained verbatim.
\” is continued on the next line in the customary UNIX fashion.
+ Any line ending in a “\” is continued on the next line in the customary UNIX fashion.
SECTION DESCRIPTIONS
SPECIAL SECTIONS
SPECIAL SECTIONS
The [global] section
The [homes] section
The [printers] section
|).
- Note
Note
printcap name = lpstat to automatically obtain a list of printers. See the
printcap name option for more details.
- USERSHARES
smb.conf. Members of the group foo may then manipulate the user defined shares
- using the following commands.PARAMETERS
PARAMETERS
VARIABLE SUBSTITUTIONS
%N:%p.smb.conf options.
- NAME MANGLING
name mangling so that DOS and Windows clients can use files that don't
conform to the 8.3 format. It can also be set to adjust the case of 8.3 format filenames.
NOTE ABOUT USERNAME/PASSWORD VALIDATION
\\server\service%username method of passing a username.
- user = field is given in the smb.conf file for the
service and the client has supplied a password, and that password matches (according to the UNIX system's
password checking) with one of the usernames from the user = field, the connection is made as
the username in the user = line. If one of the usernames in the user = list
begins with a @, that name expands to a list of names in the group of the same name.
- guest account
= for the service, irrespective of the supplied password.
- REGISTRY-BASED CONFIGURATION
HKLM\Software\Samba\smbconf.
There are two levels of registry configuration:
- registry shares
- to “yes” in smb.conf.
+ to “yes” in smb.conf.
EXPLANATION OF EACH PARAMETER
EXPLANATION OF EACH PARAMETER
SeRemoteShutdownPrivilege,
right, this command will be run as root.abort shutdown script = ""
abort shutdown script = /sbin/shutdown -c
-acl check permissions = True
-acl compatibility = win2k
-dos filemode option.
acl group control = no
-acl map full control = True
-%g to the group name passed. This script is only useful
for installations using the Windows NT domain administration tools. The script is free to create a group with
@@ -458,10 +458,10 @@
add group script = /usr/sbin/groupadd %g
-add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /var/lib/nobody -s /bin/false %u
-port namedevice URIport namedevice URIadd port command =
add port command = /etc/samba/scripts/addport.sh
-smb.conf file in order that it can be
shared by smbd(8).addprinter command is
automatically invoked with the following parameter (in
- order):printer nameshare nameport namedriver namelocationWindows 9x driver locationprinter nameshare nameport namedriver namelocationWindows 9x driver locationaddprinter command = /usr/bin/addprinter
-add share command is used to define an external program
or script which will add a new service definition to
@@ -537,13 +537,13 @@
smbd will automatically invoke the
add share command with five parameters.
- configFile - the location of the global smb.conf file.
- shareName - the name of the new share.
- pathName - path to an **existing**
+ configFile - the location of the global smb.conf file.
+ shareName - the name of the new share.
+ pathName - path to an **existing**
directory on disk.
- comment - comment string to associate with the new
+ comment - comment string to associate with the new
share.
- max
+ max
connections
Number of maximum simultaneous connections to this
share.
@@ -553,10 +553,10 @@
add share command = /usr/local/bin/addshare
-add user script = /usr/local/samba/bin/add_user %u
-%g will be replaced with the group name and
@@ -606,20 +606,20 @@
add user to group script = /usr/sbin/adduser %u %g
-yes for
a share, then the share will be an administrative share. The Administrative
Shares are the default network shares created by all Windows NT-based
operating systems. These are shares like C$, D$ or ADMIN$. The type of these
shares is STYPE_DISKTREE_HIDDEN.administrative share = no
-admin users = jason
-path parameter is a local AFS import. The
special AFS features include the attempt to hand-craft an AFS token
if you enabled --with-fake-kaserver in configure.
afs share = no
-afs username map = %u@afs.samba.org
-aio write behind = /*.tmp/
-algorithmic rid base = 100000
-allocation roundup size = 0
# (to disable roundups)
-server, domain or ads.
If it is set to no, then attempts to connect to a resource from
@@ -748,10 +748,10 @@
Samba server even if they do not have an account in DOMA. This
can make implementing a security boundary difficult.allow trusted domains = yes
-announce as = Win95
-announce version = 4.9
announce version = 2.0
-smbd
will use when authenticating a user. This option defaults to sensible values based on security.
This should be considered a developer option and used only in rare circumstances. In the majority (if not all)
@@ -797,18 +797,18 @@
auth methods = guest sam winbind
-available = no, then ALL
attempts to connect to the service will fail. Such failures are
logged.available = yes
-nmbd to bind to ports 137 and 138 on the
@@ -849,10 +849,10 @@
from starting/stopping/restarting smbd and nmbd.
bind interfaces only = no
-blocking locks = yes
-block size = 4096
-browseable = yes
-NetServerEnum call. Normally
set to yes. You should never need to change
this.browse list = yes
-change notify = yes
-change share command is used to define an external
program or script which will modify an existing service definition in smb.conf.
@@ -930,15 +930,15 @@
smbd will automatically invoke the
change share command with five parameters.
- configFile - the location
+ configFile - the location
of the global smb.conf file.
- shareName - the name of the new
+ shareName - the name of the new
share.
- pathName - path to an **existing**
+ pathName - path to an **existing**
directory on disk.
- comment - comment string to associate
+ comment - comment string to associate
with the new share.
- max
+ max
connections
Number of maximum simultaneous connections to this
share.
@@ -950,10 +950,10 @@
change share command = /usr/local/bin/changeshare
-check password script = /usr/local/sbin/crackcheck
-client lanman auth = no
-client ldap sasl wrapping = plain
-client ntlmv2 auth = no
-client plaintext auth = no
-client schannel = yes
-client signing = auto
-client use spnego = yes
-cluster addresses = 10.0.0.1 10.0.0.2 10.0.0.3
-yes only if
you have a cluster setup with ctdb running.
clustering = no
-net view to list what shares
are available.comment = Fred's Files
-config backend = registry
-smb.conf).
There is a chicken and egg problem here as this option is set
in the config file!config file = /usr/local/samba/lib/smb.conf.%m
-copy = otherservice
-create mask = 0775
-csc policy = programs
-clustering=yes,
you need to tell Samba where ctdbd listens on its unix domain
socket. The default path as of ctdb 1.0 is /tmp/ctdb.socket which
you have to explicitly set for Samba in smb.conf.
@@ -1195,10 +1195,10 @@
ctdbd socket = /tmp/ctdb.socket
-cups.
cups connection timeout = 60
-cups. Its value is a free form string of options
passed directly to the cups library.
@@ -1233,10 +1233,10 @@
cups options = "raw media=a4"
-cups.
client.conf. This is
@@ -1250,10 +1250,10 @@
cups server = mycupsserver:1631
-deadtime = 15
-debug class = no
-debug hires timestamp = no
-debug pid = no
-debug prefix timestamp = no
-debug timestamp = yes
-debug uid = no
-default case = lower
-default devmode = yes
-default service = pub
-defer sharing violations = True
-%g to the group name passed.
This script is only useful for installations using the Windows NT domain administration tools.
delete group script =
-deleteprinter command = /usr/bin/removeprinter
-delete readonly = no
-delete share command is used to define an external
program or script which will remove an existing service definition from
@@ -1454,9 +1454,9 @@
smbd will automatically invoke the
delete share command with two parameters.
- configFile - the location
+ configFile - the location
of the global smb.conf file.
- shareName - the name of
+ shareName - the name of
the existing service.
delete share command = /usr/local/bin/delshare
-%g will be replaced with the group name and
@@ -1477,10 +1477,10 @@
delete user from group script = /usr/sbin/deluser %u %g
-delete user script = /usr/local/samba/bin/del_user %u
-no (the default) then if a vetoed
@@ -1506,10 +1506,10 @@
directories to be transparently deleted when the parent directory
is deleted (so long as the user has permissions to do so).delete veto files = no
-dfree cache time should only be used on systems where a problem
occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may occur
with other operating systems. The symptom that was seen was an error of "Abort Retry Ignore" at the
@@ -1522,10 +1522,10 @@
By default this parameter is zero, meaning no caching will be done.
dfree cache time = dfree cache time = 60
-dfree command setting should only be used on systems where a
problem occurs with the internal disk space calculations. This has been known to happen with Ultrix, but may
occur with other operating systems. The symptom that was seen was an error of "Abort Retry Ignore"
@@ -1563,13 +1563,13 @@
By default internal routines for determining the disk capacity and remaining space will be used.
dfree command = /usr/local/samba/bin/dfree
-directory mask = 0775
-directory security mask = 0700
-Note
Note
disable netbios = no
-disable spoolss = no
-display charset = UTF8
-dmapi support = no
-dns proxy = yes
-yes, the Samba server will
provide the netlogon service for Windows 9X network logons for the
workgroup it is in.
@@ -1689,10 +1689,10 @@
Samba HOWTO Collection.
domain logons = no
-nmbd to claim a
special domain specific NetBIOS name that identifies it as a domain master browser for its given
@@ -1718,10 +1718,10 @@
Samba will function as a BDC. In general, this parameter should be set to 'No' only on a BDC.
domain master = auto
-/proc tree under Linux) that are either not
of interest to clients or are infinitely deep (recursive). This
parameter allows you to specify a comma-delimited list of directories
@@ -1732,18 +1732,18 @@
dont descend = /proc,/dev
-
+ case it is not available. Run testparm(1) to check the default on your system.
dos filemode = no
-dos filetime resolution = no
-dos filetimes = yes
-ea support = no
-enable asu support = no
-yes.
You should never need to change this.
enable core files = yes
enable core files = no
-net rpc rights or one of the Windows user and group manager tools. This parameter is
enabled by default. It can be disabled to prevent members of the Domain Admins group from being able to
@@ -1836,10 +1836,10 @@
Please read the extended description provided in the Samba HOWTO documentation.
enable privileges = yes
-smbd to authenticate against another
server.encrypt passwords = yes
-enhanced browsing = yes
-enumports command = /usr/bin/listports
-$(lockdir)/eventlog.
@@ -1914,10 +1914,10 @@
eventlog list = Security Application Syslog Apache
-fake directory create times = no
-fake oplocks = no
-no prevents any file or directory that is a symbolic link from being
followed (the user will get an error). This option is very useful to stop users from adding a symbolic
@@ -1971,10 +1971,10 @@
This option is enabled (i.e. smbd will follow symbolic links) by default.
follow symlinks = yes
-force create mode = 0755
-force directory mode = 0755
-Note
Note
force directory security mode = 700
-force group = agroup
-smb.conf has two
associated names which can be used by the client. The first
is the sharename (or shortname) defined in smb.conf. This
@@ -2082,10 +2082,10 @@
not be able to delete printer connections from their local Printers
folder.force printername = no
-force security mode = 700
-force unknown acl user = no
-force user = auser
-NTFS for compatibility
@@ -2152,10 +2152,10 @@
fstype = Samba
-get quota command should only be used
whenever there is no operating system API available from the OS that
samba can use.--with-sys-quotas option or on Linux with
@@ -2163,23 +2163,23 @@
was found in the system.get quota command =
+ the specified directory is on.get quota command =
get quota command = /usr/local/sbin/query_quota
-no.getwd cache = yes
-guest account = ftp
-yes for
a service, then no password is required to connect to the service.
Privileges will be those of the guest account.guest ok = no
-hide dot files = yes
-hide files =
# no file are hidden
-hide special files = no
-hide unreadable = no
-hide unwriteable files = no
-yes, and smbd(8) is also acting as a Win95/98 logon server
then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted.
At present, only the Sun auto.home map format is understood. The form of the map is:
@@ -2286,16 +2286,16 @@
Note
Note
homedir map =
homedir map = amd.homedir
-yes, Samba will act as a Dfs server, and allow Dfs-aware clients to browse
Dfs trees hosted on the server.
host msdfs = yes
-hosts deny and hosts allow.
@@ -2314,13 +2314,13 @@
hostname lookups = yes
-hosts allow = 150.203. EXCEPT 150.203.6.66hosts allow = 150.203.15.0/255.255.255.0hosts allow = lapland, arvidsjaurhosts allow = @foonethosts deny = pirateNote
hosts allow = @foonethosts deny = pirateNote
hosts allow =
# none (i.e., all hosts permitted access)
hosts allow = 150.203.5. myhost.mynet.edu.au
-hosts allow
- hosts listed here are NOT permitted access to
services unless the specific services have their own lists to override
this one. Where the lists conflict, the allow
@@ -2360,10 +2360,10 @@
hosts deny = 150.203.4. badhost.mynet.edu.au
-idmap alloc backend = tdb
-idmap backend = tdb
-idmap cache time = 604800 (one week)
-idmap gid = 10000-20000
-idmap negative cache time = 120
-idmap uid = 10000-20000
-include = /usr/local/samba/lib/admin_smb.conf
-inherit acls = no
-inherit owner = no
-inherit permissions = no
-init logon delayed hosts = 150.203.5. myhost.mynet.de
-init logon delay = 100
-interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0
-invalid users = root fred admin @wheel
-iprint.
client.conf. This is
@@ -2637,10 +2637,10 @@
iprint server = MYCUPSSERVER
-keepalive
packets. If this parameter is zero, no keepalive packets will be
sent. Keepalive packets, if sent, allow the server to tell whether
@@ -2650,20 +2650,20 @@
keepalive = 600
-kernel change notify = yes
-oplocks
to be broken whenever a local UNIX process or NFS operation
@@ -2673,10 +2673,10 @@
to a no-op on systems that no not have the necessary kernel support.
You should never need to touch this parameter.kernel oplocks = yes
-lanman auth = no
-large readwrite = yes
-private/secrets.tdb
@@ -2716,10 +2716,10 @@
man page for more information on how to accomplish this.
ldap connection timeout = 2
-ldap debug level = 1
-ldap debug threshold = 5
-ldap delete dn = no
-ldap group suffix =
ldap group suffix = ou=Groups
-ldap idmap suffix = ou=Idmap
-ldap machine suffix = ou=Computers
-ldap page size = 512
-Yes = Try
- to update the LDAP, NT and LM passwords and update the pwdLastSet time.No = Update NT and
- LM passwords and update the pwdLastSet time.Only = Only update
+ Yes = Try
+ to update the LDAP, NT and LM passwords and update the pwdLastSet time.No = Update NT and
+ LM passwords and update the pwdLastSet time.Only = Only update
the LDAP password and let the LDAP server do the rest.ldap passwd sync = no
-ldap replication sleep = 1000
-ldapsam:editposix = no
-ldapsam:trusted = no
-ldap ssl ads = no
-Start_tls
or by specifying ldaps:// in
the URL argument of passdb backend.Off = Never
- use SSL when querying the directory.start tls = Use
+ two values:Off = Never
+ use SSL when querying the directory.start tls = Use
the LDAPv3 StartTLS extended operation (RFC2830) for
communicating with the directory server.ldap ssl = start tls
-ldap suffix = dc=samba,dc=org
-ldap timeout = 15
-ldap user suffix = ou=people
-yes on this share in order for
this parameter to have any effect.level2 oplocks = yes
-yes, no, or
@@ -3060,10 +3060,10 @@
lm announce = yes
-lm interval = 120
-load printers = yes
-no then
nmbd will not attempt to become a local master browser
on a subnet and will also lose in all browsing elections. By
@@ -3094,13 +3094,13 @@
will participate in elections for local master browser.no will cause nmbd never to become a local
master browser.local master = yes
-lock directory = /var/run/samba/locks
-locking = no, all lock and unlock
requests will appear to succeed and all lock queries will report
@@ -3123,18 +3123,18 @@
CDROM drives), although setting this parameter of no
is not really recommended even in this case.lock spin count = 0
-lock spin time = 200
-log file = /usr/local/samba/var/log.%m
-smb.conf file.
alltdbprintdriverslanmansmbrpc_parserpc_srvrpc_clipassdbsamauthwinbindvfsidmapquotaaclslockingmsdfsdmapiregistrylog level = 0
+ alltdbprintdriverslanmansmbrpc_parserpc_srvrpc_clipassdbsamauthwinbindvfsidmapquotaaclslockingmsdfsdmapiregistrylog level = 0
log level = 3 passdb:5 auth:10 winbind:2
-logon drive = h:
-logon home = \\remote_smb_server\%U
-Warning
Warning
logon path = \\%N\%U\profile
-.bat) or NT command file
(.cmd) to be downloaded and run on a machine when a user successfully logs in. The file
must contain the DOS style CR/LF line endings. Using a DOS-style editor to create the file is recommended.
@@ -3296,10 +3296,10 @@
logon script = scripts\%U.bat
-lppause command = /usr/bin/lpalt %p-%j -p0
-lpq command being called too
often. A separate cache is kept for each variation of the
lpq command used by the system, so if you use different
@@ -3339,10 +3339,10 @@
lpq cache time = 10
-lpq
-style printer status information.lpq command = /usr/bin/lpq -P%p
-SYSV, in which case the default is:lp -i %p-%j -H resumeprinting parameter
is SOFTQ, then the default is:qstat -s -j%j -rlpresume command = /usr/bin/lpalt %p-%j -p2
-%p is given then the printer name
is put in its place. A %j is replaced with
@@ -3400,10 +3400,10 @@
lprm command = determined by printing parameter
-private/secrets.tdb
. This parameter specifies how often this password will be changed, in seconds. The default is one
@@ -3413,22 +3413,22 @@
and the security = domain parameter.
machine password timeout = 604800
-Warning
magic script
+ Warning
magic script
in the same directory the output file content is undefined.
magic output = <magic script name>.out
magic output = myfile.txt
-magic script = user.csh
-mangled names = yes
-mangle prefix = 4
-mangling char = ~
mangling char = ^
-mangling method = hash
-map acl inherit = no
-map archive = yes
-No, or no extended attribute is
present. If store dos attributes is set to yes then this
parameter is ignored. This is a new parameter introduced in Samba version 3.0.21.
- Yes - The read only DOS attribute is mapped to the inverse of the user
or owner write bit in the unix permission mode set. If the owner write bit is not set, the
read only attribute is reported as being set on the file.
@@ -3563,20 +3563,20 @@
others write bits to zero. Write bits set in an ACL are ignored by Samba.
If the read only DOS attribute is unset, Samba simply sets the write bit of the
owner to one.
- Permissions - The read only DOS attribute is mapped to the effective permissions of
the connecting user, as evaluated by smbd(8) by reading the unix permissions and POSIX ACL (if present).
If the connecting user does not have permission to modify the file, the read only attribute
is reported as being set on the file.
- No - The read only DOS attribute is unaffected by permissions, and can only be set by
the store dos attributes method. This may be useful for exporting mounted CDs.
map read only = yes
-map system = no
-security = share
and security = server
- i.e. user, and domain.Never - Means user login
+ login requests that don't match a valid UNIX user in some way.Never - Means user login
requests with an invalid password are rejected. This is the
- default.Bad User - Means user
+ default.Bad User - Means user
logins with an invalid password are rejected, unless the username
does not exist, in which case it is treated as a guest login and
- mapped into the guest account.Bad Password - Means user logins
+ mapped into the guest account.Bad Password - Means user logins
with an invalid password are treated as a guest login and mapped
into the guest account. Note that
this can cause problems as it means that any user incorrectly typing
@@ -3606,7 +3606,7 @@
they should - there will have been no message given to them
that they got their password wrong. Helpdesk services will
hate you if you set the map to
- guest parameter this way :-).Bad Uid - Is only applicable when Samba is configured
+ guest parameter this way :-).Bad Uid - Is only applicable when Samba is configured
in some type of domain mode security (security = {domain|ads}) and means that
user logins which are successfully authenticated but which have no valid Unix
user account (and smbd is unable to create one) should be mapped to the defined
@@ -3629,10 +3629,10 @@
map to guest = Bad User
-max connections is greater than 0 then connections
will be refused if this number of connections to the service are already open. A value
of zero mean an unlimited number of connections may be made.max connections = 10
-max disk size = 1000
-.old extension.
@@ -3669,17 +3669,17 @@
max log size = 1000
-max mux = 50
-max open files = 10000
-max print jobs = 1000
max print jobs = 5000
-CORE: Earliest version. No
- concept of user names.COREPLUS: Slight improvements on
- CORE for efficiency.LANMAN1: First
+CORE: Earliest version. No
+ concept of user names.COREPLUS: Slight improvements on
+ CORE for efficiency.LANMAN1: First
modern version of the protocol. Long filename
- support.LANMAN2: Updates to Lanman1 protocol.NT1: Current up to date version of the protocol.
+ support.LANMAN2: Updates to Lanman1 protocol.NT1: Current up to date version of the protocol.
Used by Windows NT. Known as CIFS.max protocol = NT1
max protocol = LANMAN1
-max reported print jobs = 1000
-max smbd processes = 1000
-stat cache being used
to speed up case insensitive name mappings. It represents
the number of kilobyte (1024) units the stat cache can use.
@@ -3752,27 +3752,27 @@
max stat cache size = 100
-nmbd is
requesting a name using either a broadcast packet or from a WINS server. You should
never need to change this parameter. The default is 3 days.max ttl = 259200
-nmbd
will grant will be (in seconds). You should never need to change this
parameter. The default is 6 days (518400 seconds).max wins ttl = 518400
-max xmit = 8192
-
%u won't work (%U may be better
in this case).%s = the filename containing
- the message.%t = the destination that
- the message was sent to (probably the server name).%f = who the message
+ ones apply. In particular:%s = the filename containing
+ the message.%t = the destination that
+ the message was sent to (probably the server name).%f = who the message
is from.message command = csh -c 'xedit %s; rm %s' &
-min print space = 0
min print space = 2000
-min protocol = NT1
-min receivefile size = 0
-nmbd will grant will be (in
seconds). You should never need to change this parameter. The default
is 6 hours (21600 seconds).min wins ttl = 21600
-msdfs proxy = \otherserver\someshare
-yes, Samba treats the
share as a Dfs root and allows clients to browse the
distributed file system tree rooted at the share directory.
Dfs links are specified in the share directory by symbolic
@@ -3890,39 +3890,39 @@
and so on. For more information on setting up a Dfs tree on
Samba, refer to the MSDFS chapter in the Samba3-HOWTO book.msdfs root = no
-name cache timeout = 660
name cache timeout = 0
-lmhosts : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has
no name type attached to the NetBIOS name (see the manpage for lmhosts for details) then
any name type matches for lookup.
- host : Do a standard host name to IP address resolution, using the system
/etc/hosts , NIS, or DNS lookups. This method of name resolution is
operating system depended for instance on IRIX or Solaris this may be controlled by the /etc/nsswitch.conf file. Note that this method is used only if the NetBIOS name
type being queried is the 0x20 (server) name type or 0x1c (domain controllers). The latter case is only
useful for active directory domains and results in a DNS query for the SRV RR entry matching
_ldap._tcp.domain.
- wins : Query a name with
+ wins : Query a name with
the IP address listed in the WINSSERVER parameter. If no WINS server has
- been specified this method will be ignored.bcast : Do a broadcast on
+ been specified this method will be ignored.bcast : Do a broadcast on
each of the known local interfaces listed in the interfaces
parameter. This is the least reliable of the name resolution
methods as it depends on the target host being on a locally
@@ -3934,10 +3934,10 @@
name resolve order = lmhosts bcast host
-netbios aliases = TEST TEST1 TEST2
-netbios name = MYNAME
-netbios scope =
-nis homedir = no
-nt acl support = yes
-lanman
@@ -4013,33 +4013,33 @@
permited. Not all clients support NTLMv2, and most will require
special configuration to use it.ntlm auth = yes
-IPC$
pipes. This is a developer debugging option and can be left
alone.nt pipe support = yes
-no then Samba offers
exactly the same DOS error codes that versions prior to Samba 2.2.3
reported.nt status support = yes
-null passwords = no
+null passwords = no
-obey pam restrictions = no
-user
list will be allowed. By default this option is disabled so that a
client can supply a username to be used by the server. Enabling
@@ -4065,22 +4065,22 @@
will be just the service name, which for home directories is the
name of the user.only user = no
-Warning
Warning
oplock break wait time = 0
-smbd to behave in a similar
way to Windows NT.
- Warning
Warning
oplock contention limit = 2
-smbd whether to
issue oplocks (opportunistic locks) to file open requests on this
share. The oplock code can dramatically (approx. 30% or more) improve
@@ -4114,10 +4114,10 @@
kernel oplocks parameter for details.
oplocks = yes
-HP LaserJet 5L = LASERJET.HP
@@ -4127,10 +4127,10 @@
details on OS/2 clients, please refer to chapter on other clients in the Samba3-HOWTO book.
os2 driver map =
-pam password change = no
-paranoid server security = yes
-smbpasswd - The default smbpasswd
+ smbpasswd - The default smbpasswd
backend. Takes a path to the smbpasswd file as an optional argument.
- tdbsam - The TDB based password storage
+ tdbsam - The TDB based password storage
backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb
- in the private dir directory.ldapsam - The LDAP based passdb
+ in the private dir directory.ldapsam - The LDAP based passdb
backend. Takes an LDAP URL as an optional argument (defaults to
ldap://localhost)passdb backend = smbpasswd
-passdb expand explicit = no
-passwd chat debug = no
-passwd chat timeout = 2
-passwd chat = "*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password changed*"
-%u
will be replaced with the user name. The user name is checked for
existence before calling the password changing program.passwd program = /bin/passwd %u
-password level = 4
-security = [ads|domain|server]
it is possible to get Samba
@@ -4348,7 +4348,7 @@
parameter name resolve order and so may resolved
by any method and order described in that parameter.Note
Note
security parameter is
set to server, then there are different
restrictions that security = domain doesn't
- suffer from:password server parameter, however if an
smbd makes a connection to a password server,
and then the password server fails, no more users will be able
to be authenticated from this smbd. This is a
restriction of the SMB/CIFS protocol when in security = server
- mode and cannot be fixed in Samba.
security = server mode the network logon will appear to
@@ -4393,13 +4393,13 @@
password server = windc.mydomain.com:389 192.168.1.101 *
-path = /home/fred
-pid directory = ${prefix}/var/locks
pid directory = pid directory = /var/run/
-posix locking = yes
-postexec = echo \"%u disconnected from %S from %m (%I)\" >> /tmp/log
-preexec close = no
-preexec = echo \"%u connected to %S from %m (%I)\" >> /tmp/log
-yes, on startup, nmbd will force
@@ -4493,22 +4493,22 @@
capabilities.
preferred master = auto
-preload modules =
preload modules = /usr/lib/samba/passdb/mysql.so
-preload = fred lp colorlp
-preserve case = yes
-yes, then
clients may open, write to and submit spool files on the directory
specified for the service. printable = no
-printcap cache time = 600
- /etc/printcap). See the discussion of the [printers] section above for reasons why you might want to do this.
Note
Note
/etc/qconfig. Samba will
assume the file is in AIX qconfig format if the string qconfig appears in the printcap filename.
printcap name = /etc/printcap
printcap name = /etc/myprintcap
-system()
call to process the spool file. Typically the command specified will
submit the spool file to the host's printing subsystem, but there
@@ -4641,10 +4641,10 @@
and if SAMBA is compiled against libcups, any manually
set print command will be ignored.print command = /usr/local/samba/bin/myprintscript %p %s
-printer admin = admin, @staff
-printer name = laserwriter
-print command, lpq command, lppause command , lpresume command, and lprm command if specified in the
[global] section.printing = Depends on the operating system, see
-testparm -v.printjob username = %U
printjob username = %D\%U
-smbpasswd
and secrets.tdb.
private dir = ${prefix}/private
-profile acls = no
-queuepause command = disable %p
-queueresume command = enable %p
-read list = mary, @students
-yes, then users
of a service may not create or modify files in the service's
directory.printable = yes)
will ALWAYS allow writing to the directory
(user privileges permitting), but only via spooling operations.read only = yes
-read raw = yes
-domain. It
is usually set to the DNS name of the kerberos server.
realm =
realm = mysambabox.mycompany.com
-registry shares = yes
-remote announce =
-remote browse sync =
-%uold and
%unew, will be substituted with the old and new usernames, respectively. The script should
return 0 upon successful completion, and nonzero otherwise.
- Note
Note
rename user script = no
-reset on zero vc = no
-
@@ -4967,21 +4967,21 @@
The security advantage of using restrict anonymous = 1 is dubious,
as user and group list information can be obtained using other
means.
- Note
Note
restrict anonymous = 0
-chroot() (i.e.
Change its root directory) to this directory on startup. This is
not strictly necessary for secure operation. Even without it the
server will deny access to files not in one of the service entries.
@@ -5004,34 +5004,34 @@
root directory = /homes/smb
-postexec
parameter except that the command is run as root. This is useful for
unmounting filesystems (such as CDROMs) after a connection is closed.
root postexec =
-preexec close
parameter except that the command is run as root.root preexec close = no
-preexec
parameter except that the command is run as root. This is useful for
mounting filesystems (such as CDROMs) when a connection is opened.
root preexec =
-security mask = 0770
-
smb.conf file.smbd uses several
techniques to determine the correct UNIX user to use on behalf
of the client.guest only parameter is
not set, then this list is then tried with the supplied password.
The first user for whom the password matches will be used as the
@@ -5150,7 +5150,7 @@
server does not support them. However note that if encrypted passwords have been negotiated then Samba cannot
revert back to checking the UNIX password file, it must have a valid smbpasswd file to check users against. See the chapter about the User Database in
the Samba HOWTO Collection for details on how to set this up.
-Note
Note
Note
Note
security = server is the
same as security = user. It
only affects how the server deals with the authentication, it does
@@ -5177,10 +5177,10 @@
security = DOMAIN
-server schannel = yes
-server signing = Disabled
-net view. It
can be any string that you wish to show to your users.%v will be replaced with the Samba
@@ -5213,10 +5213,10 @@
server string = University of GNUs Samba Server
-set directory = no, then users of the
service may not use the setdir command to change directory.
set directory = no
-set primary group script = /usr/sbin/usermod -g '%g' '%u'
-set quota command should only be used
whenever there is no operating system API available from the OS that
samba can use.--with-sys-quotas or
on linux when ./configure --with-quotas was used and a working quota api
was found in the system. Most packages are configured with these options already.set quota command =
+ can set quota for the specified arguments.set quota command =
set quota command = /usr/local/sbin/set_quota
-share modes during a file open. These
modes are used by clients to gain exclusive read or write access
to a file.share modes = yes
-short preserve case = yes
-show add printer wizard
parameter will always cause the OpenPrinterEx() on the server
to fail. Thus the APW icon will never be displayed.
-Note
Note
show add printer wizard = yes
-SeRemoteShutdownPrivilege,
- right, this command will be run as root.%z will be substituted with the
- shutdown message sent to the server.%t will be substituted with the
+ right, this command will be run as root.%z will be substituted with the
+ shutdown message sent to the server.%t will be substituted with the
number of seconds to wait before effectively starting the
- shutdown procedure.%r will be substituted with the
+ shutdown procedure.%r will be substituted with the
switch -r. It means reboot after shutdown
- for NT.%f will be substituted with the
+ for NT.%f will be substituted with the
switch -f. It means force the shutdown
even if applications do not respond for NT.
@@ -5328,10 +5328,10 @@
shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f
-smb encrypt = auto
-
@@ -5370,15 +5370,15 @@
smb passwd file = ${prefix}/private/smbpasswd
-socket address = 192.168.2.20
-socket options = IPTOS_LOWDELAY
-stat cache = yes
-store dos attributes = no
-yes
the server will change from UNIX behaviour of not committing real
disk storage blocks when a file is extended to the Windows behaviour
@@ -5455,10 +5455,10 @@
out of quota messages on systems that are restricting the disk quota
of users.strict allocate = no
-yes,
the server will check every read and write access for file locks, and deny access if locks exist. This can be slow on
some systems.
@@ -5474,10 +5474,10 @@
strict locking = no is acceptable.
strict locking = Auto
-strict sync = no
-svcctl list = cups postfix portmap httpd
-no then the server will be
guided by the client's request in each write call (clients can
@@ -5521,19 +5521,19 @@
yes in order for this parameter to have
any affect.sync always = no
-syslog only = no
-LOG_ERR, debug level one maps onto
LOG_WARNING, debug level two maps onto LOG_NOTICE,
@@ -5544,10 +5544,10 @@
logging to log.[sn]mbd even if syslog only is enabled.
syslog = 1
-%D is present it
@@ -5555,31 +5555,31 @@
string %U is present it
is substituted with the user's Windows NT user name.template homedir = /home/%D/%U
-time offset = 0
time offset = 60
-time server = no
-unix charset = ASCII
-unix extensions = yes
+ no current use to Windows clients.unix extensions = yes
-yes the program specified in the passwd
@@ -5610,10 +5613,10 @@
old UNIX password (as the SMB password change code has no
access to the old password cleartext, only the new).unix password sync = no
-update encrypted = no
-use client driver = no
-host/FQDN and cifs/FQDN.
use kerberos keytab = False
-no by
@@ -5686,10 +5689,10 @@
the tdb internal code.
use mmap = yes
-username level = 5
-username map script = /etc/samba/scripts/mapusers.sh
-username map =
# no username map
-username line is needed only when
the PC is unable to supply its own username. This is the case
@@ -5852,28 +5855,28 @@
username = fred, mary, jack, jane, @users, @pcgroup
-guest ok = yes in a share
definition. Due to its security sensitive nature, the default
is set to off.usershare allow guests = no
-usershare max shares = 0
-usershare owner only = True
-usershare path = NULL
-usershare prefix allow list = /home /data /space
-usershare prefix deny list = /etc /dev /private
-usershare template share = template_share
-yes, and the sendfile()
system call is supported by the underlying operating system, then some SMB read calls
(mainly ReadAndX and ReadRaw) will use the more efficient sendfile system call for files that
are exclusively oplocked. This may make more efficient use of the system CPU's
@@ -5974,10 +5977,10 @@
Windows 9x (using sendfile from Linux will cause these clients to fail).
use sendfile = false
-use spnego = yes
-
--with-utmp. It specifies a directory pathname that is
used to store the utmp or utmpx files (depending on the UNIX system) that
@@ -6000,10 +6003,10 @@
utmp directory = /var/run/utmp
---with-utmp. If set to
yes then Samba will attempt to add utmp or utmpx records
@@ -6015,10 +6018,10 @@
to find this number. This may impede performance on large installations.
utmp = no
-invalid users parameter.
@@ -6034,10 +6037,10 @@
valid users = greg, @pcusers
--valid = yes
-veto files = No files or directories are vetoed.
-veto oplock files =
# No files are vetoed for oplock grants
-vfs objects =
vfs objects = extd_audit recycle
-volume =
# the name of the share
-wide links = yes
+ to areas that are outside the directory tree being exported.wide links = no
-winbind cache time = 300
-setgrent(),
getgrent() and
endgrent() group of system calls. If
the winbind enum groups parameter is
no, calls to the getgrent() system
- call will not return any data. Warning
winbind enum groups = no
+ call will not return any data. Warning
winbind enum groups = no
-setpwent(),
getpwent() and
endpwent() group of system calls. If
the winbind enum users parameter is
no, calls to the getpwent system call
- will not return any data. Warning
Warning
winbind enum users = no
-winbind expand groups = 1
-winbind nested groups = yes
-winbind normalize names = no
winbind normalize names = yes
-template
+ template
- The default, using the parameters of template
shell and template homedir)
- <sfu | rfc2307 >
+ <sfu | rfc2307 >
- When Samba is running in security = ads and your Active Directory
Domain Controller does support the Microsoft "Services for Unix" (SFU)
LDAP schema, winbind can retrieve the login shell and the home
@@ -6247,10 +6255,10 @@
winbind nss info = template sfu
-pam_winbind
module using Cached Credentials. If enabled, winbindd will store user credentials
from successful logins encrypted in a local cache.
@@ -6258,37 +6266,37 @@
winbind offline logon = true
-winbind reconnect delay = 30
-pam_winbind module.
winbind refresh tickets = false
winbind refresh tickets = true
-yes forces
winbindd to use RPC instead of LDAP to retrieve information from Domain
Controllers.
winbind rpc only = no
-DOMAIN
\user. This parameter
is only applicable when using the pam_winbind.so
@@ -6299,10 +6307,10 @@
winbind separator = +
-winbind trusted domains only = no
-winbind use default domain = yes
-wins_hook operation name nametype ttl IP_listwins_hook operation name nametype ttl IP_listnsupdate is provided in the examples
- directory of the Samba source code. yes for some older clients.wins proxy = no
-Note
Note
wins server =
@@ -6379,19 +6387,19 @@
wins server = 192.9.200.1 192.168.2.61
-yes unless you have a multi-subnetted network and
you wish a particular nmbd to be your WINS server.
Note that you should NEVER set this to yes
on more than one machine in your network.wins support = no
-workgroup = MYGROUP
-write cache size = 262144
# for a 256k cache size per file
-write list = admin, root, @staff
-write raw = yes
-
--with-utmp. It specifies a directory pathname that is used to store the wtmp or wtmpx files (depending on
the UNIX system) that record user connections to a Samba server. The difference with the utmp directory is the fact
@@ -6468,7 +6476,7 @@
wtmp directory = /var/log/wtmp
-WARNINGS
SEE ALSO
SEE ALSO
AUTHOR
Name
Synopsis
smbcontrol [-i] [-s]smbcontrol [destination] [message-type] [parameter]DESCRIPTION
smbcontrol is a very small program, which
- sends messages to a smbd(8), a nmbd(8), or a winbindd(8) daemon running on the system.OPTIONS
Name
Synopsis
smbcontrol [-i] [-s]smbcontrol [destination] [message-type] [parameter]DESCRIPTION
smbcontrol is a very small program, which
+ sends messages to a smbd(8), a nmbd(8), or a winbindd(8) daemon running on the system.OPTIONS
winbindd.pid file.MESSAGE-TYPES for details.
- MESSAGE-TYPES
MESSAGE-TYPES
smbd. smbd. Note
smbd. Should not be used manually.smbd. smbd. Note
smbd. Should not be used manually.smbd, nmbd, or winbindd.
- AUTHOR
Name
Synopsis
smbcquotas {//server/share} [-u user] [-L] [-F] [-S QUOTA_SET_COMMAND] [-n] [-t] [-v] [-d debuglevel] [-s configfile] [-l logdir] [-V] [-U username] [-N] [-k] [-A]DESCRIPTION
smbcquotas program manipulates NT Quotas on SMB file shares. OPTIONS
smbcquotas program. Name
Synopsis
smbcquotas {//server/share} [-u user] [-L] [-F] [-S QUOTA_SET_COMMAND] [-n] [-t] [-v] [-d debuglevel] [-s configfile] [-l logdir] [-V] [-U username] [-N] [-k] [-A]DESCRIPTION
smbcquotas program manipulates NT Quotas on SMB file shares. OPTIONS
smbcquotas program. ps command. To be safe always allow
rpcclient to prompt for a password and type
-it in directly. QUOTA_SET_COMAND
@@ -74,13 +76,13 @@
To change the share quota settings:
FSQFLAGS:QUOTA_ENABLED/DENY_DISK/LOG_SOFTLIMIT/LOG_HARD_LIMIT
- EXIT STATUS
smbcquotas program sets the exit status
+ EXIT STATUS
smbcquotas program sets the exit status
depending on the success or otherwise of the operations performed.
The exit status may be one of the following values. smbcquotas couldn't connect to the specified server,
or when there was an error getting or setting the quota(s), an exit status
of 1 is returned. If there was an error parsing any command line
- arguments, an exit status of 2 is returned. Name
Synopsis
smbd [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d <debug level>] [-l <log directory>] [-p <port number(s)>] [-P <profiling level>] [-O <socket option>] [-s <configuration file>]DESCRIPTION
smbd is the server daemon that
+Name
Synopsis
smbd [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d <debug level>] [-l <log directory>] [-p <port number(s)>] [-P <profiling level>] [-O <socket option>] [-s <configuration file>]DESCRIPTION
smbd is the server daemon that
provides filesharing and printing services to Windows clients.
The server provides filespace and printer services to
clients using the SMB (or CIFS) protocol. This is compatible
@@ -21,7 +21,7 @@
can force a reload by sending a SIGHUP to the server. Reloading
the configuration file will not affect connections to any service
that is already established. Either the user will have to
- disconnect from the service, or smbd killed and restarted.OPTIONS
smbd killed and restarted.OPTIONS
smbd also logs to standard
output, as if the -S parameter had been
given.
@@ -82,7 +82,7 @@
number specifying the level of profiling data to be collected.
0 turns off profiling, 1 turns on counter profiling only,
2 turns on complete profiling, and 3 resets all profiling data.
- FILES
/etc/inetd.confinetd meta-daemon, this file
must contain suitable startup information for the
meta-daemon.
@@ -96,31 +96,31 @@
/usr/local/samba/lib/smb.conf/usr/samba/lib/smb.conf
and /etc/samba/smb.conf.LIMITATIONS
smbd cannot change uid back
+ is to make available to clients. See smb.conf(5) for more information.LIMITATIONS
smbd cannot change uid back
to root after a setuid() call. Such systems are called
trapdoor uid systems. If you have such a system,
you will be unable to connect from a client (such as a PC) as
two different users at once. Attempts to connect the
second user will result in access denied or
- similar.ENVIRONMENT VARIABLES
PRINTERPAM INTERACTION
DIAGNOSTICS
TDB FILES
/var/lib/samba.TDB FILES
/var/lib/samba.SIGNALS
smbd a SIGHUP will cause it to
+ SIGNALS
smbd a SIGHUP will cause it to
reload its smb.conf configuration
file within a short period of time.smbd process it is recommended
that SIGKILL (-9) NOT
@@ -147,11 +147,11 @@
smbd is in a state of waiting for an incoming SMB before
issuing them. It is possible to make the signal handlers safe
by un-blocking the signals before the select call and re-blocking
- them after, however this would affect performance.SEE ALSO
SEE ALSO
rfc1001.txt, rfc1002.txt.
In addition the CIFS (formerly SMB) specification is available
as a link from the Web page
- http://samba.org/cifs/.AUTHOR
Name
Synopsis
smbget [-a, --guest] [-r, --resume] [-R, --recursive] [-u, --username=STRING] [-p, --password=STRING] [-w, --workgroup=STRING] [-n, --nonprompt] [-d, --debuglevel=INT] [-D, --dots] [-P, --keep-permissions] [-o, --outputfile] [-f, --rcfile] [-q, --quiet] [-v, --verbose] [-b, --blocksize] [-?, --help] [--usage] {smb://host/share/path/to/file} [smb://url2/] [...]DESCRIPTION
Name
Synopsis
smbget [-a, --guest] [-r, --resume] [-R, --recursive] [-u, --username=STRING] [-p, --password=STRING] [-w, --workgroup=STRING] [-n, --nonprompt] [-d, --debuglevel=INT] [-D, --dots] [-P, --keep-permissions] [-o, --outputfile] [-f, --rcfile] [-q, --quiet] [-v, --verbose] [-b, --blocksize] [-?, --help] [--usage] {smb://host/share/path/to/file} [smb://url2/] [...]DESCRIPTION
OPTIONS
OPTIONS
SMB URLS
smb://[[[domain;]user[:password@]]server[/share[/path[/file]]]]
smb:// means all the workgroups
smb://name/ means, if
name is a workgroup, all the servers in this workgroup, or if name is a server, all the shares on this server.
-EXAMPLES
# Recursively download 'src' directory
smbget -R smb://rhonwyn/jelmer/src
# Download FreeBSD ISO and enable resuming
@@ -17,10 +17,10 @@
smbget -Rr smb://rhonwyn/isos
# Backup my data on rhonwyn
smbget -Rr smb://rhonwyn/
-
Name
Synopsis
smbgetrcDESCRIPTION
Name
Synopsis
smbgetrcDESCRIPTION
OPTIONS
namepasswgintintAUTHOR
passwgintintName
Synopsis
smbpasswdDESCRIPTION
Name
Synopsis
smbpasswdDESCRIPTION
FILE FORMAT
FILE FORMAT
passwd(5)
file. It is an ASCII file containing one line for each user. Each field
ithin each line is separated from the next by a colon. Any entry
@@ -58,15 +58,15 @@
'[' and ']' characters and is always 13 characters in length
(including the '[' and ']' characters).
The contents of this field may be any of the following characters:
-
null passwords parameter is set in the
- smb.conf(5) config file. AUTHOR
Name
Synopsis
smbpasswd [-a] [-c <config file>] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-W] [-i] [-L] [username]DESCRIPTION
Name
Synopsis
smbpasswd [-a] [-c <config file>] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-W] [-i] [-L] [username]DESCRIPTION
smbpasswd accesses the local smbpasswd file
directly, thus enabling changes to be made even if smbd is not
- running. OPTIONS
OPTIONS
lmhosts: Lookup an IP
+ cause names to be resolved as follows: lmhosts: Lookup an IP
address in the Samba lmhosts file. If the line in lmhosts has
no name type attached to the NetBIOS name (see the lmhosts(5) for details) then
- any name type matches for lookup.host: Do a standard host
+ any name type matches for lookup.host: Do a standard host
name to IP address resolution, using the system /etc/hosts
, NIS, or DNS lookups. This method of name resolution
is operating system depended for instance on IRIX or Solaris this
may be controlled by the /etc/nsswitch.conf
file). Note that this method is only used if the NetBIOS name
type being queried is the 0x20 (server) name type, otherwise
- it is ignored.wins: Query a name with
+ it is ignored.wins: Query a name with
the IP address listed in the wins server
parameter. If no WINS server has been specified this method
- will be ignored.bcast: Do a broadcast on
+ will be ignored.bcast: Do a broadcast on
each of the known local interfaces listed in the
interfaces parameter. This is the least
reliable of the name resolution methods as it depends on the
@@ -151,7 +151,7 @@
root only options to operate on. Only root
can specify this parameter as only root has the permission needed
to modify attributes directly in the local smbpasswd file.
- NOTES
smbpasswd works in client-server
mode communicating with a local smbd for a non-root user then
the smbd daemon must be running for this to work. A common problem
is to add a restriction to the hosts that may access the
@@ -159,7 +159,7 @@
hosts or deny hosts entry in
the smb.conf(5) file and neglecting to
allow "localhost" access to the smbd. AUTHOR
AUTHOR
Name
Synopsis
smbspool {job} {user} {title} {copies} {options} [filename]DESCRIPTION
Name
Synopsis
smbspool {job} {user} {title} {copies} {options} [filename]DESCRIPTION
DEVICE_URI. If DEVICE_URI is not present,
- smbspool will use argv[0] if that starts with “smb://”
+ smbspool will use argv[0] if that starts with “smb://”
or argv[1] if that is not the case.exec(2) functions can
pass the URI in argv[0], while shell scripts must set the
DEVICE_URI environment variable prior to
- running smbspool.OPTIONS
OPTIONS
AUTHOR
smbspool was written by Michael Sweet
at Easy Software Products.Name
Synopsis
smbstatus [-P] [-b] [-d <debug level>] [-v] [-L] [-B] [-p] [-S] [-s <configuration file>] [-u <username>]DESCRIPTION
smbstatus is a very simple program to
- list the current Samba connections.